{"vulnerability": "2026-60", "sightings": [{"uuid": "19292f9a-9fa6-4bb0-befd-4c3c2edaf0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6018", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81383", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6018-9-Local-Privilege-Escalation-Chain\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a m0r4a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-23 04:56:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-23T05:00:04.000000Z"}, {"uuid": "253349ad-972d-401d-b4f0-fc02c762052b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6014", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116377698360617588", "content": "", "creation_timestamp": "2026-04-10T00:59:11.293315Z"}, {"uuid": "c8d27860-7e77-4922-8673-77150ff23189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6012", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4mo36gjl2d", "content": "", "creation_timestamp": "2026-04-10T05:46:39.908253Z"}, {"uuid": "7ccfab6c-b435-4f85-99e4-1915732934b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6013", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4moctij525", "content": "", "creation_timestamp": "2026-04-10T05:46:47.155640Z"}, {"uuid": "6f656a17-70d6-4ddb-a5f1-52ac671241e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6014", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4mokit3v25", "content": "", "creation_timestamp": "2026-04-10T05:46:55.552939Z"}, {"uuid": "70d0f89b-b702-4f29-a13b-ff9939e72a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4nkszciy2n", "content": "", "creation_timestamp": "2026-04-10T06:02:43.428101Z"}, {"uuid": "b08c9a5f-1824-40c9-aa35-0b4306d8f2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4noo4i2t2i", "content": "", "creation_timestamp": "2026-04-10T06:04:52.338675Z"}, {"uuid": "bf1a66f8-004b-4203-ab04-d24c390437be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6015", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4nxbzs7w23", "content": "", "creation_timestamp": "2026-04-10T06:09:41.690308Z"}, {"uuid": "43584092-4de1-46c0-89df-2283e77256a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4o46jzy42n", "content": "", "creation_timestamp": "2026-04-10T06:12:25.845852Z"}, {"uuid": "834997af-d5ef-4947-9292-52b41e8bf343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ohjtl5g2q", "content": "", "creation_timestamp": "2026-04-10T06:18:47.404284Z"}, {"uuid": "e6d30c4f-cf7a-4271-b57c-e2e531d0815b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ooaskiy2i", "content": "", "creation_timestamp": "2026-04-10T06:22:32.449306Z"}, {"uuid": "41ab270d-d21c-40cf-9804-0e22f7c7d45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ovwnaon2o", "content": "", "creation_timestamp": "2026-04-10T06:26:50.409926Z"}, {"uuid": "48598526-50ce-458a-9a65-ef15b994d7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4p6vauzx25", "content": "", "creation_timestamp": "2026-04-10T06:31:50.662410Z"}, {"uuid": "4ea2b462-1746-40e9-8f5d-f635ea95bc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6014", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4phtpghp2z", "content": "", "creation_timestamp": "2026-04-10T06:36:51.003103Z"}, {"uuid": "d67fa3ca-1577-4f1d-bf93-361e76870d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6011", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4pqsasjl2d", "content": "", "creation_timestamp": "2026-04-10T06:41:51.556266Z"}, {"uuid": "d71af3f2-73ea-41ac-b754-8f8e4ff5096a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4pzqusti24", "content": "", "creation_timestamp": "2026-04-10T06:46:51.811525Z"}, {"uuid": "ef51f619-7930-4682-afbe-1bf83924b4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4qcq6n3f27", "content": "", "creation_timestamp": "2026-04-10T06:51:53.097870Z"}, {"uuid": "6a74a018-7ec8-4842-88c3-cf173715f2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6025", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4qrxqgo72p", "content": "", "creation_timestamp": "2026-04-10T07:00:24.750723Z"}, {"uuid": "f8c32647-4146-46a0-a2ad-11cbabb048c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6029", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rqulq4e2h", "content": "", "creation_timestamp": "2026-04-10T07:17:42.134964Z"}, {"uuid": "91476bbc-c034-4771-9172-3476d5890e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6026", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rrch34w2m", "content": "", "creation_timestamp": "2026-04-10T07:17:56.165342Z"}, {"uuid": "1c709db4-fc79-4fef-a4fe-386c94536301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6027", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rsimiwh27", "content": "", "creation_timestamp": "2026-04-10T07:18:36.247283Z"}, {"uuid": "206a8f93-6432-4b3c-bbca-b61255da809f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6015", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mj4rsnm2i42n", "content": "", "creation_timestamp": "2026-04-10T07:18:40.837643Z"}, {"uuid": "bb18866a-d371-473b-aa4c-cc5787578083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6028", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rspm6c72p", "content": "", "creation_timestamp": "2026-04-10T07:18:43.492318Z"}, {"uuid": "7dd73aae-da3b-4f43-81b8-8fdf84b18ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6027", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rt6n3vq27", "content": "", "creation_timestamp": "2026-04-10T07:18:59.341920Z"}, {"uuid": "d4e8d3a5-0625-44e2-adc0-2b275471a0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6028", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rtfiu4y27", "content": "", "creation_timestamp": "2026-04-10T07:19:06.631128Z"}, {"uuid": "6bc0e551-9de4-4f20-aaf8-9ddd53ab75cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6016", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mj4ru6sduq2v", "content": "", "creation_timestamp": "2026-04-10T07:19:32.660498Z"}, {"uuid": "1852f08b-c00b-4b01-824e-c6afa54c3305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6029", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116379237095052977", "content": "", "creation_timestamp": "2026-04-10T07:30:30.770060Z"}, {"uuid": "8fda026f-5528-4135-96ca-79db36e7147c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6029", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mj4shtxip62y", "content": "", "creation_timestamp": "2026-04-10T07:30:32.775117Z"}, {"uuid": "99cc58c6-8fa6-4ebc-966f-2da1f0d220be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6027", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4x337xfs23", "content": "", "creation_timestamp": "2026-04-10T08:52:52.867074Z"}, {"uuid": "cc805973-bd25-4c46-9e78-4877c6415f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4xdzoraq2i", "content": "", "creation_timestamp": "2026-04-10T08:57:52.941831Z"}, {"uuid": "0c1e5a02-f988-4cf9-9ffe-c25bae6f5fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6029", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4xvwjk7m2i", "content": "", "creation_timestamp": "2026-04-10T09:07:53.454081Z"}, {"uuid": "46cd300a-930f-4199-89aa-62eb9d97993c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6028", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4y6uwrhj2i", "content": "", "creation_timestamp": "2026-04-10T09:12:53.712232Z"}, {"uuid": "12755313-997e-44ce-a7a5-90e52b4f33f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6057", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj532zqngr2i", "content": "", "creation_timestamp": "2026-04-10T10:04:25.910324Z"}, {"uuid": "03492672-484a-4007-9a40-29342a18cbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj53xh4xkf2n", "content": "", "creation_timestamp": "2026-04-10T10:20:19.536765Z"}, {"uuid": "9117aef9-ba05-4558-a508-89571ababae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6037", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj54braecd2d", "content": "", "creation_timestamp": "2026-04-10T10:26:06.257789Z"}, {"uuid": "0e352542-159e-465d-93e9-188384161e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6042", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj54hqcl4425", "content": "", "creation_timestamp": "2026-04-10T10:29:26.031217Z"}, {"uuid": "cb5739e9-6a67-4f2b-b5cf-8e3c10e40f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6057", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116379944895861861", "content": "", "creation_timestamp": "2026-04-10T10:30:31.005242Z"}, {"uuid": "81d4cf67-9a7b-4999-8bb6-f649a78cc200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6057", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mj54jpqh4422", "content": "", "creation_timestamp": "2026-04-10T10:30:33.154699Z"}, {"uuid": "eeae1efd-eed8-41b3-a7b8-f43d7738feb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6035", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj54ohahsu23", "content": "", "creation_timestamp": "2026-04-10T10:33:11.770639Z"}, {"uuid": "5be0deca-5874-4ca3-9c12-665273dca1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj54w4ws432d", "content": "", "creation_timestamp": "2026-04-10T10:37:28.987332Z"}, {"uuid": "cdd92d39-2c86-42f6-86d6-4607d1525217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6031", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5573ea2f2d", "content": "", "creation_timestamp": "2026-04-10T10:42:29.397781Z"}, {"uuid": "118fbbc4-8f2f-4054-906d-87f69e1b901f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj55hzsmqy27", "content": "", "creation_timestamp": "2026-04-10T10:47:29.798693Z"}, {"uuid": "22f402d8-9782-4d28-a494-fd1cc258b9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj55qyb6sb23", "content": "", "creation_timestamp": "2026-04-10T10:52:30.304659Z"}, {"uuid": "fc580dbf-288c-439d-bf55-c061333a8acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj55zx64tp24", "content": "", "creation_timestamp": "2026-04-10T10:57:30.886958Z"}, {"uuid": "9fd336c9-77b1-4036-bb1e-b011e3ef9fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6038", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj56cvmzdz2q", "content": "", "creation_timestamp": "2026-04-10T11:02:31.511029Z"}, {"uuid": "d7e70f17-94da-4cd3-90b2-2332f57c672b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5idzzocv22", "content": "", "creation_timestamp": "2026-04-10T14:02:06.860609Z"}, {"uuid": "ea63cdc1-0741-4068-b1c7-333ea0108b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6068", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5ijg32n22q", "content": "", "creation_timestamp": "2026-04-10T14:05:07.359839Z"}, {"uuid": "6d37cd75-1401-4154-81da-659997d4b927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6069", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5kvcmx4f2z", "content": "", "creation_timestamp": "2026-04-10T14:47:33.762371Z"}, {"uuid": "8f93d134-8965-4453-8c4d-0082fbc13bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7hy3byoe2k", "content": "", "creation_timestamp": "2026-04-11T09:00:45.256487Z"}, {"uuid": "8becbead-67a1-4376-9670-d5c39e0a2ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6069", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7lcg4qli2k", "content": "", "creation_timestamp": "2026-04-11T10:00:13.826225Z"}, {"uuid": "75280f90-cb1f-4316-886e-7f43c4ec9f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbouh7sre2h", "content": "", "creation_timestamp": "2026-04-12T06:09:19.631370Z"}, {"uuid": "4d747d06-1ca3-49b4-9de0-faebd625d90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6080", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjodzuvmyi2f", "content": "", "creation_timestamp": "2026-04-17T07:00:06.464945Z"}, {"uuid": "7f110581-1a61-463f-bbfe-bbf86f03b704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6080", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjpdyoz3s726", "content": "", "creation_timestamp": "2026-04-17T16:32:06.427001Z"}, {"uuid": "4b65f5e6-758b-4444-90ac-74ae9531dd53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjswnnbdig2k", "content": "", "creation_timestamp": "2026-04-19T02:43:55.760309Z"}, {"uuid": "7bd8cbfe-38b7-4ede-aa9b-6d0e7d64b5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6058", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjxw4b2jk52h", "content": "", "creation_timestamp": "2026-04-21T02:17:31.177347Z"}, {"uuid": "1844457f-d602-47ea-822d-f7bfcee48238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6042", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80269", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6042-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jensnesten\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-14 14:51:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of concept of Algorithmic Complexity DoS in libc musl 0.8.0-1.2.6\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-14T15:00:05.000000Z"}, {"uuid": "10dd9082-0f12-467c-981f-78a25eeebbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6023", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk34cmwggp2k", "content": "", "creation_timestamp": "2026-04-22T08:46:26.688860Z"}, {"uuid": "4b4a105c-33e8-4c05-9ac0-aa1eb3914760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6022", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk357wx4tj2i", "content": "", "creation_timestamp": "2026-04-22T09:02:50.373820Z"}, {"uuid": "b2cc2708-fb29-4c7f-87ad-ff9370161257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6022", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mk3bnceiql2e", "content": "", "creation_timestamp": "2026-04-22T10:21:53.541813Z"}, {"uuid": "cadbd08b-2793-4088-8c22-d3aa41681347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6023", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mk3bpzjsih2k", "content": "", "creation_timestamp": "2026-04-22T10:23:24.987806Z"}, {"uuid": "593264a7-cb22-476e-8e6b-85d2e120c254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6023", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4fesd6vr2k", "content": "", "creation_timestamp": "2026-04-22T21:01:23.738996Z"}, {"uuid": "3d019e32-9c23-4b86-ad75-efbc71effd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6022", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4feza65t2z", "content": "", "creation_timestamp": "2026-04-22T21:01:30.741913Z"}, {"uuid": "b6f3f497-165f-4915-bd5d-c36d2cb51254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6019", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk67gae64g2b", "content": "", "creation_timestamp": "2026-04-23T14:20:08.221982Z"}, {"uuid": "22093a4d-0396-4ba6-806e-bfbe52980c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6074", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-06", "content": "", "creation_timestamp": "2026-04-23T05:00:00.000000Z"}, {"uuid": "b04c574f-031a-421f-83cc-c2668aad70c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6026", "type": "seen", "source": "Telegram/MRfn40d2BNWL_uj4zjxAKfWjhqe_ew5yyWaHuqnEy-nXqe4", "content": "", "creation_timestamp": "2026-04-10T09:17:31.000000Z"}, {"uuid": "fc14145e-b519-497d-bc95-c5c3a0710ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6042", "type": "published-proof-of-concept", "source": "Telegram/eprE6-d3GXEC8ugkZGIM7SguRfIlh9GwVUXl47JoaC36bCo", "content": "", "creation_timestamp": "2026-04-14T21:00:04.000000Z"}, {"uuid": "9c6a5bc3-7278-4069-898a-40edfa98fd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6037", "type": "published-proof-of-concept", "source": "Telegram/khgEEPiWkGL9WACMPfvZ8dGv1ooPTaC6hfehoeURB75s6dQ", "content": "", "creation_timestamp": "2026-04-10T11:16:18.000000Z"}, {"uuid": "0014997c-2ef9-4f70-8518-17d56f4a52f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6036", "type": "published-proof-of-concept", "source": "Telegram/khgEEPiWkGL9WACMPfvZ8dGv1ooPTaC6hfehoeURB75s6dQ", "content": "", "creation_timestamp": "2026-04-10T11:16:18.000000Z"}, {"uuid": "3a655d64-9192-4fdc-9bac-a2dccdff2adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6038", "type": "published-proof-of-concept", "source": "Telegram/khgEEPiWkGL9WACMPfvZ8dGv1ooPTaC6hfehoeURB75s6dQ", "content": "", "creation_timestamp": "2026-04-10T11:16:18.000000Z"}, {"uuid": "a2edb95f-9f84-4e34-a894-fa3697b7fdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6014", "type": "seen", "source": "Telegram/X_hYu_4mFc-5em62dyPX2z20yH7qSW9mAMzHMEdwTQTYW2M", "content": "", "creation_timestamp": "2026-04-10T07:17:18.000000Z"}, {"uuid": "15f8bf59-bb0a-46fd-a84d-c83b7f30fc11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6015", "type": "seen", "source": "Telegram/X_hYu_4mFc-5em62dyPX2z20yH7qSW9mAMzHMEdwTQTYW2M", "content": "", "creation_timestamp": "2026-04-10T07:17:18.000000Z"}, {"uuid": "aa3ed712-24d0-45e3-91b9-100ca7040cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6012", "type": "seen", "source": "Telegram/X_hYu_4mFc-5em62dyPX2z20yH7qSW9mAMzHMEdwTQTYW2M", "content": "", "creation_timestamp": "2026-04-10T07:17:18.000000Z"}, {"uuid": "0c055363-807e-450c-82fc-d823aa34ee6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6013", "type": "seen", "source": "Telegram/X_hYu_4mFc-5em62dyPX2z20yH7qSW9mAMzHMEdwTQTYW2M", "content": "", "creation_timestamp": "2026-04-10T07:17:18.000000Z"}, {"uuid": "89325b2e-d18c-46b8-9ca1-4fc4577c8138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6024", "type": "seen", "source": "Telegram/Yru_iPCCDRz2vyflfBMlP81_8JP0JqeQaxKae5Lp6AxYseU", "content": "", "creation_timestamp": "2026-04-10T07:17:31.000000Z"}, {"uuid": "cb13369c-f197-41aa-a062-126b737fe0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6025", "type": "seen", "source": "Telegram/Yru_iPCCDRz2vyflfBMlP81_8JP0JqeQaxKae5Lp6AxYseU", "content": "", "creation_timestamp": "2026-04-10T07:17:31.000000Z"}, {"uuid": "3f18eff5-96c1-4e39-9767-f4b091805545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6016", "type": "seen", "source": "Telegram/Yru_iPCCDRz2vyflfBMlP81_8JP0JqeQaxKae5Lp6AxYseU", "content": "", "creation_timestamp": "2026-04-10T07:17:31.000000Z"}, {"uuid": "73e6d9f0-e341-4d1d-80da-6c1fdd9d406b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6004", "type": "published-proof-of-concept", "source": "Telegram/1WdkdhXUJmGV7eP_rqgJjIpgxUFBJfkFq-ncP6HWfcjVt70", "content": "", "creation_timestamp": "2026-04-10T05:15:56.000000Z"}, {"uuid": "b3517f75-0f4d-4acf-9635-3482717fc677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6028", "type": "seen", "source": "Telegram/MRfn40d2BNWL_uj4zjxAKfWjhqe_ew5yyWaHuqnEy-nXqe4", "content": "", "creation_timestamp": "2026-04-10T09:17:31.000000Z"}, {"uuid": "97a84d0c-7367-4f2b-ac13-59e921eb55c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6027", "type": "seen", "source": "Telegram/MRfn40d2BNWL_uj4zjxAKfWjhqe_ew5yyWaHuqnEy-nXqe4", "content": "", "creation_timestamp": "2026-04-10T09:17:31.000000Z"}, {"uuid": "14653c55-dc36-4f1e-982d-4832881a49ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6057", "type": "published-proof-of-concept", "source": "Telegram/azLV8BVN7oG3TROgln-jCTMw5r1pt6lKfNlckhfBfrofK-k", "content": "", "creation_timestamp": "2026-04-10T23:27:06.000000Z"}, {"uuid": "d8175894-5b87-450b-9bcb-e6c928aed07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6057", "type": "seen", "source": "Telegram/VmPzW9vK7p7Zve81sAsPaRrR_R2EIHLwag0ULU7f22817b0", "content": "", "creation_timestamp": "2026-04-10T23:26:51.000000Z"}, {"uuid": "7d3fb841-794c-4353-96ed-df5f3d74b621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6031", "type": "published-proof-of-concept", "source": "Telegram/6sW88BjwOE3AHA0v9w1zrWgG5EAJrhgxrYoPay5W7gN4tNI", "content": "", "creation_timestamp": "2026-04-10T09:17:39.000000Z"}, {"uuid": "2c18099d-6dc6-4517-876d-22bae6c392f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6029", "type": "published-proof-of-concept", "source": "Telegram/6sW88BjwOE3AHA0v9w1zrWgG5EAJrhgxrYoPay5W7gN4tNI", "content": "", "creation_timestamp": "2026-04-10T09:17:39.000000Z"}, {"uuid": "6c8395d8-1ad6-4776-b063-9829507977d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6067", "type": "published-proof-of-concept", "source": "Telegram/VrQ9Ov0z_xRZi9WqN3kvWB9KwPzyBbBtKpr0H2dFm10X_hQ", "content": "", "creation_timestamp": "2026-04-10T17:21:41.000000Z"}, {"uuid": "99543344-4593-4acf-8d6b-2e7c7b0aa94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6069", "type": "published-proof-of-concept", "source": "Telegram/VrQ9Ov0z_xRZi9WqN3kvWB9KwPzyBbBtKpr0H2dFm10X_hQ", "content": "", "creation_timestamp": "2026-04-10T17:21:41.000000Z"}, {"uuid": "984152ac-ad0d-4e38-b030-75e19012fa7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6048", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mkj6qihw6v26", "content": "", "creation_timestamp": "2026-04-27T23:08:11.378078Z"}, {"uuid": "88791896-ad10-41f5-a5b4-2a2f0fc37b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6041", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkdegkpr5b2x", "content": "", "creation_timestamp": "2026-04-25T15:33:06.500628Z"}, {"uuid": "afb643be-627b-4b97-b7fe-6a4c5668b8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6042", "type": "published-proof-of-concept", "source": "Telegram/5JX8_NEkTEex_dLOu3-6TrYSFGXOeDNE6nMhUeMDVRfW1qA", "content": "", "creation_timestamp": "2026-04-14T19:00:09.000000Z"}, {"uuid": "2e763c17-b8e8-45bc-a6f7-3e26a1f1ccbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6043", "type": "seen", "source": "Telegram/KrzVJ42WuUX7-D0jBm3MfCjdcTS1so0TIPsTVJKHzz8k1oc", "content": "", "creation_timestamp": "2026-04-24T13:15:12.000000Z"}, {"uuid": "d9d728c7-b872-40c8-9d42-32f91bdd6536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6066", "type": "seen", "source": "Telegram/-Vy2XQ2z07jYi2wcd9u4WdI0Jz8Ty9lZ08uUeDLxVO8eZvU", "content": "", "creation_timestamp": "2026-04-20T17:22:08.000000Z"}, {"uuid": "bf4c4c1c-fbe1-4b50-bd35-cef8f8827e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6023", "type": "seen", "source": "Telegram/4TzioWDgsV_QC8RNZfmkg0C5nwkVRV-bYkkXJoHA6GlOJ-c", "content": "", "creation_timestamp": "2026-04-22T09:15:31.000000Z"}, {"uuid": "0cd7b46d-c586-4cbb-9d5a-86a590279d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6022", "type": "seen", "source": "Telegram/4TzioWDgsV_QC8RNZfmkg0C5nwkVRV-bYkkXJoHA6GlOJ-c", "content": "", "creation_timestamp": "2026-04-22T09:15:31.000000Z"}, {"uuid": "a6cac798-2c48-4c2e-bd9a-9790de080aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6074", "type": "published-proof-of-concept", "source": "Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9U_sDC-frBku-7BiY", "content": "", "creation_timestamp": "2026-04-23T21:26:07.000000Z"}, {"uuid": "fa5414a8-5a1d-4a4f-8fb9-026ad1e7a429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6059", "type": "seen", "source": "https://jvn.jp/en/jp/JVN69049186", "content": "", "creation_timestamp": "2026-05-24T22:00:00.000000Z"}, {"uuid": "65711cb9-b1f1-4624-a069-b9f5fe995424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60060", "type": "seen", "source": "https://jvn.jp/en/jp/JVN65294474", "content": "", "creation_timestamp": "2026-07-16T04:45:05.405465Z"}, {"uuid": "397b06c6-0bce-4cce-85e9-354b46d0d186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60157", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrumf6jdvv23", "content": "\ud83d\udccc CVE-2026-60157 - Vulnerability in Oracle GoldenGate (component: Service Manager).  Supported versions that are affected are 19.1.0.0.0-19.29.0.0, 21.3-21.21 and  23.4-... https://www.cyberhub.blog/cves/CVE-2026-60157", "creation_timestamp": "2026-07-30T14:07:07.056605Z"}, {"uuid": "e0c63348-4270-4b85-bc4c-0631b77e04c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60549", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrtzx34j3o2c", "content": "\ud83d\udccc CVE-2026-60549 - Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-60549", "creation_timestamp": "2026-07-30T08:37:06.567863Z"}, {"uuid": "079ecf2d-b7f8-4632-880c-72aeac160e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60503", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mru3mqhmmm2s", "content": "\ud83d\udccc CVE-2026-60503 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60503", "creation_timestamp": "2026-07-30T09:07:07.212137Z"}, {"uuid": "57979bf5-658c-4fa6-9fe2-f131b2026c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60465", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mruannl44p2s", "content": "\ud83d\udccc CVE-2026-60465 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60465", "creation_timestamp": "2026-07-30T10:37:06.864806Z"}, {"uuid": "ba7aeb00-2923-4d1a-8fd0-802bcc6790dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60424", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrt5h56kas22", "content": "\ud83d\udccc CVE-2026-60424 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60424", "creation_timestamp": "2026-07-30T00:07:07.619637Z"}, {"uuid": "06cd8afd-bcf8-49ae-8ca1-d69ac287cfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60423", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrufoleynw23", "content": "\ud83d\udccc CVE-2026-60423 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60423", "creation_timestamp": "2026-07-30T12:07:06.524507Z"}, {"uuid": "1fc2da7e-41e1-4e0f-b79a-2f5356a0ce0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60472", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mru5cefh4i23", "content": "\ud83d\udccc CVE-2026-60472 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60472", "creation_timestamp": "2026-07-30T09:37:06.410982Z"}, {"uuid": "b2327604-c7ac-4e5b-b2da-da18f1374066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60430", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrucdctw7l2l", "content": "\ud83d\udccc CVE-2026-60430 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60430", "creation_timestamp": "2026-07-30T11:07:07.597034Z"}, {"uuid": "02cbf586-0f0d-402c-b29a-ff7fb3a65bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60207", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mruizuioac2s", "content": "\ud83d\udccc CVE-2026-60207 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60207", "creation_timestamp": "2026-07-30T13:07:06.387016Z"}, {"uuid": "91789089-6e38-4654-b779-0f0aec1275ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/GithubRedTeam/95817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 08:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T10:00:02.247468Z"}, {"uuid": "f4d29bfb-66dc-49c5-b897-d5a5956ef288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/cyberwarehouse/1175", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-30T10:00:02.386115Z"}, {"uuid": "b1bfd8af-894f-4927-8b83-6b675ecfd7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "content": "Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The", "creation_timestamp": "2026-07-30T01:00:43.682929Z"}, {"uuid": "c7a2c4de-fe02-42b8-9d89-a875516110b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60464", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mru6xzf6zj2c", "content": "\ud83d\udccc CVE-2026-60464 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60464", "creation_timestamp": "2026-07-30T10:07:06.691704Z"}, {"uuid": "583b7532-889d-4068-afac-841d9cab63d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60863", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrtci2nhxq22", "content": "\ud83d\udccc CVE-2026-60863 - Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60863", "creation_timestamp": "2026-07-30T01:37:06.845642Z"}, {"uuid": "0481d086-f9d1-492a-8dd5-cae51e72453c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60313", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mruhea4rnp2u", "content": "\ud83d\udccc CVE-2026-60313 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60313", "creation_timestamp": "2026-07-30T12:37:06.454988Z"}, {"uuid": "0565b168-20bf-49ec-ad23-8dae3659e37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60074", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/boir7bb2myiuf", "content": "CVE-2026-60074: Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check", "creation_timestamp": "2026-07-30T14:55:09.958042Z"}, {"uuid": "b0d5adb4-3580-46b1-8b6c-a417e5c42b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60075", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/dtanl2by7nbzt", "content": "CVE-2026-60075: Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time", "creation_timestamp": "2026-07-30T15:01:10.026586Z"}, {"uuid": "e5027499-15f7-4eb1-b58f-5a120c05f951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60419", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrudywyihi2y", "content": "\ud83d\udccc CVE-2026-60419 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60419", "creation_timestamp": "2026-07-30T11:37:06.744741Z"}, {"uuid": "438d7814-8e8d-4a9a-a090-4d1fc3e51560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "content": "", "creation_timestamp": "2026-07-30T14:00:04.601753Z"}, {"uuid": "e717400e-60ae-4e02-a790-52886495ab43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60692", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrtwlrkt5k2i", "content": "\ud83d\udccc