{"vulnerability": "cve-2026-25049", "sightings": [{"uuid": "5f2f5815-9c95-48f7-a614-07cbcf00a779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av26-091", "content": "", "creation_timestamp": "2026-02-05T15:56:30.000000Z"}, {"uuid": "e879237b-9324-4bb4-8449-143e62cadef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3me6yw33lm72g", "content": "", "creation_timestamp": "2026-02-06T13:25:13.962540Z"}, {"uuid": "d3b0d52a-999e-467f-b2d2-7cc55db54218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me7bpqlwqw2w", "content": "", "creation_timestamp": "2026-02-06T16:02:45.067388Z"}, {"uuid": "f944b821-8b02-417a-b35e-d02887fcabf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116024735661681185", "content": "", "creation_timestamp": "2026-02-06T16:56:08.350078Z"}, {"uuid": "39885552-a00c-4080-bd63-985468066576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3me7epvbo632z", "content": "", "creation_timestamp": "2026-02-06T16:56:30.870528Z"}, {"uuid": "7ab323be-b42a-49a9-8783-5ba6e5b1a4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3memih46t3c22", "content": "", "creation_timestamp": "2026-02-11T22:07:50.097372Z"}, {"uuid": "f9c9f657-dfe8-460c-b23f-c715a369e73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5i474utn2o", "content": "", "creation_timestamp": "2026-02-05T22:51:46.138996Z"}, {"uuid": "aea62057-9188-4c6a-9406-a693d382ac5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3me5pqhmzp22y", "content": "", "creation_timestamp": "2026-02-06T01:08:24.859420Z"}, {"uuid": "dd1dcf1b-2aad-4cdb-a7e1-a8aa31c4e365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3me5pskasik2q", "content": "", "creation_timestamp": "2026-02-06T01:09:32.694201Z"}, {"uuid": "d6ccfe73-100f-4faf-bfc2-9505bfc0ffb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3me5ua4xm3o23", "content": "", "creation_timestamp": "2026-02-06T02:28:43.398162Z"}, {"uuid": "78e5a8df-e073-4607-9cf1-d17b4bedadd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116014464225155765", "content": "", "creation_timestamp": "2026-02-04T21:23:59.598055Z"}, {"uuid": "eff03aac-043b-46f1-966a-5bf3d822d417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/116014479891446673", "content": "", "creation_timestamp": "2026-02-04T21:27:57.235428Z"}, {"uuid": "ba6201e7-2df9-4833-8fe6-4c013668efe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116014609657943227", "content": "", "creation_timestamp": "2026-02-04T22:00:57.262834Z"}, {"uuid": "e787159f-c090-4e48-919d-0c85089d4403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3me2viniulb2n", "content": "", "creation_timestamp": "2026-02-04T22:13:23.134242Z"}, {"uuid": "e5a13f26-ac5c-47c1-8fef-7702aa9468a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3me2wxgz5wj2y", "content": "", "creation_timestamp": "2026-02-04T22:39:32.915894Z"}, {"uuid": "c2c7d286-3783-4c36-9dd6-f6e2da728185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://threatintel.cc/2026/02/04/critical-nn-flaws-disclosed-along.html", "content": "", "creation_timestamp": "2026-02-04T21:01:03.000000Z"}, {"uuid": "76249277-b5ca-421c-b5e3-397ae629fcfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3me2zmzbnt72p", "content": "", "creation_timestamp": "2026-02-04T23:27:24.712379Z"}, {"uuid": "c8c16e14-d4d5-4e8c-aced-4337236a7360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685", "content": "", "creation_timestamp": "2026-02-05T01:40:05.000000Z"}, {"uuid": "1505844e-45bb-4bef-96d9-498ecbdd9f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3me3fdlk3bw2a", "content": "", "creation_timestamp": "2026-02-05T02:56:52.810917Z"}, {"uuid": "72ac5228-8bcb-4308-8ab6-7c30eeb2ae05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3meerbpejiv2m", "content": "", "creation_timestamp": "2026-02-08T20:24:32.610407Z"}, {"uuid": "8191a929-9845-496b-ab27-24a40dde10d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3me3r4c757l2a", "content": "", "creation_timestamp": "2026-02-05T06:27:33.096124Z"}, {"uuid": "bb47414e-94e3-4c1a-bc53-b8ac2635e0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25049", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3me3r5vl4fk2n", "content": "", "creation_timestamp": "2026-02-05T06:28:27.029903Z"}, {"uuid": "53fb8d47-fbb3-4ac1-b53e-f8f85ccb6d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3me3rgbqsgb22", "content": "", "creation_timestamp": "2026-02-05T06:33:08.728179Z"}, {"uuid": "dc2a9a98-07ec-4d1a-9206-cc9a3a11a04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3me3rt3so7j2f", "content": "", "creation_timestamp": "2026-02-05T06:40:18.528880Z"}, {"uuid": "89304127-5b11-4572-9f55-0bd34f4eb57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3me3s6kdp6c2e", "content": "", "creation_timestamp": "2026-02-05T06:46:44.755941Z"}, {"uuid": "906abb74-0944-44a2-a821-a1ed653e944f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3me3sn3b5j42v", "content": "", "creation_timestamp": "2026-02-05T06:54:50.476178Z"}, {"uuid": "099933cf-7720-476b-965a-0ea4f2e2dde7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3me3tgq6scm2a", "content": "", "creation_timestamp": "2026-02-05T07:09:11.654664Z"}, {"uuid": "e4a6665f-ae1e-4e6e-b800-5d3bea760a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://thehackernews.com/2026/02/critical-n8n-flaw-cve-2026-25049.html", "content": "", "creation_timestamp": "2026-02-05T05:16:00.000000Z"}, {"uuid": "d8a2d798-afe4-4d46-89f1-fbee6368ac67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3me3wrorj6p2h", "content": "", "creation_timestamp": "2026-02-05T08:09:00.101534Z"}, {"uuid": "2e6f6159-91af-492d-93d0-cbd6c54b0d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3me3yk35j5e2h", "content": "", "creation_timestamp": "2026-02-05T08:40:31.893712Z"}, {"uuid": "79ec33c2-e6bc-4c38-be0a-6389ec173938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3me3zoz42uz2a", "content": "", "creation_timestamp": "2026-02-05T09:01:11.361303Z"}, {"uuid": "dc9805d9-4414-46fc-b054-787e0ff8d897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/infosecsherpa.bsky.social/post/3meyaqv4w7u2p", "content": "", "creation_timestamp": "2026-02-16T14:22:06.876137Z"}, {"uuid": "767f63d2-7343-4581-b70e-8930f802a3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/jbzfn.bsky.social/post/3melwjlakir2x", "content": "", "creation_timestamp": "2026-02-11T16:47:04.224681Z"}, {"uuid": "c79052f6-abf0-4388-a31b-61ccfcc78129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116023343368862389", "content": "", "creation_timestamp": "2026-02-06T11:02:04.108602Z"}, {"uuid": "00f85386-8291-444a-8ce0-73370ea669c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mebazy7hki2q", "content": "", "creation_timestamp": "2026-02-07T10:55:54.467054Z"}, {"uuid": "421e8f94-52c9-4f07-bfe9-37a16e71f2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/percepticon.bsky.social/post/3mek3jspour2u", "content": "", "creation_timestamp": "2026-02-10T23:11:20.993603Z"}, {"uuid": "c8a1d3a7-a07a-4126-9666-5fbbe7ff8ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116017506368844994", "content": "", "creation_timestamp": "2026-02-05T10:17:37.580507Z"}, {"uuid": "86843c59-6cc0-43cf-83cd-5e9b179bc0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116017532053831746", "content": "", "creation_timestamp": "2026-02-05T10:24:10.161816Z"}, {"uuid": "1ce38115-c708-42a1-8aae-3c42257f68bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25049", "type": "seen", "source": "https://bsky.app/profile/techneiro.bsky.social/post/3me46fcxgrx24", "content": "", "creation_timestamp": "2026-02-05T10:25:14.471519Z"}, {"uuid": "aa236acb-8df2-408d-a909-5b4507197fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3me4aelhafp2v", "content": "", "creation_timestamp": "2026-02-05T11:00:37.953141Z"}, {"uuid": "95f553c3-7340-48d7-9f6a-3008cf6f7aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116017679044169087", "content": "", "creation_timestamp": "2026-02-05T11:01:33.577488Z"}, {"uuid": "7ae2cc7d-115b-48ad-9e36-b381df13b5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116017812070726957", "content": "", "creation_timestamp": "2026-02-05T11:35:23.256427Z"}, {"uuid": "828985ea-07e5-4414-a66a-6cdad8917399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3me4chm3ztk24", "content": "", "creation_timestamp": "2026-02-05T11:38:14.137535Z"}, {"uuid": "ae5be70a-8897-4e3a-84e1-f3d28fac1370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3me4dflmwyk2x", "content": "", "creation_timestamp": "2026-02-05T11:54:53.456881Z"}, {"uuid": "31a8e46b-12af-4800-8924-99e23b2475aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25049", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mecrdext4r2m", "content": "", "creation_timestamp": "2026-02-08T01:20:09.425011Z"}, {"uuid": "ff51f9d2-4856-4e77-a159-3d88522f002d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3me4fjntc2s2y", "content": "", "creation_timestamp": "2026-02-05T12:33:00.894480Z"}, {"uuid": "a15fbf8d-ef83-4d77-b0f7-877f8f165449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mecv774l5y2w", "content": "", "creation_timestamp": "2026-02-08T02:29:24.094195Z"}, {"uuid": "6f6c7400-c8f4-4933-95e4-7183d5a5a6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mekwtqpr7o2u", "content": "", "creation_timestamp": "2026-02-11T07:20:05.487719Z"}, {"uuid": "0ed0b045-aff2-43ed-bd09-0d5a8cc1a50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116018508626380024", "content