{"vulnerability": "CVE-2026-29783", "sightings": [{"uuid": "4aa1020d-6833-410a-ad49-1cd90d8aaf44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29783", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116186504983448180", "content": "", "creation_timestamp": "2026-03-07T06:36:11.987621Z"}, {"uuid": "06a38c62-2dea-4d85-83cc-a4425513d1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29783", "type": "seen", "source": "https://gist.github.com/alon710/4e3441e930710881f9a07d433f110f07", "content": "", "creation_timestamp": "2026-03-06T17:10:06.000000Z"}, {"uuid": "9dd79ded-14b9-44aa-92af-6de02088acbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgfzttzwrm2d", "content": "", "creation_timestamp": "2026-03-06T19:20:54.073519Z"}, {"uuid": "51152466-4f72-4478-9664-c100eb6a7c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-29783", "type": "published-proof-of-concept", "source": "https://github.com/github/copilot-cli/security/advisories/GHSA-g8r9-g2v8-jv6f", "content": "", "creation_timestamp": "2026-03-06T16:10:31.000000Z"}, {"uuid": "1be85f97-3935-4806-b75f-f041ba401a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29783", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45635", "content": "\ud83e\udde0 \ud83d\udd25 1. PoCs en GitHub \n\ud83e\uddea Radar autom\u00e1tico de PoCs (OBLIGATORIO)\n* [https://github.com/nomi-sec/PoC-in-GitHub]\n\n\ud83d\udc49 Qu\u00e9 hace:\n* Indexa miles de PoCs en tiempo real\n* Ideal para threat intel continuo\n\ud83e\udde0 Realidad:\n> Se publican cientos de exploits diarios antes que bases tradicionales \n\n\ud83d\udca5 WSUS RCE (deserializaci\u00f3n)\n* [https://github.com/dexterm300/cve-2025-59287-exploit-poc]\n\ud83d\udc49 Tipo:\n* RCE remoto sin autenticaci\u00f3n\n* abuso de BinaryFormatter\n\ud83e\udde0 Clave:\n* deserialization sigue siendo vector cr\u00edtico en enterprise \n\n \u2699\ufe0f Repo multi-CVE \n\n* [https://github.com/0xMarcio/cve]\n\ud83d\udc49 Incluye:\n* RCE\n* LPE\n* exploits web\n* scripts automatizados\n\ud83e\udde0 Insight:\n> Automatizaci\u00f3n de exploits ya es est\u00e1ndar\n\n \ud83e\udde0 PoC reciente (V8 / Chrome bug class)\n* [https://gist.github.com/Shreyas-Penkar/fae1c12d4a673f20698b62a2669f80e7]\n\ud83d\udc49 Tipo:\n* Type Confusion en motor JS\n\ud83e\udde0 Insight:\n* bugs de engine siguen siendo top-tier para RCE\n\n\ud83d\udc33 Container escape (lab + exploit)\n\n* [https://github.com/C-h4ck-0/Learn-about-cve-2025-31133-poc]\n\ud83d\udc49 T\u00e9cnica:\n* race condition en runc\n* abuso de maskedPaths\n\ud83e\udde0 Esto es potente:\n* rompe aislamiento de contenedores (nivel cloud) ([Reddit][5])\n\n \u26a0\ufe0f \ud83d\udd25 2. CVEs recientes con PoC o explotaci\u00f3n\n\n\u26a1 SSRF moderno explotable\n\n* [https://www.sentinelone.com/vulnerability-database/cve-2026-5016/]\n\ud83d\udc49 Tipo:\n* SSRF sin autenticaci\u00f3n\n\ud83e\udde0 Impacto:\n* pivot interno + exfiltraci\u00f3n ([SentinelOne][6])\n\n\ud83e\udde0 Copilot CLI vuln (nuevo vector AI)\n\n* [https://feedly.com/cve/CVE-2026-29783]\n\ud83d\udc49 Tipo:\n* command injection v\u00eda CLI\n\ud83e\udde0 Insight:\n* repos + instrucciones \u2192 vector de ataque\n\n\u26a0\ufe0f \ud83d\udc80 3. Lo oscuro (muy importante)\n\ud83e\udde8 Fake PoCs con malware\n\n* [https://www.uptycs.com/blog/threat-research-report-team/fake-poc-repositories-malicious-code-github]\n\ud83d\udc49 Qu\u00e9 pasa:\n* repos con \u201cPoCs\u201d \u2192 malware real\n\ud83e\udde0 Red flag:\n* links externos raros\n* payloads ocultos \n\n \ud83e\udde0 Dato brutal:\n\n> ~1.9% de PoCs en GitHub son maliciosos\n \ud83e\uddec \ud83d\udd25 4. Tendencias REALES (lo m\u00e1s valioso)\n\u26a1 Explotaci\u00f3n ultra r\u00e1pida\n* exploits en horas tras PoC\n  \ud83d\udc49 ejemplo real:\n* [https://www.reddit.com/r/pwnhub/comments/1r3xv33/hackers_target_beyondtrust_flaw_cve20261731/]\n\n\ud83e\udde0 Conclusi\u00f3n:\n> el tiempo entre CVE \u2192 ataque = horas\n\n\ud83e\udd16 AI generando exploits\n\n* [https://arxiv.org/abs/2602.05721]\n\ud83d\udc49 Lo importante:\n* generaci\u00f3n autom\u00e1tica de PoCs\n* pero muchos son inv\u00e1lidos (~70%)\n\ud83e\udde0 Insight:\n> a\u00fan no reemplaza al humano, pero acelera todo\n\ud83e\udde0 \ud83e\uddec 5. T\u00e9cnicas emergentes (nivel PRO)\nAqu\u00ed lo que realmente est\u00e1 pasando:\n\ud83e\udde9 Patch \u2192 exploit autom\u00e1tico\n* analizar diff \u2192 generar exploit\n\n \ud83d\udd73\ufe0f Fileless + runtime abuse\n* payloads en memoria\n* CI/CD pipelines\n\n\ud83d\udc33 Container escape (muy caliente)\n* runc\n* Kubernetes\n\n\ud83e\udde0 AI-assisted recon\n* scraping + payload din\u00e1mico\n\n \ud83e\uddec Supply chain weaponizado\n* repos infectados\n* dependencias maliciosas", "creation_timestamp": "2026-09-02T06:00:14.102857Z"}]}