CVE-2026-60692 - Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that ... https://www.cyberhub.blog/cves/CVE-2026-60692", "creation_timestamp": "2026-07-30T07:37:06.142025Z"}, {"uuid": "0ca66911-2162-4826-8add-4dbeaffba489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60011", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117035073938120736", "content": "A lot of offensive activities were identified targeting Sharp and Toshiba Tec MFPs (CVE-2026-60011) https://vuldb.com/vuln/385551/cti", "creation_timestamp": "2026-08-04T03:18:29.523899Z"}, {"uuid": "4efbaea0-944c-43d2-9cf5-9b4adc3d7d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60417", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzbliq26c2n", "content": "\ud83d\udccc CVE-2026-60417 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60417", "creation_timestamp": "2026-08-01T10:37:06.598905Z"}, {"uuid": "38fa3a21-c0e9-43ac-81ee-fda989fae890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "published-proof-of-concept", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-31T00:00:47.107815Z"}, {"uuid": "bc7557e8-b09b-4df1-8f41-9a2bbef47048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fqmspzdd3rxxd", "content": "CVE-2026-60007 - Eclipse Milo Username Token Padding Oracle Vulnerability\nCVE ID : CVE-2026-60007\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for...", "creation_timestamp": "2026-08-04T14:06:28.638587Z"}, {"uuid": "9481cc03-144b-4a01-b62e-56b87f39102b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60323", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzdb5dbxc22", "content": "\ud83d\udccc CVE-2026-60323 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60323", "creation_timestamp": "2026-08-01T11:07:06.742101Z"}, {"uuid": "77ae48ce-5ce5-41a4-b815-3a4dbb7f8b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60312", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzewrhegk2n", "content": "\ud83d\udccc CVE-2026-60312 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60312", "creation_timestamp": "2026-08-01T11:37:07.609912Z"}, {"uuid": "5f947b9f-bc6e-4a03-8555-f674b2fc1032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60273", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzgmgwfua25", "content": "\ud83d\udccc CVE-2026-60273 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60273", "creation_timestamp": "2026-08-01T12:07:07.640788Z"}, {"uuid": "4b7949c9-14d8-4fe9-b135-236213ea07a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60201", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzic3jfu225", "content": "\ud83d\udccc CVE-2026-60201 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60201", "creation_timestamp": "2026-08-01T12:37:07.373938Z"}, {"uuid": "0199e7c0-1f94-4f16-a578-b8db256a49fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60790", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzlnealcx2r", "content": "\ud83d\udccc CVE-2026-60790 - Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60790", "creation_timestamp": "2026-08-01T13:37:06.709020Z"}, {"uuid": "2f7a3e1c-f9f4-4960-8c62-f133b75fd864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60113", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrzmlot6l42s", "content": "CVE-2026-60113\nThe AMMOS Instrument Toolkit's Deep Space Network Interface has a security issue that allows unauthorized access to sensitive features. This could allow attackers to control or disrupt Deep Space Network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T13:54:03.998645Z"}, {"uuid": "c49d78bf-ebdd-41d0-9a4c-97cd24cb7135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60469", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mruzsd7sqm22", "content": "\ud83d\udccc CVE-2026-60469 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60469", "creation_timestamp": "2026-07-30T18:07:06.706522Z"}, {"uuid": "0985fdaf-a452-458b-b34b-db3066be6adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60470", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrv3hybwhh2m", "content": "\ud83d\udccc CVE-2026-60470 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60470", "creation_timestamp": "2026-07-30T18:37:07.861925Z"}, {"uuid": "fce0bca2-a9e3-4980-b6d8-92dbb8fa26c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60325", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzoynnpqe22", "content": "\ud83d\udccc CVE-2026-60325 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60325", "creation_timestamp": "2026-08-01T14:37:06.706090Z"}, {"uuid": "94ab4b98-9e32-49c0-8288-23f6d984fc42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60872", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrv3zl6k6v2g", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-60872](https://www.oracle.com/security-alerts/cpujul2026.html)\nVulnerability in the Ora...\nhttps://www.oracle.com/security-alerts/cpujul2026.html #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-30T18:46:58.072474Z"}, {"uuid": "ab5bcced-4e44-46b2-bcf2-3637d4d1b9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "content": "", "creation_timestamp": "2026-07-30T19:00:04.297923Z"}, {"uuid": "2f87a007-2568-4633-ad31-e741a259793f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60437", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrv55m2gvs23", "content": "\ud83d\udccc CVE-2026-60437 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60437", "creation_timestamp": "2026-07-30T19:07:07.004025Z"}, {"uuid": "3e5bcbfa-d5f1-44e4-aebf-38b245037d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60011", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3fpysahdivspe", "content": "CVE-2026-60011 - Sharp and Toshiba Tec MFPs Unauthorized Image Data Access Vulnerability\nCVE ID : CVE-2026-60011\n \n Published : Aug. 3, 2026, 9:17 a.m. | 39\u00a0minutes ago\n \n Description : Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to ...", "creation_timestamp": "2026-08-03T10:04:55.743848Z"}, {"uuid": "8965540f-d4ca-47ab-a923-47fc2e86a3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60427", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrv6tancg32m", "content": "\ud83d\udccc CVE-2026-60427 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60427", "creation_timestamp": "2026-07-30T19:37:06.278738Z"}, {"uuid": "7e5db307-1d1d-4faa-b80b-b7a9742cc5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.477047Z"}, {"uuid": "b4d5a74f-9776-4409-8aae-b560dad3cf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.703972Z"}, {"uuid": "b0e9a691-a4de-4cbb-a594-55c105ef0207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60533", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzsdwrled2r", "content": "\ud83d\udccc CVE-2026-60533 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector).  Supported versions th... https://www.cyberhub.blog/cves/CVE-2026-60533", "creation_timestamp": "2026-08-01T15:37:07.103425Z"}, {"uuid": "af95a1e9-807f-43b4-b0a0-a293e599c1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60559", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvdu7ce6c2v", "content": "\ud83d\udccc CVE-2026-60559 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60559", "creation_timestamp": "2026-07-30T21:07:07.128713Z"}, {"uuid": "cd45f9ac-5d11-425a-91b2-24a861402614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60536", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvfjtcx4t22", "content": "\ud83d\udccc CVE-2026-60536 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).  Supported versions t... https://www.cyberhub.blog/cves/CVE-2026-60536", "creation_timestamp": "2026-07-30T21:37:06.812288Z"}, {"uuid": "c58d47ed-8899-4130-ac72-b17a2dbb7086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "content": "", "creation_timestamp": "2026-08-01T16:00:04.116079Z"}, {"uuid": "08607ddc-085b-458d-aa83-54d44ff516ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60359", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvh7if2v22s", "content": "\ud83d\udccc CVE-2026-60359 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60359", "creation_timestamp": "2026-07-30T22:07:07.077495Z"}, {"uuid": "823ac9a2-302b-4bcc-bb24-cb3d1eb36a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 07:59:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T10:31:25.365110Z"}, {"uuid": "8c80ad28-73cb-4fc6-9428-365240aa0700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60327", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvkkrcihf2s", "content": "\ud83d\udccc CVE-2026-60327 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60327", "creation_timestamp": "2026-07-30T23:07:07.119378Z"}, {"uuid": "e5e48f99-1d49-46f2-8c07-64dd9292e245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60293", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvmafr6ib2y", "content": "\ud83d\udccc CVE-2026-60293 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services).  Supported versions that are affected... https://www.cyberhub.blog/cves/CVE-2026-60293", "creation_timestamp": "2026-07-30T23:37:06.664870Z"}, {"uuid": "d2ef21a5-18da-4b54-8869-bd3b972e0aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "content": "", "creation_timestamp": "2026-07-31T00:00:29.746750Z"}, {"uuid": "3a415038-f879-4a43-8bd3-5a21044aea5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1175", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-31T00:00:34.744565Z"}, {"uuid": "c4c8bdfa-672f-4ed2-beed-42b666f9c94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 08:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:34.885201Z"}, {"uuid": "573ecc30-8d2b-4d9e-a14e-cdaab5178ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/FFZlII9he5d1Fuscjf7MrqE5pZIDGxpq32yulECS4VZGDw", "content": "", "creation_timestamp": "2026-07-31T00:00:45.031456Z"}, {"uuid": "c79bc1e1-b055-422c-bd3c-ca0d2cef108f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60235", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvnw2rm5s22", "content": "\ud83d\udccc CVE-2026-60235 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).   The supported version that is affected is 15.1.1.0.0. E... https://www.cyberhub.blog/cves/CVE-2026-60235", "creation_timestamp": "2026-07-31T00:07:07.703624Z"}, {"uuid": "445d5d3e-daef-478a-8822-b16c64e692c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "content": "", "creation_timestamp": "2026-07-31T01:00:09.816493Z"}, {"uuid": "13cdfd04-8b9c-4c11-ad5a-351080a4f712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mubu2orz3x2g", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-73570: 20 interactions\nCVE-2026-60004: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-53362: 3 interactions\nCVE-2026-47876: 2 interactions\nCVE-2026-55843: 2 interactions\n", "creation_timestamp": "2026-08-30T07:19:26.406158Z"}, {"uuid": "dddac76d-6fd1-4823-894c-a0620f363c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/zg4wR79y8Xs5TR-sEF4ufViDE8nGerP6bqE6yl_hOH2_qzw", "content": "", "creation_timestamp": "2026-09-02T01:00:14.635740Z"}, {"uuid": "1c714833-7b9b-4390-910b-482c38fb5381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60452", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvrbdouqw22", "content": "\ud83d\udccc CVE-2026-60452 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60452", "creation_timestamp": "2026-07-31T01:07:06.829293Z"}, {"uuid": "0f8b9864-6781-4349-89b8-2fb9243a645d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60426", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrvswy4non2l", "content": "\ud83d\udccc CVE-2026-60426 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60426", "creation_timestamp": "2026-07-31T01:37:06.399389Z"}, {"uuid": "60afe3f9-b543-47c4-ab61-c5121b0fff8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-07-31T03:00:03.304043Z"}, {"uuid": "0c58c43c-a468-4030-8605-5de3bd05a3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60011", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU98759887", "content": "", "creation_timestamp": "2026-07-31T04:45:38.159175Z"}, {"uuid": "de30d584-68e7-4202-973b-673218e3c34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-07-31T08:00:03.795818Z"}, {"uuid": "fe4dbcf2-736d-4018-935b-b1a44537e6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60545", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms6j7vssli2v", "content": "\ud83d\udccc CVE-2026-60545 - Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-60545", "creation_timestamp": "2026-08-03T12:38:07.672464Z"}, {"uuid": "7d594005-cdf6-4956-a944-06ab04ec099f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60420", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrwkfycxgc2l", "content": "\ud83d\udccc CVE-2026-60420 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60420", "creation_timestamp": "2026-07-31T08:37:06.075368Z"}, {"uuid": "c75ea1df-97ec-43be-85c6-b5f2491b1982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/96583", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a johnlodan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 10:07:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T12:00:07.925840Z"}, {"uuid": "0aa5d595-8f79-4a52-a673-491c2d4b33ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60330", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrwm3n6iwl22", "content": "\ud83d\udccc CVE-2026-60330 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60330", "creation_timestamp": "2026-07-31T09:07:06.507804Z"}, {"uuid": "d4a5e6e7-6f5a-4c86-b3ce-443996a4d35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_3dDvw2gBKTVqJg_qD4Cxi_GWBZe501hrVnApmxGIoGryvk", "content": "", "creation_timestamp": "2026-08-03T13:23:49.445336Z"}, {"uuid": "04d49d60-e105-435c-bc90-d7da51999eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96433", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:49:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone \u2192 post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T14:00:04.777086Z"}, {"uuid": "9e50920b-994a-43de-9d08-0711d060e07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkqohepc732v", "content": "\ud83d\udccc CVE-2026-6016 - A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component P... https://www.cyberhub.blog/cves/CVE-2026-6016", "creation_timestamp": "2026-04-30T22:37:07.815591Z"}, {"uuid": "c04b5bc0-64cb-40b7-b382-10a82c5a935f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6013", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkqq4yvniq2y", "content": "\ud83d\udccc CVE-2026-6013 - A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the comp... https://www.cyberhub.blog/cves/CVE-2026-6013", "creation_timestamp": "2026-04-30T23:07:07.346484Z"}, {"uuid": "c1bf0cf3-50bf-44a3-9e00-6013f74363b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-03T15:00:03.529283Z"}, {"uuid": "b4e69f2f-af8a-46a1-adea-3f201bede997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2pyphieb2p", "content": "CVE-2026-34882 - Apache XSS\nCVE ID : CVE-2026-34882\n \n Published : May 4, 2026, 8:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-6074. Reason: This record is a reservation duplicate of CVE-2026-6074. Notes: A...", "creation_timestamp": "2026-05-04T22:31:20.717487Z"}, {"uuid": "3717c3d2-91c7-40f4-8813-d9f152448660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.553610Z"}, {"uuid": "f8735a6a-2bc0-48fc-9fed-f6a8ee981bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "content": "", "creation_timestamp": "2026-08-02T00:00:41.265633Z"}, {"uuid": "491d40d1-950c-47f6-9942-974200668865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6023", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml523eyl772p", "content": "\ud83d\udccc CVE-2026-6023 - In Progress\u00ae Telerik\u00ae UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restor... https://www.cyberhub.blog/cves/CVE-2026-6023", "creation_timestamp": "2026-05-05T20:37:07.932681Z"}, {"uuid": "d7c864e2-35dd-4824-8a1d-e1d04d56b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-05T00:00:26.161423Z"}, {"uuid": "85bd6c02-0f54-49ea-91fe-ad80ff3d2b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.390322Z"}, {"uuid": "64549499-e55a-4e29-b2d7-cf7e6bba2bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60383", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrwzisb4t22s", "content": "\ud83d\udccc CVE-2026-60383 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60383", "creation_timestamp": "2026-07-31T13:07:06.609564Z"}, {"uuid": "7dc3ed2e-b106-4cd1-9314-fe315099d74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-03T16:00:05.178685Z"}, {"uuid": "414ffd6c-a328-4b01-837c-26209939538c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6022", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w23doom2e", "content": "\ud83d\udd17 CVE : CVE-2026-6022, CVE-2026-6023", "creation_timestamp": "2026-05-06T14:30:07.841709Z"}, {"uuid": "82b0d78a-db3d-443c-867b-c9d8ce830bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-03T16:00:05.685180Z"}, {"uuid": "9a947169-7f57-4814-a6e4-af79ded48ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6023", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w23doom2e", "content": "\ud83d\udd17 CVE : CVE-2026-6022, CVE-2026-6023", "creation_timestamp": "2026-05-06T14:30:07.983603Z"}, {"uuid": "45e6d8ce-5794-44c4-993b-536eab7d29b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60163", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrx4u3lqyh2m", "content": "\ud83d\udccc CVE-2026-60163 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).  Supported versions that are a... https://www.cyberhub.blog/cves/CVE-2026-60163", "creation_timestamp": "2026-07-31T14:07:07.674817Z"}, {"uuid": "bb7a115a-ff87-463c-b3c2-12ef551c90a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60788", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxdkols442s", "content": "\ud83d\udccc CVE-2026-60788 - Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60788", "creation_timestamp": "2026-07-31T16:07:07.295110Z"}, {"uuid": "4047d849-c92d-449f-ac5f-3dc043e6a473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbjwvxqko2c", "content": "CVE-2026-6002 - HTML Injection in DivvyDrive Information Technologies' DivvyDrive\nCVE ID : CVE-2026-6002\n \n Published : May 7, 2026, 1:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability i...", "creation_timestamp": "2026-05-07T15:31:36.086656Z"}, {"uuid": "484b2c71-c018-4014-bf85-f9ee43b98cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbvm7lg442f", "content": "\ud83d\udfe0 CVE-2026-6002 - High (8.8)\n\nImproper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Di...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T19:00:22.344803Z"}, {"uuid": "a00b2038-cd1b-4e4d-9cbc-b1e638c1f2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-05T00:00:05.651986Z"}, {"uuid": "673177a1-a149-49c4-b66f-328240871e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-29T23:00:08.421425Z"}, {"uuid": "1d47eabb-019d-4399-a467-b8e78212f0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60428", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxlwvldxt2e", "content": "\ud83d\udccc CVE-2026-60428 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60428", "creation_timestamp": "2026-07-31T18:37:07.364859Z"}, {"uuid": "98f7bf28-dbaa-4637-84aa-ae0e14590f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60421", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxnmkbjjr25", "content": "\ud83d\udccc CVE-2026-60421 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60421", "creation_timestamp": "2026-07-31T19:07:07.155342Z"}, {"uuid": "2a33a043-275c-4015-8339-c6bac53ee2d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60315", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxqxt63r52r", "content": "\ud83d\udccc CVE-2026-60315 - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).  Supported versions that are affected are MySQ... https://www.cyberhub.blog/cves/CVE-2026-60315", "creation_timestamp": "2026-07-31T20:07:06.959965Z"}, {"uuid": "372feb40-e0b2-4dbf-9816-cc2c99d2a8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60362", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms7e27vb6k22", "content": "\ud83d\udccc CVE-2026-60362 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60362", "creation_timestamp": "2026-08-03T20:37:06.511090Z"}, {"uuid": "21bab73b-b8dd-4402-a7cf-36f1eac5cd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-30T00:00:11.919894Z"}, {"uuid": "625292d1-7bed-4652-ac7c-e63ae09beced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnlwhck7j26", "content": "\ud83d\udfe0 CVE-2026-6001 - High (8.8)\n\nAuthorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPS\u0130...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T10:39:05.286982Z"}, {"uuid": "eac2aebb-9a80-47e7-81e0-b783aef5e252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlnoepwkg62i", "content": "CVE-2026-6001 - IDOR in Abis Technology's BAPS\u0130S\nCVE ID : CVE-2026-6001\n \n Published : May 12, 2026, 10:16 a.m. | 36\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPS\u0130S allows Exploitation of Trusted Id...", "creation_timestamp": "2026-05-12T11:22:51.221224Z"}, {"uuid": "cbfab159-9b3b-4b6c-906f-502e15eee236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-08-01T00:00:36.568523Z"}, {"uuid": "2a6f8e63-0170-42c0-9643-4086fbed791a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-08-01T00:00:43.051167Z"}, {"uuid": "f3ce710d-3637-4af4-a090-01f288eec60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-04T00:00:05.535211Z"}, {"uuid": "14168da8-4f69-4851-9ae5-b3a34e482bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6073", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlshrdvr4t2r", "content": "\ud83d\udfe0 CVE-2026-6073 - High (8.7)\n\nGitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6073/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-14T09:07:57.934827Z"}, {"uuid": "d32c56ce-073c-4d2b-b828-96ec030a6141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/CyberDispatch/2299", "content": "wp2shell now has two CVEs, and a working proof-of-concept is public.\n\n> CVE-2026-63030 breaks REST batch routing\n> CVE-2026-60137 injects SQL\n\nChained, they give an anonymous attacker code execution on affected WordPress sites.", "creation_timestamp": "2026-08-30T00:00:37.055214Z"}, {"uuid": "8c8f3645-2ebc-407a-93b9-cc20725e7c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6060", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.237345Z"}, {"uuid": "e73a40c6-3273-4248-9c19-b50211cf4255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60857", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrydfvhsbw2e", "content": "\ud83d\udccc CVE-2026-60857 - Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-60857", "creation_timestamp": "2026-08-01T01:37:06.348384Z"}, {"uuid": "f7357ad2-3c6e-401a-b052-0f64186708fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6073", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-14", "content": "", "creation_timestamp": "2026-05-14T07:52:53.000000Z"}, {"uuid": "3c91f17d-385f-4e21-b9f7-9a11f8b43f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6063", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "5440a071-eb0c-475f-b5a3-b47324f6e322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6073", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "d79ed71d-b209-41dc-bdee-dfe48685c4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60416", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms42gn7ns622", "content": "\ud83d\udccc CVE-2026-60416 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60416", "creation_timestamp": "2026-08-02T13:07:06.387279Z"}, {"uuid": "27f55b3c-862d-4bd5-9365-3fd0827b4a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96433", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:49:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone \u2192 post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:37.633972Z"}, {"uuid": "4b62bc93-080d-4ca3-95c3-c59c630d784a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6060", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:44.145338Z"}, {"uuid": "95bb8eae-00be-4cb6-9047-46d84b20e2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-04T00:00:33.432808Z"}, {"uuid": "44ad98ab-bc43-41eb-bf6f-8c0b3e2969a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-04T00:00:33.926272Z"}, {"uuid": "0e3108e8-8406-4f88-9c8d-89509fe6171e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_3dDvw2gBKTVqJg_qD4Cxi_GWBZe501hrVnApmxGIoGryvk", "content": "", "creation_timestamp": "2026-08-04T00:00:41.025955Z"}, {"uuid": "a735758e-6caf-4afd-a872-4540e8dd89d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 07:59:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:43.455635Z"}, {"uuid": "57131bb3-9c09-4721-8ab2-1a9b1cd7cc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mma7dep22x2r", "content": "CVE-2026-6009 - Jaspersoft Library Deserialisation Vulnerability\nCVE ID : CVE-2026-6009\n \n Published : May 19, 2026, 5:23 p.m. | 51\u00a0minutes ago\n \n Description : Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to\u00a0Remote Code Execution (RCE), potentially a...", "creation_timestamp": "2026-05-19T20:14:14.718632Z"}, {"uuid": "c487b499-72c5-4eea-b984-dfb16490cb72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6095", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmav3bxamm2h", "content": "CVE-2026-6095 - Orejime - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-032\nCVE ID : CVE-2026-6095\n \n Published : May 19, 2026, 11:16 p.m. | 2\u00a0hours, 58\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripti...", "creation_timestamp": "2026-05-20T02:43:32.337590Z"}, {"uuid": "4c687e44-1308-4737-bc16-4506a96147d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60867", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mryxjnhwm72d", "content": "\ud83d\udccc CVE-2026-60867 - Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60867", "creation_timestamp": "2026-08-01T07:37:06.999818Z"}, {"uuid": "bac899c0-df33-4a4a-8484-a8373f6d1660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6068", "type": "seen", "source": "https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3mme5ekfzk7a2", "content": "Another one from the Lulz Department: how about an RCE in your assembler?\n\n\"CVE-2026-6068 \u2013 From Heap UAF to Persistent RCE in NASM\":\n\nhttps://sekai.team/blog/nasm-cve-disclosure/cve-2026-6068", "creation_timestamp": "2026-05-21T09:49:47.985902Z"}, {"uuid": "fe9b0dda-5289-4f79-87fd-a74df3b4dc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60780", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mryz7bxyvo2c", "content": "\ud83d\udccc CVE-2026-60780 - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12... https://www.cyberhub.blog/cves/CVE-2026-60780", "creation_timestamp": "2026-08-01T08:07:07.229112Z"}, {"uuid": "a8bcd8e2-021a-4993-9e81-fb9b9a0fb971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60074", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4f7ogxqf2c", "content": "perlPackages.DateManip: fix CVE-2026-60074 and CVE-2026-60075\n\nhttps://github.com/NixOS/nixpkgs/pull/548409\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2327\n\n#security", "creation_timestamp": "2026-08-02T16:20:04.509600Z"}, {"uuid": "4d73e8b0-f3a8-4054-8628-08c6ff705f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60075", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4f7ogxqf2c", "content": "perlPackages.DateManip: fix CVE-2026-60074 and CVE-2026-60075\n\nhttps://github.com/NixOS/nixpkgs/pull/548409\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2327\n\n#security", "creation_timestamp": "2026-08-02T16:20:04.585432Z"}, {"uuid": "f44714c9-7aee-4f0c-9b21-adafd2a4f087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60735", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrz2uw5yug2y", "content": "\ud83d\udccc CVE-2026-60735 - Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60735", "creation_timestamp": "2026-08-01T08:37:06.636092Z"}, {"uuid": "0f184283-da14-46b1-b45f-728c6c71a140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96662", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-gitea-0day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Sachinart\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 22:54:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea <= 1.27.0 Pre-Auth RCE \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:08.982185Z"}, {"uuid": "0dccd8d1-0927-46c4-9542-43a3f648ceca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60560", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrz4kl3jps2r", "content": "\ud83d\udccc CVE-2026-60560 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).  