": "", "creation_timestamp": "2026-02-05T14:32:31.168962Z"}, {"uuid": "4017cd21-5ac4-4af9-856e-420526de98ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3me4m7pqhn22r", "content": "", "creation_timestamp": "2026-02-05T14:32:40.231186Z"}, {"uuid": "7b91ed57-c42e-46ae-a784-46f1fceea827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3me4nvuwdtzp2", "content": "", "creation_timestamp": "2026-02-05T15:03:09.513487Z"}, {"uuid": "b43f9abd-5f17-41f5-8474-35907e49022d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mel2gz2opb2u", "content": "", "creation_timestamp": "2026-02-11T08:24:32.653614Z"}, {"uuid": "b52d73f6-3959-4cf0-bab9-8cd72e73f1e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3me4thrferk22", "content": "", "creation_timestamp": "2026-02-05T16:42:23.479892Z"}, {"uuid": "7a20a4c3-ae20-4006-be8d-33f3c6bb1f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3me4xjyj7hs2z", "content": "", "creation_timestamp": "2026-02-05T17:55:15.093392Z"}, {"uuid": "5192d719-5b59-4004-8069-7b75f55634bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1", "content": "", "creation_timestamp": "2026-02-05T08:08:06.000000Z"}, {"uuid": "d44d5dfa-c16c-4b28-88cd-daf5a23e9a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://www.cert.se/2026/02/cert-se-veckobrev-v6.html", "content": "", "creation_timestamp": "2026-02-06T14:15:00.000000Z"}, {"uuid": "46274d64-5247-4ba7-882d-2781d678069c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/GithubRedTeam/81183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-25049\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-21 12:57:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-25049\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-21T13:00:05.000000Z"}, {"uuid": "b3cccd71-c078-44a9-9d94-624f59ea720e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://gist.github.com/solzard/f1c5ad92142f2d8077e3e316e5dad350", "content": "", "creation_timestamp": "2026-04-16T01:52:33.000000Z"}, {"uuid": "1f8aced2-d7a5-441c-9523-139c6c3f1ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/7881", "content": "\u0412 n8n \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0441\u0440\u0435\u0434\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0445\u043e\u0441\u0442-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u043a CVE-2026-25049, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043b\u044e\u0431\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u043f\u0440\u0430\u0432\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 n8n.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 n8n \u0438 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f CVE-2025-68613, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 20 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Pillar Security, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2026-25049 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 n8n \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (\u043a\u043b\u044e\u0447\u0435\u0439 API, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 OAuth) \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0418\u0418.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 n8n \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u0441\u0440\u0435\u0434\u0443, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0432 Pillar Security, \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u0447\u0435\u0433\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0433\u043e: \u0435\u0441\u043b\u0438 \u0432\u044b \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0432\u044b \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n21 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 Pillar \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 n8n \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043e\u0431\u044a\u0435\u043a\u0442\u0443 Node.js, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0443 \u043a RCE.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043e \u0434\u0432\u0430 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f, \u043d\u043e \u0432 \u0445\u043e\u0434\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 Pillar \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0433\u043e \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0442\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 n8n \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b 30 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 12 \u044f\u043d\u0432\u0430\u0440\u044f 2026 \u0433\u043e\u0434\u0430 n8n \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 2.