{"vulnerability": "cve-2026-2747", "sightings": [{"uuid": "f82313a3-14d4-4d1a-9dcc-e2a1007c8d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27476", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfeqqlsu5m2e", "content": "", "creation_timestamp": "2026-02-21T13:40:10.135246Z"}, {"uuid": "f0d113ba-c620-4f4e-af3b-5a3a319fc446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mfzqmo4bim2u", "content": "", "creation_timestamp": "2026-03-01T22:03:52.595288Z"}, {"uuid": "edd130fe-7cc8-4c44-babc-357510874da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfadn3dema2c", "content": "", "creation_timestamp": "2026-02-19T19:34:55.706403Z"}, {"uuid": "fd01a139-7a46-4df7-91f8-b49c212e88f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3mfcymi7tvt2e", "content": "", "creation_timestamp": "2026-02-20T20:55:42.318430Z"}, {"uuid": "e58ca5c6-6c07-4829-bcec-b9cc4acf0f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27476", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfcyzkrvq62m", "content": "", "creation_timestamp": "2026-02-20T21:03:01.122582Z"}, {"uuid": "72c462e4-a66f-4512-b300-5b26d8bbcba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27479", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg33yxhdn62r", "content": "", "creation_timestamp": "2026-03-02T11:00:15.607481Z"}, {"uuid": "80c9d70b-1ac2-4c5f-9886-e2cf24f96963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodqx2qf22s", "content": "", "creation_timestamp": "2026-02-25T09:14:33.218971Z"}, {"uuid": "6bda0df1-f3ec-4eb0-8601-d5cb745227e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodr7frck2s", "content": "", "creation_timestamp": "2026-02-25T09:14:34.446656Z"}, {"uuid": "dae18861-05be-48da-b36d-32248c1fb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodr7ftb22s", "content": "", "creation_timestamp": "2026-02-25T09:14:35.581604Z"}, {"uuid": "4cddaf1c-afba-4575-a883-d137fdc4644a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27476", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfatl75dmg2n", "content": "", "creation_timestamp": "2026-02-20T00:20:11.754476Z"}, {"uuid": "e271453a-4fa8-42e6-baa2-605b38d37ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmjxuywky2i", "content": "", "creation_timestamp": "2026-02-24T16:00:15.965710Z"}, {"uuid": "3527518c-240f-4a3c-b9de-e82baff663dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27471", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmkefla5q2s", "content": "", "creation_timestamp": "2026-02-24T16:07:16.428142Z"}, {"uuid": "e5502576-e377-4b31-b750-6f81fa69d414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgabqdunt627", "content": "", "creation_timestamp": "2026-03-04T12:26:07.739045Z"}, {"uuid": "ea17fe22-23d4-479f-8a17-b635e981d0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6pjevvn2h", "content": "", "creation_timestamp": "2026-02-21T08:17:26.842794Z"}, {"uuid": "332771e7-f778-4ddc-9b86-ebc07a0521b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6pvhk7k2c", "content": "", "creation_timestamp": "2026-02-21T08:17:39.460138Z"}, {"uuid": "37b156a9-b009-47cb-99a8-70ad4d07e5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6ydw6zd26", "content": "", "creation_timestamp": "2026-02-21T08:22:23.060796Z"}, {"uuid": "8c5347ed-1496-4e93-8507-3e1fb1ae5a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27476", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfbqnpw4dh2n", "content": "", "creation_timestamp": "2026-02-20T09:00:34.684477Z"}, {"uuid": "c0f2ea00-8893-41a3-b1c4-807bcd35226f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27471", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116107799887997285", "content": "", "creation_timestamp": "2026-02-21T09:00:28.298787Z"}, {"uuid": "b54ac8c6-dbad-4bc0-ba02-a3fddb37f066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27476", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116102137906197441", "content": "", "creation_timestamp": "2026-02-20T09:00:46.594645Z"}, {"uuid": "cdf1df74-536e-4ad6-9ed5-d341eed3dc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27471", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfeb4iktll2m", "content": "", "creation_timestamp": "2026-02-21T09:00:30.416522Z"}, {"uuid": "dc30d93e-dd3e-4b05-a162-54ad2230c8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27479", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfebzxr5nj2h", "content": "", "creation_timestamp": "2026-02-21T09:16:58.511942Z"}, {"uuid": "25ec8738-aea8-4f12-87fe-2b65fb96ccc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfn3tvv3k42m", "content": "", "creation_timestamp": "2026-02-24T21:20:10.397879Z"}, {"uuid": "e8bbb08d-3744-4473-8a41-80f23a779442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4boutc72y", "content": "", "creation_timestamp": "2026-02-24T21:27:52.485836Z"}, {"uuid": "baa17e96-bc6c-4924-84a4-78ae33e2a335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3mfn54nc75g2n", "content": "", "creation_timestamp": "2026-02-24T21:42:57.513928Z"}, {"uuid": "90dc8b69-4ebe-4d5a-933f-bc928de98d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27478", "type": "seen", "source": "https://gist.github.com/alon710/40ab7c8f3b92395e6ea4963afcd7e9fa", "content": "# CVE-2026-27478: CVE-2026-27478: Authentication Bypass via Dynamic JWKS Discovery in Unity Catalog\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-05-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-27478\n\n## Summary\nUnity Catalog version 0.4.0 and prior contains a critical authentication bypass vulnerability in the token exchange endpoint. The server dynamically fetches JSON Web Key Sets (JWKS) based on unverified 'iss' (issuer) claims within incoming JSON Web Tokens (JWTs), allowing unauthenticated attackers to forge tokens and impersonate arbitrary users.