Supported versions that are affected ... https://www.cyberhub.blog/cves/CVE-2026-60560", "creation_timestamp": "2026-08-01T09:07:06.787041Z"}, {"uuid": "4af88a7f-51ae-47f6-9a87-be62d393ae2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60560", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrz53vox4d2n", "content": "\ud83d\udccc CVE-2026-60560 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).  Supported versions that are affected ... https://www.potatohub.blog/cves/CVE-2026-60560", "creation_timestamp": "2026-08-01T09:16:48.551862Z"}, {"uuid": "9d3b2d7b-757d-48f4-8cbf-4b99b79011a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://t.me/angie_software/176", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Angie \u0438 Angie PRO 1.12.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 nginx.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0438\u0437 \n\u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0435 \"map\" (CVE-2026-42533 \u0438 CVE-2026-60005), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0443\u043b\u044f SSI (CVE-2026-56434).\n\n\u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043c\u0435\u0442\u0440\u0438\u043a (Metric) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u043e \u043d\u0430\u0438\u043c\u0435\u043d\u044c\u0448\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 (least_time).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Angie \u0438 Angie PRO.\n\nP.S.\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043c\u0435\u0442\u0440\u0438\u043a. \n\u0412\u044b \u2014 \u043b\u0443\u0447\u0448\u0438\u0435! \ud83e\udd70", "creation_timestamp": "2026-08-29T18:00:05.257397Z"}, {"uuid": "2197fe54-8524-46a3-bb91-d23f5f0af244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60007", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i", "content": "CRITICAL (CVSS 9.1) flaw in Eclipse Milo (0.6.0 \u2013 1.1.4): padding oracle via username-token errors lets attackers recover passwords. Patch status unknown, check vendor advisory. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #Ecl...", "creation_timestamp": "2026-08-04T13:30:24.904781Z"}, {"uuid": "70988732-13a3-4512-bdc3-1bd7a7deec0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60007", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117037480022382500", "content": "Eclipse Milo (0.6.0 \u2013 1.1.4) faces a CRITICAL flaw (CVE-2026-60007): error messages in username-token RSA PKCS#1 v1.5 handling enable padding oracle attacks, risking password compromise. Patch status unclear. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #EclipseMilo #Vuln #Infosec", "creation_timestamp": "2026-08-04T13:30:27.424467Z"}, {"uuid": "d4026d1f-e117-4b7c-9d02-db9dc69fbac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60520", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrz6a7hf7c2q", "content": "\ud83d\udccc CVE-2026-60520 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60520", "creation_timestamp": "2026-08-01T09:37:06.940182Z"}, {"uuid": "87c25d46-4581-4e3f-8241-8b614f0ab8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/GithubRedTeam/96596", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:32:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T14:00:05.949935Z"}, {"uuid": "6c1a7483-a83e-44e5-967c-2d4a7819c6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96596", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:32:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:28.500887Z"}, {"uuid": "b810daa6-d31a-4a26-8835-24306d6fb1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/96583", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a johnlodan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 10:07:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:43.915321Z"}, {"uuid": "cd3c27a0-4089-4314-a142-a4723fc90448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6014", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmqsdsq7cm2v", "content": "\ud83d\udccc CVE-2026-6014 - A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup of the component P... https://www.cyberhub.blog/cves/CVE-2026-6014", "creation_timestamp": "2026-05-26T10:37:06.957182Z"}, {"uuid": "4c076392-24c5-42af-bc1e-37d231d992ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6012", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmqxernpau2v", "content": "\ud83d\udccc CVE-2026-6012 - A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of th... https://www.cyberhub.blog/cves/CVE-2026-6012", "creation_timestamp": "2026-05-26T12:07:07.822272Z"}, {"uuid": "24390b08-c358-4e87-ab10-120b423d0525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6015", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmr7qy2ddc2v", "content": "\ud83d\udccc CVE-2026-6015 - A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST ... https://www.cyberhub.blog/cves/CVE-2026-6015", "creation_timestamp": "2026-05-26T14:37:07.005763Z"}, {"uuid": "5995c79c-d6c3-43e9-abba-2a842a13b2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6068", "type": "seen", "source": "https://t.me/bdufstecru/3197", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 process_respfile \u0444\u0430\u0439\u043b\u0430 asm/nasm.c \u0430\u0441\u0441\u0435\u043c\u0431\u043b\u0435\u0440\u0430 Netwide Assembler (NASM) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-07183\nCVE-2026-6068\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442);\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a HTTP \u0438\u043b\u0438 Telnet);\n- \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 (IDS/IPS) \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN).", "creation_timestamp": "2026-05-27T14:27:12.000000Z"}, {"uuid": "b0c10876-fce5-4d08-bf70-05aa094e3685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mstwuerzqy2d", "content": "\ud83d\udccc CVE-2026-60257 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60257", "creation_timestamp": "2026-08-12T01:07:06.231750Z"}, {"uuid": "c29bf2d7-cb72-4463-8ab1-d7bad3159dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mto3etmrzp24", "content": "\ud83d\udccc CVE-2026-60696 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60696", "creation_timestamp": "2026-08-22T10:37:07.074000Z"}, {"uuid": "9d915990-895e-44f2-a9ff-02e8fdbe8d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60698", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mto52hs4jh24", "content": "\ud83d\udccc CVE-2026-60698 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60698", "creation_timestamp": "2026-08-22T11:07:06.762162Z"}, {"uuid": "6ab3f68e-f896-4b9b-9e78-31345179a077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60415", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.324840Z"}, {"uuid": "1e40bddf-c805-48c1-bec7-389020197797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60822", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgto65auc2k", "content": "\ud83d\udd17 CVE : CVE-2026-60822, CVE-2026-70737, CVE-2026-70829, CVE-2026-70830", "creation_timestamp": "2026-08-19T13:30:31.531059Z"}, {"uuid": "441ae898-57c8-413e-97e9-d2f49b8912cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60672", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.376543Z"}, {"uuid": "676b7f05-5d8f-455d-a640-a2d5b3910d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60679", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.430166Z"}, {"uuid": "d3bf03ac-2c19-497a-b68b-f5614b913c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60680", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.476488Z"}, {"uuid": "c5774ab2-2e3a-4314-962c-0c504d2365b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60696", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.518849Z"}, {"uuid": "a93b6169-0494-4cb6-8d81-f5a6bd136ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60698", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.572906Z"}, {"uuid": "22391e1b-4f4a-4089-b04d-668a88781b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60699", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.618613Z"}, {"uuid": "b6822fdc-2220-4a90-8b1c-06c7be341d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.664547Z"}, {"uuid": "27d73cde-ad2f-4562-9785-1237b406edce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60977", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "creation_timestamp": "2026-08-19T13:30:19.706429Z"}, {"uuid": "0188f2c0-d7df-4e4c-98f6-ea9ae2b46e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60742", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.349058Z"}, {"uuid": "857423ca-bd74-47f3-9797-ff2c62c5db89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60821", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.415940Z"}, {"uuid": "074c5626-7081-4d3a-98d8-a5d954126ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60879", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.600148Z"}, {"uuid": "4fc0f812-1605-4ea7-b492-f860b5a81c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60831", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.460816Z"}, {"uuid": "b0ab0b55-612a-438d-88e9-3788f729834c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60856", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.502716Z"}, {"uuid": "ae9b6b5a-33ac-42d2-8767-489522a23441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60873", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.544376Z"}, {"uuid": "582f0020-3a2d-4dac-82a2-bf24c2517950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60884", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.697591Z"}, {"uuid": "06ebaf87-aa48-426a-9015-5ea2b78069f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60902", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.735794Z"}, {"uuid": "c0642fde-6552-428a-9b5e-ed4f53e6c7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60967", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.783225Z"}, {"uuid": "57470c69-bcf1-4da7-bb71-faa010b88c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60975", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.819496Z"}, {"uuid": "c03ad806-7ec5-476b-b48a-af56010220bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60883", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h", "content": "\ud83d\udd17 CVE : CVE-2026-60742, CVE-2026-60821, CVE-2026-60831, CVE-2026-60856, CVE-2026-60873, CVE-2026-60879, CVE-2026-60883, CVE-2026-60884, CVE-2026-60902, CVE-2026-60967, CVE-2026-60975, CVE-2026-61307, CVE-2026-70861, CVE-2026-71092, CVE-2026-71112", "creation_timestamp": "2026-08-19T13:35:05.648736Z"}, {"uuid": "812247b1-1512-47d7-b70a-a0a858cd9f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60589", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwox6lk2o", "content": "\ud83d\udd17 CVE : CVE-2026-60589, CVE-2026-61308, CVE-2026-62574, CVE-2026-70906, CVE-2026-70907", "creation_timestamp": "2026-08-19T13:35:17.610224Z"}, {"uuid": "c7ee0d1b-af49-4a35-be92-72dc120cce31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96678", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60137-WordPress-Core-SQL-Injection-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AbdullahMaqbool22\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 00:16:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive proof-of-concept and verification harness for CVE-2026-60137, a blind SQL injection in WordPress core (`WP_Query::author__not_in`), reachable via the REST API's `author_exclude` parameter.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T03:00:07.419284Z"}, {"uuid": "64b9f9d7-e243-4bb1-a79f-024b16e36de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60672", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mto6q4ccqg2x", "content": "\ud83d\udccc CVE-2026-60672 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60672", "creation_timestamp": "2026-08-22T11:37:06.245153Z"}, {"uuid": "e8bacdec-a6f8-4ddc-b10d-66be31235f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60916", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnca5mxrq2y", "content": "\ud83d\udccc CVE-2026-60916 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60916", "creation_timestamp": "2026-08-22T03:07:06.198831Z"}, {"uuid": "79ecd110-e2f4-4a2a-9909-1963b4505b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-05T05:00:10.111220Z"}, {"uuid": "7d068330-5b75-47c8-849b-585ad47f71d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtndvsgdl22f", "content": "\ud83d\udccc CVE-2026-60702 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60702", "creation_timestamp": "2026-08-22T03:37:06.757455Z"}, {"uuid": "e19dddd4-dac5-450f-886a-2df9e9f0cebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/93z-LIlEULZWbnwEzYtTEAqd1z1QFNuHcbWGMZMdxRz5WQ4", "content": "", "creation_timestamp": "2026-08-08T00:08:30.700417Z"}, {"uuid": "beea1059-2df4-4eba-bb83-6c265397e67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/FOx_CyberSecurity/46", "content": "wp2shell \u2014 CVE-2026-63030 + CVE-2026-60137 : WordPress core pre-auth RCE. \n\nMass (Exploit + Login + UP-Shell) \ud83e\udd8a\n\nRun:\nwp2shell.py wordpress.txt\n\nFiles folder must be present with Python file.\n\n#AnonymousFox", "creation_timestamp": "2026-08-16T19:00:04.137996Z"}, {"uuid": "3d6b1fc9-5f77-4244-b916-e04ede7e4027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60737", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtmo4gqziu2v", "content": "\ud83d\udccc CVE-2026-60737 - Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60737", "creation_timestamp": "2026-08-21T21:07:06.731328Z"}, {"uuid": "06d52c59-f710-4552-a91a-55c524703e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60728", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtmps3gewk24", "content": "\ud83d\udccc CVE-2026-60728 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).  Supported versions that are affected ... https://www.cyberhub.blog/cves/CVE-2026-60728", "creation_timestamp": "2026-08-21T21:37:06.949602Z"}, {"uuid": "2baa9bfc-a928-4ec3-a2fb-e39628cfd9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/kooteksec.bsky.social/post/3msd6pqegic2e", "content": "Outbreak Alert-\nThere's been exploitation attempts targeting the WP2Shell attack chain (CVE-2026-63030 and CVE-2026-60137), a critical unauthenticated remote code execution (RCE) vulnerability affecting WordPress Core. Learn more about this vulnerability  at: kootek.co.uk/outbreak-ale...", "creation_timestamp": "2026-08-05T09:12:58.512795Z"}, {"uuid": "3ee13ae2-b280-4eb8-89ff-9a2ed919b7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/FOx_CyberSecurity/46", "content": "wp2shell \u2014 CVE-2026-63030 + CVE-2026-60137 : WordPress core pre-auth RCE. \n\nMass (Exploit + Login + UP-Shell) \ud83e\udd8a\n\nRun:\nwp2shell.py wordpress.txt\n\nFiles folder must be present with Python file.\n\n#AnonymousFox", "creation_timestamp": "2026-08-17T00:00:12.684889Z"}, {"uuid": "5d2bfb67-1f93-4367-a4ca-fd2eb26c4357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6075", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyif3umoo2k", "content": "CVE-2026-6075 - Media Library Assistant\nCVE ID : CVE-2026-6075\n \n Published : May 29, 2026, 9:16 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 T...", "creation_timestamp": "2026-05-29T12:00:10.511680Z"}, {"uuid": "d67d058a-d08f-4963-9d9f-7f00d13ce554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60916", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:45:37.972328Z"}, {"uuid": "7fd9060e-ecf4-4aa0-93be-20da83e0a911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60720", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:45:33.063005Z"}, {"uuid": "e5e190e4-bff8-4e8a-9728-3bb662fb2ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60976", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:46:34.721254Z"}, {"uuid": "6ee5797c-aff6-45c6-8c9e-31c3f99369e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60748", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:45:59.108941Z"}, {"uuid": "5a79b240-ba5c-4dcc-8bd0-446a8fa44023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60730", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:46:36.935133Z"}, {"uuid": "b9f99f35-ec7e-4502-a14b-7e4486672109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:49:02.018956Z"}, {"uuid": "59578b98-ff95-4539-ac1b-50c2f58694fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60590", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:48:13.643479Z"}, {"uuid": "276e2850-b7cf-42f4-92e7-46f54259f58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60591", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:48:20.566973Z"}, {"uuid": "bf5304ad-b53d-4101-95c5-28e6b6ed4a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6075", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ehxsukp2j", "content": "\ud83d\udfe0 CVE-2026-6075 - High (8.1)\n\nThe Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6075/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T01:00:51.335999Z"}, {"uuid": "cb45b8d6-e1fe-4e1e-b47f-fdc7ae249136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60693", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:50:57.380330Z"}, {"uuid": "b58000d5-92f6-4502-a53d-e1b79f2621a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mualnylwnp2u", "content": "CVSS 9.8. Unauthenticated RCE. Gitea. Patch now.\n\nCVE-2026-60004 hits Gitea before 1.27.1.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-60004-gitea-unauthenticated-rce-exploited-in-wild-poc/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-29T19:16:29.540012Z"}, {"uuid": "cc28887b-cc56-475e-aa72-43cbc62c46f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60990", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:51:48.312541Z"}, {"uuid": "48d69721-3344-4421-a02c-440632a92848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60990", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtl5iqvyiw23", "content": "\ud83d\udccc CVE-2026-60990 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected ar... https://www.cyberhub.blog/cves/CVE-2026-60990", "creation_timestamp": "2026-08-21T06:37:07.089749Z"}, {"uuid": "c84867e1-8381-418d-b870-07f147e5b085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60759", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:51:45.865135Z"}, {"uuid": "185a32ea-0f4e-4a4b-beff-06d6649de8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60769", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:51:31.803224Z"}, {"uuid": "11c77e4a-c460-4c60-b4b4-dc9bceecdaa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60781", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:23.236945Z"}, {"uuid": "ebd1854e-dbad-47ca-bf4a-b99c815908b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60720", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtl76f62iu22", "content": "\ud83d\udccc CVE-2026-60720 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60720", "creation_timestamp": "2026-08-21T07:07:05.980675Z"}, {"uuid": "25cd7f1b-b604-4c24-93da-4247c2c1860d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60782", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:25.473797Z"}, {"uuid": "188b73bc-431d-46b3-9d90-034f88795024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60995", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:51:57.460504Z"}, {"uuid": "cdb15419-8ac7-4523-8a33-006cbff11db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60861", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtoc3fxcvj2m", "content": "\ud83d\udccc CVE-2026-60861 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60861", "creation_timestamp": "2026-08-22T12:37:07.745994Z"}, {"uuid": "29e06468-7322-4aad-b2b6-1e2744bd69e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60730", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtlau22qbd24", "content": "\ud83d\udccc CVE-2026-60730 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2... https://www.cyberhub.blog/cves/CVE-2026-60730", "creation_timestamp": "2026-08-21T07:37:06.455555Z"}, {"uuid": "1ffd753e-9b61-4064-b607-96df504fe49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60415", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:02.558055Z"}, {"uuid": "8c901371-69cb-4d0b-83e9-52e729e8bacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60728", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:19.280173Z"}, {"uuid": "df054602-114c-4dfa-b4cf-423c60867590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60729", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:12.078208Z"}, {"uuid": "1d0a7d53-bda1-49ab-8c0a-550e33112685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60969", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:17.023985Z"}, {"uuid": "cf566a38-b32a-4b22-8d42-ff74c2b40e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60726", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:23.942504Z"}, {"uuid": "d6d76590-c764-4f70-a65a-d54cce7ff41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60961", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:56.532381Z"}, {"uuid": "31616f1d-640b-4d3a-b8f0-5e1e88d6fb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60727", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:14.560962Z"}, {"uuid": "4cb2b6da-1ef5-4851-92ee-23fd9a1dc0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60715", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:13.030797Z"}, {"uuid": "5f1b6a47-afcf-47a7-8e96-a5fe79ca5ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60849", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:21.511756Z"}, {"uuid": "6a21de6a-1187-47b0-8a2e-28ab7fd1727a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60958", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:05.951853Z"}, {"uuid": "e25b668e-6d92-451d-bb9f-2aa883dc4dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60716", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:08.370567Z"}, {"uuid": "47a8c1b7-e47a-4a3e-b226-ade0426082e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60721", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:47.540767Z"}, {"uuid": "68f6da4a-2597-41b6-9d02-9dc8db5b3082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60392", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:34.342366Z"}, {"uuid": "b92b57a2-8ee1-4812-9f90-cdb79344491e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60954", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:45.739539Z"}, {"uuid": "4d9471b0-da68-4304-b150-fcda2c553929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60722", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:15:51.943032Z"}, {"uuid": "398660af-8edb-45e7-ab98-57f916c7f50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60841", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:01.273241Z"}, {"uuid": "da5351ad-f772-4753-b756-beaf10335893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60955", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:16:47.966563Z"}, {"uuid": "61adf851-44c1-41a6-9121-646f5ee293e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60980", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:08.883892Z"}, {"uuid": "69738def-c4c8-4936-a423-99eabfb56c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60983", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:24.958148Z"}, {"uuid": "dcde5247-4fae-4701-b475-7a01aaa162ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60737", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:36.789389Z"}, {"uuid": "38c74e62-ce2b-4935-95f5-95ac4d76e1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60981", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:29.471907Z"}, {"uuid": "c4b1a48a-dfbf-4da5-976d-832396daa59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60977", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:52.583743Z"}, {"uuid": "ea3a764b-8a3a-412e-8d3b-9fd8a0e662ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60860", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:32.125355Z"}, {"uuid": "cbe4b5a5-7928-471d-9192-f66d646f6afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60971", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:03.810764Z"}, {"uuid": "5570fb4b-b3e1-45e0-b158-ff122d9680b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60861", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:34.342796Z"}, {"uuid": "7bdfdcc3-2d8f-43c8-9f02-945960bf146a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60928", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:08.459561Z"}, {"uuid": "dae9050c-9a96-4e40-9732-cf0566f9bf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60733", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:57.099519Z"}, {"uuid": "c1ce729f-688d-4f1b-90cc-d77362852ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60731", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:17:59.346118Z"}, {"uuid": "07b645ff-116c-4b69-a869-96d1e36ccdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60970", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:01.577512Z"}, {"uuid": "9c1852fa-fd74-4cdd-b049-793e34a000d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60850", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:06.220355Z"}, {"uuid": "f7f4e87b-9870-4deb-8d9f-8413255f008b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60921", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:15.364053Z"}, {"uuid": "c313dda4-6386-4a97-82c6-6639c84ea043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60914", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:34.401338Z"}, {"uuid": "f5386ebc-8767-49f2-9681-f19e1421c870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60915", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:36.644800Z"}, {"uuid": "2f7bfa0a-bcc0-4f73-919c-3f0d9a875cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60707", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:46.014373Z"}, {"uuid": "91788e35-b563-435b-808a-2874c4c7b736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://bsky.app/profile/timb.me.uk/post/3msl7co37trt2", "content": "Interesting Git repos of the week:\n\nDetection:\n\n* https://github.com/Yamato-Security/WELA - improve your Windows logging\n\nBugs:\n\n* https://github.com/timb-machine-mirrors/imbas007-POC-CVE-2026-60206 - popping WebLogic via SAML\n\nExploitation:\n\n* https://github.com/Mrnmap/RedTeam - a nice list of [\u2026]", "creation_timestamp": "2026-08-08T13:44:21.580712Z"}, {"uuid": "ab46825c-3920-437f-9874-956c979f5320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60905", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:42.822162Z"}, {"uuid": "22ac91e2-fd24-4f3f-ba3a-ce9fee57b52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60949", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:48.484524Z"}, {"uuid": "9ee5833b-9fbb-4c38-a224-8222847cbd0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:59.917398Z"}, {"uuid": "06aae10c-72fd-4948-8851-5c08f8d04f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60947", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:50.758914Z"}, {"uuid": "d674ad11-480e-49c8-8894-59366396763c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60933", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:15.762957Z"}, {"uuid": "9e460795-9f77-4dfd-ab00-7d2b5ab238a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60946", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:18:53.031395Z"}, {"uuid": "06c2ea82-255d-49b1-bf55-b89f52def308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-poc-gitea\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 13:08:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea Pre-Auth RCE via diffpatch hook injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T15:00:03.424874Z"}, {"uuid": "006f2b27-c58d-46f2-a313-6d5e94188562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60944", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:02.341909Z"}, {"uuid": "7a418d4c-539a-40d5-9fdb-aedb51cc6e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60934", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:06.854174Z"}, {"uuid": "7a77cc3b-7820-412a-93f3-bac8948c9a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60935", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:09.089680Z"}, {"uuid": "71696068-1e7f-4777-aafa-ec4441a25997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60680", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:41.539032Z"}, {"uuid": "df6892e8-ad20-4ede-87bb-4e6965fc80bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60023", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4c2kiitqv5xnt", "content": "CVE-2026-60023: Apache Answer: Unauthorized disclosure of deleted or pending answer