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Endor Labs \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0438\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-25049 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e RCE-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2.5.2 \u0438 1.123.17 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0430 \u0432 \u0442\u0438\u043f\u0438\u0437\u0430\u0446\u0438\u0438 TypeScript, \u043d\u043e \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435\u0439 \u0442\u0438\u043f\u043e\u0432, \u0430 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0443 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SecureLayer7 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0438\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f JavaScript \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 Function. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 PoC \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0433\u0430\u0439\u0434 \u043f\u043e \u044d\u0443\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nCVE-2026-25049 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-68613 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0451, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e n8n. \u041f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u043e\u043b\u0435\u0435 150 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c n8n \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 (\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f - 1.123.17 \u0438 2.5.2).\n\n\u0412 \u0438\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u043c\u0438 \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\u00a0\n\nPillar Security \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-25049.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0441\u0442\u0443\u0449\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c n8n, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0Ni8mare\u00a0(\u0431\u043e\u043b\u0435\u0435 33 000 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u043b\u044f CVE-2026-21858 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 n8n \u0441 27 \u044f\u043d\u0432\u0430\u0440\u044f \u043f\u043e 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f).", "creation_timestamp": "2026-02-05T14:53:03.000000Z"}, {"uuid": "adf449d7-8cbf-4afd-b54a-fc09aadad37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "https://t.me/kasperskyb2b/2075", "content": "\ud83d\udd0e \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u041d\u043e\u0432\u044b\u0435 TTPs \u0433\u0440\u0443\u043f\u043f\u044b Stan Ghouls/Bloody Wolf, \u0432\u0435\u0434\u0443\u0449\u0435\u0439 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445, \u0418\u0422- \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0420\u0424 \u0438 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433. \u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e Mirai.\n\n\ud83e\udd28 \u0420\u0430\u0437\u0431\u043e\u0440 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 APT TGR-STA-1030/UNC6619. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Shadow Campaigns \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b 70 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u041a\u0418\u0418 \u0432 37 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0442\u0438\u0432 155 \u0441\u0442\u0440\u0430\u043d. \u0426\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445. \u041f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 N-day, \u0444\u0438\u0448\u0438\u043d\u0433, Cobalt Strike/VShell/Havoc, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u044b\u0439 eBPF-\u0440\u0443\u0442\u043a\u0438\u0442 ShadowGuard.\n\n\ud83d\udcbe \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 DKnife, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0412\u041f\u041e \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 AitM.  \u0412\u041f\u041e \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 Android \u0438 Windows, \u043f\u043e\u043c\u043e\u0433\u0430\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u044b ShadowPad \u0438 DarkNimbus, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0442\u0440\u0430\u0444\u0438\u043a \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043e\u0432.\n\n\ud83d\udd14 \u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0432\u0437\u043b\u043e\u043c\u0443 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 TeamPCP \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0451, \u0447\u0442\u043e \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e \u2014 \u043e\u0442 Docker \u0438 Kubernetes \u0434\u043e Redis \u0438 Ray \u2014 \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438. \n\n\ud83d\udc40 \u041c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b ransomware \u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0412\u041f\u041e (LockBit, Qilin, BlackCat, Ursnif, NetSupport) \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 \u043e\u0434\u043d\u043e\u0442\u0438\u043f\u043d\u044b\u043c\u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437  ISPsystem VMmanager.  \u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u04212 \u0438\u043c\u0435\u044e\u0442 \u043e\u0434\u043d\u043e\u0442\u0438\u043f\u043d\u044b\u0435 \u0438\u043c\u0435\u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432 \u043d\u0430\u043f\u043e\u0434\u043e\u0431\u0438\u0435 WIN-J9D866ESIJ2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u0442\u0430 \u043e\u0431\u0449\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \"\u043f\u0443\u043b\u0435\u043d\u0435\u043f\u0440\u043e\u0431\u0438\u0432\u0430\u0435\u043c\u044b\u0445\" \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432 \u0438 \u043d\u0435\u043b\u044c\u0437\u044f \u043d\u0430 \u044d\u0442\u043e\u043c \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u043c\u0443 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443 \u0443\u0433\u0440\u043e\u0437. \n\n\ud83d\uddff React2Shell \u0436\u0438\u0432\u0451\u0442 \u0438 \u0442\u043e\u0440\u0436\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u044b NGINX \u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b. \u0416\u0435\u0440\u0442\u0432\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0434\u043e\u043c\u0435\u043d\u0430\u0445 .gov \u0438 .edu, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 TLD (in, .id, .pe, .bd, .th).\n\n\ud83c\udf83 \u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u00ab\u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438\u00bb n8n \u044f\u0432\u043d\u043e \u0441\u043d\u044f\u0442\u0441\u044f \u043b\u0430\u0432\u0440\u044b Ivanti. \u0421\u043d\u043e\u0432\u0430 CVSS 10.0 \u2014 CVE-2026-25049 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u044e\u0449\u0435\u043c\u0443 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440. \n\n\ud83d\udce0 \u0420\u0435\u0434\u043a\u0438\u0439, \u0432\u044b\u043c\u0438\u0440\u0430\u044e\u0449\u0438\u0439 \u0432\u0438\u0434 \u2014 \u0412\u041f\u041e \u00ab\u043a\u043e\u043c\u0430\u043d\u0434\u044b Legion\u00bb \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u0438\u0434, \u0447\u0442\u043e \u043e\u043d\u043e ransomware, \u0445\u043e\u0442\u044f \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440, \u043a\u0430\u043a \u0432 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u0435 \u043d\u0443\u043b\u0435\u0432\u044b\u0435. \n\n\ud83d\udcbe \u0413\u0440\u0443\u043f\u043f\u0430 Amaranth Dragon, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 APT41, \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u043c \u0445\u0438\u0442\u043e\u043c CVE-2025-8088 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WinRAR), \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u044b\u0439 Amaranth Loader, \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043c\u0430\u044f\u0447\u043e\u043a Havoc C2, \u043b\u0438\u0431\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e TGAmaranth RAT, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 (\u0432\u044b \u0443\u0433\u0430\u0434\u0430\u043b\u0438) \u0447\u0435\u0440\u0435\u0437 Telegram. \u0426\u0435\u043b\u044c\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0437\u0430 \u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0438 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438 \u0432 \u042e\u0412\u0410.\n\n\u2699\ufe0f \u0421\u0432\u0435\u0436\u0438\u0439 \u043a\u0435\u0439\u0441 \u0431\u043e\u0440\u044c\u0431\u044b \u0440\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u043e\u0432 \u0441 EDR \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u043d\u043e\u0441\u044f\u0442 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043e\u0442 \u041f\u041e EnCase, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0435.\n\n\ud83d\udcbb\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0438 \u0412\u041f\u041e AsyncRAT, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0435\u0439 \u043e\u0431\u0440\u0430\u0437\u044b vhd, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 IPFS, \u043c\u0443\u0434\u0440\u0451\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b PowerShell \u0438 \u0434\u0435\u0441\u044f\u0442\u043e\u043a \u0434\u0440\u0443\u0433\u0438\u0445 \u0442\u0440\u044e\u043a\u043e\u0432.