{"vulnerability": "cve-2026-2794", "sightings": [{"uuid": "b54af1cc-2fe2-4281-87e1-3d01e70604cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvyc6uywl2k", "content": "", "creation_timestamp": "2026-02-28T10:10:32.158901Z"}, {"uuid": "1003323e-2eeb-4ab4-b8a8-4a25f6b972c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27948", "type": "seen", "source": "https://gist.github.com/alon710/5a2e5affef6dd7e5863b811b8e50c918", "content": "", "creation_timestamp": "2026-02-27T03:10:18.000000Z"}, {"uuid": "e62b7b89-5ed3-4a1c-a00e-d3c5199f710b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27942", "type": "seen", "source": "https://gist.github.com/alon710/a27d67a44ac5804fb1959c01e9c562d6", "content": "", "creation_timestamp": "2026-02-27T03:40:19.000000Z"}, {"uuid": "9f7b87c9-2e82-4efd-9674-0eeb3f01522f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27946", "type": "seen", "source": "https://gist.github.com/alon710/b80b546288fad3926bdbc67b49b19ff1", "content": "", "creation_timestamp": "2026-02-27T21:40:11.000000Z"}, {"uuid": "64823c73-c4b4-4286-9320-34a65e455c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfuojhimkf2o", "content": "", "creation_timestamp": "2026-02-27T21:42:58.507719Z"}, {"uuid": "1d234b1b-83b2-434c-9811-063f56598fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgiitwwjs32y", "content": "", "creation_timestamp": "2026-03-07T18:54:42.681053Z"}, {"uuid": "0513cf19-9174-470d-9a4f-105da5a6f678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27945", "type": "seen", "source": "https://gist.github.com/alon710/cc79fb84eb7e27eda5e00b377415b26c", "content": "", "creation_timestamp": "2026-02-28T00:40:10.000000Z"}, {"uuid": "40c00503-ec57-4d49-b081-c8271500dd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3ylvjxz2e", "content": "", "creation_timestamp": "2026-02-26T02:00:46.749658Z"}, {"uuid": "10de99f8-e4f8-4bb8-aab0-5c318d0d6dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27946", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq4saogk52e", "content": "", "creation_timestamp": "2026-02-26T02:15:07.287094Z"}, {"uuid": "04ac3af0-0037-4b3d-8de0-deb6c0ef36c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqggo3ihj2z", "content": "", "creation_timestamp": "2026-02-26T05:07:36.040944Z"}, {"uuid": "e2d23212-fd9c-47cc-9766-1cffda2a5c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqgwmypzv2s", "content": "", "creation_timestamp": "2026-02-26T05:16:32.914776Z"}, {"uuid": "6a60e926-7209-49c2-9c51-dfaa9df7d00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27947", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116146728324980295", "content": "", "creation_timestamp": "2026-02-28T06:00:28.754580Z"}, {"uuid": "99ec7a2b-85f1-464a-9205-aaedfe5c2bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27947", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfvkd3xm7r25", "content": "", "creation_timestamp": "2026-02-28T06:00:30.483270Z"}, {"uuid": "0f75c125-4f90-4804-af7d-33b30541cd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116177864137232689", "content": "", "creation_timestamp": "2026-03-05T17:58:43.163498Z"}, {"uuid": "3e681a81-cba1-4c97-bad4-aaa069175b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgg7fi7l6o2w", "content": "", "creation_timestamp": "2026-03-06T21:00:14.661857Z"}, {"uuid": "0488abd7-6530-4fe5-b5e0-88a5f15fe846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdjbobtnp2v", "content": "", "creation_timestamp": "2026-03-05T19:19:04.970834Z"}, {"uuid": "4cb7a2ce-be4f-4328-b12b-d8f8697e11f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27942", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mftnymvk462u", "content": "", "creation_timestamp": "2026-02-27T12:00:53.973027Z"}, {"uuid": "67f9acac-f51a-40e8-8109-152340a6e4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhoqw3swrw2i", "content": "", "creation_timestamp": "2026-03-23T00:00:15.112056Z"}, {"uuid": "be79f879-9a8c-4029-992d-d7545befb9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-011/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "f4f8d8f4-dda8-467f-b9c4-d5f7654a3dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdlioo2h", "content": "", "creation_timestamp": "2026-03-19T21:03:01.692128Z"}, {"uuid": "9bbd7bf4-fd29-42af-88ee-457f8bf2e5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mguwmdaalc2k", "content": "", "creation_timestamp": "2026-03-12T17:32:57.079649Z"}, {"uuid": "45525ff8-195f-4ec5-83c0-57495066cff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-in-nginx-ui", "content": "", "creation_timestamp": "2026-03-09T14:22:35.000000