content", "creation_timestamp": "2026-08-05T15:49:14.570315Z"}, {"uuid": "0d7ae182-0581-4c61-aa2f-c1bfcc159fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/97204", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Exploit-Waf-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a M4xSec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 17:41:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T19:02:13.876112Z"}, {"uuid": "64bd2828-2bf0-4c7b-a0bb-11e1606633b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60672", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:21.548952Z"}, {"uuid": "a7d2f2ff-8fac-4bc0-a469-175ddc667067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60679", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:23.979557Z"}, {"uuid": "b4b63899-d1e2-4c4f-8bc8-9e3157ea6528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60998", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:09.298630Z"}, {"uuid": "019f2f25-c6ae-4b62-b4d6-f2b0e2cd02c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60906", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:45.055600Z"}, {"uuid": "8a52dea8-7f89-42d1-ada0-fc96622dbf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60903", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:47.306179Z"}, {"uuid": "58317803-bd96-48a4-b55c-3f5c8eb243fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60909", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:54.017936Z"}, {"uuid": "745a6bdc-8998-46bc-be25-09c003d2b546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-08T23:24:01.095042Z"}, {"uuid": "5810316d-bf0d-48f8-87c8-a055748f4538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60699", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:21.852066Z"}, {"uuid": "f671f4bc-a0d7-495b-af04-96fc610a8aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60698", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:30.899912Z"}, {"uuid": "4061e49e-0323-4e9e-94b1-352bdafc2a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60889", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:46.721914Z"}, {"uuid": "04f79096-8403-457c-b233-f0da6686ec27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60696", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:35.401178Z"}, {"uuid": "1e18c350-865a-4422-a483-202e27b20ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-09T00:40:12.441728Z"}, {"uuid": "1932141a-2ed9-4b8d-8bc0-679f0788a720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97204", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Exploit-Waf-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a M4xSec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 17:41:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:44:32.747145Z"}, {"uuid": "4514d4b0-848a-4d52-94cc-a2eef7e77a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-poc-gitea\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 13:08:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea Pre-Auth RCE via diffpatch hook injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:46:43.170938Z"}, {"uuid": "c64222ae-6e86-4b76-981e-e91bd37625af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96790", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sowarma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 17:49:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T19:00:06.251413Z"}, {"uuid": "8526418d-d826-4fd6-a134-38cdb0f19680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60991", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:02.601839Z"}, {"uuid": "04a559c2-b077-451a-8fab-e68c585ced10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60996", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:11.555241Z"}, {"uuid": "ff173413-b218-4285-a3ab-214acbb87d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60994", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:16.006249Z"}, {"uuid": "c04b9570-b285-4758-a820-deefa82350c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60992", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:18.235111Z"}, {"uuid": "04c1fabb-b940-46b6-9178-eee0efe0a278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60993", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:20.474768Z"}, {"uuid": "9a015f3e-c2fc-4464-877b-b12f589b2bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60413", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:47.913098Z"}, {"uuid": "f22cb512-e58c-46e0-8cda-ee42020c8d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60967", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:23.302564Z"}, {"uuid": "9490444e-a0b3-4b7f-9aa4-0206dade5cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60831", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:13.790136Z"}, {"uuid": "96116376-5b8f-4ce1-bf29-6e4cc8b4cc3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60414", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:09.477289Z"}, {"uuid": "656d473b-1b71-49bb-a142-355267f18365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60412", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:11.696724Z"}, {"uuid": "e637529f-81b5-4c36-9ba0-17bfda7c34e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60742", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:04.474168Z"}, {"uuid": "6ef1ba06-cfc0-4a9a-9444-99b4d122e424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60858", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:13.433352Z"}, {"uuid": "aac22ff1-1cf2-49a4-9282-4c904877854f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-21T23:00:07.455430Z"}, {"uuid": "af168e57-a7bb-4496-ae09-8accacbef61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60956", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:00.180056Z"}, {"uuid": "8b11b788-e849-48e5-ae21-af68562d6842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60391", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:11.538344Z"}, {"uuid": "305c72ab-6014-4247-8028-36de32120778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60393", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:09.110534Z"}, {"uuid": "8f36d911-0e35-4671-83d7-f0519138900f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/NullXTeam/3067", "content": "mari bersama kita ramaikan wp2shell\n\nhttps://github.com/ZephrFish/wp2shell-scanner\nCVE-2026-60137: WP 6.8.0 - 6.8.5\nCVE-2026-63030: WP 6.9.0 - 6.9.4 & 7.0.0 - 7.0.1", "creation_timestamp": "2026-08-12T16:00:04.501973Z"}, {"uuid": "39a69246-eefc-4709-a914-6b724e23af85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-21T09:00:04.565162Z"}, {"uuid": "80d2d4c2-3aec-4fb3-b7fc-7d644d667e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/pphm_HackerNews/2148", "content": "\ud83d\udd34 WP2Shell WordPress Vulnerabilities Exploited in the Wild\n\nTwo newly patched WordPress vulnerabilities are being exploited in the wild, with attacks beginning shortly after they came to light. \n\nThe vulnerabilities have been dubbed WP2Shell and they are officially tracked as CVE-2026-60137 and CVE-2026-63030. \n\nAccording to Searchlight Cyber, whose researchers discovered the flaws, WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are affected. \n\n\u201cThe attack has no preconditions and can be exploited by an anonymous user in a stock install of WordPress with no plugins,\u201d the security firm warned.", "creation_timestamp": "2026-08-21T23:00:08.397313Z"}, {"uuid": "5e2c96c7-af2d-4810-8f8d-a36a27b86169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60975", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:50.450571Z"}, {"uuid": "d1d02f82-d305-47ba-8745-51d0fbcd3175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60856", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:48.226433Z"}, {"uuid": "8b37da1a-d6a3-47c6-8452-af544038b3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.777815Z"}, {"uuid": "ca619ac9-d709-4a06-9055-7e22737c5ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.929653Z"}, {"uuid": "00b550b7-db8f-4e15-9375-96eb88b145c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60592", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:15.348837Z"}, {"uuid": "be6ff856-2adb-406a-8f0d-6cbc7e524aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60821", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:50:00.416337Z"}, {"uuid": "3fd4acdc-ef52-47d2-9c1e-91731ce4ad64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60958", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnpnd2zmf2v", "content": "\ud83d\udccc CVE-2026-60958 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60958", "creation_timestamp": "2026-08-22T07:07:07.040905Z"}, {"uuid": "59097067-eead-487b-be6f-400eeea482a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60883", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:19.185262Z"}, {"uuid": "b9ac21c4-0576-4c6d-ae66-c35e8b5c2b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3msn5ovmn652y", "content": "From targeted ransomware in Italy to global WordPress exploits, the threat landscape is accelerating. The 'wp2shell' chain (CVE-2026-63030 & CVE-2026-60137) allows full RCE. Patch your WordPress installations immediately to avoid total compromise.", "creation_timestamp": "2026-08-09T08:22:51.521193Z"}, {"uuid": "694d4673-ea68-4709-8c52-fc7102d03607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60902", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:51:41.935862Z"}, {"uuid": "c2328452-5c50-4af6-9b38-497a186c9c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60767", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:16.951946Z"}, {"uuid": "6c290165-0a93-4066-98a4-6d992bd880ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60873", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:45.924383Z"}, {"uuid": "bf77514d-d274-416a-b1a1-d79c099cabc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60879", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:21.412217Z"}, {"uuid": "ddcd1b41-9421-47ce-8121-4fa25b11b784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60751", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:50.615706Z"}, {"uuid": "76bef65d-3670-4d30-b48c-20b8bafbdf59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60754", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:43.450604Z"}, {"uuid": "ba3a7038-92cf-4d1a-a16d-5a29d13988d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-06T00:00:06.835783Z"}, {"uuid": "28903abc-d755-43bc-9e48-31280069e1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96790", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sowarma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 17:49:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:26.205361Z"}, {"uuid": "914176af-c8d3-403e-a75d-9ba96177b5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96583", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a johnlodan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 10:07:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:37.459865Z"}, {"uuid": "57d81313-9152-4479-a254-a3a9b38e9b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-06T00:00:48.376373Z"}, {"uuid": "cb73d144-bf58-48c5-946e-239a2db311bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96678", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60137-WordPress-Core-SQL-Injection-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AbdullahMaqbool22\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 00:16:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive proof-of-concept and verification harness for CVE-2026-60137, a blind SQL injection in WordPress core (`WP_Query::author__not_in`), reachable via the REST API's `author_exclude` parameter.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:59.405457Z"}, {"uuid": "c7e797c8-3c43-4224-b712-f8ce8d945e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60971", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnsymrd7q2c", "content": "\ud83d\udccc CVE-2026-60971 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60971", "creation_timestamp": "2026-08-22T08:07:07.471390Z"}, {"uuid": "79698137-2da5-4569-86d5-6ab436b553a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.519144Z"}, {"uuid": "6facb4c5-6e92-4b60-b1e3-3f467e8d3bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.624836Z"}, {"uuid": "eb59e7c3-1e60-4119-98f0-4ac9d2c46a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60696", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6624hy2e", "content": "\ud83d\udea8 CVE-2026-60696 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supporte...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60696\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:08:53.882611Z"}, {"uuid": "1e3109b8-c2ad-44d9-8983-ea343f372cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60698", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6g5eah2f", "content": "\ud83d\udea8 CVE-2026-60698 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supporte...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60698\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:03.337370Z"}, {"uuid": "f6310e68-9625-4616-b5e1-0541daa7ee4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60591", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa5ndj5g2p", "content": "\ud83d\udea8 CVE-2026-60591 \u2014 CVSS 9.1 CRITICAL\n\nVulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (componen...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60591\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:08:38.583789Z"}, {"uuid": "33e698b4-05c4-42ee-862a-3a675e5cff3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60672", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa5vpqvp2f", "content": "\ud83d\udea8 CVE-2026-60672 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supporte...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60672\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:08:45.042403Z"}, {"uuid": "6508ffeb-66ad-45df-b0cd-73c41df1c585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60720", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6zklpf2c", "content": "\ud83d\udea8 CVE-2026-60720 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60720\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:22.955798Z"}, {"uuid": "bc883c2e-043b-41b3-be70-7a8dbeac104b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6pevow25", "content": "\ud83d\udea8 CVE-2026-60702 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supporte...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60702\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:12.002735Z"}, {"uuid": "78582f19-183c-4c16-9dcc-f65bf3e465be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60721", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa7bk5lj2b", "content": "\ud83d\udea8 CVE-2026-60721 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60721\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:30.973582Z"}, {"uuid": "79eb4c60-3f7e-473d-92d5-d5cdabfc1dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60946", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfacvimuy25", "content": "\ud83d\udea8 CVE-2026-60946 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60946\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:11:32.949070Z"}, {"uuid": "460c7189-0496-4b28-a5a7-ae2d29d0a505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60727", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa7kwk662m", "content": "\ud83d\udea8 CVE-2026-60727 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60727\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:40.888299Z"}, {"uuid": "db955a65-9622-4152-a34d-88bf6898c349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60728", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa7szuen2t", "content": "\ud83d\udea8 CVE-2026-60728 \u2014 CVSS 9.1 CRITICAL\n\nVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60728\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:49.309161Z"}, {"uuid": "8b268f5c-df5e-4ae6-b0df-ded1a7430569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60821", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfab53jr42e", "content": "\ud83d\udea8 CVE-2026-60821 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business In...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60821\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:10:33.469496Z"}, {"uuid": "15435443-dffd-440d-b25b-d6b73a66c7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60730", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaa2vmda25", "content": "\ud83d\udea8 CVE-2026-60730 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Sup...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60730\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:09:58.390127Z"}, {"uuid": "54652583-1b49-4972-a6e1-0054a1176a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60737", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaaddeqh2y", "content": "\ud83d\udea8 CVE-2026-60737 \u2014 CVSS 9.1 CRITICAL\n\nVulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60737\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:10:06.462177Z"}, {"uuid": "c4aa541a-dad2-4bc2-9be5-7b113a38f6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60754", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaalm6vm2u", "content": "\ud83d\udea8 CVE-2026-60754 \u2014 CVSS 9.1 CRITICAL\n\nVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60754\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:10:15.339404Z"}, {"uuid": "802d2b2d-8e33-4ec3-9772-30d919d4f388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60782", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaaulyqa25", "content": "\ud83d\udea8 CVE-2026-60782 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Sup...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60782\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:10:24.660578Z"}, {"uuid": "55543552-28a3-47ff-972c-d270819e0c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60765", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:31.708438Z"}, {"uuid": "83ed4d82-cde0-4317-8f37-66397ebfd8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60766", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:34.154280Z"}, {"uuid": "1cc1aba7-1202-428a-82d5-541199a32103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60758", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:38.607383Z"}, {"uuid": "19092783-bcc3-4229-bbd2-992277de7361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60858", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfabfeqby25", "content": "\ud83d\udea8 CVE-2026-60858 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60858\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:10:42.180670Z"}, {"uuid": "93c8c931-1761-485c-93fa-847f2941c0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60861", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfabosdln2t", "content": "\ud83d\udea8 CVE-2026-60861 \u2014 CVSS 9.6 CRITICAL\n\nVulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging En...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60861\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:10:52.067378Z"}, {"uuid": "504d117d-6cef-4962-8c3d-5f6550347925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60798", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:02.372641Z"}, {"uuid": "aebb8b2e-104d-4f1c-a0c5-96e2e4d5cce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60905", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfabz6wwa2e", "content": "\ud83d\udea8 CVE-2026-60905 \u2014 CVSS 9.6 CRITICAL\n\nVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Serve...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60905\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:11:03.481807Z"}, {"uuid": "b1b23305-54b9-4721-b9fa-d571fea74941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60792", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:53.023863Z"}, {"uuid": "fd448d61-f337-47b7-95b5-20d2c8175e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60791", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:55.462582Z"}, {"uuid": "cec394dd-84f2-4b7b-9aef-0e539a1473d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60757", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:00.134797Z"}, {"uuid": "56ab5659-5ae6-407f-8f44-522fc6419ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60752", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:09.015620Z"}, {"uuid": "c80aff41-8790-4954-8e4d-9c7dfc82901e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60916", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfacbjh472f", "content": "\ud83d\udea8 CVE-2026-60916 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60916\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:11:11.766829Z"}, {"uuid": "00a60d1e-2ee9-45ba-a400-dc7fbfc24c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60921", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfacll5et24", "content": "\ud83d\udea8 CVE-2026-60921 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60921\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:11:22.180892Z"}, {"uuid": "81d3faa4-fb24-4039-9b96-cdb79bc0c87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60947", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfad62hdy25", "content": "\ud83d\udea8 CVE-2026-60947 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60947\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:11:41.588489Z"}, {"uuid": "d9c30d04-929f-46ad-9d04-e66fe63df0e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60796", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:06.796802Z"}, {"uuid": "fdf76cb8-92ff-4b28-be0b-6f3f3f8506a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60753", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:11.280131Z"}, {"uuid": "8bc874f1-21c8-40e3-a3ee-0ed53e86d143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60958", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfadgo37323", "content": "\ud83d\udea8 CVE-2026-60958 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60958\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:11:52.309312Z"}, {"uuid": "6452d9b1-148e-437a-abca-68cb3684276f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60797", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:13.549043Z"}, {"uuid": "e1768c09-ee25-4698-b656-fa22602a39cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60970", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfadpoznt24", "content": "\ud83d\udea8 CVE-2026-60970 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60970\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:12:00.065685Z"}, {"uuid": "5a15663a-136d-4e59-986a-d0b1974911e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60971", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfadyquol23", "content": "\ud83d\udea8 CVE-2026-60971 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Cl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60971\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:12:09.579253Z"}, {"uuid": "4fd605d3-70b4-4a90-a719-db0872c2aa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60977", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaeatzzd24", "content": "\ud83d\udea8 CVE-2026-60977 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Compon...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60977\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:12:18.088179Z"}, {"uuid": "86d0c52d-4524-4e22-a470-b8b841b1abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60990", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaejgjoe2u", "content": "\ud83d\udea8 CVE-2026-60990 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60990\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:12:27.065230Z"}, {"uuid": "e35af274-245b-4d42-ad32-e578686046ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60995", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaerhxjv2t", "content": "\ud83d\udea8 CVE-2026-60995 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60995\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:12:35.783208Z"}, {"uuid": "32e57b6f-4ccb-4c70-a57a-5256bc79ef4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60820", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:47.920499Z"}, {"uuid": "1a645ec5-883b-4be1-adfd-a503109d11de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60779", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:25.455898Z"}, {"uuid": "1f195957-a5af-4506-befc-c929bc1ba418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60803", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:36.802187Z"}, {"uuid": "795ae6ba-5367-4d8f-baa1-06041208bc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60808", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:27.874501Z"}, {"uuid": "e60b9307-9a19-4aa1-be43-b58a4f9fd4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/NullXTeam/3067", "content": "mari bersama kita ramaikan wp2shell\n\nhttps://github.com/ZephrFish/wp2shell-scanner\nCVE-2026-60137: WP 6.8.0 - 6.8.5\nCVE-2026-63030: WP 6.9.0 - 6.9.4 & 7.0.0 - 7.0.1", "creation_timestamp": "2026-08-13T00:00:09.157438Z"}, {"uuid": "a9cfabe7-3226-42f1-b4e0-43b56c1db225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Adam Kues\", \"TF1T\", \"dtro\", \"haongo\", \"Crypto-Cat\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module chains two WordPress core vulnerabilities, together known as\\n          WP2Shell, to gain unauthenticated remote code execution against default\\n          installs of WordPress 6.9.0-6.9.4 and 7.0.0-7.0.1.\\n          The vulnerabilities are fixed in WordPress 6.9.5 and 7.0.2.\\n\\n          CVE-2026-60137 is an SQL injection in WP_Query's author__not_in parameter, and\\n          CVE-2026-63030 is a REST API batch endpoint route-confusion bug that lets an\\n          unauthenticated request reach that injection.\\n\\n          The module uses the injection to read the database table prefix and the\\n          administrator user ID, poisons WordPress' object cache to publish a crafted\\n          customizer changeset, and re-enters the REST API with administrator privileges\\n          to create a new administrator account. It then logs in as that account, uploads\\n          a plugin containing a Metasploit payload, and executes it for a session. Once a\\n          session is obtained the uploaded plugin is removed, and the created administrator\\n          account is removed as well unless KeepAdmin is set.\", \"disclosure_date\": \"2026-07-17\", \"fullname\": \"exploit/multi/http/wp_batch_desync_rce\", \"is_install_path\": true, \"mod_time\": \"2026-08-06 12:35:36 +0000\", \"name\": \"WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_batch_desync_rce.