{"vulnerability": "cve-2026-3185", "sightings": [{"uuid": "d624c17a-92ea-4102-961a-1a1176bf60ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31852", "type": "seen", "source": "https://infosec.exchange/users/mttaggart/statuses/116240425532826680", "content": "", "creation_timestamp": "2026-03-16T19:08:55.464381Z"}, {"uuid": "44098df0-733a-4429-9070-8bb9bd9ca582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "https://gist.github.com/alon710/f8f86330f5c731974b8d35df7d20cd75", "content": "", "creation_timestamp": "2026-03-12T10:10:05.000000Z"}, {"uuid": "189ac20e-e0f3-4b83-98fc-43a616efd2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31853", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:33.523743Z"}, {"uuid": "7080a93c-1244-48b4-bb2c-f88b42b0129a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31854", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3mhu2o7ju5c2z", "content": "", "creation_timestamp": "2026-03-25T02:38:06.765087Z"}, {"uuid": "5b2fe20f-9f57-426e-8fb1-57608bcceaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31852", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhj3uisym32m", "content": "", "creation_timestamp": "2026-03-20T18:00:14.272175Z"}, {"uuid": "73e7afb7-4074-4afa-98c2-5e285dc0bcc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31852", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmcip2b7x72f", "content": "CVE-2026-31852 - Critical supply chain attack in Jellyfin iOS. GitHub Actions workflow allows repo takeover, secret exfiltration, and App Store poisoning. CVSS 10. UNPATCHED. Disable workflow immediately. #CVE #jellyfin #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-31852/", "creation_timestamp": "2026-05-20T18:07:09.531198Z"}, {"uuid": "6665a432-d0d4-4c2d-be11-3eed05cc0c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31852", "type": "seen", "source": "https://bsky.app/profile/theresidentmachine.bsky.social/post/3mpkqohzwiz2i", "content": "CVE-2026-31852: The Pull Request That Checked Out Your Secrets\n\n#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE202631852", "creation_timestamp": "2026-07-01T05:06:53.283191Z"}, {"uuid": "5cf940ae-0e34-4e45-8020-2e04effb9cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31854", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30461", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, carefully filtered to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-35102\n\ud83c\udfaf TYPO3 CMS \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/secf00tprint/CVE-2026-35102\n\n\ud83e\udde0 Overview\nA vulnerability in TYPO3 CMS allows attackers to execute arbitrary code due to improper input validation in backend modules.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CMS compromise\n\u2022 Privileged access escalation\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-34419\n\ud83c\udfaf Atlassian Confluence \u2013 OGNL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4tyam/CVE-2026-34419\n\n\ud83e\udde0 Overview\nAn OGNL injection vulnerability allows attackers to execute arbitrary expressions, potentially leading to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Enterprise system compromise\n\u2022 Sensitive data exposure\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-33788\n\ud83c\udfaf WordPress Plugin \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0x3f97/CVE-2026-33788\n\n\ud83e\udde0 Overview\nA vulnerable WordPress plugin allows attackers to upload malicious files without proper validation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full website compromise\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-32677\n\ud83c\udfaf Docker Environment \u2013 Privilege Escalation\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitdev/CVE-2026-32677\n\n\ud83e\udde0 Overview\nA misconfiguration or vulnerability in Docker environments allows attackers to escalate privileges and escape container isolation.\n\n\u2699\ufe0f Impact\n\u2022 Container escape\n\u2022 Privilege escalation\n\u2022 Host compromise\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-31854\n\ud83c\udfaf PHP Application \u2013 Remote File Inclusion (RFI)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hax0rz/CVE-2026-31854\n\n\ud83e\udde0 Overview\nA remote file inclusion vulnerability allows attackers to load external malicious scripts into the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Data exfiltration\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch diff analysis\n\u2022 Web / system vulnerability research\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.223955Z"}, {"uuid": "3f6595b1-4482-405f-a566-3198de794054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31854", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17105", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, carefully filtered to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-35102\n\ud83c\udfaf TYPO3 CMS \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/secf00tprint/CVE-2026-35102\n\n\ud83e\udde0 Overview\nA vulnerability in TYPO3 CMS allows attackers to execute arbitrary code due to improper input validation in backend modules.