{"vulnerability": "cve-2026-3936", "sightings": [{"uuid": "3e2bafd6-8fad-4065-9e76-85e8bd300e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3936", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260316", "content": "", "creation_timestamp": "2026-03-16T01:00:00.000000Z"}, {"uuid": "b2aa3cbf-fe4b-4c7c-b52d-4837ed5560cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3936", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0298/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "9e73ccbd-fb44-4979-b952-bbb75bc488a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3936", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116214269969549098", "content": "", "creation_timestamp": "2026-03-12T04:17:11.941420Z"}, {"uuid": "37879fef-df39-40c9-8500-b510b63c9ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3936", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260312", "content": "", "creation_timestamp": "2026-03-12T01:00:00.000000Z"}, {"uuid": "ecb879b2-9b84-48b8-971e-95d7e5322ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3936", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgv6x3atvm2c", "content": "", "creation_timestamp": "2026-03-12T20:02:08.807986Z"}, {"uuid": "22d5a3a2-d795-46c3-bd8f-c399f3020349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwmc4xo4l27", "content": "", "creation_timestamp": "2026-04-07T20:24:00.067068Z"}, {"uuid": "a29d87b2-e6ad-4f60-80cb-19e80f370a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwmexmsb423", "content": "", "creation_timestamp": "2026-04-07T20:25:34.786498Z"}, {"uuid": "1bf1a0d1-f61b-4adc-96cf-75898a3c16de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwmhxdlnd2d", "content": "", "creation_timestamp": "2026-04-07T20:27:19.895014Z"}, {"uuid": "be11898a-d15d-425c-99ba-b78cf47c0a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwml4qbex2z", "content": "", "creation_timestamp": "2026-04-07T20:29:02.518503Z"}, {"uuid": "84682a2b-fda2-433c-bfee-1c8f688851d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwndj2ph62d", "content": "", "creation_timestamp": "2026-04-07T20:42:39.978827Z"}, {"uuid": "7c4c86b2-5282-45da-9a13-dd1ec142129a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwufhlcwy2z", "content": "", "creation_timestamp": "2026-04-07T22:49:01.402928Z"}, {"uuid": "f1ed90eb-6a32-4f53-8e81-bec538cea797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwuw3lij52s", "content": "", "creation_timestamp": "2026-04-07T22:58:19.274091Z"}, {"uuid": "8cd141b7-e1f3-4563-a084-a33a286ff0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39365", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-39365.yaml", "content": "", "creation_timestamp": "2026-04-07T16:23:55.000000Z"}, {"uuid": "312a6f51-a7de-4bec-a2eb-e1f01aaa60c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/schalkneethling.com/post/3mixnigoqfc2m", "content": "", "creation_timestamp": "2026-04-08T06:18:07.159765Z"}, {"uuid": "a59a911c-5339-433a-b460-b54664cec29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39369", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mixnltmwzw2x", "content": "", "creation_timestamp": "2026-04-08T06:19:59.176278Z"}, {"uuid": "6dc7c9c6-b875-4889-9d00-416d08681b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39361", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mixossc4lx25", "content": "", "creation_timestamp": "2026-04-08T06:41:46.368199Z"}, {"uuid": "891f376b-5ac9-4b78-9e49-9fa69dcb486b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39365", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtoz6g2p", "content": "", "creation_timestamp": "2026-04-08T21:03:02.403962Z"}, {"uuid": "f3fae7c8-4f41-42f6-90f7-6419b7b10317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mizciim22d2g", "content": "", "creation_timestamp": "2026-04-08T22:06:34.926568Z"}, {"uuid": "f37cb9ae-7840-4466-9ef3-a4b3a212dbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-39364.yaml", "content": "", "creation_timestamp": "2026-04-09T04:16:38.000000Z"}, {"uuid": "7f7d9b67-163d-42e5-bca8-ffc951b04726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pezsqe52d", "content": "", "creation_timestamp": "2026-04-09T21:02:48.823222Z"}, {"uuid": "3787910b-6fdc-4735-972d-4c578d434008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjg4jrwpy22e", "content": "", "creation_timestamp": "2026-04-14T00:24:36.166785Z"}, {"uuid": "e2188513-d412-4702-9818-4e6fe241d62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjuu2zj2il2f", "content": "", "creation_timestamp": "2026-04-