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_batch_desync_rce\", \"references\": [\"CVE-2026-63030\", \"CVE-2026-60137\", \"URL-https://wordpress.org/news/2026/07/wordpress-7-0-2-release/\", \"URL-https://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/\", \"URL-https://github.com/Crypto-Cat/wp2shell\", \"URL-https://wp2shell.com/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-08-10T10:02:08.868132Z"}, {"uuid": "ce112c5c-9f08-4a1c-8e05-7df20879838c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6059", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moqxh6mqnc25", "content": "NEC\u306e\u30eb\u30fc\u30bf\u88fd\u54c1\u300cAterm\u300d\u30b7\u30ea\u30fc\u30ba\u306b\u8106\u5f31\u6027 - 11\u88fd\u54c1\u306b\u5f71\u97ff\n\nNEC\u306e\u30eb\u30fc\u30bf\u88fd\u54c1\u300cAterm\u300d\u30b7\u30ea\u30fc\u30ba\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u300211\u30e2\u30c7\u30eb\u306b\u5f71\u97ff\u304c\u3042\u308a\u3001\u5229\u7528\u8005\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-8652\u300d\u306f\u3001OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u7b2c\u4e09\u8005\u304c\u30a6\u30a7\u30d6\u7ba1\u7406\u753b\u9762\u306b\u7ba1\u7406\u8005\u3068\u3057\u3066\u30a2\u30af\u30bb\u30b9\u3057\u305f\u969b\u3001\u4efb\u610f\u306eOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3002\u30e2\u30d0\u30a4\u30eb\u30eb\u30fc\u30bf\u300cMR51FN\u300d\u300cCM51FD\u300d\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u307e\u305f\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u306e\u8106\u5f31\u6027\u300cCVE-2026-6059\u300d\u304c\u5224\u660e\u3057\u305f\u3002\u30a6\u30a7\u30d6\u7ba1\u7406\u753b\u9762\u306b\u30a2\u30af\u30bb\u30b9\u3057\u305f\u30e6\u30fc\u30b6\u30fc\u306e\u30d6\u30e9\u30a6\u30b6\u4e0a\u3067...", "creation_timestamp": "2026-06-20T22:58:54.556727Z"}, {"uuid": "587d0b9c-0aab-4300-9b0d-eabc357dc259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movd5djfrc2j", "content": "CVE-2026-6062 - IDOR in Jira plugin subscription edit endpoint\nCVE ID : CVE-2026-6062\n \n Published : June 22, 2026, 1:40 p.m. | 2\u00a0hours, 3\u00a0minutes ago\n \n Description : Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 Fai...", "creation_timestamp": "2026-06-22T16:38:45.023634Z"}, {"uuid": "141e5162-566a-4e19-848e-2ff92411b8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6019", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe4mppew2g", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-6019 impacts python in 6 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/575\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-23T12:01:34.003145Z"}, {"uuid": "2db09973-de9b-427a-a480-2a9008c4ce66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60007", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msfom5cfzi2z", "content": "CVE-2026-60007\nVersions 0.6.0 through 1.1.4 of Eclipse Milo return specific error messages when a user's password is incorrect, allowing an attacker to use this information to guess the password. This means an attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T09:02:06.601652Z"}, {"uuid": "694488ea-85b4-4f72-9e1c-c168a630e35a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60007", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfov63ql22q", "content": "\ud83d\udccc CVE-2026-60007 - In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other a... https://www.cyberhub.blog/cves/CVE-2026-60007", "creation_timestamp": "2026-08-06T09:07:06.874644Z"}, {"uuid": "4eca7444-0722-423a-b8be-860af0a08815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zzxq2wn2f", "content": "CVE-2026-6091 - Partial-chain verification accepts untrusted intermediate as trust anchor\nCVE ID : CVE-2026-6091\n \n Published : June 25, 2026, 4:46 p.m. | 58\u00a0minutes ago\n \n Description : Partial-chain certificate verification may accept chains that terminate at a peer-supplied...", "creation_timestamp": "2026-06-25T18:17:06.407398Z"}, {"uuid": "a03d0204-ffa1-4a19-b6a2-405371720c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5galeomc27", "content": "CVE-2026-6092 - Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured\nCVE ID : CVE-2026-6092\n \n Published : June 25, 2026, 9:06 p.m. | 38\u00a0minutes ago\n \n Description : When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fal...", "creation_timestamp": "2026-06-25T21:55:33.073033Z"}, {"uuid": "08bcf01f-f22f-40ce-b45d-c8010cf5a54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6019", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpbv46oih22z", "content": " \ud83d\udee1\ufe0f RLSA-2026:28581 acaba de sair para Rocky Linux 10!\nCorrige CVE-2026-4786 (inje\u00e7\u00e3o de comandos em webbrowser.open()) e CVE-2026-6019.   Saiba mais:- > tinyurl.com/3sfn6973", "creation_timestamp": "2026-06-27T16:32:12.411243Z"}, {"uuid": "1e2a125a-689b-4ab0-a67f-9ee80bde8736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6019", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpbv47rz622z", "content": " \ud83d\udee1\ufe0f RLSA-2026:28581 acaba de sair para Rocky Linux 10!\nCorrige CVE-2026-4786 (inje\u00e7\u00e3o de comandos em webbrowser.open()) e CVE-2026-6019.   Saiba mais:- > tinyurl.com/3sfn6973", "creation_timestamp": "2026-06-27T16:32:12.882727Z"}, {"uuid": "7b599cb0-3bd6-4ce6-be9c-b04e78a09754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/dataguidance.bsky.social/post/3mtjox3kkt326", "content": "Saxony\u2019s data protection authority warns WordPress and Joomla operators about critical vulnerabilities.\n\nKey actions:\n\ud83e\ude79 Patch CVE-2026-60137, CVE-2026-63030, and CVE-2026-48907\n\ud83d\udce3 Assess GDPR notification duties after unauthorized access\n\nLearn more: https://bit.ly/3ScJoJD", "creation_timestamp": "2026-08-20T16:44:01.965507Z"}, {"uuid": "6fbd983f-716d-4b8d-a432-e2be70028cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:46:09.426078Z"}, {"uuid": "52ebd060-b339-4d11-b62e-bb5d5a1ae1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60591", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfdljv4kf2t", "content": "CVE-2026-60591 - oracle hospitality simphony\nOracle Hospitality Simphony's Point of Sale (POS) system in versions 19.8-19.8.5, 19.9-19.9.3, and 19.10-19.10.1 has a security flaw that allows an unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:10:03.998605Z"}, {"uuid": "52d90bec-7d28-4e39-82c7-0c1bd686bc24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfdll5jul2b", "content": "CVE-2026-60672 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are at risk of being taken over by an unauthorized person with network access. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:10:05.215231Z"}, {"uuid": "1f05abfc-38c3-44d0-ad11-39852826c0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfe5gqvjr2e", "content": "CVE-2026-60696 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected. This vulnerability allows attackers to access your server without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:20:04.611999Z"}, {"uuid": "4119fe2a-7968-4e43-9f4e-5859c19da546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60698", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfe5i3d5w2t", "content": "CVE-2026-60698 - oracle weblogic server\nCertain versions of Oracle WebLogic Server can be taken over by an attacker with network access. This means an attacker could gain full control of the server,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:20:05.670830Z"}, {"uuid": "3e5c696c-8c18-4878-a0f9-5a890f3201a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfepcqxnr2u", "content": "CVE-2026-60702 - oracle weblogic server\nOracle WebLogic Server's core component is at risk of being taken over by an attacker with network access. This could lead to unauthorized access to sensitive data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:30:04.770035Z"}, {"uuid": "e25e9456-75b7-4f44-89c7-0a772779406d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60720", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfepdxgku2p", "content": "CVE-2026-60720 - oracle identity manager\nThe Oracle Identity Manager, part of Oracle Fusion Middleware, has a security issue that allows an attacker to take control of the system. This means that an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:30:05.454517Z"}, {"uuid": "9e039dc7-8703-49e5-abb6-c0d07a6e77d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60721", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtffb6jbla2e", "content": "CVE-2026-60721 - oracle identity manager\nSome versions of Oracle Identity Manager can be compromised if an attacker gains access to the system through the internet. This could allow them to take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:40:04.154513Z"}, {"uuid": "57e21e20-ce82-4056-a6ee-dceeb6a12f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60727", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtffb7vrpk2c", "content": "CVE-2026-60727 - oracle identity manager\nOracle Identity Manager, a part of Oracle Fusion Middleware, has a security flaw that allows an attacker to take control of the system without a password. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:40:05.075591Z"}, {"uuid": "1df70a49-1de0-44ee-9f74-f00aff8461ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60728", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfft3kvsk2p", "content": "CVE-2026-60728 - oracle webcenter portal\nOracle WebCenter Portal's Portlet Services in versions 12.2.1.4.0 and 14.1.2.0.0 has a security risk that allows unauthorized access to sensitive data. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-18T23:50:04.721579Z"}, {"uuid": "768d14fb-88fe-4cbe-a0e8-445b1c0eb746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60730", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfgeyjetl2b", "content": "CVE-2026-60730 - oracle webcenter portal\nOracle WebCenter Portal Composer in versions 12.2.1.4.0 and 14.1.2.0.0 is at risk of being taken over by an attacker with network access. This could impact not just\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:00:06.203274Z"}, {"uuid": "74a74d2a-a9b7-496c-919e-ce3bd91c3fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60737", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfgf22loi24", "content": "CVE-2026-60737 - oracle web services manager\nIf not patched, attackers can access sensitive data in Oracle Web Services Manager without needing a password. This is a serious security risk, as it could lead\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:00:08.210765Z"}, {"uuid": "c2e83d3b-dec2-4b15-9307-d036faa0aace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-22T00:00:11.032996Z"}, {"uuid": "52dcb04d-8c58-4b28-be57-ccf2f9b70c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6070", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116843192352018324", "content": "CVE-2026-6070: WP-BusinessDirectory plugin (\u22644.0.1) has a CRITICAL unauthenticated file deletion flaw (CVSS 9.1). Attackers can delete wp-config.php via path traversal. Restrict endpoint & monitor logs until patched. https://radar.offseq.com/threat/cve-2026-6070-cwe-73-external-control-of-file-name-ae3a571ee4bae8b5 #OffSeq #WordPress #CVE20266070 #infosec", "creation_timestamp": "2026-07-01T06:00:26.600811Z"}, {"uuid": "d4f166d9-d414-446d-a946-4f7d20b37bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6070", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpl6m64hwe2t", "content": "CVE-2026-6070 wp-businessdirectory (CVSS Score 9.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-01T09:16:08.566374Z"}, {"uuid": "ba1e65ff-12fc-437f-92b4-e67e042a2304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60754", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfgwsx3de2f", "content": "CVE-2026-60754 - siebel apps - marketing\nOracle's Siebel CRM Marketing product has a security flaw that allows hackers to access sensitive information and even shut down the system. If you use this product,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:10:03.856469Z"}, {"uuid": "d49da2ea-d60f-4af0-8b05-1f36a7560849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60782", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfgwudmgv24", "content": "CVE-2026-60782 - oracle payments\nAttackers can take control of Oracle Payments without a password. This is possible if an attacker can access the Oracle Payments system through the internet.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclepayments #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:10:04.870444Z"}, {"uuid": "104fb2f7-e90e-4c18-a0ed-030df3d131aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60821", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfhip5unw2j", "content": "CVE-2026-60821 - peoplesoft enterprise peopletools\nThe Oracle PeopleSoft PeopleTools Business Interlink component in versions 8.61-8.63 can be exploited by an attacker with internet access to take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:20:04.197883Z"}, {"uuid": "626daac0-a25e-4bdb-9d02-8fefc8b52ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60858", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfhiqhxay23", "content": "CVE-2026-60858 - oracle hyperion calculation manager\nA security flaw in Oracle Hyperion Calculation Manager allows an attacker with internet access to take control of the system. This puts sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:20:05.723197Z"}, {"uuid": "43001381-0119-49bd-9d7b-7c2afea1c7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60861", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfi2m537f2f", "content": "CVE-2026-60861 - service delivery platform\nSome versions of Oracle's Messaging Enabler are vulnerable to a security flaw that could allow an attacker to access and modify sensitive data. This issue affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:30:05.032788Z"}, {"uuid": "74e6176f-18ae-45f0-81b6-40fbff022e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60905", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfi2nhnj52f", "content": "CVE-2026-60905 - oracle webcenter content\nThe Oracle WebCenter Content software, used for managing digital content, has a vulnerability that allows an attacker to access and modify sensitive data without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:30:05.799064Z"}, {"uuid": "98d6646d-675d-42e5-ab56-cd946209a07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mu7wok4acx27", "content": "CISA just added a Gitea RCE to its known exploited list. Active attacks are dropping miner payloads.\n\nCVE-2026-60004.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-29T13:00:58.907623Z"}, {"uuid": "9022b54d-9bc1-4f21-bad9-90592fb6afab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6070", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkc4ug6a2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6070 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP-BusinessDirectory: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/0439069F-2F73-48B9-A2B7-4949E15D88FB", "creation_timestamp": "2026-07-01T12:45:16.033740Z"}, {"uuid": "b6112a80-45b0-4b44-aff8-2b58e88baac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60916", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfimi6ldq2p", "content": "CVE-2026-60916 - oracle webcenter enterprise capture\nThe Oracle WebCenter Enterprise Capture product, used for document capture and management, has a vulnerability that allows unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:40:04.307777Z"}, {"uuid": "51d6090c-9ce4-4dc4-88e5-3ae3c8a5fb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60921", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfimjgscv25", "content": "CVE-2026-60921 - oracle webcenter enterprise capture\nThe Oracle WebCenter Enterprise Capture Client Bundle in versions 12.2.1.4.0 and 14.1.2.0.0 is at risk of takeover by an unauthorized attacker. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:40:05.382572Z"}, {"uuid": "09fe7dd7-5a4f-4bfb-8d25-c2944b66fcc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60946", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfj6egpca25", "content": "CVE-2026-60946 - oracle webcenter enterprise capture\nThe Oracle WebCenter Enterprise Capture product has a security issue that could allow an attacker to take control of the system without a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:50:04.927721Z"}, {"uuid": "5c24eefe-58a1-4529-bbfd-5fccbebca8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60947", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfj6fmzkd2e", "content": "CVE-2026-60947 - oracle webcenter enterprise capture\nThe Oracle WebCenter Enterprise Capture product, part of Oracle Fusion Middleware, has a security flaw that allows an attacker with network access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T00:50:05.617615Z"}, {"uuid": "17e2abdc-10f0-421b-88a0-fd0df2b58cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60958", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfjqb3fu22t", "content": "CVE-2026-60958 - oracle webcenter enterprise capture\nOracle WebCenter Enterprise Capture's client bundle in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a serious security threat. An attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T01:00:04.863152Z"}, {"uuid": "58cbd839-55c7-431d-a0d0-0ba95018afa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60970", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfjqcbas22t", "content": "CVE-2026-60970 - oracle webcenter enterprise capture\nOracle WebCenter Enterprise Capture, part of Oracle Fusion Middleware, has a vulnerability that allows attackers to take control of the system. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T01:00:05.844709Z"}, {"uuid": "1eb11606-7dec-40df-88b2-dc377c2c3355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60971", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfkc57in52u", "content": "CVE-2026-60971 - oracle webcenter enterprise capture\nAn attacker can take control of Oracle WebCenter Enterprise Capture by exploiting a vulnerability in the Client Bundle component of supported versions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T01:10:04.631084Z"}, {"uuid": "e068496e-17fe-419e-a00e-0c595236bd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60977", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfkc6h4hx2m", "content": "CVE-2026-60977 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 are at risk of being taken over by hackers who can access the server remotely. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T01:10:05.882159Z"}, {"uuid": "e60d6589-0ee0-46a1-8f90-4d7002ddea5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60990", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfktz4g4l24", "content": "CVE-2026-60990 - oracle identity manager connector\nSome versions of Oracle Identity Manager Connector in Oracle Fusion Middleware can be compromised by an attacker with network access. This could allow the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T01:20:05.085392Z"}, {"uuid": "8e4910d8-52cb-4657-b15e-b64b5e39e8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60995", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfku2n5lk2e", "content": "CVE-2026-60995 - oracle identity manager connector\nThe Oracle Identity Manager Connector, part of Oracle Fusion Middleware, has a security flaw that allows an attacker to take control of the system. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T01:20:05.831325Z"}, {"uuid": "38a62c44-cdfd-4a5d-a7c9-da8bb27e752b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60977", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtluxrqmdu2x", "content": "\ud83d\udccc CVE-2026-60977 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).  Supported versions that are affecte... https://www.cyberhub.blog/cves/CVE-2026-60977", "creation_timestamp": "2026-08-21T13:37:07.613755Z"}, {"uuid": "f325a604-8b98-43fe-9700-3eae7068855c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60905", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtfltgqrf22p", "content": "Oracle\u2019s Content Vault Bleeds Out While the Bureaucrats Warm Up the Fax\nPANIC 72% | Lag 0.0h | CVE-2026-60905 affects Oracle WebCenter Content and allows unauthorized access and data tampering wi\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-19T01:37:38.709441Z"}, {"uuid": "31b14831-367a-423d-af2c-c23d397e38c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60861", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtfltk45ts2z", "content": "Oracle Leak Ships Live While Prague Stares at the Wall\nPANIC 58% | Lag 0.0h | Oracle Fusion Middleware Messaging Enabler is affected by CVE-2026-60861, which may allow unauthoriz\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-19T01:37:42.495082Z"}, {"uuid": "b9f2857e-14f7-445a-be79-5e5db0682ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/pphm_HackerNews/2148", "content": "\ud83d\udd34 WP2Shell WordPress Vulnerabilities Exploited in the Wild\n\nTwo newly patched WordPress vulnerabilities are being exploited in the wild, with attacks beginning shortly after they came to light. \n\nThe vulnerabilities have been dubbed WP2Shell and they are officially tracked as CVE-2026-60137 and CVE-2026-63030. \n\nAccording to Searchlight Cyber, whose researchers discovered the flaws, WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are affected. \n\n\u201cThe attack has no preconditions and can be exploited by an anonymous user in a stock install of WordPress with no plugins,\u201d the security firm warned.", "creation_timestamp": "2026-08-22T00:00:11.973971Z"}, {"uuid": "b1d78474-7a04-4436-bd9d-e3c8384780fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xct7jk62u", "content": "~Cybergcca~\nGitea RCE CVE-2026-60004 is in CISA KEV; update affected Gitea, OpenSSL and WatchGuard products.\n-\nIOCs: CVE-2026-60004\n-\n#CVE-2026-60004 #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:12:19.545474Z"}, {"uuid": "9893446c-c49a-4b3a-b163-fd09d0129086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/97494", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g0d150ne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 21:08:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without any credentials. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T23:00:03.212393Z"}, {"uuid": "a8951327-ed6b-4d46-8063-f8c59c1d3057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtfnogo7cc2h", "content": "\u300cWordPress\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027 - \u9023\u9396\u3067RCE\u306e\u304a\u305d\u308c\n\n\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u300cWordPress\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670817\u65e5\u3001\u300c\u540c7.0.2\u300d\u3092\u306f\u3058\u3081\u3068\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u3066\u304a\u308a\u3001\u65e9\u6025\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5b9f\u65bd\u3059\u308b\u3088\u3046\u5229\u7528\u8005\u306b\u6c42\u3081\u3066\u3044\u308b\u3002\n\n\u4eca\u56de\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-63030\u300d\u300cCVE-2026-60137\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3002\u3053\u308c\u30892\u4ef6\u306e\u8106\u5f31\u6027\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308b\u3068\u3044\u3046\u3002\n\n\u300cCVE-2026-60137\u300d\u306f\u3001\u4e00\u90e8\u95a2\u6570\u306e\u30d1\u30e9\u30e1\u30fc\u30bf\u306b\u5bfe\u3059\u308b\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106...", "creation_timestamp": "2026-08-19T02:10:40.733819Z"}, {"uuid": "cbceebdd-b9e8-42c6-a862-c51409f16297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97494", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g0d150ne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 21:08:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without any credentials. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:06.540159Z"}, {"uuid": "e9397f4e-55a3-48f5-b658-4e2c324ffc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtfpgfqf2k2d", "content": "An Oracle WebLogic vulnerability, CVE-2026-60702 (CVSS 9.9), allows full server takeover. Oracle patched nine flaws, five rated critical. Update now.\n\n#OracleWebLogic #CVE202660702 #RCE #FusionMiddleware #ServerTakeover #InfoSec", "creation_timestamp": "2026-08-19T02:41:57.552531Z"}, {"uuid": "51f67aa5-261f-409f-bad8-4efd6dff6586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60222", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msrgfhz2z22o", "content": "\ud83d\udccc CVE-2026-60222 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60222", "creation_timestamp": "2026-08-11T01:07:07.138401Z"}, {"uuid": "156b20ce-ee21-418d-927c-a8c76375cee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60946", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnuoanhd42b", "content": "\ud83d\udccc CVE-2026-60946 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60946", "creation_timestamp": "2026-08-22T08:37:06.746495Z"}, {"uuid": "ce77dd97-c2ba-48d2-9a15-b577a8a41a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60727", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtlyd2exxm2h", "content": "\ud83d\udccc CVE-2026-60727 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60727", "creation_timestamp": "2026-08-21T14:37:06.559103Z"}, {"uuid": "edafd8a5-02a7-4d6b-a1cc-e0a1b4b44828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60947", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnwdv3kds2f", "content": "\ud83d\udccc CVE-2026-60947 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60947", "creation_timestamp": "2026-08-22T09:07:06.429062Z"}, {"uuid": "97d2d7ee-09d4-4907-8963-6c269bcac33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-22T00:00:28.600786Z"}, {"uuid": "f842909c-7cd6-4534-a373-242ea493264e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3msxp6c47or2b", "content": "\ud648\ub7a9 \ud574\ud0b9 \uc0ac\uace0 \uc0ac\ud6c4 \ubd84\uc11d\n\n\uacf5\uac1c \uac00\uc785\uc774 \uc5f4\ub9b0 \ucc44 \uc9c0\uc6d0 \uc885\ub8cc\ub41c Forgejo v13 \uc744 \uc6b4\uc601\ud55c \ud648\ub7a9\uc774 CVE-2026-60004 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810\uc73c\ub85c \uce68\ud574\ub3fc \uc57d 24\uc2dc\uac04 \ub3d9\uc548 \uc554\ud638\ud654\ud3d0 \ucc44\uad74\uae30\ub97c \uc2e4\ud589\ud568 \uacf5\uaca9\uc790\ub294 \uacc4\uc815\uacfc \uc800\uc7a5\uc18c\ub97c \ub9cc\ub4e0 \ub4a4 diffpatch \uc5d4\ub4dc\ud3ec\uc778\ud2b8\uc5d0\uc11c \uc545\uc131 Git \ud6c5\uc744 \uc2e4\ud589\ud588\uc73c\uba70, \uacf5\uac1c\ub41c Nu...", "creation_timestamp": "2026-08-13T13:00:07.897986Z"}, {"uuid": "058eeeaa-d9e1-4064-8554-09af19b3b066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-07T00:00:10.562035Z"}, {"uuid": "bdea964b-1575-4e0d-b153-47b12170edbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60821", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnzp7dgbh2u", "content": "\ud83d\udccc CVE-2026-60821 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).  Supported versions that are affe... https://www.cyberhub.blog/cves/CVE-2026-60821", "creation_timestamp": "2026-08-22T10:07:08.053931Z"}, {"uuid": "e1d4cf18-a2a8-4434-8f14-bc6260c59e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60373", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msswz5q2du2x", "content": "\ud83d\udccc CVE-2026-60373 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60373", "creation_timestamp": "2026-08-11T15:37:07.430981Z"}, {"uuid": "eb161683-02c6-4e4c-91ae-29eea6e1228b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/34997", "content": "\ud83d\udea8 CVE-2026-60206 \u2014 Oracle WebLogic SAML Authentication Bypass (Research PoC)\nA research repository demonstrating CVE-2026-60206, a critical SAML authentication bypass vulnerability affecting Oracle WebLogic Server. The project is intended for security research, vulnerability validation, and authorized security testing only.\n\n\ud83d\udccc GitHub\n\ud83d\udc49 https://github.com/imbas007/POC-CVE-2026-60206\n\n\u2728 Features\n\u2022 Detect affected Oracle WebLogic Server versions and exposed SAML endpoints.\n\u2022 Supports non-invasive vulnerability detection mode for validation.\n\u2022 Single-target and bulk target assessment workflows.\n\u2022 JSON report export for assessment results.\n\u2022 Multiple SAML validation and research modes for analyzing authentication handling.\n\u2022 Configurable proxy support for authorized testing environments.\n\u2022 Multi-threaded scanning support for large authorized environments.\n\u2022 Verbose logging for troubleshooting and research.\n\u2022 HTTPS/TLS verification controls for lab environments.\n\u2022 Python-based implementation for easy deployment and customization.\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 Oracle WebLogic Server\n\u2022 SAML\n\u2022 XML\n\u2022 HTTPS\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Red Team Operators\n\u2022 Blue Team Validation\n\u2022 Incident Response Teams\n\u2022 Enterprise Security Administrators\n\n\u26a0\ufe0f Note: This repository is intended for vulnerability research and validation in environments where you have explicit authorization. Organizations using affected Oracle WebLogic Server versions should apply Oracle's security updates and verify their deployments against the latest vendor guidance as soon as possible.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T18:00:05.112271Z"}, {"uuid": "181c7a6c-a8ac-4936-a0f6-137ab2245dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtkavmesvk2o", "content": "\u300cWordPress\u300d\u300cLangflow\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u8b66\u6212\u3092 - \u7c73\u5f53\u5c40\u304c\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001\u300cWordPress\u300d\u3084\u300cLangflow\u300d\u306a\u3069\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670821\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u306b4\u4ef6\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u30b3\u30f3\u30c6\u30f3\u30c4\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b7\u30b9\u30c6\u30e0\u300cWordPress\u300d\u306b\u78ba\u8a8d\u3055\u308c\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-60137\u300d\u300cCVE-2026-63030\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u3053\u308c\u3089\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u9023\u9396\u7684\u306b\u60aa\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c...", "creation_timestamp": "2026-08-20T22:05:19.065410Z"}, {"uuid": "8ef8d065-835e-4329-a72b-b7ec8109eb9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60000", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4ar27dxt2i", "content": "CVE-2026-60000 - OpenSSH GSSAPIAuthentication Denial of Service\nCVE ID : CVE-2026-60000\n \n Published : July 8, 2026, 1:16 a.