Z"}, {"uuid": "c1bb3419-61ef-4c00-81af-461e3a1221d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-missing-authentication-vulnerability-nginx-ui-leads-full-system", "content": "", "creation_timestamp": "2026-03-10T15:59:43.000000Z"}, {"uuid": "e062eae8-0c7b-45fe-8832-96613955cf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/0xdf.bsky.social/post/3migk26go5a25", "content": "", "creation_timestamp": "2026-04-01T11:01:10.079846Z"}, {"uuid": "7f0447b5-089f-45fc-b88b-8ee12098695e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mii5vb4mib2l", "content": "", "creation_timestamp": "2026-04-02T02:28:59.260389Z"}, {"uuid": "4530ea92-cdb6-4e73-8c3b-00c670f80aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/os88SBnIxm2unq36kG5-IN3u61MzjKGV6jmqq5X9_izXolg", "content": "", "creation_timestamp": "2026-04-03T03:00:07.000000Z"}, {"uuid": "89853d6a-b015-4515-ac99-9420e5bd1a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/cflLzz2nbCnoFIhspzECPpLbzqqKWaFF-EjXQk4krKaQhRRR", "content": "", "creation_timestamp": "2026-03-08T19:40:05.000000Z"}, {"uuid": "371c0ef8-ca1e-4895-a22e-c6f4c8e07bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27940", "type": "seen", "source": "https://t.me/GithubRedTeam/77815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27940\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ngtuonghung\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-29 13:34:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-29T14:00:03.000000Z"}, {"uuid": "89d446a4-16d6-44ec-88b9-41adcfa177ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/ctinow/246807", "content": "Critical Nginx UI flaw CVE-2026-27944 exposes server backups\nhttps://ift.tt/Hs16oWR", "creation_timestamp": "2026-03-08T19:39:10.000000Z"}, {"uuid": "e0631175-b844-491f-b2f7-7d7bc1fdbf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/371", "content": "Hello, this is the best type and advanced PoC of CVE-2026-27944 that you ever can find on the Internet , we have developed a lot and it can byp4ss wafs and automatically download exp0sed backups, decrypt them and extract sensitive configuration data, including dbs creds, t0k3ns, and other useful information sometimes stored in backups or memory structures.\n\nFor any problems, or to purchase VIP access and features, please contact: @uncodeboss \n\nFofa: title=\"Nginx UI\" \n\nShodan: http.title:\"Nginx UI\"\n\nEnjoy;\n\nThis content is shared strictly for authorized testing, educational, and research purposes only. It is not intended for malicious use. All techniques, tools, or information provided are meant to demonstrate security concepts and to raise awareness in a controlled and legal environment. Please do not remove or flag this content, as it is shared responsibly for learning and academic purposes.", "creation_timestamp": "2026-03-10T21:53:24.000000Z"}, {"uuid": "cc4c97a5-eee5-44ee-a212-7d2fa6aafcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/83124", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jake-young-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-06 22:59:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn educational deep-dive into CVE-2026-27944\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-06T23:00:05.000000Z"}, {"uuid": "1ebea9b5-6b8c-41f9-81f7-e5e9971b3253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/83265", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB-Snapped-Writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a karimelsheikh1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-07 21:16:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTB Snapped \u2014 Hard Linux machine writeup. CVE-2026-27944 (Nginx UI unauthenticated backup disclosure) chained with CVE-2026-3888 (snapd race condition LPE) to achieve full system compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-07T22:00:05.000000Z"}, {"uuid": "ab44217a-5e2c-41b4-ba05-93aed5e93c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/xvoYgOFnUf5jFw65_bW2FC7fcn6orx4l4LTjm0d68ZkOEzo", "content": "", "creation_timestamp": "2026-05-08T03:00:06.000000Z"}, {"uuid": "fb8c5400-4ecc-4a49-b8e0-588683cab768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/N1Jo8qZWaWReiL_t-N5l6uzcgIVKcO6O8PdoiYgN9aP0HPY", "content": "", "creation_timestamp": "2026-05-07T03:00:06.000000Z"}, {"uuid": "a0b6729b-6a8f-4caf-b1de-b44fe2595745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762", "content": "", "creation_timestamp": "2026-03-05T13:48:56.000000Z"}, {"uuid": "bc0c8211-84d4-4df2-ba44-283d2ee5b8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/92027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cve-2026-27944-Tools-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BimaBalance\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 11:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSuka suka lah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.271573Z"}, {"uuid": "6f4dbad4-deac-41fd-b1c9-813025c44e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/92027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cve-2026-27944-Tools-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BimaBalance\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 11:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSuka suka lah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.480495Z"}, {"uuid": "20abe6a2-7932-4f87-8025-018cc1389b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cve-2026-27944-Tools-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BimaBalance\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 11:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSuka suka lah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.755325Z"}, {"uuid": "7191198d-617b-4a8e-a722-1058a1553849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/93476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB-Snapped-Writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 05:51:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWriteup de la m\u00e1quina Snapped (Hard) de Hack The Box.  Foothold: CVE-2026-27944 \u2014 Nginx UI unauthenticated backup disclosure Privilege Escalation: CVE-2026-3888 \u2014 snapd race condition LPE  T\u00e9cnicas: subdomain enumeration, AES decryption, bcrypt cracking, namespace manipulation, dynamic linker hijacking.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:06.283954Z"}, {"uuid": "ff71a9a7-c7be-4469-8eb5-e6deeaa32baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-16T19:00:06.580565Z"}, {"uuid": "a7b015a3-2d2d-4400-a9f1-a734fa4bd004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "content": "", "creation_timestamp": "2026-07-16T19:00:21.695868Z"}, {"uuid": "0c4bc3f7-9b5a-4861-8b69-e7a73b865ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-17T00:00:11.385722Z"}, {"uuid": "b8d63e7c-2f2a-423d-9a68-bb6ae45a5741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB-Snapped-Writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 05:51:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWriteup de la m\u00e1quina Snapped (Hard) de Hack The Box.  Foothold: CVE-2026-27944 \u2014 Nginx UI unauthenticated backup disclosure Privilege Escalation: CVE-2026-3888 \u2014 snapd race condition LPE  T\u00e9cnicas: subdomain enumeration, AES decryption, bcrypt cracking, namespace manipulation, dynamic linker hijacking.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:53.290521Z"}, {"uuid": "9ddbdf63-c8f1-45e1-a1f3-d34879ad7585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "content": "", "creation_timestamp": "2026-07-17T01:00:19.803003Z"}, {"uuid": "1c11a65d-9ee3-49c2-ac21-1ba576a0887a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "content": "", "creation_timestamp": "2026-07-18T00:00:22.688319Z"}, {"uuid": "adfadeeb-5981-4c6a-84f1-882ccba4c12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/116964298203115730", "content": "This week in GreyNoise data, rented crawlers probed for credentials and configuration secrets across widely deployed web software.\nA matched pair of crawlers sharing one client fingerprint probed NGINX UI (CVE-2026-27944) and LiteSpeed Cache (CVE-2024-44000), two CVSS 9.8 flaws that leak credentials, private keys, or session material, from two different hosting providers. \nAlongside them, an RDP brute force cohort spread across three networks under one transport fingerprint. WordPress core SQL injection CVE-2026-60137 also entered the CISA KEV catalog this week. The rented hosts rotate; the fingerprints persist.\nCustomers get the full weekly brief. Our public At The Edge one-pager \ud83d\udc49https://www.greynoise.io/resources/at-the-edge-clear-072026", "creation_timestamp": "2026-07-22T15:19:15.145414Z"}, {"uuid": "1411201b-a4f5-48ee-be37-d85a02bd7279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mramou5dyyd2", "content": "This week in GreyNoise data, rented crawlers probed for credentials and configuration secrets across widely deployed web software.\n\nA matched pair of crawlers sharing one client fingerprint probed NGINX UI (CVE-2026-27944) and LiteSpeed Cache [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-07-22T15:22:04.868106Z"}]}