19T21:03:04.212403Z"}, {"uuid": "9b5b9e64-4868-4741-b336-726de9f9ee8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "seen", "source": "Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU", "content": "", "creation_timestamp": "2026-04-07T21:22:19.000000Z"}, {"uuid": "a31b9169-3f1a-41b2-b5e2-cf12dcddfc8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU", "content": "", "creation_timestamp": "2026-04-07T21:22:19.000000Z"}, {"uuid": "b211035b-ece7-4bab-a86b-00db47ba7fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39361", "type": "seen", "source": "Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU", "content": "", "creation_timestamp": "2026-04-07T21:22:19.000000Z"}, {"uuid": "43bf0c84-c1ef-4755-b3d7-ff6c8858fd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39369", "type": "seen", "source": "Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU", "content": "", "creation_timestamp": "2026-04-07T21:22:19.000000Z"}, {"uuid": "862999d0-5607-4060-9439-d6f73d70ee71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "published-proof-of-concept", "source": "Telegram/-3DL24OhrtcIgo9QG72TD8xQtaEdTWVMF9bFoz5wsaSPnZU", "content": "", "creation_timestamp": "2026-04-08T19:00:26.000000Z"}, {"uuid": "52188436-f85f-488e-ac14-59cf5ee5117f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "published-proof-of-concept", "source": "Telegram/jQQxeN2mPQPtfMYo_To2hQ-_smSd26JApgUtHwY05JTWW84", "content": "", "creation_timestamp": "2026-04-08T21:00:04.000000Z"}, {"uuid": "8942d8ff-7aae-4d03-a839-e037da313d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39362", "type": "seen", "source": "Telegram/GfeUhnyJYShCjvs7rm1XQAQJnKqowYjnl2h2DVxLAV4-eNA", "content": "", "creation_timestamp": "2026-04-20T17:20:51.000000Z"}, {"uuid": "7b1ed9d2-62d3-4866-bd6d-9d30e42ec76a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.582272Z"}, {"uuid": "99b475d2-247e-4a36-b1cc-2ca8337235ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "seen", "source": "Telegram/nRCd-6n0pDvmfvM7KgbobBK2YcSbDsH8Dcp0n-zDwiT4HOU", "content": "", "creation_timestamp": "2026-05-06T09:00:04.000000Z"}, {"uuid": "667dda99-b45e-45a5-9f84-ef76ab6dbf11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39363", "type": "seen", "source": "https://infosec.exchange/users/da_667/statuses/116557542133404938", "content": "Updated avenger.rules - Added coverage for CVE-2026-39363) - Vite Dev Server Arbitrary File Read attempt\n#DetectionEngineering #Suricata #WebSocket  #Exploit\nhttps://github.com/da667/Avenger", "creation_timestamp": "2026-05-11T19:15:50.204650Z"}, {"uuid": "5b2f89ab-9a88-4565-adc6-9dddf8a6eab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39369", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-f4f9-627c-jh33", "content": "", "creation_timestamp": "2026-04-06T12:41:45.000000Z"}, {"uuid": "460d556a-0af6-4517-9a47-794aa428f013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39360", "type": "published-proof-of-concept", "source": "https://github.com/rustfs/rustfs/security/advisories/GHSA-mx42-j6wv-px98", "content": "", "creation_timestamp": "2026-04-07T02:06:49.000000Z"}, {"uuid": "0c86dd38-4158-435e-8756-6987564ddf7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39366", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-mmw7-wq3c-wf9p", "content": "", "creation_timestamp": "2026-04-06T12:36:13.000000Z"}, {"uuid": "0856951b-52e8-472f-8cb3-cc735a0da431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39365", "type": "published-proof-of-concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9", "content": "", "creation_timestamp": "2026-04-06T12:13:21.000000Z"}, {"uuid": "b1a9e0ac-1e18-4c89-b442-5aa3e320634a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39368", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-q4x6-6mm2-crg9", "content": "", "creation_timestamp": "2026-04-06T12:41:08.000000Z"}, {"uuid": "0419201c-e632-405e-83c7-7bb5a7e5c625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39367", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-rqp3-gf5h-mrqx", "content": "", "creation_timestamp": "2026-04-06T12:38:51.000000Z"}, {"uuid": "b4455ae6-26fe-4a0d-969d-a06018e2e39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39364", "type": "published-proof-of-concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "content": "", "creation_timestamp": "2026-04-06T12:12:37.000000Z"}, {"uuid": "0b581e12-aec7-4d69-b688-ac8a9f8e77fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39363", "type": "published-proof-of-concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583", "content": "", "creation_timestamp": "2026-04-06T12:11:59.000000Z"}, {"uuid": "b5c54128-1df3-459a-a593-06122688dbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39361", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moawwuaase2m", "content": "\ud83d\udccc