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from...", "creation_timestamp": "2026-07-08T04:09:54.928546Z"}, {"uuid": "239636c3-a2c3-48ef-9089-ae371083fc10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4azymnyu25", "content": "CVE-2026-60002 - OpenSSH Client Use-After-Free Vulnerability\nCVE ID : CVE-2026-60002\n \n Published : July 8, 2026, 1:16 a.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchan...", "creation_timestamp": "2026-07-08T04:14:58.120085Z"}, {"uuid": "61399bb4-c163-45e7-a9e8-d93d572e1664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4butxpqx2z", "content": "CVE-2026-60001 - OpenSSH Authentication Delay Bypass\nCVE ID : CVE-2026-60001\n \n Published : July 8, 2026, 1:16 a.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.\n \n Severity: 6.5 | MEDIUM\n \n Visit...", "creation_timestamp": "2026-07-08T04:29:56.202228Z"}, {"uuid": "f5bfe99d-9dc8-4bed-8f3c-ba8b21b85f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60092", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5dxfwkna2j", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-60092](https://github.com/WWBN/AVideo/commit/e8d6119f3cb1b849149906efeb0a41fc024f59f8)\n...\nhttps://github.com/WWBN/AVideo/commit/e8d6119f3cb1b849149906efeb0a41fc024f59f8 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-08T14:39:49.546421Z"}, {"uuid": "c22b88af-cb54-4a1b-b5af-a484c13ecdf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60002", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq5fzlonys2r", "content": "OpenSSH 10.4 ships eight security fixes, including a client use-after-free (CVE-2026-60002) plus SFTP and SCP path bugs. Update now.\n\n#OpenSSH #SSH #UseAfterFree #CVE #InfoSec #CyberSecurity", "creation_timestamp": "2026-07-08T15:16:50.333059Z"}, {"uuid": "f4ca04d3-e092-420a-bc5b-4e6a7ce3ddec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5i6tqiyi2t", "content": "CVE-2026-60092 - AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel\nCVE ID : CVE-2026-60092\n \n Published : July 8, 2026, 2:17 p.m. | 42\u00a0minutes ago\n \n Description : AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 co...", "creation_timestamp": "2026-07-08T15:55:33.763320Z"}, {"uuid": "5659ad48-7d92-426b-85c9-d5d6eebda7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ieypywc2z", "content": "CVE-2026-60124 - MISP importModule missing authorization allows read-only users to modify events via misp_standard imports\nCVE ID : CVE-2026-60124\n \n Published : July 8, 2026, 2:17 p.m. | 42\u00a0minutes ago\n \n Description : An authorization bypass in MISP\u2019s EventsController::impor...", "creation_timestamp": "2026-07-08T15:59:01.015897Z"}, {"uuid": "67d9d6ea-d9a9-4d26-a1d2-16475c87f2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60125", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ipsgfyo2w", "content": "CVE-2026-60125 - importModule function in MISP ignores per-organisation import module restrictions\nCVE ID : CVE-2026-60125\n \n Published : July 8, 2026, 2:17 p.m. | 42\u00a0minutes ago\n \n Description : MISP\u2019s importModule() path used getEnabledModule() to resolve a single import mod...", "creation_timestamp": "2026-07-08T16:05:06.714708Z"}, {"uuid": "49a07b53-2819-4e88-a808-715ab4368a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60102", "type": "seen", "source": "https://bsky.app/profile/hackerfantastic.bsky.social/post/3mq5m2sgh3c2w", "content": "Horde Framework, CVE-2026-60102", "creation_timestamp": "2026-07-08T17:04:53.831502Z"}, {"uuid": "1d4a764c-204c-4b53-9040-7a03ec1fc87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nehtqw22g", "content": "CVE-2026-60102 - Horde VFS\nCVE ID : CVE-2026-60102\n \n Published : July 8, 2026, 4:25 p.m. | 49\u00a0minutes ago\n \n Description : Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand...", "creation_timestamp": "2026-07-08T17:28:11.541127Z"}, {"uuid": "e8b75658-00bb-4c61-b246-d1112d06f3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60002", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mq5vxbd2pv2h", "content": "HIGH severity CVE just published in OpenSSH:\n\nCVE-2026-60002. ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)\n\nnvd.nist.gov/vuln/detail/CVE-2026-60002", "creation_timestamp": "2026-07-08T20:01:52.673741Z"}, {"uuid": "bc9fa4f5-bcd7-441a-a6b5-a33e6dc32df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mq64ms7gqd2w", "content": "\ud83d\udfe0 CVE-2026-60105 - High (8.6)\n\nMonsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteF...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-08T22:01:17.463859Z"}, {"uuid": "ce2bdd5d-c0fb-4a25-8bc7-7042e1bdd017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24", "content": "CVE-2026-60104 - Bitwarden Server\nCVE ID : CVE-2026-60104\n \n Published : July 8, 2026, 8:17 p.m. | 58\u00a0minutes ago\n \n Description : Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, a...", "creation_timestamp": "2026-07-08T22:12:26.904523Z"}, {"uuid": "49b5daa5-589b-4e43-88e8-36e18daf8e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z", "content": "CVE-2026-60104 - server\nIf you're using an older version of Bitwarden Server, a malicious user with limited privileges could gain access to another user's encrypted data and take control of their account.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#server #bitwarden #CVE #infosec", "creation_timestamp": "2026-07-08T23:04:05.419307Z"}, {"uuid": "68e60bfe-33de-4c89-9e83-54eadcfd8258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq7cadytwy26", "content": "CVE-2026-60105 - CSRF in Monsta FTP before 2.14.5. Unauthenticated attackers can bypass IP blocklist via IPv4-mapped IPv6 addresses to trigger SSRF. CVSS 8.6. Patch unavailable; restrict access now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-60105/", "creation_timestamp": "2026-07-09T09:14:21.520493Z"}, {"uuid": "733f2082-b82c-4492-8375-b84c74afc557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60102", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq7dvi5afr25", "content": "CVE-2026-60102 - php-horde-vfs\nThe Horde Virtual File System API, used by some applications, has a security flaw that allows attackers to execute system commands by uploading malicious files. This means that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-09T09:44:04.068440Z"}, {"uuid": "9f4fa4ed-60ad-427d-b1de-c205749a896c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/34997", "content": "\ud83d\udea8 CVE-2026-60206 \u2014 Oracle WebLogic SAML Authentication Bypass (Research PoC)\nA research repository demonstrating CVE-2026-60206, a critical SAML authentication bypass vulnerability affecting Oracle WebLogic Server. The project is intended for security research, vulnerability validation, and authorized security testing only.\n\n\ud83d\udccc GitHub\n\ud83d\udc49 https://github.com/imbas007/POC-CVE-2026-60206\n\n\u2728 Features\n\u2022 Detect affected Oracle WebLogic Server versions and exposed SAML endpoints.\n\u2022 Supports non-invasive vulnerability detection mode for validation.\n\u2022 Single-target and bulk target assessment workflows.\n\u2022 JSON report export for assessment results.\n\u2022 Multiple SAML validation and research modes for analyzing authentication handling.\n\u2022 Configurable proxy support for authorized testing environments.\n\u2022 Multi-threaded scanning support for large authorized environments.\n\u2022 Verbose logging for troubleshooting and research.\n\u2022 HTTPS/TLS verification controls for lab environments.\n\u2022 Python-based implementation for easy deployment and customization.\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 Oracle WebLogic Server\n\u2022 SAML\n\u2022 XML\n\u2022 HTTPS\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Red Team Operators\n\u2022 Blue Team Validation\n\u2022 Incident Response Teams\n\u2022 Enterprise Security Administrators\n\n\u26a0\ufe0f Note: This repository is intended for vulnerability research and validation in environments where you have explicit authorization. Organizations using affected Oracle WebLogic Server versions should apply Oracle's security updates and verify their deployments against the latest vendor guidance as soon as possible.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:14.339318Z"}, {"uuid": "da2793aa-b1a0-40bd-950f-5579098d18a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7uliayso2l", "content": "CVE-2026-60108 - Zeek\nCVE ID : CVE-2026-60108\n \n Published : July 9, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process ...", "creation_timestamp": "2026-07-09T14:42:42.594870Z"}, {"uuid": "cfd2fc0d-df3e-4beb-a2b6-6f7f72f94dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7vpbwwl62e", "content": "CVE-2026-60109 - Zeek\nCVE ID : CVE-2026-60109\n \n Published : July 9, 2026, 2:19 p.m. | 13\u00a0minutes ago\n \n Description : Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash th...", "creation_timestamp": "2026-07-09T15:02:43.800873Z"}, {"uuid": "03459ebe-6c8d-4287-ae61-bbcb4ae2f0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://www.acn.gov.it/portale/w/bitwarden-poc-pubblico-per-lo-sfruttamento-di-una-nuova-vulnerabilita", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata tramite la CVE-2026-60104 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in Bitwarden Server, noto software open source di gestione delle password. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato, appartenente alla stessa organizzazione e in presenza di specifiche condizioni, di eludere dei meccanismi di sicurezza e di accedere ad informazioni riservate sui sistemi target.", "creation_timestamp": "2026-07-09T16:00:46.270100Z"}, {"uuid": "2b29f0f2-0245-4545-8abf-c2cb61292e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60002", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqa5pmucgx2f", "content": "CVE-2026-60002 - openssh\nOpenSSH servers before version 10.4 can crash connected clients if their host key is changed during a secure connection. This could potentially be exploited by an attacker, but only\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openssh #openbsd #CVE #infosec", "creation_timestamp": "2026-07-09T17:26:05.996007Z"}, {"uuid": "eed9e9bc-b422-4764-924f-bdcd178a8dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60094", "type": "seen", "source": "https://bsky.app/profile/frycos.bsky.social/post/3mqahfdw4ws2q", "content": "You all know I like backup solution. Some time ago, I looked at Vinchin Backup & Recovery. Most known vulns seemed targeting the web interfaces. My CVE-2026-60094 and CVE-2026-60095 tell a different story: plenty of mem corruptions in other remote services.", "creation_timestamp": "2026-07-09T20:19:17.983746Z"}, {"uuid": "507f4896-93cf-44d9-a7d5-852a4f5d892f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60095", "type": "seen", "source": "https://bsky.app/profile/frycos.bsky.social/post/3mqahfdw4ws2q", "content": "You all know I like backup solution. Some time ago, I looked at Vinchin Backup & Recovery. Most known vulns seemed targeting the web interfaces. My CVE-2026-60094 and CVE-2026-60095 tell a different story: plenty of mem corruptions in other remote services.", "creation_timestamp": "2026-07-09T20:19:18.032030Z"}, {"uuid": "e3699b3e-9279-4ac7-8d91-ac69c4932fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://www.acn.gov.it/portale/w/bitwarden-poc-pubblico-per-lo-sfruttamento-di-una-nuova-vulnerabilita", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata tramite la CVE-2026-60104 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in Bitwarden Server, noto software open source di gestione delle password. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato, appartenente alla stessa organizzazione e in presenza di specifiche condizioni, di eludere dei meccanismi di sicurezza e di accedere ad informazioni riservate sui sistemi target.", "creation_timestamp": "2026-07-10T01:00:49.182665Z"}, {"uuid": "e9a6256d-501b-4b43-9c28-e37db0898fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjpwr6kh2q", "content": "CVE-2026-60091 - PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url\nCVE ID : CVE-2026-60091\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the ...", "creation_timestamp": "2026-07-10T16:06:19.697741Z"}, {"uuid": "d303b318-7cbb-417a-8cfe-6bb1e166a30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqckqcwydo2z", "content": "CVE-2026-60086 - PraisonAI before 4.6.78 Prompt Injection Defense Bypass\nCVE ID : CVE-2026-60086\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defen...", "creation_timestamp": "2026-07-10T16:24:26.289559Z"}, {"uuid": "d965ac76-cd14-40e7-ad2b-a9a131f529c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmcjbu2v27", "content": "CVE-2026-60089 - PraisonAI before 1.6.78 Path Traversal via config.toml\nCVE ID : CVE-2026-60089\n \n Published : July 10, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .pr...", "creation_timestamp": "2026-07-10T16:52:30.592495Z"}, {"uuid": "1d31a409-b221-4aca-8352-b17ca479682b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60091", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxmqnilo2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60091 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8805E9CD-EC2D-447F-AF79-B718B0989859", "creation_timestamp": "2026-07-10T20:15:05.156046Z"}, {"uuid": "045eca79-2e24-4596-b0a2-a7e6ade6bb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60086", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy3aa7mh22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60086 \u0432 PraisonAI: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/26283D44-D2DA-46AD-A5DD-2A2A70CFEF23", "creation_timestamp": "2026-07-10T20:23:11.245349Z"}, {"uuid": "4c75cf6a-6c2a-42e8-a80f-176c0e984aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60089", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy4szvbc27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60089 \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/714A8651-81B0-43CE-A59B-A9EE34693198", "creation_timestamp": "2026-07-10T20:24:04.382081Z"}, {"uuid": "27698e92-c508-4ccf-8406-db21ea9ab1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfvjfxus2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60105 \u0432 Monsta FTP: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/447027C9-A85C-4C39-A2E5-B0B9097DE3DA", "creation_timestamp": "2026-07-11T00:30:32.005022Z"}, {"uuid": "f1700cce-eaf1-46ae-8457-24b09cfa69c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60108", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqe2eytxit23", "content": "\ud83d\udccc CVE-2026-60108 - Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause ... https://www.cyberhub.blog/cves/CVE-2026-60108", "creation_timestamp": "2026-07-11T06:37:06.757029Z"}, {"uuid": "b4396873-e47c-468e-9a28-119f51a5f9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60109", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqe42nzehc2m", "content": "\ud83d\udccc CVE-2026-60109 - Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to ... https://www.cyberhub.blog/cves/CVE-2026-60109", "creation_timestamp": "2026-07-11T07:07:07.089287Z"}, {"uuid": "89e2b516-1b0b-4abe-9de5-76ab65cbcd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60001", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqe75dswgl2g", "content": "OpenSSH: CVE-2026-60001 [MEDIUM]\n\nsshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.\n\nnvd.nist.gov/vuln/detail/CVE-2026-60001", "creation_timestamp": "2026-07-11T08:02:17.968108Z"}, {"uuid": "7abec77e-7af2-4dd5-bcba-0bbb03d8fc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqeulm7xao2h", "content": "CVE-2026-60090\nPraisonAI's knowledge-store in versions before 4.6.78 fails to check user input, allowing malicious users to inject SQL or Cassandra Query Language (CQL) code. This could potentially allow them to access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-11T14:26:05.567033Z"}, {"uuid": "fa6e7c9e-c4d8-4c24-93e1-43f42d5c220f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60088", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevmqodlj2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60088 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5C08563B-8D87-4EE9-BF72-1CA2E634BE55", "creation_timestamp": "2026-07-11T14:44:37.103878Z"}, {"uuid": "0ce43faa-fbe6-4bc1-bd5a-4ca24c390efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60090", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevnii7zw2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60090 \u0432 PraisonAI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FA102B3A-9B07-43C0-BB30-1367FD7BE593", "creation_timestamp": "2026-07-11T14:45:02.856267Z"}, {"uuid": "2728f053-d0d0-4ad5-aab7-5368e46d9108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60090", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewk2gtqw2b", "content": "\ud83d\udd34 CVE-2026-60090 - Critical (9.8)\n\nPraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVecto...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60090/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T15:01:00.741383Z"}, {"uuid": "897f488b-c139-41e9-a278-4ec449163ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60088", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqez6dm7sl2q", "content": "CVE-2026-60088 - PraisonAI before 4.6.78 Path Traversal via Custom Commands\nCVE ID : CVE-2026-60088\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allo...", "creation_timestamp": "2026-07-11T15:48:08.694849Z"}, {"uuid": "a28c658c-cd5a-4fd8-ae94-559fbde4520c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqezqflqeh26", "content": "CVE-2026-60090 - PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension\nCVE ID : CVE-2026-60090\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PG...", "creation_timestamp": "2026-07-11T15:58:31.571646Z"}, {"uuid": "19237cba-adb7-4c1c-b064-0afbdc6b7230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60090", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116904769950802301", "content": "CVE-2026-60090: PraisonAI <4.6.78 suffers CRITICAL SQL injection (CVSS 9.3). Unauthenticated attackers can drop tables or run arbitrary SQL/CQL via create_collection(). Restrict access & upgrade ASAP. https://radar.offseq.com/threat/cve-2026-60090-improper-neutralization-of-special--a49ea84d7839ded1 #OffSeq #infosec #SQLInjection #vuln", "creation_timestamp": "2026-07-12T03:00:25.852885Z"}, {"uuid": "6a3b2385-38b4-48ed-9d9e-27f849c25ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60090", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqg6qjk4vg23", "content": "PraisonAI <4.6.78 has a CRITICAL SQL injection flaw (CVE-2026-60090, CVSS 9.3). Unauthenticated attackers can destroy data. Restrict access & update to 4.6.78+ when available. https://radar.offseq.com/threat/cve-2026-60090-improper-neutralization-of-special--a49ea84d7839ded1 #OffSeq #SQLInjection...", "creation_timestamp": "2026-07-12T03:00:27.599343Z"}, {"uuid": "5c7264d3-efda-4f4e-8177-8a338158dfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6043", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87680", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a p4wned\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a flyingllama87\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-07 07:58:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPerforce security research and tools - CVE-2026-6043\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T12:00:04.820491Z"}, {"uuid": "5f2928fd-a34e-4316-9bf9-4984c5e615dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6043", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87680", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a p4wned\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a flyingllama87\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-07 07:58:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPerforce security research and tools - CVE-2026-6043\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:44.733581Z"}, {"uuid": "68fb229b-a9b8-408f-9795-4855dd624c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/93z-LIlEULZWbnwEzYtTEAqd1z1QFNuHcbWGMZMdxRz5WQ4", "content": "", "creation_timestamp": "2026-08-07T10:19:25.706034Z"}, {"uuid": "e2555b39-8da3-4e4e-895e-dba918694829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqivywqqef2v", "content": "CVE-2026-60090\nPraisonAI versions prior to 4.6.78 are at risk of SQL injection attacks. An attacker can manipulate the dimension value passed to the database, potentially executing malicious SQL commands. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-13T05:02:05.065335Z"}, {"uuid": "0e14ab30-66ab-477e-a584-a03c94b25328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqjuqfucef2t", "content": "CVE-2026-60121 - flamingo\nThe Vitec Flamingo 4.12.2 software has a security flaw that allows unauthorized access to the system. This means an attacker can execute commands on the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flamingo #vitec #CVE #infosec", "creation_timestamp": "2026-07-13T14:12:05.036190Z"}, {"uuid": "a5db380b-bf15-40e4-b03a-789c1cfc40e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjw774vlk2l", "content": "CVE-2026-60121 - Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php\nCVE ID : CVE-2026-60121\n \n Published : July 13, 2026, 2:16 p.m. | 17\u00a0minutes ago\n \n Description : Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in th...", "creation_timestamp": "2026-07-13T14:38:15.076388Z"}, {"uuid": "7706461c-95fc-4217-be42-984962e975a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqjzo77ld22j", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-60121](https://damiri.fr/en/cve/CVE-2026-60121)\nVitec Flamingo 4.12.2 contains an unaut...\nhttps://damiri.fr/en/cve/CVE-2026-60121 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-13T15:40:19.535927Z"}, {"uuid": "f6824036-7939-435e-a979-a0980e6dd7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkcauy3hb2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60121 \u0432 Vitec Flamingo 4.12.2: \u0443\u0433\u0440\u043e\u0437\u0430 OS-\u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/834DA77E-3FE8-4662-970B-FA53B2BF8B3D", "creation_timestamp": "2026-07-13T18:13:56.394630Z"}, {"uuid": "c98902af-4f00-43f5-b564-d2ab196a7705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqkcauwsui2m", "content": "\u6df1\u5ea6\u89e3\u6790Vitec Flamingo 4.12.2\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-60121)\u53ca\u5176\u5b89\u5168\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/40847B2D-3F6D-49AB-B0B5-3EA1D42831C2", "creation_timestamp": "2026-07-13T18:13:56.841394Z"}, {"uuid": "5bce62db-896b-47ca-930c-3c7a2c1c8f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqkhnd6see2f", "content": "\u6df1\u5ea6\u89e3\u6790Vitec Flamingo 4.12.2\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-60121)\u53ca\u5176\u5b89\u5168\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/26923954-BAB4-40B3-9B66-42334A389DD2", "creation_timestamp": "2026-07-13T19:50:22.593994Z"}, {"uuid": "58af3988-b545-4527-878f-4d2fbe74a478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhndtyy72s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60121 \u0432 Vitec Flamingo 4.12.2: \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/F486B30E-B84C-48AF-B423-78ECFB1D75BD", "creation_timestamp": "2026-07-13T19:50:23.540546Z"}, {"uuid": "0c6cbc7d-671d-4e29-96a3-4e5201916dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60103", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60103 \u0432 Blender: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6B36A80D-A1BF-4028-8D5C-013BE7CD636F", "creation_timestamp": "2026-07-14T03:59:38.435038Z"}, {"uuid": "6b77fa72-7388-46c3-99b0-8751a915ff49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/CyberDispatch/2299", "content": "wp2shell now has two CVEs, and a working proof-of-concept is public.\n\n> CVE-2026-63030 breaks REST batch routing\n> CVE-2026-60137 injects SQL\n\nChained, they give an anonymous attacker code execution on affected WordPress sites.", "creation_timestamp": "2026-08-29T20:00:07.246968Z"}, {"uuid": "45b2c358-4fdb-46bd-9abf-03bf7d5da406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/116919144657804527", "content": "New vuln disclosure out from @chocapikk_: Unauth SSRF in Monsta FTP (CVE-2026-60105), makes for a nice primitive. Silently fixed a couple weeks ago, go figure. Full details + PoC out on the @vulncheck blog: https://www.vulncheck.com/blog/monsta-ftp-ssrf-ipv6-blocklist-bypass", "creation_timestamp": "2026-07-14T15:56:06.578317Z"}, {"uuid": "cfe04847-1cbc-4b79-93de-65b72fc0af77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmlgnpvta2e", "content": "CVE-2026-60114 - Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore\nCVE ID : CVE-2026-60114\n \n Published : July 14, 2026, 3:17 p.m. | 13\u00a0minutes ago\n \n Description : Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path travers...", "creation_timestamp": "2026-07-14T16:03:33.329928Z"}, {"uuid": "c8e51cc3-4351-495e-9f78-efd6ea3399f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60702", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mtie2v3ymn2s", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-60702) Oracle WebLogic Server Takeover via T3 and IIOP\" and \"Emerging Threat: (CVE-2026-19478) GitLab Unauthenticated Project Deletion via #GraphQL Directive\".\n \n#cybersecurity #AttackSurfaceManagement https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-20T03:56:37.979576Z"}, {"uuid": "228cb0f6-badb-4b95-92f6-cf65c8cdd4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60082", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmongt66t2f", "content": "CVE-2026-60082: DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row", "creation_timestamp": "2026-07-14T17:01:02.053926Z"}, {"uuid": "6dc60316-6475-4ec4-a992-73f58a143743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60081", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmowgjxe624", "content": "CVE-2026-60081: DBI::ProfileData versions before 1.651 for Perl do not limit the path index", "creation_timestamp": "2026-07-14T17:06:06.776695Z"}, {"uuid": "7990b4b0-8c84-4246-82fc-e07a2c6ec253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60236", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mstv6qmci723", "content": "\ud83d\udccc CVE-2026-60236 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60236", "creation_timestamp": "2026-08-12T00:37:06.729532Z"}, {"uuid": "b8fc6fb9-a509-46ae-a472-ab49a6ae9561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60082", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp2lniocx2l", "content": "CVE-2026-60082 - dbi\nOld versions of Perl's DBI library can cause data corruption when using prepared statements with inconsistent metadata and rows. This can happen when a database query is executed with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dbi #hmbrand #CVE #infosec", "creation_timestamp": "2026-07-15T15:40:08.080857Z"}, {"uuid": "b6ff2676-4e58-454c-b589-627c0363e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2vafmxw2h", "content": "CVE-2026-60085 - PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox\nCVE ID : CVE-2026-60085\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in...", "creation_timestamp": "2026-07-15T15:45:28.053632Z"}, {"uuid": "2370d27a-4ade-4277-bd47-79ac5a2bd32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5pcy7rq2s", "content": "CVE-2026-62175 - Rejected reason: ** REJECT ** DO NOT USE THIS CAND\nCVE ID : CVE-2026-62175\n \n Published : July 15, 2026, 2:18 p.m. | 59\u00a0minutes ago\n \n Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60091. Reason: This candid...", "creation_timestamp": "2026-07-15T16:35:50.676285Z"}, {"uuid": "e032e31e-96e1-4408-af62-4d362bfdd063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60065", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6j4bs6f2m", "content": "CVE-2026-60065 - NGINX Plus ngx_stream_mqtt_filter_module vulnerability\nCVE ID : CVE-2026-60065\n \n Published : July 15, 2026, 2:33 p.m. | 43\u00a0minutes ago\n \n Description : When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stre...", "creation_timestamp": "2026-07-15T16:50:16.233342Z"}, {"uuid": "89688195-ab99-4b9f-9020-ad2dfca12680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp73k3zia2r", "content": "\ud83d\udfe0 CVE-2026-60005 - High (8.2)\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60005/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T17:00:35.053332Z"}, {"uuid": "b445b33c-6a11-491e-bb97-8c829f27d54e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7hsjask2o", "content": "CVE-2026-60062 - NGINX Agent Vulnerability\nCVE ID : CVE-2026-60062\n \n Published : July 15, 2026, 2:33 p.m. | 43\u00a0minutes ago\n \n Description : The NGINX Agent config_dirs\u00a0directive allows a low-privileged attacker to gain limited read and write access to files outside of the des...", "creation_timestamp": "2026-07-15T17:07:26.034632Z"}, {"uuid": "11929fb9-df0b-4957-9b18-29063dc7f79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq5jnrowx2a", "content": "F5 patched the NGINX code execution flaw CVE-2026-42533, along with CVE-2026-60005 and CVE-2026-56434. Update NGINX Plus and Open Source builds now.