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CMS compromise\n\u2022 Privileged access escalation\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-34419\n\ud83c\udfaf Atlassian Confluence \u2013 OGNL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4tyam/CVE-2026-34419\n\n\ud83e\udde0 Overview\nAn OGNL injection vulnerability allows attackers to execute arbitrary expressions, potentially leading to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Enterprise system compromise\n\u2022 Sensitive data exposure\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-33788\n\ud83c\udfaf WordPress Plugin \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0x3f97/CVE-2026-33788\n\n\ud83e\udde0 Overview\nA vulnerable WordPress plugin allows attackers to upload malicious files without proper validation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full website compromise\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-32677\n\ud83c\udfaf Docker Environment \u2013 Privilege Escalation\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitdev/CVE-2026-32677\n\n\ud83e\udde0 Overview\nA misconfiguration or vulnerability in Docker environments allows attackers to escalate privileges and escape container isolation.\n\n\u2699\ufe0f Impact\n\u2022 Container escape\n\u2022 Privilege escalation\n\u2022 Host compromise\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-31854\n\ud83c\udfaf PHP Application \u2013 Remote File Inclusion (RFI)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hax0rz/CVE-2026-31854\n\n\ud83e\udde0 Overview\nA remote file inclusion vulnerability allows attackers to load external malicious scripts into the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Data exfiltration\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch diff analysis\n\u2022 Web / system vulnerability research\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:10.248686Z"}, {"uuid": "67004de2-383e-408e-875d-75f2c19ae89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31854", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17105", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, carefully filtered to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-35102\n\ud83c\udfaf TYPO3 CMS \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/secf00tprint/CVE-2026-35102\n\n\ud83e\udde0 Overview\nA vulnerability in TYPO3 CMS allows attackers to execute arbitrary code due to improper input validation in backend modules.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CMS compromise\n\u2022 Privileged access escalation\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-34419\n\ud83c\udfaf Atlassian Confluence \u2013 OGNL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4tyam/CVE-2026-34419\n\n\ud83e\udde0 Overview\nAn OGNL injection vulnerability allows attackers to execute arbitrary expressions, potentially leading to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Enterprise system compromise\n\u2022 Sensitive data exposure\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-33788\n\ud83c\udfaf WordPress Plugin \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0x3f97/CVE-2026-33788\n\n\ud83e\udde0 Overview\nA vulnerable WordPress plugin allows attackers to upload malicious files without proper validation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full website compromise\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-32677\n\ud83c\udfaf Docker Environment \u2013 Privilege Escalation\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitdev/CVE-2026-32677\n\n\ud83e\udde0 Overview\nA misconfiguration or vulnerability in Docker environments allows attackers to escalate privileges and escape container isolation.\n\n\u2699\ufe0f Impact\n\u2022 Container escape\n\u2022 Privilege escalation\n\u2022 Host compromise\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-31854\n\ud83c\udfaf PHP Application \u2013 Remote File Inclusion (RFI)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hax0rz/CVE-2026-31854\n\n\ud83e\udde0 Overview\nA remote file inclusion vulnerability allows attackers to load external malicious scripts into the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Data exfiltration\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch diff analysis\n\u2022 Web / system vulnerability