https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:49:23 +0000 https://vulnerability.circl.lu/sighting/815f2326-a4e8-4bbb-bb4d-d535ec584cee/export {"uuid": "815f2326-a4e8-4bbb-bb4d-d535ec584cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "Telegram/1uJwokYASOhFEvXumwZlyb9njx9S5iDKk59JgSK2ay9CKvc", "content": "", "creation_timestamp": "2026-09-29T03:00:06.000000Z"} {"uuid": "815f2326-a4e8-4bbb-bb4d-d535ec584cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "Telegram/1uJwokYASOhFEvXumwZlyb9njx9S5iDKk59JgSK2ay9CKvc", "content": "", "creation_timestamp": "2026-09-29T03:00:06.000000Z"} https://vulnerability.circl.lu/sighting/815f2326-a4e8-4bbb-bb4d-d535ec584cee/export Tue, 29 Sep 2026 03:00:06 +0000 https://vulnerability.circl.lu/sighting/a15e6417-cee0-4098-8258-089377bafcd9/export {"uuid": "a15e6417-cee0-4098-8258-089377bafcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/1uJwokYASOhFEvXumwZlyb9njx9S5iDKk59JgSK2ay9CKvc", "content": "", "creation_timestamp": "2026-09-29T03:00:06.000000Z"} {"uuid": "a15e6417-cee0-4098-8258-089377bafcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/1uJwokYASOhFEvXumwZlyb9njx9S5iDKk59JgSK2ay9CKvc", "content": "", "creation_timestamp": "2026-09-29T03:00:06.000000Z"} https://vulnerability.circl.lu/sighting/a15e6417-cee0-4098-8258-089377bafcd9/export Tue, 29 Sep 2026 03:00:06 +0000 https://vulnerability.circl.lu/sighting/11ade271-c65e-4c93-a5bc-e196eefeeed1/export {"uuid": "11ade271-c65e-4c93-a5bc-e196eefeeed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "https://t.me/GithubRedTeam/103697", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 20:53:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T21:00:07.000000Z"} {"uuid": "11ade271-c65e-4c93-a5bc-e196eefeeed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "https://t.me/GithubRedTeam/103697", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 20:53:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T21:00:07.000000Z"} https://vulnerability.circl.lu/sighting/11ade271-c65e-4c93-a5bc-e196eefeeed1/export Mon, 28 Sep 2026 21:00:07 +0000 https://vulnerability.circl.lu/sighting/cf2dd736-681f-4491-bd85-d3f7c90dc22d/export {"uuid": "cf2dd736-681f-4491-bd85-d3f7c90dc22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103697", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 20:53:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T21:00:07.000000Z"} {"uuid": "cf2dd736-681f-4491-bd85-d3f7c90dc22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103697", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 20:53:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T21:00:07.000000Z"} https://vulnerability.circl.lu/sighting/cf2dd736-681f-4491-bd85-d3f7c90dc22d/export Mon, 28 Sep 2026 21:00:07 +0000 https://vulnerability.circl.lu/sighting/c2a7d1ca-8ec2-4c85-adfa-548699852aa9/export {"uuid": "c2a7d1ca-8ec2-4c85-adfa-548699852aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "https://t.me/GithubRedTeam/103671", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Harry178945\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 15:14:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T16:00:08.000000Z"} {"uuid": "c2a7d1ca-8ec2-4c85-adfa-548699852aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "https://t.me/GithubRedTeam/103671", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Harry178945\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 15:14:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T16:00:08.000000Z"} https://vulnerability.circl.lu/sighting/c2a7d1ca-8ec2-4c85-adfa-548699852aa9/export Mon, 28 Sep 2026 16:00:08 +0000 https://vulnerability.circl.lu/sighting/50ff6bf4-02b0-4dbe-aee6-7cd3b5f66709/export {"uuid": "50ff6bf4-02b0-4dbe-aee6-7cd3b5f66709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103671", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Harry178945\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 15:14:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T16:00:08.000000Z"} {"uuid": "50ff6bf4-02b0-4dbe-aee6-7cd3b5f66709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103671", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-38526\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Harry178945\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 15:14:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via /admin/tinymce/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T16:00:08.000000Z"} https://vulnerability.circl.lu/sighting/50ff6bf4-02b0-4dbe-aee6-7cd3b5f66709/export Mon, 28 Sep 2026 16:00:08 +0000 https://vulnerability.circl.lu/sighting/19fef7af-cb50-4ab0-a15e-6897ee853683/export {"uuid": "19fef7af-cb50-4ab0-a15e-6897ee853683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3869", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1430", "content": "\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0645\u062f\u06cc\u06a9\u0648\u0646 M580/M580 Safety: \u06cc\u06a9 \u062e\u0637\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0646 \u0645\u062d\u0631\u0645\u0627\u0646\u06af\u06cc\u060c \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0634\u0648\u062f.\n\nCVE-2026-3869\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.00\u061b\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580 Safety: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.20.\nCVSS 3.1\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.8 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc.\nCVSS 4.0\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.2 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc. \u0622\u062e\u0631\u06cc\u0646 \u0646\u0634\u0631\u06cc\u0627\u062a \u0635\u0646\u0639\u062a\u06cc\u060c \u0639\u062f\u062f 9.2 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0641\u0639\u0644\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0630\u06a9\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0632\u0645\u0627\u0646 \u0634\u0627\u0645\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0648\u0644\u06cc\u0647 CVSS 3.1 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 9.8 \u0647\u0633\u062a\u0646\u062f.