{"vulnerability": "CVE-2026-3560", "sightings": [{"uuid": "33a4a2c5-db1e-44ea-9665-46795f1edd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3560", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-158/", "content": "", "creation_timestamp": "2026-03-06T05:00:00.000000Z"}, {"uuid": "66e60c28-bb06-42aa-be25-f296d45c5497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35604", "type": "seen", "source": "https://www.acn.gov.it/portale/w/file-browser-disponibili-poc-per-lo-sfruttamento-di-alcune-vulnerabilita", "content": "", "creation_timestamp": "2026-04-09T00:24:37.000000Z"}, {"uuid": "07a12d2f-fcff-4d66-a6ff-c35933e91ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35607", "type": "seen", "source": "https://www.acn.gov.it/portale/w/file-browser-disponibili-poc-per-lo-sfruttamento-di-alcune-vulnerabilita", "content": "", "creation_timestamp": "2026-04-09T00:24:37.000000Z"}, {"uuid": "e38a9a07-a230-4a3e-8ca5-88477eda3338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35607", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjn7kbjuly2g", "content": "", "creation_timestamp": "2026-04-16T20:07:45.934308Z"}, {"uuid": "9054a240-3319-4da9-a088-aa3269523ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjpxmwr2m52f", "content": "", "creation_timestamp": "2026-04-17T22:23:26.736391Z"}, {"uuid": "43da2ec5-da22-47d6-9e2f-8f3b5892f792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35606", "type": "published-proof-of-concept", "source": "Telegram/MfR_D7ll8pGcGi3RGemlsgII30sQ-Y2l5bpdSqMK2BdYlKE", "content": "", "creation_timestamp": "2026-04-17T05:18:08.000000Z"}, {"uuid": "52858a40-477c-40b5-89cd-80b21c7a9597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35607", "type": "seen", "source": "Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I_3ZVebAFZlOd7ZE", "content": "", "creation_timestamp": "2026-04-07T19:34:12.000000Z"}, {"uuid": "6d728a08-680a-4989-9e20-a58f4e0641ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35605", "type": "published-proof-of-concept", "source": "Telegram/vilnQ64f45V0K93eyMbGXUSRwitUexdwMg6sdyLUCQzylsw", "content": "", "creation_timestamp": "2026-04-09T17:22:32.000000Z"}, {"uuid": "16782895-a4f2-4e6c-9119-f88727144f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35607", "type": "seen", "source": "Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4", "content": "", "creation_timestamp": "2026-04-07T19:33:54.000000Z"}, {"uuid": "641844c5-2819-4a29-ae41-c7605556a4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35604", "type": "seen", "source": "Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4", "content": "", "creation_timestamp": "2026-04-07T19:33:54.000000Z"}, {"uuid": "a730d895-10ac-4626-97bc-87b844d7ecc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35603", "type": "seen", "source": "Telegram/y1XO5mBm2flLcrjS5YpFLtlumq47M984z8tJCHS_wnxFgvg", "content": "", "creation_timestamp": "2026-04-22T19:23:16.000000Z"}, {"uuid": "76d39740-4f2f-4c83-bd1a-8e4a30e70764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35606", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-67cg-cpj7-qgc9", "content": "", "creation_timestamp": "2026-04-04T20:31:22.000000Z"}, {"uuid": "491413f4-6adc-4a22-a906-7f1d295e5d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35602", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-qh78-rvg3-cv54", "content": "", "creation_timestamp": "2026-04-09T21:44:52.000000Z"}, {"uuid": "84ba35e3-65d2-4648-9102-82c648f34eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35601", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-2g7h-7rqr-9p4r", "content": "", "creation_timestamp": "2026-04-09T21:44:27.000000Z"}, {"uuid": "8c273952-1439-41eb-9677-67259407e1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35600", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-45q4-x4r9-8fqj", "content": "", "creation_timestamp": "2026-04-09T21:44:35.000000Z"}, {"uuid": "b23f5798-8c7b-41ad-9c40-b155aa1ec637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35607", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-7526-j432-6ppp", "content": "", "creation_timestamp": "2026-04-04T20:31:28.000000Z"}, {"uuid": "0b6b070e-8262-4e8b-89bf-73e04ad9e543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35604", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-v9w4-gm2x-6rvf", "content": "", "creation_timestamp": "2026-04-04T20:31:14.000000Z"}, {"uuid": "d60e9f00-6c9c-426b-b2cf-ddfa1991f11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35605", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-5q48-q4fm-g3m6", "content": "", "creation_timestamp": "2026-04-04T20:31:18.000000Z"}, {"uuid": "b30d2993-4909-4035-abad-95a3d6d36199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3560", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mn5qfwy5hx2x", "content": "\ud83d\udccc CVE-2026-3560 - Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-a... https://www.cyberhub.blog/cves/CVE-2026-3560", "creation_timestamp": "2026-05-31T14:07:07.233547Z"}, {"uuid": "295ea9c8-77ce-46c7-9741-472bed61347f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35603", "type": "seen", "source": "https://t.me/GithubRedTeam/90549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #YARA #malware\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a miasma-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jchable\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 10:24:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection & remediation toolkit for the Miasma / Shai-Hulud worm and CVE-2026-35603 (AI-agent/IDE config injection)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:19.022232Z"}, {"uuid": "529cd4ad-b1bc-4e64-9231-5a28892f3ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35603", "type": "seen", "source": "https://t.me/GithubRedTeam/90549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #YARA #malware\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a miasma-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jchable\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 10:24:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection & remediation toolkit for the Miasma / Shai-Hulud worm and CVE-2026-35603 (AI-agent/IDE config injection)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:35.213949Z"}, {"uuid": "bf0d34da-dd12-44f1-9812-96ca2c06891c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35603", "type": "seen", "source": "https://t.me/GithubRedTeam/90549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #YARA #malware\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a miasma-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jchable\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 10:24:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDetection & remediation toolkit for the Miasma / Shai-Hulud worm and CVE-2026-35603 (AI-agent/IDE config injection)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:20.803947Z"}, {"uuid": "3162d04f-3158-41f8-9ade-12d153fc04b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35603", "type": "seen", "source": "https://bsky.app/profile/stupidllm.bsky.social/post/3mu5si63kh22a", "content": "Claude Code on Windows loaded its managed config from C:\\ProgramData\\ClaudeCode \u2014 a folder any standard user can write to by default \u2014 letting a local user plant a hook that ran under someone else's session. CVE-2026-35603, fixed in 2.1.75. https://www.stupidllm.com/incident/STUPID-2026-0090/", "creation_timestamp": "2026-08-28T16:40:40.543602Z"}]}