\n\n#NGINX #CVE202642533 #CodeExecution #F5 #Vulnerability", "creation_timestamp": "2026-07-16T02:05:21.344898Z"}, {"uuid": "dbc31f1a-9daf-416b-a8ff-300ccabc787f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtyefw6p3u2y", "content": "CISA says CVE-2026-60004 is actively exploited in Gitea, letting authenticated users run shell commands via the diffpatch API. Open registration can expose default installs. #Gitea #CISA #CodeInjection", "creation_timestamp": "2026-08-26T12:45:25.010643Z"}, {"uuid": "840f9f34-fa89-4898-a402-f9fe84c5a5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/HackerNewscyber/3371", "content": "\u2708\ufe0f  \u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 Gitea\n\n\ud83c\udfa4\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-60004 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u00ab\u06af\u06cc\u062a\u06cc\u0627\u00bb (Gitea) \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u062e\u0632\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0648\u0634\u062a\u0646 \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc diffpatch\u060c \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0646\u0633\u062e\u0647 1.27.1 \u06af\u06cc\u062a\u06cc\u0627 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 CISA \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631\u06af\u0631\u0641\u062a\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-08-26T13:00:03.350570Z"}, {"uuid": "498a2b41-d891-41fa-91d2-7e5e49f7bbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtyfb6k5nk2q", "content": "\ud83d\udc1b VULNERABILITIES Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/08/26/gitea-cve-2026-60004-exploited-in-the-wild/ #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-26T13:00:38.966074Z"}, {"uuid": "1df66298-2445-4ade-8159-a3fae3aa566c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60103", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05d1\u05dc\u05e0\u05d3\u05e8 - CVE-2026-60103 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/7656C494-AD97-419C-988B-1CF3B7287305", "creation_timestamp": "2026-07-16T08:21:44.328764Z"}, {"uuid": "da7f72c4-4c9b-49c2-a029-4d4045e3a98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60082", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqqwihhxws2u", "content": "CVE-2026-60082 - libdbi-perl\nUsing older versions of Perl's DBI, certain database queries can return incorrect or incomplete data. This is a concern for businesses that rely on accurate database\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libdbiperl #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-16T09:32:03.985152Z"}, {"uuid": "60bf9357-be55-4e3e-a9ae-ada7c3e19f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mu56qo2aoh2n", "content": "Gitea Code Injection Vulnerability https://0daynews.com/cves/cve-2026-60004", "creation_timestamp": "2026-08-28T10:47:25.513297Z"}, {"uuid": "3d0a70db-69b2-4240-b2a5-dce275c8f410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117162038172183890", "content": "\ud83d\udcf0 CISA Warns of Actively Exploited Gitea RCE Flaw (CVE-2026-60004)\n\ud83d\udea8 CISA KEV ALERT: A critical RCE flaw in Gitea (CVE-2026-60004, CVSS 9.8) is actively exploited. Attackers can gain RCE on self-hosted Git servers. Patch to version 1.27.1 or later NOW. #Gitea #RCE #CISA #KEV #CVE202660004\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-gitea-rce-flaw-cve-2026-60004/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-26T13:27:20.337830Z"}, {"uuid": "9297caa5-d019-40ad-b5a9-afde210b41e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtygrbfewf24", "content": "\ud83d\udea8 CISA KEV ALERT: A critical RCE flaw in Gitea (CVE-2026-60004, CVSS 9.8) is actively exploited. Attackers can gain RCE on self-hosted Git servers. Patch to version 1.27.1 or later NOW. #Gitea #RCE #CISA #KEV #CVE202660004\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-26T13:27:32.975098Z"}, {"uuid": "3b6ba592-d3db-41f3-8729-522d3d89502a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/information_security_channel/55803", "content": "CISA Warns of Exploited Gitea Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability (https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-26T14:00:05.691388Z"}, {"uuid": "f9df29db-426b-4150-8bdd-d22589ab5049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:09.782608Z"}, {"uuid": "c35fb9c8-b08f-4053-81b5-c2f3c9f4c8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtyiuyssdi2j", "content": "Gitea RCE under active exploitation: CVE-2026-60004 turns a signup form into shell access.\nSelf-hosted Gitea often sits next to build and OT networks. Patch now.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/gitea-diffpatch-rce-cve-2026-60004-exploited-2026", "creation_timestamp": "2026-08-26T14:05:26.017243Z"}, {"uuid": "0086e846-dc24-4309-9433-48fa16ecc302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60062", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t", "content": "\ud83d\udd17 CVE : CVE-2026-42533, CVE-2026-46333, CVE-2026-52865, CVE-2026-55723, CVE-2026-56434, CVE-2026-59762, CVE-2026-60005, CVE-2026-60062, CVE-2026-60065", "creation_timestamp": "2026-07-16T13:00:07.623313Z"}, {"uuid": "52ca7256-82ec-4a26-bad8-1e2590034339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60065", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t", "content": "\ud83d\udd17 CVE : CVE-2026-42533, CVE-2026-46333, CVE-2026-52865, CVE-2026-55723, CVE-2026-56434, CVE-2026-59762, CVE-2026-60005, CVE-2026-60062, CVE-2026-60065", "creation_timestamp": "2026-07-16T13:00:07.661845Z"}, {"uuid": "b947ddfd-b2c1-4d5e-b074-6fab9b0b289a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t", "content": "\ud83d\udd17 CVE : CVE-2026-42533, CVE-2026-46333, CVE-2026-52865, CVE-2026-55723, CVE-2026-56434, CVE-2026-59762, CVE-2026-60005, CVE-2026-60062, CVE-2026-60065", "creation_timestamp": "2026-07-16T13:00:07.588072Z"}, {"uuid": "69bd9e27-18d5-4ed0-8681-115efb0bff41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117172989688882263", "content": "We are scanning/reporting Gitea instances vulnerable to CVE-2026-60004 (code injection), with 8393 IPs found vulnerable on 2026-08-27. This vulnerability exploited in the wild and on US CISACyber.  Top affected: China, Germany, US\nDashboard view:https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-60004%2B&data_set=count&scale=log&auto_update=on \nIP data shared in our Vulnerable HTTP reporting tagged 'cve-2026-60004': https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nPatch Tracker: https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=30&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-60004%2B&dataset=unique_ips&limit=100&group_by=geo&stacking=stacked&auto_update=on\nExploit code is public. \nGitea advisory: https://blog.gitea.com/release-of-1.27.1/\nNVD entry: https://nvd.nist.gov/vuln/detail/cve-2026-60004", "creation_timestamp": "2026-08-28T11:52:14.680047Z"}, {"uuid": "0d99c8a9-e908-41ac-8ad9-6721b087193b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mu5chx5eos2l", "content": "We are scanning/reporting Gitea instances vulnerable to CVE-2026-60004 (code injection), with 8393 IPs found vulnerable on 2026-08-27. This vulnerability is exploited in the wild and on US CISA KEV. Top affected: China, Germany, US\n\nDashboard view:\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-08-28T11:54:48.900936Z"}, {"uuid": "e47aaaa3-930a-4ba0-8386-349aa599dff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mu5cipyizk2l", "content": "We are scanning/reporting Gitea instances vulnerable to CVE-2026-60004 (code injection), with 8393 IPs found vulnerable on 2026-08-27. This vulnerability is exploited in the wild and on US CISA KEV. Top affected: China, Germany, US\n\nDashboard view:\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-08-28T11:54:49.817512Z"}, {"uuid": "83645e8d-e133-499b-a15c-bd28aed9ddcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60858", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtymdcpd2u2y", "content": "\ud83d\udccc CVE-2026-60858 - Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is... https://www.cyberhub.blog/cves/CVE-2026-60858", "creation_timestamp": "2026-08-26T15:07:07.850629Z"}, {"uuid": "8d0934a9-fcea-4e0e-8bb2-6e9d3a9e8c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mu2sutcdic2h", "content": "\u3010\u7dca\u6025\u3011Gitea \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-60004 / CVSS 9.8 CRITICAL\uff09\n\n\u81ea\u5df1\u30db\u30b9\u30c8\u578bGit\u30b5\u30fc\u30d3\u30b9\u306e1.17\u301c1.27.0\u304c\u5bfe\u8c61\u3067\u3059\u3002diffpatch API\u304b\u3089\u5b9f\u884c\u53ef\u80fd\u306aGit\u30d5\u30c3\u30af\u3092\u4ed5\u8fbc\u307e\u308c\u3001Gitea\u306e\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002CISA\u304c8\u670825\u65e5\u306bKEV\u3078\u8ffd\u52a0\u3001\u662f\u6b63\u671f\u9650\u306f8\u670828\u65e5\u3002\n\u5bfe\u51e6: 1.27.1\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u516c\u5f0f\u306e\u56de\u907f\u7b56\u306f\u3042\u308a\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/git...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-27T12:09:37.682750Z"}, {"uuid": "b91c8970-1b03-4907-92a7-bf555779d826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtwfh7uz7m2s", "content": "\ud83d\uded1 CVE-2026-60004\nGitea Gitea\nKEV \u2705\nTL;DR: Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious\u2026\nhttps://cvesentinel.com/report/CVE-2026-60004?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-25T17:58:42.128307Z"}, {"uuid": "a07a81f1-92e2-4eda-9fca-7c22045ac1e9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96eebf87-b02d-4cdd-9c7f-6c5d0c932c3e", "content": "", "creation_timestamp": "2026-08-25T18:00:02.534858Z"}, {"uuid": "e6a09d4f-cd94-4004-8ff1-91bccd5c9904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtwfk57fjn2v", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0825)\n\n\u26a0\ufe0f CVE-2026-60004 - Gitea Code Injection Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-25T18:00:20.156779Z"}, {"uuid": "aaffa34c-2f1c-413b-83ea-92e0a5206252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtyomwmzjk24", "content": "\ud83e\udd16 CVE-2026-60004: critical code injection in Gitea allows pre-auth shell command execution via open registration. Actively exploited; CISA KEV added. Fixed in 1.27.1.\nhttps://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/", "creation_timestamp": "2026-08-26T15:48:16.928748Z"}, {"uuid": "ff54409e-5174-491b-9cac-b1d235d634e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2869", "content": "\ud83d\udd34 Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-26T16:00:04.382870Z"}, {"uuid": "d23279f2-baba-4b02-b520-0ca018e16c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mu2tuit2or2k", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) #appsec", "creation_timestamp": "2026-08-27T12:27:19.816668Z"}, {"uuid": "66011543-fab4-4144-8aac-3bd5995dd236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtypi7dnfn2s", "content": "CVE-2026-60004: Critical Gitea RCE Exploited to Deploy Miner\n\n", "creation_timestamp": "2026-08-26T16:03:32.370290Z"}, {"uuid": "793eb9e8-0ea3-4f92-9ff2-c19f668de596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/99012", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 04:42:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell \u2014 WordPress Core Pre-Auth RCE Chain poc for CVE-2026-63030 and CVE-2026-60137\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.202074Z"}, {"uuid": "f35c854d-db68-43bd-9627-cfaeb3232ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60063", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04", "content": "", "creation_timestamp": "2026-07-16T16:15:12.573231Z"}, {"uuid": "6728c00f-6517-4ffd-9453-f4cee5d2f924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60140", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04", "content": "", "creation_timestamp": "2026-07-16T16:15:16.947861Z"}, {"uuid": "4c15c676-5b9c-4386-bc03-ba9ee0a554c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60073", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04", "content": "", "creation_timestamp": "2026-07-16T16:15:21.385366Z"}, {"uuid": "6716c9a9-1099-4c83-9354-55784a0f41bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/98928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-63030-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mhassani97\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 12:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.479608Z"}, {"uuid": "52b1c5f1-1a5e-418a-b653-70ad7e02719e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/98743", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-63030-CVE-2026-60137-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TranDongA3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 08:42:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.338777Z"}, {"uuid": "405af267-f5ed-42d9-a93b-4b79c8ea5f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mtwibnsstt2j", "content": "Gitea admins, take note! Since CVE-2026-60004 is now in the KEV, it\u2019s being actively exploited. Prioritize patching your instances ASAP to stay secure. \ud83d\udee1\ufe0f", "creation_timestamp": "2026-08-25T18:49:16.741189Z"}, {"uuid": "a2430bf9-7deb-4309-af94-8784a2cf4853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtwim7t6em2e", "content": "\ud83d\udd34 EXPLOITED\n\nGitea, the self-hosted Git service, has a critical bug (CVE-2026-60004): any user can run code on the server.\n\nOpen signups let a stranger register and exploit it. Now on CISA's exploited list.\n\nFix: patch to 1.27.1.", "creation_timestamp": "2026-08-25T18:55:13.492118Z"}, {"uuid": "8d165792-b7eb-40e9-8357-17221445c63d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60114", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtmbder3e2n", "content": "\ud83d\udccc CVE-2026-60114 - Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore ... https://www.cyberhub.blog/cves/CVE-2026-60114", "creation_timestamp": "2026-07-17T11:07:06.582395Z"}, {"uuid": "56aac45d-f39a-4b80-93c8-bc713ebc3895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtowpazcw24", "content": "CVE-2026-60060 - Tera Term TTSSH2 Plugin Out-of-Bounds Memory Access Vulnerability\nCVE ID : CVE-2026-60060\n \n Published : July 17, 2026, 5:16 a.m. | 4\u00a0hours, 20\u00a0minutes ago\n \n Description : Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in T...", "creation_timestamp": "2026-07-17T11:54:51.252678Z"}, {"uuid": "3db0453e-cac4-46ca-b3f1-e892175b132b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqtpeimxbh2z", "content": "nginx: CVE-2026-60005 [HIGH]\n\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated a\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-60005", "creation_timestamp": "2026-07-17T12:02:33.783562Z"}, {"uuid": "1e4ed2da-4045-4439-a13f-f7fa3769ae26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60082", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqu22w52fq2r", "content": "CVE-2026-60082 - libdbi-perl\nOlder versions of the Perl DBI library may not correctly check the data it reads from a database. This could lead to incorrect or missing data being used\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libdbiperl #canonical #UbuntuPro1404LTS #CVE #infosec", "creation_timestamp": "2026-07-17T15:14:03.889730Z"}, {"uuid": "ab4a0317-cdfb-4c8f-95d9-afcf0fd4b891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqulbqes2k2a", "content": "CVE-2026-60137 - wordpress\nAn outdated version of WordPress allows hackers to inject malicious SQL code, potentially stealing sensitive data or taking control of the website. This is particularly concerning if you\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wordpress #CVE #infosec", "creation_timestamp": "2026-07-17T20:22:05.954349Z"}, {"uuid": "93d7c8a8-ff61-491d-8abb-f8a79bbbcf39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquqd5kxgq2i", "content": "CVE-2026-60137 - WordPress\nCVE ID : CVE-2026-60137\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which coul...", "creation_timestamp": "2026-07-17T21:52:22.244868Z"}, {"uuid": "f5b1c907-b1bd-45b3-a07d-8d646a19a18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqursxmdqy2o", "content": "The watchTowr team is rapidly reacting to the Remote Code Execution vulnerability chain (CVE-2026-63030 and CVE-2026-60137) in WordPress Core across our client-base, a just-disclosed flaw in the REST API batch dispat\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2078238662827917416)", "creation_timestamp": "2026-07-17T22:19:07.251702Z"}, {"uuid": "c1f608f1-2a7b-4165-bcc9-6caa499268e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-gitea", "content": "", "creation_timestamp": "2026-08-26T16:45:02.528731Z"}, {"uuid": "c1eba3cf-60ed-4eff-8cdb-602fb94817c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/93917", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wordpress-cve-2026-63030\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Senanfurkan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 00:44:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE in WordPress Core via REST API batch route confusion + WP_Query SQLi (CVE-2026-63030 / CVE-2026-60137). Detection PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T02:00:04.194638Z"}, {"uuid": "d54c7775-9f25-41d2-b6bc-415c72e74bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mqv5lssche27", "content": "\ud83d\udd34 Nexcess is reporting a Major Outage since 01:44 UTC\n\n\"WP2Shell Wordpress Core Critical Remote Code Execution Vulnerabilities, CVE-2026-60137 and\u2026\"\n\nAffects: Wordpress Core Updates\n\nLive timeline \u2192 https://pingoru.io/providers/nexcess/incidents/6534738\n\n#Nexcess #NexcessDown", "creation_timestamp": "2026-07-18T01:49:51.933679Z"}, {"uuid": "33803ae3-a89c-4295-8e1c-c939fafca002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mqv5sy6vwi2n", "content": "\ud83d\udd34 Liquid Web is reporting a Major Outage since 01:48 UTC\n\n\"WP2Shell Wordpress Core Critical Remote Code Execution Vulnerabilities, CVE-2026-60137 and CVE-2026-63030\"\n\nLive timeline \u2192 https://pingoru.io/providers/liquid-web/incidents/6534739\n\n#LiquidWeb #LiquidWebDown", "creation_timestamp": "2026-07-18T01:53:52.155389Z"}, {"uuid": "c2b4b031-36a1-4a58-ac78-00e165df86e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117157758952896525", "content": "CISA has updated the KEV catalogue.\n- CVE-2026-60004: Gitea Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-60004\n- Industrial vulnerability: Rently Smart Home https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-01\nAlso:\nPress release: CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response https://www.cisa.gov/news-events/news/cisa-advisory-highlights-red-team-findings-help-organizations-assess-risk-identify-threats-and\nThe advisory:  A Tale of Two SOCs: Insights From Two Red Team Assessments https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a #CISA #infosec #vulnerability", "creation_timestamp": "2026-08-25T19:18:51.838372Z"}, {"uuid": "a0c619bd-b994-46c0-96f9-ee949161d3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93933", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 47Cid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 03:53:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T06:00:04.982155Z"}, {"uuid": "901ee37b-d5cb-4f9c-b046-21e92f2934a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mqvlxtsavk2d", "content": "\ud83d\udea8 wp2shell: RCE cr\u00edtic al nucli de WordPress, no en cap plugin. Una petici\u00f3 an\u00f2nima pot desembocar en execuci\u00f3 de codi al servidor. \nAfecta: 6.9.0\u20136.9.4 i 7.0.0\u20137.0.1. \nEs soluciona amb les versions: 7.0.2/6.9.5/6.8.6. \nCVE-2026-63030 i CVE-2026-60137.\nclaude.ai/public/artif...", "creation_timestamp": "2026-07-18T06:07:26.275197Z"}, {"uuid": "4372541d-aca3-4209-9e01-b792fe1cefe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/ap/users/116810780845358081/statuses/116939389643192070", "content": "\ud83d\udea8 CRITICAL: WordPress Core \"wp2shell\" RCE\nA single anonymous HTTP request can lead to Remote Code Execution on vulnerable WordPress Core installations.\n\u26a0\ufe0f No plugins.\u26a0\ufe0f No themes.\u26a0\ufe0f No authentication required.\nTracked as:\ud83d\udd34 CVE-2026-63030 (REST API Batch Route Confusion \u2192 RCE)\ud83d\udd34 CVE-2026-60137 (Facilitated SQL Injection)\nAffected versions\u2022 WordPress 6.9.0\u20136.9.4\u2022 WordPress 7.0.0\u20137.0.1\n\u2705 Update immediately to WordPress 6.9.5 or 7.0.2. Due to the severity, WordPress has enabled forced automatic security updates for affected installations.\n\ud83d\udd17 Full technical analysis:https://thecybersecguru.com/news/wordpress-core-rce-wp2shell/\n#WordPress #WordPressSecurity #wp2shell #CVE202663030 #CVE202660137 #RCE #RemoteCodeExecution #SQLInjection #RESTAPI #CyberSecurity #InfoSec #WebSecurity #WebsiteSecurity #PatchNow #ThreatIntelligence #BlueTeam #SOC #Linux #PHP #ZeroDay #SecurityResearch #SysAdmin #DevSecOps", "creation_timestamp": "2026-07-18T06:11:07.796792Z"}, {"uuid": "e6b48bd9-c876-4627-9315-c1fd6ecaae7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mqvmoh65uq2w", "content": "Pokud jste je\u0161t\u011b nektualizovali WordPress tak zbyst\u0159ee, jsou tam dv\u011b z\u00e1va\u017en\u00e9 chyby p\u0159\u00edmo v j\u00e1d\u0159e. CVE-2026-60137: SQL injection a CVE-2026-63030: Unauthenticated remote code execution.", "creation_timestamp": "2026-07-18T06:19:46.717219Z"}, {"uuid": "e20af41e-4141-49fe-b328-a593b904cf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/javiercasares.com/post/3mqvn6wa3bs23", "content": "#WordPress #Seguridad\nSi usas WordPress 6.9, 6.9 o 7.0, actualiza a las \u00faltimas versiones disponibles. Hay unos parches de seguridad que corrigen 2 elementos cr\u00edticos (RCE / SQLi).\n- CVE-2026-60137: corrigen: 6.8.6 - 6.9.5 - 7.0.2\n- CVE-2026-63030: corrigen: 6.9.5 - 7.0.2", "creation_timestamp": "2026-07-18T06:28:59.354212Z"}, {"uuid": "1cdc74f2-12ca-41d4-bc8a-398569b35b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mqvs5q5aac2z", "content": "#Wordpress: Critical Remote Code Execution (#RCE) chain of vulnerabilities CVE-2026-63030 and #SQLi SQL Injection CVE-2026-60137 dubbed #wp2shell in WordPress Core threaten 500+ million of websites. \nPatch now!:\n\ud83d\udc47\nthehackernews.com/2026/07/new-...", "creation_timestamp": "2026-07-18T07:57:46.344998Z"}, {"uuid": "8ba913e8-0720-4397-a254-54cb6664d1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/thehackernews/9544", "content": "\u26a1 UPDATE: #wp2shell now has two CVEs, and a working proof-of-concept is public.\n\n> CVE-2026-63030 breaks REST batch routing\n> CVE-2026-60137 injects SQL\n\nChained, they give an anonymous attacker code execution on affected WordPress sites.\n\nHow the exploit path works: https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html", "creation_timestamp": "2026-07-18T08:00:04.021980Z"}, {"uuid": "91b90be2-1487-4da9-a1bd-119d8982305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqvtts4tm22m", "content": "\ud83e\udd16 CVE-2026-63030 / CVE-2026-60137: SQL injection in WP REST API batch endpoint allows unauthenticated RCE on all 6.9/7.0 sites. PoC published.\nhttps://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html", "creation_timestamp": "2026-07-18T08:28:01.624087Z"}, {"uuid": "f8695508-e1f4-4b71-8e33-aa98b4ab0372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116940092329234240", "content": "\u26a1 UPDATE: #wp2shell now has two CVEs, and a working proof-of-concept is public.\n> CVE-2026-63030 breaks REST batch routing> CVE-2026-60137 injects SQL\nChained, they give an anonymous attacker code execution on affected WordPress sites.\nHow the exploit path works: https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html", "creation_timestamp": "2026-07-18T08:43:23.355743Z"}, {"uuid": "6b13234a-bd06-485c-90a1-a4c6e5e8f99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93958", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NULL200OK\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 07:52:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWP2Shell - CVE-2026-63030 / CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `/wp-json/batch/v1` endpoint, allowing unauthenticated attackers to execute arbitrary SQL queries and achieve Remote Code Execution (RCE) on vulnerable WordPress installations.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T09:00:04.366182Z"}, {"uuid": "12bcc2ef-749a-4bdd-b00a-271689b7f2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93950", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ekomsSavior\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 06:55:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T09:00:04.452260Z"}, {"uuid": "70ef9694-d578-48b0-a868-29a4945b8edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60084", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpewsiesz2b", "content": "\ud83d\udfe0 CVE-2026-60084 - High (8.7)\n\nSiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60084/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T23:00:53.578331Z"}, {"uuid": "42777219-dc50-4728-a7d3-fe43ffd2dba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116940574604966863", "content": "wp2shell (CVE-2026-63030 + CVE-2026-60137): Independent Root Cause Analysis https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause", "creation_timestamp": "2026-07-18T10:46:01.244626Z"}, {"uuid": "931724e0-84c1-47ee-a4eb-209d6a3bed32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mqw3knqcm7b2", "content": "wp2shell (CVE-2026-63030 + CVE-2026-60137): Independent Root Cause Analysis https://github.com/tcyph3r/wp2shell-cve-2026-63030-root-cause", "creation_timestamp": "2026-07-18T10:46:10.175485Z"}, {"uuid": "59e7bd5e-ec95-428c-bedf-90ce4898a0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93979", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kulichr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 10:08:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-intrusive checker for CVE-2026-63030 / CVE-2026-60137 (\"wp2shell\"), a pre-authentication RCE chain in WordPress core.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T12:00:03.634188Z"}, {"uuid": "c63e97d6-e8ad-4c87-b70a-fd105ca3eec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845", "content": "", "creation_timestamp": "2026-08-25T20:15:03.584623Z"}, {"uuid": "4683a5b8-c0b9-4558-bfb0-301e91605d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mqweh3yqa42q", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\nWordPress\u306e\u6df1\u523b\u5ea6\u300c\u7dca\u6025\u300d\u8106\u5f31\u6027 wp2shell \u306e\u6982\u8981\u3068\u5bfe\u5fdc\u6307\u91dd - GMO Flatt Security Blog\n\n2026\u5e747\u670817\u65e5\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\u300cCVE-2026-63030\u300d\u300cCVE-2026-60137\u300d\u3092\u4fee\u6b63\u3057\u305fWordPress 6.8.6\u30016.9.5\u3001\u304a\u3088\u3073 7.0.2 \u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08\u53c2\u8003\uff1aWordPress 7.0.2 Release\uff09\u3002 \u5f0a\u793e GMO Flatt Security \u30ea\u30b5\u30fc\u30c1\u30c1\u30fc\u30e0\u306e\u691c\u8a3c\u3067\u306f\u3001\u8106\u5f31\u306a\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u306f\u6a19\u6e96\u69cb\u6210\u3067\u3082\u3001\u7ba1...", "creation_timestamp": "2026-07-18T13:25:10.233202Z"}, {"uuid": "5c003ea9-c9ec-4767-bf1b-c8c3071863b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mqweklzf2c2d", "content": "This now has two related CVEs: CVE-2026-63030 and CVE-2026-60137.", "creation_timestamp": "2026-07-18T13:27:07.339339Z"}, {"uuid": "7a288037-eb02-40b1-aa0e-9b9ef01e8119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mqwffjjxf22o", "content": "#WordPress admins - we got you covered! \ud83e\udee1 \u2192 We've just shipped detection for #wp2shell through our Network Scanner. \u26a1\ufe0f The fastest way to use it is to:\n\n\u25c9 run a single-CVE scan for CVE-2026-63030 (also covers CVE-2026-60137 - the SQLi flaw that chains & leads to RCE)\n\u25c9 Based on your scan results...", "creation_timestamp": "2026-07-18T13:42:16.124343Z"}, {"uuid": "efa92fde-e8ee-41eb-a3cf-e8b528bfd4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mqwffnk6vk2o", "content": "#WordPress admins - we got you covered! \ud83e\udee1 \u2192 We've just shipped detection for #wp2shell through our Network Scanner. \u26a1\ufe0f The fastest way to use it is to:\n\n\u25c9 run a single-CVE scan for CVE-2026-63030 (also covers CVE-2026-60137 - the SQLi flaw that chains & leads to RCE)\n\u25c9 Based on your scan results...", "creation_timestamp": "2026-07-18T13:42:16.609570Z"}, {"uuid": "9f3231c3-a373-4e7d-8152-ca3ce95921a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqwgkaiooz2c", "content": "\ud83d\udea8 VULN: WordPress core 'wp2shell' \u2014 CVE-2026-63030 (REST API batch-route confusion) chained with CVE-2026-60137 (SQLi) gives unauthenticated RCE on a bare install. Fixed in 6.9.5/7.0.2 (forced auto-update); 6.8.x SQLi fixed in 6.8.6. Public PoC live. Src: The Hacker News", "creation_timestamp": "2026-07-18T14:02:42.231810Z"}, {"uuid": "1b124a01-3e96-42f8-ab18-3467b8acf8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqwkbej5mv22", "content": "WordPress\u306b\u65b0\u305f\u306a\u9ad8\u6df1\u523b\u5ea6\u8106\u5f31\u60272\u4ef6\u3001\u76f4\u3061\u306b\u30d1\u30c3\u30c1\u9069\u7528\u3092!