\n\nCWE-303 \u2013 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a: \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u0632 \u0633\u0637\u062d \u062d\u0641\u0627\u0638\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0627\u0647\u0645\u06cc\u062a \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 PLC \u0645\u062f\u06cc\u06a9\u0648\u0646 M580 \u0648 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 Safety\u060c \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u06cc\u0645\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc PLC \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0647\u0633\u062a\u0646\u062f \u0648 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u0646\u062f\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.\n\nhttps://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-18T20:00:04.545015Z"} {"uuid": "19fef7af-cb50-4ab0-a15e-6897ee853683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3869", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1430", "content": "\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0645\u062f\u06cc\u06a9\u0648\u0646 M580/M580 Safety: \u06cc\u06a9 \u062e\u0637\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0646 \u0645\u062d\u0631\u0645\u0627\u0646\u06af\u06cc\u060c \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0634\u0648\u062f.\n\nCVE-2026-3869\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.00\u061b\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580 Safety: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.20.\nCVSS 3.1\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.8 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc.\nCVSS 4.0\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.2 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc. \u0622\u062e\u0631\u06cc\u0646 \u0646\u0634\u0631\u06cc\u0627\u062a \u0635\u0646\u0639\u062a\u06cc\u060c \u0639\u062f\u062f 9.2 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0641\u0639\u0644\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0630\u06a9\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0632\u0645\u0627\u0646 \u0634\u0627\u0645\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0648\u0644\u06cc\u0647 CVSS 3.1 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 9.8 \u0647\u0633\u062a\u0646\u062f.\n\nCWE-303 \u2013 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a: \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u0632 \u0633\u0637\u062d \u062d\u0641\u0627\u0638\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0627\u0647\u0645\u06cc\u062a \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 PLC \u0645\u062f\u06cc\u06a9\u0648\u0646 M580 \u0648 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 Safety\u060c \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u06cc\u0645\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc PLC \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0647\u0633\u062a\u0646\u062f \u0648 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u0646\u062f\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.\n\nhttps://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-18T20:00:04.545015Z"} https://vulnerability.circl.lu/sighting/19fef7af-cb50-4ab0-a15e-6897ee853683/export Fri, 18 Sep 2026 20:00:04 +0000 https://vulnerability.circl.lu/sighting/f1235825-4b11-41b7-a6ac-319eb35e259e/export {"uuid": "f1235825-4b11-41b7-a6ac-319eb35e259e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42226", "content": "Critical GitHub Vulnerability Exposed Millions of Repositories\n\nThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.\nThe post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/", "creation_timestamp": "2026-09-18T05:00:08.078494Z"} {"uuid": "f1235825-4b11-41b7-a6ac-319eb35e259e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42226", "content": "Critical GitHub Vulnerability Exposed Millions of Repositories\n\nThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.\nThe post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/", "creation_timestamp": "2026-09-18T05:00:08.078494Z"} https://vulnerability.circl.lu/sighting/f1235825-4b11-41b7-a6ac-319eb35e259e/export Fri, 18 Sep 2026 05:00:08 +0000 https://vulnerability.circl.lu/sighting/68057c7f-0b2c-4751-969f-7560e311f802/export {"uuid": "68057c7f-0b2c-4751-969f-7560e311f802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42217", "content": "GitHub fixes RCE flaw that gave access to millions of private repos\n\nIn early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854)\u00a0that could have allowed\u00a0attackers to access millions of private repositories. [...]\nhttps://www.bleepingcomputer.com/news/security/github-fixes-rce-flaw-that-gave-access-to-millions-of-private-repos/", "creation_timestamp": "2026-09-18T05:00:08.039850Z"} {"uuid": "68057c7f-0b2c-4751-969f-7560e311f802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42217", "content": "GitHub fixes RCE flaw that gave access to millions of private repos\n\nIn early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854)\u00a0that could have allowed\u00a0attackers to access millions of private repositories. [...]\nhttps://www.bleepingcomputer.com/news/security/github-fixes-rce-flaw-that-gave-access-to-millions-of-private-repos/", "creation_timestamp": "2026-09-18T05:00:08.039850Z"} https://vulnerability.circl.lu/sighting/68057c7f-0b2c-4751-969f-7560e311f802/export Fri, 18 Sep 2026 05:00:08 +0000 https://vulnerability.circl.lu/sighting/91cee9c1-b194-4916-9ee1-6810212d9957/export {"uuid": "91cee9c1-b194-4916-9ee1-6810212d9957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-18T04:00:12.152258Z"} {"uuid": "91cee9c1-b194-4916-9ee1-6810212d9957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-18T04:00:12.152258Z"} https://vulnerability.circl.lu/sighting/91cee9c1-b194-4916-9ee1-6810212d9957/export Fri, 18 Sep 2026 04:00:12 +0000