\n\n## TL;DR\nA flaw in Unity Catalog's JWT validation allows complete authentication bypass. By supplying a malicious 'iss' claim, attackers force the server to fetch a public key from an attacker-controlled server to validate a forged token.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-290, CWE-346, CWE-1390\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.1 (Critical)\n- **EPSS Score**: 0.00023 (6.59%)\n- **Impact**: Complete Authentication Bypass / User Impersonation\n- **Exploit Status**: Proof of Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Unity Catalog <= 0.4.0\n- **unitycatalog**: <= 0.4.0 (Fixed in: `0.4.1`)\n\n## Mitigation\n\n- Upgrade Unity Catalog to version 0.4.1 or later.\n- Configure 'server.allowed-issuers' with a strict whitelist of trusted OIDC providers.\n- Configure 'server.audiences' to validate the intended recipient of incoming tokens.\n- Implement network egress filtering to restrict outbound HTTP requests from the Unity Catalog server to known identity providers.\n\n**Remediation Steps:**\n1. Download Unity Catalog version 0.4.1 from the official repository.\n2. Stop the running Unity Catalog service.\n3. Open the 'etc/conf/server.properties' configuration file.\n4. Add the 'server.allowed-issuers' property with your trusted IdP URLs (e.g., server.allowed-issuers=https://accounts.google.com).\n5. Add the 'server.audiences' property with your application client ID.\n6. Ensure 'server.authorization=enable' is set.\n7. Start the updated Unity Catalog service.\n8. Verify the application logs to ensure successful startup and proper configuration loading.\n\n## References\n\n- [GitHub Security Advisory GHSA-qqcj-rghw-829x](https://github.com/unitycatalog/unitycatalog/security/advisories/GHSA-qqcj-rghw-829x)\n- [NVD Detail CVE-2026-27478](https://nvd.nist.gov/vuln/detail/CVE-2026-27478)\n- [Patch Commit (Backport to 0.4)](https://github.com/unitycatalog/unitycatalog/commit/89b91863e4ec0ead5865a602a4203ed254c151da)\n- [Release Tag (v0.4.1)](https://github.com/unitycatalog/unitycatalog/releases/tag/v0.4.1)\n- [Documentation on Auth Configuration](https://github.com/unitycatalog/unitycatalog/blob/main/docs/server/auth.md)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-27478) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-11T18:10:29.000000Z"}, {"uuid": "3e99810e-0dff-4c79-b882-815b32e3c56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27478", "type": "published-proof-of-concept", "source": "https://github.com/unitycatalog/unitycatalog/security/advisories/GHSA-qqcj-rghw-829x", "content": "", "creation_timestamp": "2026-03-11T19:12:17.000000Z"}, {"uuid": "9972173e-7958-407f-aca6-b612cac9d0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://t.me/cve0day/244", "content": "CVE-2026-27470\n\nNone\n\nGitHub Link:\nhttps://github.com/kocaemre/CVE-2026-27470", "creation_timestamp": "2026-08-27T15:00:13.188608Z"}, {"uuid": "0891f7d6-4bb3-4d03-b4c9-9f7eb068090e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/244", "content": "CVE-2026-27470\n\nNone\n\nGitHub Link:\nhttps://github.com/kocaemre/CVE-2026-27470", "creation_timestamp": "2026-08-29T00:00:29.942674Z"}, {"uuid": "b75f4c4d-7e00-4419-8ce3-b035f64d1a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "seen", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T12:00:05.647366Z"}, {"uuid": "ebd535b3-8884-478c-b397-89a9d7b96327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "seen", "source": "https://t.me/GithubRedTeam/100631", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27475\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:24:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27475\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T12:00:05.757755Z"}, {"uuid": "daa6f99a-ccae-4115-a1b3-2bfe2b77677e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "seen", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T12:00:05.805823Z"}, {"uuid": "bcd4d8e8-5b6f-4f71-8b74-5865d1546147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.766547Z"}, {"uuid": "ecb6c9c2-761a-4e32-90e7-737bb31e46d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.867761Z"}, {"uuid": "3a575ef0-b36e-455a-b6ad-17051ecc238b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.576688Z"}, {"uuid": "00262b93-568d-43a8-a548-9dd971b96eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100631", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27475\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:24:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27475\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:08.405870Z"}, {"uuid": "9bfa4209-6d5b-4c82-affc-1e0ef54e3d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:08.503468Z"}, {"uuid": "c9072228-90c4-469d-999d-f88035f3a527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:08.554063Z"}, {"uuid": "04fca311-6612-4ee9-8481-4d7007c2cf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27471", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:13.885139Z"}]}