CVE-2026-39361 - OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url function in src/handler/http/request/enrichme... https://www.cyberhub.blog/cves/CVE-2026-39361", "creation_timestamp": "2026-06-14T14:07:07.881493Z"}, {"uuid": "82eebae4-3b44-4a5c-b98f-101247c6c045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvispov6at2j", "content": "Exposed Vite dev servers are being mass-scanned for AWS/Azure secrets (CVE-2026-39364). Patch to Vite 8.0.5, block port 5173. https://bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets", "creation_timestamp": "2026-09-14T19:09:11.882076Z"}, {"uuid": "6c4be425-6e51-486a-a256-ddfad8b26820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvitvn6gkw24", "content": "Mass scanning of exposed Vite dev servers is exploiting CVE-2026-39364 to read .env files, AWS creds, Azure tokens, and Terraform data. F5 saw hundreds of attacks. #Vite #AWS #Azure", "creation_timestamp": "2026-09-14T19:30:27.541165Z"}, {"uuid": "42b7ec26-a096-4868-a903-996c8c1f298f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvjilmjzcc2o", "content": "The Vite development server vulnerability CVE-2026-39364 is exploited in mass scanning for credential harvesting. F5 Labs logged 32,000 events. Patch now.\n\n#Vite #CVE202639364 #CloudSecurity #CredentialHarvesting #F5Labs #DevSecOps #FileDisclosure #InfoSec #AWS #MassScanning", "creation_timestamp": "2026-09-15T01:40:38.315077Z"}, {"uuid": "23b4ce35-5ce9-4691-a7d8-947dd281a943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvkg3gsliq2r", "content": "Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364) #appsec", "creation_timestamp": "2026-09-15T10:28:26.859836Z"}, {"uuid": "c05f42b7-a7ba-4367-9ed6-5bf4918b39eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://t.me/true_secator/8610", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Vite, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 AWS \u0438 Azure.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2026-39364, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Vite \u043e\u0442 7.1.0 \u0434\u043e 7.3.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0442\u043a\u0435 8.x \u0434\u043e 8.0.5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP GET-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438\u0437 \u043c\u0435\u0441\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\nF5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u043a\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 800 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 32 000 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: .env, .env.production, .env.local \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0444\u0430\u0439\u043b\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 AWS, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 AWS \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Azure, \u0444\u0430\u0439\u043b\u044b \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 Terraform, \u0431\u0435\u0441\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, /proc/self/environ, /proc/1/environ \u0438 /proc/self/cwd/.env, \u0430 \u0442\u0430\u043a\u0436\u0435 /etc/passwd.\n\nF5 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 WAF.\n\n\u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u0438\u0437 \u0421\u0428\u0410, \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b IP Google Cloud \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 IP \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Vite: CVE-2025-30208, CVE-2025-31125 (\u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435) \u0438 CVE-2024-45811.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Vite \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a localhost, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F5 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0444\u043b\u0430\u0433 --host, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f server.host \u0438\u043b\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 Docker.