{"vulnerability": "cve-2026-1278", "sightings": [{"uuid": "ee0108f7-c117-468b-a0e3-25da49aea399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12780", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moroz2af4t2o", "content": "AOMEI Backupper \u22648.3.0 faces a HIGH severity vuln (CVE-2026-12780) in amwrtdrv.sys. Local users could escalate privileges. No patch yet \u2014 restrict local access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-12780-improper-access-controls-in-aomei-b-bd5bc4597d816b66 #OffSeq #Vu...", "creation_timestamp": "2026-06-21T06:00:27.427412Z"}, {"uuid": "7dfc7e98-e8c2-445e-ab08-3219f4d4cc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12780", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116786569196289935", "content": "CVE-2026-12780: HIGH severity vuln in AOMEI Backupper \u22648.3.0. Local attackers can abuse improper access controls in amwrtdrv.sys for potential privilege escalation. No patch available \u2014 limit local access & watch for updates. https://radar.offseq.com/threat/cve-2026-12780-improper-access-controls-in-aomei-b-bd5bc4597d816b66 #OffSeq #Vuln #AOMEI", "creation_timestamp": "2026-06-21T06:00:29.829518Z"}, {"uuid": "b284a769-6f7b-4e64-ac1b-5e10a0a0d90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12784", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116786923158989964", "content": "CVE-2026-12784 | HIGH severity in IM-Magic Partition Resizer \u22647.9.0: improper access controls in MDA_NTDRV.sys kernel driver. Local exploit is public. Restrict access or remove vulnerable versions. https://radar.offseq.com/threat/cve-2026-12784-improper-access-controls-in-im-magi-c8e575e26aa27402 #OffSeq #Vulnerability #SysSec #CVE2026", "creation_timestamp": "2026-06-21T07:30:27.075143Z"}, {"uuid": "ba2292cd-d642-444e-bb3f-adcb0368a8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12784", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mortzyyqfs2t", "content": "IM-Magic Partition Resizer v7.0 \u2013 7.9.0: HIGH severity vuln (CVE-2026-12784) in MDA_NTDRV.sys allows local privilege abuse. Public exploit out \u2014 restrict access or upgrade ASAP. https://radar.offseq.com/threat/cve-2026-12784-improper-access-controls-in-im-magi-c8e575e26aa27402 #OffSeq #Vulnerabil...", "creation_timestamp": "2026-06-21T07:30:28.504579Z"}, {"uuid": "336891cf-d9a7-4b01-873d-4fc9b9102bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3morw3fgipc2i", "content": "CVE-2026-12784 - IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control\nCVE ID : CVE-2026-12784\n \n Published : June 21, 2026, 7 a.m. | 37\u00a0minutes ago\n \n Description : A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unkno...", "creation_timestamp": "2026-06-21T08:07:01.901445Z"}, {"uuid": "0f94befe-a7a1-4474-a638-d2682ef3378f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12786", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116787277091790305", "content": "UltraISO Premium Edition \u22649.76 hit by HIGH severity vuln (CVE-2026-12786) in bootpt64.sys \u2014 local attackers can bypass kernel access controls. No patch yet. Restrict local access & monitor activity. https://radar.offseq.com/threat/cve-2026-12786-improper-access-controls-in-ezbsyst-f7dadfd56c360b89 #OffSeq #Vulnerability #InfoSec #UltraISO", "creation_timestamp": "2026-06-21T09:00:27.391115Z"}, {"uuid": "1c0b2303-411d-48d2-8892-983f0f690be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12781", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mos4bpp2d52t", "content": "\ud83d\udd34 EXPLOITED\n\nA normal Windows login can read and overwrite your entire disk.\n\nEaseUS Partition Master left a signed driver (CVE-2026-12781) with a public exploit.\n\nPatching the app isn't enough: block the old driver.", "creation_timestamp": "2026-06-21T09:57:57.180906Z"}, {"uuid": "c7f7d449-84fb-43cb-8b77-26202ae0e0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12782", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116787630904398394", "content": "CVE-2026-12782: HIGH severity vuln in EaseUS Partition Master (14.0 \u2013 14.5). Improper access in kernel driver (EUEDKEPM.sys), local attack, public exploit out. Upgrade ASAP. Details: https://radar.offseq.com/threat/cve-2026-12782-improper-access-controls-in-easeus--1339881f4c691ee7 #OffSeq #Vulnerability #InfoSec #CVE202612782", "creation_timestamp": "2026-06-21T10:32:43.914912Z"}, {"uuid": "b6e89725-f8f7-4bab-9403-2d43d41316a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moscbep5rm2n", "content": "CVE-2026-12786 - Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control\nCVE ID : CVE-2026-12786\n \n Published : June 21, 2026, 7:15 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to...", "creation_timestamp": "2026-06-21T11:45:07.384031Z"}, {"uuid": "ff7702a9-a1c1-4c3a-909e-2e87c53e14df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosctbnql62l", "content": "CVE-2026-12787 - zhilink \u667a\u4e92\u8054(\u6df1\u5733)\u79d1\u6280\u6709\u9650\u516c\u53f8 ADP Application Developer Platform \u5e94\u7528\u5f00\u53d1\u8005\u5e73\u53f0 testConnection Endpoint deserialization\nCVE ID : CVE-2026-12787\n \n Published : June 21, 2026, 7:30 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : A vulnerability was found in zhilink \u667a\u4e92\u8054(\u6df1\u5733)\u79d1\u6280\u6709\u9650...", "creation_timestamp": "2026-06-21T11:55:08.423266Z"}, {"uuid": "787e6423-175d-4631-9b05-1d7127cc70ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosd4a5via2y", "content": "CVE-2026-12789 - ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection\nCVE ID : CVE-2026-12789\n \n Published : June 21, 2026, 8 a.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : A vulnerability was identified in ILIAS Learning...", "creation_timestamp": "2026-06-21T12:00:08.780189Z"}, {"uuid": "255ea388-d7ae-45d1-b41d-a00d5c6da129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12781", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116787984752269342", "content": "CVE-2026-12781 (HIGH, CVSS 8.5) found in EaseUS Partition Master 14.0 \u2013 14.5: improper access controls in kernel driver epmntdrv.sys enable local privilege escalation. Upgrade to latest version ASAP. https://radar.offseq.com/threat/cve-2026-12781-improper-access-controls-in-easeus--0c0fae83fd7ebb81 #OffSeq #Vulnerability #PrivilegeEscalation #CyberSecurity", "creation_timestamp": "2026-06-21T12:00:26.414121Z"}, {"uuid": "ec7306e7-c7b7-4195-af5b-5efb792cf427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12781", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mosd4r5hjh2u", "content": "EaseUS Partition Master v14.0 \u2013 14.5 hit by HIGH severity (CVSS 8.5) CVE-2026-12781. Local privilege escalation possible via epmntdrv.sys. Upgrade ASAP for protection. https://radar.offseq.com/threat/cve-2026-12781-improper-access-controls-in-easeus--0c0fae83fd7ebb81 #OffSeq #Vulnerability #Patch...", "creation_timestamp": "2026-06-21T12:00:27.223663Z"}, {"uuid": "5d3c47fa-79c7-409b-9299-9281697ad33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosdf6lr2q27", "content": "CVE-2026-12788 - zhilink \u667a\u4e92\u8054(\u6df1\u5733)\u79d1\u6280\u6709\u9650\u516c\u53f8 ADP Application Developer Platform \u5e94\u7528\u5f00\u53d1\u8005\u5e73\u53f0 XML Parser import xml external entity reference\nCVE ID : CVE-2026-12788\n \n Published : June 21, 2026, 7:45 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : A vulnerability was determined in zhilink...", "creation_timestamp": "2026-06-21T12:05:09.153966Z"}, {"uuid": "20300fc9-daf3-4ec4-b5cd-98a34cdaeef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12782", "type": "seen", "source": "https://www.acn.gov.it/portale/w/easeus-poc-pubblici-per-il-prodotto-partition-master", "content": "", "creation_timestamp": "2026-06-22T01:39:40.000000Z"}, {"uuid": "035fbca3-e9ca-4b6a-87d2-a3a886a4380a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12781", "type": "seen", "source": "https://www.acn.gov.it/portale/w/easeus-poc-pubblici-per-il-prodotto-partition-master", "content": "", "creation_timestamp": "2026-06-22T01:39:40.000000Z"}, {"uuid": "19c3416c-4a45-4638-8da5-7ba7d07c24bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12780", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aomei-disponibili-poc-pubblici-per-le-cve-2026-12778-cve-2026-12779-e-cve-2026-12780", "content": "Disponibili Proof of Concept (PoC) per 3 vulnerabilit\u00e0 con gravit\u00e0 \u201calta\u201d presenti nei prodotti Backupper, Partition Assistant Standard e Dynamic Disk Manager della suite AOMEI. Tali vulnerabilit\u00e0 risiedono nei relativi driver del kernel e potrebbero consentire l\u2019alterazione dei dati e l\u2019elevazione dei privilegi utente fino a livello SYSTEM da parte di un attaccante locale.", "creation_timestamp": "2026-06-22T12:39:57.000000Z"}]}