\n\n\ud83d\udcf1 \u041f\u0435\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043e\u0442 Google \u2014 \u0432\u0441\u0435\u0433\u043e 7,5% \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Android \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u0441\u0432\u0435\u0436\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041e\u0421.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2026-02-09T07:09:14.000000Z"}, {"uuid": "7ea9cde2-e576-496a-9376-e98f1dce2c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/ctinow/245316", "content": "Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows\nhttps://ift.tt/JDLpdGn", "creation_timestamp": "2026-02-05T06:34:24.000000Z"}, {"uuid": "491c1929-c41e-483f-bf8f-35c1fb3c4b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/18897", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 n8n \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b \u043f\u0443\u0442\u044c \u043a RCE\n\n\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 n8n \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-25049 (9,4 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445.\n\nhttps://xakep.ru/2026/02/06/n8n-patch/", "creation_timestamp": "2026-02-06T15:35:54.000000Z"}, {"uuid": "bc7cde42-2a9c-4ac7-9fc1-681ee7934012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "Telegram/Icf8VfubH2ntoZFB4Dqy9vZqdIw1uffhvvlaBcIMi82KVZk", "content": "", "creation_timestamp": "2026-04-21T21:00:04.000000Z"}, {"uuid": "84a6bc11-a141-4ef9-8ee8-d179e1bf8df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.226856Z"}, {"uuid": "b45ea50f-d82b-4e77-8cc8-26e8faa77955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/CyberSecurityExploit/29329", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.556582Z"}, {"uuid": "efa59ba7-b0b7-463d-9610-3d9c7f549a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "Telegram/qq0Vt1FZhoBouZjHawX9TWkbSw7RPHcWsSuLZtsQfzRa", "content": "", "creation_timestamp": "2026-08-19T23:00:04.181484Z"}, {"uuid": "5c54a3e4-eaba-40e6-a7cd-587bb227c596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "Telegram/qq0Vt1FZhoBouZjHawX9TWkbSw7RPHcWsSuLZtsQfzRa", "content": "", "creation_timestamp": "2026-08-20T00:00:07.314249Z"}, {"uuid": "07284a21-d0ba-46f5-8f3e-c7f180307400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/29329", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:23.455276Z"}, {"uuid": "fd0c4007-441b-4122-bc4c-3cc45e6787c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.092041Z"}, {"uuid": "a454e155-9a32-4412-9012-e7ae9b79b1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/19130", "content": "Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows \u2013 thehackernews.com\n\nThu, 05 Feb 2026 14:16:00", "creation_timestamp": "2026-07-19T16:00:06.557274Z"}, {"uuid": "591a5532-cbc4-4b2d-bfdc-fb1e70b7aaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/19130", "content": "Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows \u2013 thehackernews.com\n\nThu, 05 Feb 2026 14:16:00", "creation_timestamp": "2026-07-20T00:00:20.661230Z"}, {"uuid": "d8ff02d7-3bd5-4188-b71f-617ee3b93319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/10027", "content": "Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows \u2013 thehackernews.com\n\nThu, 05 Feb 2026 14:16:00", "creation_timestamp": "2026-07-20T19:00:04.594545Z"}, {"uuid": "b51e8c18-f08a-4ea8-940b-b2f588ba02de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/10027", "content": "Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows \u2013 thehackernews.com\n\nThu, 05 Feb 2026 14:16:00", "creation_timestamp": "2026-07-21T01:00:12.335917Z"}, {"uuid": "fa182d4f-3a3a-48db-836d-1fdf235a8b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "seen", "source": "https://t.me/cyberwarehouse/1066", "content": "\u26a0\ufe0f Critical RCE flaw in n8n (CVE-2026-25049, CVSS 9.4) lets authenticated users execute system commands via crafted workflow expressions.\n\nPublic webhooks exposed \u2192 remote trigger, credential theft, server takeover.\n\n\ud83d\udd17 Exploit path, affected versions, patch details \u2192 https://thehackernews.com/2026/02/critical-n8n-flaw-cve-2026-25049.html", "creation_timestamp": "2026-07-26T02:00:06.738837Z"}, {"uuid": "e61756a3-2470-4e82-befd-4e61f6afaa35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25049", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1066", "content": "\u26a0\ufe0f Critical RCE flaw in n8n (CVE-2026-25049, CVSS 9.4) lets authenticated users execute system commands via crafted workflow expressions.\n\nPublic webhooks exposed \u2192 remote trigger, credential theft, server takeover.\n\n\ud83d\udd17 Exploit path, affected versions, patch details \u2192 https://thehackernews.com/2026/02/critical-n8n-flaw-cve-2026-25049.html", "creation_timestamp": "2026-07-27T00:00:34.107370Z"}]}