research\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:06.001686Z"}, {"uuid": "ac781d77-e95d-4788-b7dc-549bdf129089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31852", "type": "published-proof-of-concept", "source": "Telegram/YJsowlW547t1nz_VQFuE816o5aakA7dg24Hd3X_oXjq4JUg", "content": "", "creation_timestamp": "2026-09-05T13:00:04.170496Z"}, {"uuid": "1ded15f3-67b2-4e15-9db0-851353bfc9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "https://t.me/GithubRedTeam/103793", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTatsuki\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 17:07:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCraftCMS RCE vulnerability via relational conditionals in the control panel\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T18:00:07.000000Z"}, {"uuid": "ea63dc99-ea06-441e-b214-e867fac44082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103793", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTatsuki\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 17:07:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCraftCMS RCE vulnerability via relational conditionals in the control panel\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T18:00:07.000000Z"}, {"uuid": "38240191-e3a1-4665-bb1a-a2947410e7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103818", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0Asylum\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 03:19:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCraftCMS has an RCE vulnerability via relational conditionals in the control panel\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T04:00:09.000000Z"}, {"uuid": "720ed1d9-33d5-46f9-ae16-504f97356f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "6e8452d2-1b3a-4853-ac9c-15c528309fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "Telegram/W6KIGBKNkvsXlzUZXWVH9IksVZHdVGt-ZVnKWZr-SExOhZ8", "content": "", "creation_timestamp": "2026-09-30T03:00:06.000000Z"}, {"uuid": "0965348b-20eb-4938-90dd-1d80c6f31e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "Telegram/W6KIGBKNkvsXlzUZXWVH9IksVZHdVGt-ZVnKWZr-SExOhZ8", "content": "", "creation_timestamp": "2026-09-30T03:00:06.000000Z"}, {"uuid": "3cd057a5-dd7d-445a-9781-61ee61b25f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "1b0b01ab-165b-4093-a0ac-b9dc34e59b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "https://t.me/GithubRedTeam/104393", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WhiteMachin3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-05 17:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-31857 - Craft CMS authenticated RCE timing verifier.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-05T18:00:07.000000Z"}, {"uuid": "1cf555df-7e17-4934-ba40-1a7306c16a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104393", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WhiteMachin3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-05 17:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-31857 - Craft CMS authenticated RCE timing verifier.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-05T18:00:07.000000Z"}, {"uuid": "5c43dcee-4cd7-4589-a59c-5935a31b8bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "Telegram/HHFBOwnUkdC9FFpBPQ9GSZWa-aKdXtVNya_rfbWKKoOFTR0", "content": "", "creation_timestamp": "2026-10-06T03:00:06.000000Z"}, {"uuid": "20673ff1-aa23-40d2-98a1-4a16df418278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "Telegram/HHFBOwnUkdC9FFpBPQ9GSZWa-aKdXtVNya_rfbWKKoOFTR0", "content": "", "creation_timestamp": "2026-10-06T03:00:06.000000Z"}, {"uuid": "c9e5993c-f65a-4523-a044-d72ec4e20a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "https://t.me/GithubRedTeam/104641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaizoku73\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 08:54:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-31857, an authenticated Remote Code Execution vulnerability in Craft CMS caused by unsafe processing of user-controlled Twig expressions.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T09:00:10.000000Z"}, {"uuid": "c4081528-2aea-49fa-ad25-a89f0b2a41f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-31857-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaizoku73\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 08:54:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-31857, an authenticated Remote Code Execution vulnerability in Craft CMS caused by unsafe processing of user-controlled Twig expressions.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T09:00:10.000000Z"}, {"uuid": "64031006-341a-4ce7-ad00-8d88a2f0e5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "seen", "source": "Telegram/hRHSAf3bOXL1t8aTCse-mTaLSNrW_REwFx5yQVn12_bx7bQ", "content": "", "creation_timestamp": "2026-10-08T21:00:04.000000Z"}, {"uuid": "ee62dc48-eb8d-4a71-87fb-a3fe1d265fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31857", "type": "published-proof-of-concept", "source": "Telegram/hRHSAf3bOXL1t8aTCse-mTaLSNrW_REwFx5yQVn12_bx7bQ", "content": "", "creation_timestamp": "2026-10-08T21:00:04.000000Z"}]}