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 5173 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 (34.14.15[.]105, 34.16.200[.]129 \u0438 34.11.196[.]206), \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b /@fs/ \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0441\u0442\u0440\u043e\u043a\u0430\u043c User-Agent \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2026-09-15T13:00:05.128056Z"}, {"uuid": "af1a58d3-e89b-4976-baef-b45876846377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvku4ggnob2b", "content": "Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)", "creation_timestamp": "2026-09-15T14:39:32.541089Z"}, {"uuid": "a1fdf0ce-b465-4f38-be05-6eb35ae51a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvkuz3dd6a2i", "content": "Attackers scan internet-exposed Vite servers to steal environment files, cloud credentials, and infrastructure configuration using CVE-2026-39364 file-access bypasses.\n", "creation_timestamp": "2026-09-15T14:55:37.025444Z"}, {"uuid": "058854eb-d85e-4849-98e3-ee9da67eb7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/javascriptbriefly.bsky.social/post/3mvkuz4x3cd24", "content": "Attackers scan internet-exposed Vite servers to steal environment files, cloud credentials, and infrastructure configuration using CVE-2026-39364 file-access bypasses.\n", "creation_timestamp": "2026-09-15T14:55:39.544340Z"}, {"uuid": "225274e5-7674-43e0-8443-dff637192e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvkuzsqewy2w", "content": "Attackers scan internet-exposed Vite servers to steal environment files, cloud credentials, and infrastructure configuration using CVE-2026-39364 file-access bypasses.\n", "creation_timestamp": "2026-09-15T14:55:59.021426Z"}, {"uuid": "7d085db9-a5d0-4040-9692-2f350c4e97f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://gist.github.com/ichintu/6579574f2d6f7759d85ca961b532236a", "content": "This cybersecurity briefing highlights three primary trends:\n\n\u2022 **AI & Agent Security:** New platforms (ELITZE, Exaforce) focus on governing AI agent identities, permissions, and runtime access. Researchers also demonstrate OpenAI Codex sandbox escapes and note AI-accelerated exploitation (e.g., Marimo RCE compromising an SSH bastion in seconds).\n\u2022 **Active Threats & Vulnerabilities:** Attackers are mass-scanning exposed Vite development servers to harvest cloud credentials (exploiting CVE-2026-39364). Critical unauthenticated flaws were disclosed for TrxTimeATTENDANCE (RCE, CVE-2026-89308) and OpenAM (SOAP auth bypass, CVE-2026-45052). Additionally, the BambooToken malware continues targeting Windows/Linux systems via MQTT.\n\u2022 **Community & Tools:** Practitioners are sharing practical resources, including a verification tool for leaked cloud secrets and a low-cost guide to entering the EMFI hacking competition.\n\n**Overall:** The threat landscape is increasingly defined by AI workload governance challenges, automated credential harvesting from misconfigured dev servers, and rapidly exploited critical vulnerabilities.", "creation_timestamp": "2026-09-15T16:01:40.963410Z"}, {"uuid": "e74ef5cf-f19f-484d-a6ac-4b910365df55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvlkcv3wrm2w", "content": "Hackers are mass-scanning exposed Vite development servers to steal AWS and Azure credentials, exploiting CVE-2026-39364, a high-severity file-disclosure vulnerability. In August 2026, F5 recorded 807 attacks and 32,000 events, a significant increase.", "creation_timestamp": "2026-09-15T21:16:52.629422Z"}, {"uuid": "8d476662-a1d9-4d01-9497-96873566ba91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "exploited", "source": "https://t.me/true_secator/8610", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Vite, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 AWS \u0438 Azure.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2026-39364, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Vite \u043e\u0442 7.1.0 \u0434\u043e 7.3.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0442\u043a\u0435 8.x \u0434\u043e 8.0.5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP GET-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438\u0437 \u043c\u0435\u0441\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\nF5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u043a\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 800 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 32 000 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: .env, .env.production, .env.local \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0444\u0430\u0439\u043b\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 AWS, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 AWS \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Azure, \u0444\u0430\u0439\u043b\u044b \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 Terraform, \u0431\u0435\u0441\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, /proc/self/environ, /proc/1/environ \u0438 /proc/self/cwd/.env, \u0430 \u0442\u0430\u043a\u0436\u0435 /etc/passwd.\n\nF5 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 WAF.\n\n\u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u0438\u0437 \u0421\u0428\u0410, \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b IP Google Cloud \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 IP \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Vite: CVE-2025-30208, CVE-2025-31125 (\u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435) \u0438 CVE-2024-45811.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Vite \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a localhost, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F5 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0444\u043b\u0430\u0433 --host, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f server.host \u0438\u043b\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 Docker.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 5173 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 (34.14.15[.]105, 34.16.200[.]129 \u0438 34.11.196[.]206), \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b /@fs/ \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0441\u0442\u0440\u043e\u043a\u0430\u043c User-Agent \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2026-09-16T00:00:31.724101Z"}, {"uuid": "9a5f4e38-de5e-4deb-a0c3-ea3bb0526a0b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/47057eba-3e4c-438e-a031-8cc7697b9d7c", "content": "", "creation_timestamp": "2026-09-16T16:00:28.068030Z"}, {"uuid": "4bd6d2a3-aa85-4b4d-a1f9-9c69f37acaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "seen", "source": "https://t.me/pphm_HackerNews/3152", "content": "\ud83d\udd34 Hackers target exposed Vite dev servers to steal AWS, Azure secrets\n\nA mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments.\n\nThe operation leverages an exploit for CVE-2026-39364, a high-severity vulnerability that allows bypassing file read/access controls in Vite versions 7.1.0 through 7.3.2, as well as the 8.x branch before 8.0.5.\n\nThe flaw was disclosed on April 7 and allows an unauthenticated attacker to manipulate query parameters in an HTTP GET request to bypass security restrictions and retrieve files in plaintext from locations that should normally be out of their reach.", "creation_timestamp": "2026-09-17T11:00:04.565722Z"}, {"uuid": "3d3f61e5-2981-4e61-b313-8609779fab05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39364", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3152", "content": "\ud83d\udd34 Hackers target exposed Vite dev servers to steal AWS, Azure secrets\n\nA mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments.\n\nThe operation leverages an exploit for CVE-2026-39364, a high-severity vulnerability that allows bypassing file read/access controls in Vite versions 7.1.0 through 7.3.2, as well as the 8.x branch before 8.0.5.\n\nThe flaw was disclosed on April 7 and allows an unauthenticated attacker to manipulate query parameters in an HTTP GET request to bypass security restrictions and retrieve files in plaintext from locations that should normally be out of their reach.", "creation_timestamp": "2026-09-18T00:00:06.355526Z"}, {"uuid": "fddff220-a323-4c65-903b-10d1a845c9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39364", "type": "seen", "source": "https://bsky.app/profile/frontenddogma.com/post/3mw3sqfmxrb2t", "content": "Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364), by @f5labs.bsky.social:\n\nhttps://www.f5.com/labs/articles/cloud-takeover-mass-scanning-for-exposed-vite-endpoints-cve-2026-39364?ref=frontenddogma.com\n\n#vite #security", "creation_timestamp": "2026-09-22T08:30:11.661988Z"}, {"uuid": "b505634b-341a-4e81-8d00-43b1874dfb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39364", "type": "seen", "source": "https://bsky.app/profile/u11g.com/post/3mw6xbsa37b2n", "content": "Actionable incident write-up with patched versions and a clear attack path.\n\nhttps://www.f5.com/labs/articles/cloud-takeover-mass-scanning-for-exposed-vite-endpoints-cve-2026-39364", "creation_timestamp": "2026-09-23T14:29:28.673021Z"}]}