\n\n7.0.2\u7248\u306eWordPress\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u3067\u306f\u3001\u6df1\u523b\u5ea6\u30af\u30ea\u30c6\u30a3\u30ab\u30eb1\u4ef6\u3068\u9ad8\u6df1\u523b\u5ea61\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u554f\u984c\u304c\u4fee\u6b63\u3055\u308c\u307e\u3057\u305f\u3002 WordPress\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30fc\u30e0\u306b\u5831\u544a\u3055\u308c\u305f\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002 CVE-2026-60137 \u2013 TF1T\u3001dtro\u3001haongo\u306e\u30c1\u30fc\u30e0\u306b\u3088\u3063\u3066\u5831\u544a\u3055\u308c\u305f...", "creation_timestamp": "2026-07-18T15:09:19.459912Z"}, {"uuid": "3705f691-7607-464b-98b2-b157df170785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqwkcegsyy2c", "content": "It's Friday, so of course we can't have nice things! \n\nInitial technical analysis of #wp2shell CVE-2026-63030 and CVE-2026-60137 from the \n@VulnCheckAI\n research team \u2014 so far, it could be worse (but it's still\u2026\n\n\ud83d\udd01 RT @catc0n | reposted by @HackingLZ\nhttps://x.com/catc0n/status/2078306495817453717", "creation_timestamp": "2026-07-18T15:09:53.900661Z"}, {"uuid": "b31e7667-596d-4aaf-a201-a83b43fe89d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqwovkrqbv2j", "content": "CVE-2026-60137: Two Critical WordPress Vulnerabilities Demand Immediate Action #WordPress #CVE2026 #CyberSecurity", "creation_timestamp": "2026-07-18T16:32:12.481351Z"}, {"uuid": "f97f0345-0093-4207-aa16-79fd04cce3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mqwmgleo3s2y", "content": "\ud83d\udea8 wp2shell affects multiple vulnerabilities (CVE-2026-63030, CVE-2026-60137)\n\nRunning WordPress? Check your versions and patch to 6.8.6/6.9.5/7.0.2. If you can't patch immediately, apply the mitigations in the meantime.\n\n\u2139\ufe0f secdb.nttzen.cloud/updates/a5a5...\n\n#infosec #wordpress #rce #sqlinjection", "creation_timestamp": "2026-07-18T15:48:05.376012Z"}, {"uuid": "ded0e68b-baad-4ca3-849b-47f629733c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-poc-pubblico-per-lo-sfruttamento-delle-cve-2026-60137-e-cve-2026-63030", "content": "Disponibile Proof of Concept (PoC) per le vulnerabilit\u00e0 identificate dalle CVE-2026-60137 e CVE-2026-63030, gi\u00e0 sanate dal vendor, che interessa il prodotto WordPress Core.", "creation_timestamp": "2026-07-18T16:00:49.441683Z"}, {"uuid": "2798043a-6de6-4fce-ac74-273edca626b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/davidgerard.circumstances.run.ap.brid.gy/post/3mqwo4mfczkf2", "content": "Update your WordPress to 7.0.2/6.9.5, it's important\n\nhttps://discourse.ifin.network/t/cve-2026-63030-and-cve-2026-60137-wp2shell-pre-auth-rce-in-wordpress-eitw/672/2", "creation_timestamp": "2026-07-18T16:18:20.800955Z"}, {"uuid": "47d8ffdb-a210-4f73-b0ae-4dab6cfbd1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqwoxeobuo2j", "content": "CVE-2026-60137: WordPress Vulnerabilities Demand Immediate Patching #WordPress #CVE2026 #Cybersecurity", "creation_timestamp": "2026-07-18T16:33:13.486182Z"}, {"uuid": "45ed2e8f-5d55-46b2-a79c-2009021753a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqwoxglrkd25", "content": "CVE-2026-60137: WordPress Vulnerabilities Demand Immediate Action Amid Confusion #WordPress #CVE2026 #CyberSecurity", "creation_timestamp": "2026-07-18T16:33:15.079471Z"}, {"uuid": "9291c5eb-bc30-40c7-855a-dfc544893094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqwoxiaae62j", "content": "CVE-2026-60137: WordPress Vulnerabilities Reveal Serious Patch Gaps #CVE2026 #WordPress #CyberSecurity", "creation_timestamp": "2026-07-18T16:33:16.931905Z"}, {"uuid": "b44c9c6a-20c7-4663-9132-9adaaebd69d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqwoxjwxgn2y", "content": "CVE-2026-60137: WordPress Vulnerabilities Demand Patching, But What\u2019s the Evidence? #WordPress #CyberSecurity #Vulnerabilities", "creation_timestamp": "2026-07-18T16:33:19.514922Z"}, {"uuid": "0732a507-e14c-4f2a-9bde-93618c3be651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqwoxli4kv2u", "content": "CVE-2026-60137: Immediate Patches or a Misguided Response? #CVE202660137 #WordPressSecurity #Cybersecurity", "creation_timestamp": "2026-07-18T16:33:20.475464Z"}, {"uuid": "456e8f4d-3893-449d-a64e-97310f3525db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116942018680723716", "content": "Attention, elevated activities detected targeting WordPress (CVE-2026-60137) https://vuldb.com/vuln/379928/cti", "creation_timestamp": "2026-07-18T16:53:15.975571Z"}, {"uuid": "b6c6c2eb-0b06-4c09-90a5-2f6ac11eeb2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94005", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xsha\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 14:29:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 + CVE-2026-60137 - \u201cwp2shell\u201d: unauthenticated RCE in WordPress core\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T17:00:05.115796Z"}, {"uuid": "b9fe8ece-fbbb-409a-a2e9-fb4059055529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94017", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h4cd0c\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 16:41:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell \u2014 Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0\u20136.9.4 / 7.0.0\u20137.0.1.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T18:00:04.537963Z"}, {"uuid": "aa2b781f-b6db-4c42-a15c-9da733a2daf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqwttcd5pq2a", "content": "Public exploits for WordPress Core wp2shell flaws now enable pre-auth RCE on 6.9.x and 7.0.x. Tracked as CVE-2026-63030 and CVE-2026-60137. WordPress has pushed security updates. #WordPress #RCE #CVE2026", "creation_timestamp": "2026-07-18T18:00:25.538988Z"}, {"uuid": "3f9158a3-5199-44b3-9a4d-572f44621ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99012", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 04:42:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell \u2014 WordPress Core Pre-Auth RCE Chain poc for CVE-2026-63030 and CVE-2026-60137\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.118922Z"}, {"uuid": "8314ddf9-92f7-40fb-b659-674355a1b026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116942282990851209", "content": "WordPress Core \"wp2shell\" CRITICAL RCE chain (CVE-2026-63030 & CVE-2026-60137) actively exploited. Affects 6.9.0 \u2013 6.9.4 & 7.0.0 \u2013 7.0.1. Public PoCs out. Patch to 6.9.5/7.0.2 ASAP. Block REST API endpoints as temp mitigation. https://radar.offseq.com/threat/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now-99579d9a7c571599 #OffSeq #WordPress #RCE #Vuln", "creation_timestamp": "2026-07-18T18:00:29.454515Z"}, {"uuid": "f4ee5b99-9a51-4595-b192-ec65ef9aff97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqwvxjrszp24", "content": "\ud83e\udd16 WordPress Core \"wp2shell\" RCE (CVE-2026-63030, CVE-2026-60137): public exploits released for critical unauthenticated RCE. Patch immediately.\n\nhttps://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/", "creation_timestamp": "2026-07-18T18:38:34.436346Z"}, {"uuid": "752737bd-11bf-42d0-8f62-2cbb85a9b552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/393", "content": "WordPress Core \"wp2shell\" RCE\n\nThe attack consists of two flaws, tracked as CVE-2026-63030 and CVE-2026-60137, that can be chained together to achieve pre-authentication remote code execution against WordPress installs running versions 6.9.x and 7.0.x.", "creation_timestamp": "2026-07-18T19:00:04.561700Z"}, {"uuid": "b31afaa7-044e-48f3-bfff-857f28426e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/86094", "content": "\ud83c\udf10\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05e4\u05dc\u05d8\u05e4\u05d5\u05e8\u05de\u05ea Wordpress \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea (\u05d9\u05d7\u05d3) \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea CVE-2026-60137 \u05d5-CVE-2026-63030 \u05db\u05d5\u05dc\u05dc\u05d5\u05ea \u05db\u05d1\u05e8 POC \u05e2\u05d5\u05d1\u05d3 \u05e9\u05e4\u05d5\u05e8\u05e1\u05dd \u05d1\u05e8\u05e9\u05ea, \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05d4\u05db\u05d9\u05e0\u05d5\u05d9 wp2shell, \u05d5\u05d4\u05df \u05e4\u05d5\u05e6'\u05e4\u05e6'\u05d5 \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 6.9.5 \u05d5-7.0.2.\n\nhttps://t.me/CyberSecurityIL/9229", "creation_timestamp": "2026-07-18T19:00:04.608960Z"}, {"uuid": "55766d6b-261e-4431-a6fb-d717cc3f2e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94025", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xWhoknows\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 17:33:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAutomated exploit chain for CVE-2026-63030 / CVE-2026-60137 \u2014 unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T20:00:03.954758Z"}, {"uuid": "56104ddf-3d88-4865-81fd-a323951c23b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94024", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell_scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zi3lak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 17:56:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T20:00:04.036169Z"}, {"uuid": "3742d0a3-6504-40b1-8cfb-698777b83913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94031", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yoerivegt\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 19:02:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell (CVE-2026-60137 / CVE-2026-63030)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T20:00:04.140703Z"}, {"uuid": "f3f55324-4cc2-41f2-867b-6f02a0fc2d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60062", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqx2kdrped2i", "content": "New MEDIUM CVE for nginx: CVE-2026-60062\n\nThe NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The config_dirs directive required for\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-60062", "creation_timestamp": "2026-07-18T20:00:40.355733Z"}, {"uuid": "39cb4a5d-a5e1-4b99-b1ac-face87473bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94036", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WordPresShell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a securelayer7\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 19:57:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T21:00:03.761225Z"}, {"uuid": "a07b8918-7dcb-41cd-b9b9-461a2148dce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqx5yezwym2e", "content": "\ud83d\udee1\ufe0f RECAP: WordPress 'wp2shell' \u2014 CVE-2026-63030 chained with CVE-2026-60137 gave unauthenticated RCE on a bare install. Emergency patch shipped (6.9.5/7.0.2 forced auto-update). Public PoC live. Src: The Hacker News", "creation_timestamp": "2026-07-18T21:02:12.745094Z"}, {"uuid": "b9b9e303-fc1e-4caf-a2ff-e703ab0f6859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116943287112997869", "content": "I didn't confirm it, but there's apparently a public exploit for wp2shell (CVE-2026-60137 and CVE-2026-63030)https://warez.sl0p.foo/wp2shell-fast/", "creation_timestamp": "2026-07-18T22:15:51.668418Z"}, {"uuid": "825bb649-e4da-47d1-af8d-84afe808ac80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mqxc4625swq2", "content": "I didn't confirm it, but there's apparently a public exploit for wp2shell (CVE-2026-60137 and CVE-2026-63030)\nhttps://warez.sl0p.foo/wp2shell-fast/", "creation_timestamp": "2026-07-18T22:15:56.360830Z"}, {"uuid": "1d8626b8-379c-48d7-856e-d3b1ed4f0fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94049", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JohenLastGen-JLG\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 21:39:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T23:00:03.226943Z"}, {"uuid": "e46562b8-a155-4f1e-a28d-b1d7f7c3361f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94051", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-detect\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a own2pwn-fr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 21:36:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBlackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-18T23:00:03.445776Z"}, {"uuid": "116a2a0a-bb13-4b96-a65d-56e6d64c0211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94049", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JohenLastGen-JLG\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 21:39:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:08.662852Z"}, {"uuid": "0596045f-a391-44c9-88ae-bc2bce30e479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94051", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-detect\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a own2pwn-fr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 21:36:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBlackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:08.985449Z"}, {"uuid": "e561bd83-e6f2-489c-a226-3b680ea573f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94036", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WordPresShell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a securelayer7\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 19:57:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:09.245925Z"}, {"uuid": "c757a909-0dea-4042-a48f-871c82dc9269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94025", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xWhoknows\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 17:33:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAutomated exploit chain for CVE-2026-63030 / CVE-2026-60137 \u2014 unauthenticated blind SQLi via WordPress REST batch route-confusion. Dumps user hashes, cracks credentials, deploys webshell. Supports single target and bulk site lists. For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:09.431792Z"}, {"uuid": "e91ad276-7f66-4e54-80bd-d1c605a0b748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/86094", "content": "\ud83c\udf10\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05e9\u05ea\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05e4\u05dc\u05d8\u05e4\u05d5\u05e8\u05de\u05ea Wordpress \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea (\u05d9\u05d7\u05d3) \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea CVE-2026-60137 \u05d5-CVE-2026-63030 \u05db\u05d5\u05dc\u05dc\u05d5\u05ea \u05db\u05d1\u05e8 POC \u05e2\u05d5\u05d1\u05d3 \u05e9\u05e4\u05d5\u05e8\u05e1\u05dd \u05d1\u05e8\u05e9\u05ea, \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05d4\u05db\u05d9\u05e0\u05d5\u05d9 wp2shell, \u05d5\u05d4\u05df \u05e4\u05d5\u05e6'\u05e4\u05e6'\u05d5 \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 6.9.5 \u05d5-7.0.2.\n\nhttps://t.me/CyberSecurityIL/9229", "creation_timestamp": "2026-07-19T00:00:09.893754Z"}, {"uuid": "1aeb1e3a-48f1-4eb8-aaeb-415f2889c8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93958", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NULL200OK\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 07:52:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWP2Shell - CVE-2026-63030 / CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `/wp-json/batch/v1` endpoint, allowing unauthenticated attackers to execute arbitrary SQL queries and achieve Remote Code Execution (RCE) on vulnerable WordPress installations.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:28.582141Z"}, {"uuid": "75956633-4c25-43aa-8bde-a03e8aee4b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93950", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ekomsSavior\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 06:55:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:28.652646Z"}, {"uuid": "7b2d6cb7-31d4-45cb-9fd9-af5b41553af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94024", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell_scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zi3lak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 17:56:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:09.525678Z"}, {"uuid": "0bb8f560-af86-4a7e-93c4-3b451d7d3146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94031", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yoerivegt\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 19:02:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell (CVE-2026-60137 / CVE-2026-63030)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:09.671313Z"}, {"uuid": "8e153f01-1224-4e37-8c94-2a53407fa6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/393", "content": "WordPress Core \"wp2shell\" RCE\n\nThe attack consists of two flaws, tracked as CVE-2026-63030 and CVE-2026-60137, that can be chained together to achieve pre-authentication remote code execution against WordPress installs running versions 6.9.x and 7.0.x.", "creation_timestamp": "2026-07-19T00:00:09.848609Z"}, {"uuid": "1ed47b7e-def2-4f40-9326-48b2411f8cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94005", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xsha\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 14:29:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 + CVE-2026-60137 - \u201cwp2shell\u201d: unauthenticated RCE in WordPress core\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:11.892588Z"}, {"uuid": "4e19ce8e-627e-472c-b90c-8c235dc9f5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94017", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h4cd0c\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 16:41:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell \u2014 Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0\u20136.9.4 / 7.0.0\u20137.0.1.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:11.004435Z"}, {"uuid": "4dd89ccf-6324-4141-a28e-2e92dbc220bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93979", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kulichr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 10:08:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-intrusive checker for CVE-2026-63030 / CVE-2026-60137 (\"wp2shell\"), a pre-authentication RCE chain in WordPress core.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:28.355724Z"}, {"uuid": "2cd449d3-acb9-419c-b035-74299bb3e9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9544", "content": "\u26a1 UPDATE: #wp2shell now has two CVEs, and a working proof-of-concept is public.\n\n> CVE-2026-63030 breaks REST batch routing\n> CVE-2026-60137 injects SQL\n\nChained, they give an anonymous attacker code execution on affected WordPress sites.\n\nHow the exploit path works: https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html", "creation_timestamp": "2026-07-19T00:00:28.506488Z"}, {"uuid": "963c1c28-26c3-4039-b175-c73c19c266a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93933", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 47Cid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 03:53:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:28.772564Z"}, {"uuid": "34ac20b5-951e-4e3e-80f7-f6a5226bb546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93917", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wordpress-cve-2026-63030\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Senanfurkan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 00:44:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE in WordPress Core via REST API batch route confusion + WP_Query SQLi (CVE-2026-63030 / CVE-2026-60137). Detection PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T00:00:40.148113Z"}, {"uuid": "3a80f681-887a-4e44-8271-6e778e523df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-poc-pubblico-per-lo-sfruttamento-delle-cve-2026-60137-e-cve-2026-63030", "content": "Disponibile Proof of Concept (PoC) per le vulnerabilit\u00e0 identificate dalle CVE-2026-60137 e CVE-2026-63030, gi\u00e0 sanate dal vendor, che interessa il prodotto WordPress Core.", "creation_timestamp": "2026-07-19T01:00:42.439457Z"}, {"uuid": "a01e0a82-865c-4abe-9b01-e769a7a4a445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqxycl25wi2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-58532: 47 interactions\nCVE-2026-15409: 21 interactions\nCVE-2026-63030: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 16 interactions\nCVE-2026-60137: 9 interactions\nCVE-2026-62857: 4 interactions\n", "creation_timestamp": "2026-07-19T04:53:12.138914Z"}, {"uuid": "15056f9d-2a60-49b7-b917-81251d488ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/cyberbannews_ir/22721", "content": "\ud83d\udd34 \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc\u061b \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0648\u0631\u062f\u067e\u0631\u0633 \u0628\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\n\n\ud83d\udd3b \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2026-60137 \u0648 CVE-2026-63030 \u062f\u0631 \u0648\u0631\u062f\u067e\u0631\u0633 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0635\u0648\u0631\u062a \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0645\u0632\u0645\u0627\u0646\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\ud83d\udd3b \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0645\u0648\u0646\u0647 \u06a9\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 (PoC) \u0628\u0627 \u0646\u0627\u0645 wp2shell \u0646\u06cc\u0632 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0648 \u062e\u0637\u0631 \u062d\u0645\u0644\u0627\u062a \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd39 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 6.9.5 \u0648 7.0.2 \u0648\u0631\u062f\u067e\u0631\u0633 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0648 \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n#\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0648\u0631\u062f\u067e\u0631\u0633\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2026-07-19T06:00:03.295934Z"}, {"uuid": "c2a3f2ac-63e6-4a3b-9582-204437125d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/jkanematsu.bsky.social/post/3mqy7qa5ni22j", "content": "\u3010\u7d9a\u5831\u3011WordPress\u306e\u8106\u5f31\u6027\uff08wp2shell\uff0fCVE-2026-63030\uff09\u304c\u516c\u8868\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\u203b\u6628\u65e5\u306e\u6295\u7a3f\u3067\u66f8\u3044\u305f\u3001\u9023\u643a\u3057\u3066\u60aa\u7528\u3055\u308c\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-60137\uff09\u3092\u542b\u307f\u307e\u3059\u3002\n\n\u3010\u4fee\u6b63\u7248\u3078\u901f\u3084\u304b\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u3066\u304f\u3060\u3055\u3044\u3011\n\u30fb6.9.x \u3000\u2192\u3000WordPress 6.9.5 \n\u30fb7.0.x \u3000\u2192\u3000WordPress 7.0.2 \n\u30fb6.8.x \u3000\u2192\u3000WordPress 6.8.6 \n\nX\u30b5\u30fc\u30d0\u30fc\u7cfb\u306e\u30b9\u30bf\u30fc\u30ec\u30f3\u30bf\u30eb\u30b5\u30fc\u30d0\u30fc\u3055\u3093\u306e\u304a\u77e5\u3089\u305b\u306b\u3082\u8f09\u3063\u3066\u3044\u305f\u306e\u3067\u3001\u30ea\u30f3\u30af\u8cbc\u3063\u3066\u304a\u304d\u307e\u3059\u3002\nwww.star.ne.jp/news/detail....", "creation_timestamp": "2026-07-19T07:04:27.581371Z"}, {"uuid": "a4e9ba02-5878-47f2-af8d-b20e30f8585f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqyage2uhu23", "content": "CVE-2026-60137: Unchecked WordPress Vulnerabilities Allow Unauthenticated Takeover #CVE2026 #WordPressSecurity #Cybersecurity", "creation_timestamp": "2026-07-19T07:18:29.651696Z"}, {"uuid": "836ed81b-908c-4d07-9ff7-628abc2a99fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqyai2vplb2w", "content": "Critical CVE-2026-63030 and CVE-2026-60137 Exploits Threaten WordPress Sites #WordPress #CyberSecurity #CVE2026", "creation_timestamp": "2026-07-19T07:19:26.941101Z"}, {"uuid": "a74d91e0-d45d-4497-b0b6-170bc3bd21e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqyai6mcmt2j", "content": "CVE-2026-63030; CVE-2026-60137: WordPress Exploits Offer Open Door to Attackers #WordPress #Cybersecurity #Exploits", "creation_timestamp": "2026-07-19T07:19:30.496899Z"}, {"uuid": "162637e1-fbe0-4ab1-949d-819de402310a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqyaiai4m72p", "content": "CVE-2026-63030 and CVE-2026-60137: Is WordPress\u2019s Update Enough? #WordPress #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-19T07:19:32.501733Z"}, {"uuid": "9e8c8c24-9f27-4775-ab30-fd93ab4cc693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94097", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ikow\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 06:23:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell \u2014 WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T08:00:04.985278Z"}, {"uuid": "64fd4ceb-bbfa-487c-a74d-02ff20c5632a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mqyidqoupg2g", "content": "\uff1e WordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f\nhttps://piyolog.hatenadiary.jp/entry/2026/07/19/181822\n", "creation_timestamp": "2026-07-19T09:40:19.864456Z"}, {"uuid": "f308c877-579c-4b6a-9db6-411a65d7a445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94110", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bahartanir\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:54:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T10:00:03.328924Z"}, {"uuid": "cd8d4875-9c30-4e26-9d54-1e51dacdfd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-63030-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mhassani97\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 12:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:30.791190Z"}, {"uuid": "d43ca3b9-0126-42c3-a793-33a5e1053188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/kalika.de/post/3mqyjpa7z3m2n", "content": "wp2shell: Die kritische Pre-Auth-RCE-L\u00fccke in WordPress Core \u2013 was Site-Betreiber jetzt wissen m\u00fcssen\n\nwp2shell (CVE-2026-63030 & CVE-2026-60137) erlaubt unauthentifizierte Remote Code Execution in WordPres...\n\nhttps://www.kalika.de/posts/technical-analysis-of-wp2shell-the-latest-wordpress-core-pre/", "creation_timestamp": "2026-07-19T10:04:30.894338Z"}, {"uuid": "8dda87c3-4bce-46c3-933e-06a6347d278b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2148", "content": "\ud83d\udd34 WP2Shell WordPress Vulnerabilities Exploited in the Wild\n\nTwo newly patched WordPress vulnerabilities are being exploited in the wild, with attacks beginning shortly after they came to light. \n\nThe vulnerabilities have been dubbed WP2Shell and they are officially tracked as CVE-2026-60137 and CVE-2026-63030. \n\nAccording to Searchlight Cyber, whose researchers discovered the flaws, WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are affected. \n\n\u201cThe attack has no preconditions and can be exploited by an anonymous user in a stock install of WordPress with no plugins,\u201d the security firm warned.", "creation_timestamp": "2026-08-23T00:00:44.638685Z"}, {"uuid": "fc54be92-4ebf-4e55-9e47-f2208b09c7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98743", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-63030-CVE-2026-60137-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TranDongA3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 08:42:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:30.593225Z"}, {"uuid": "5c526c86-fd01-4bb8-b1af-5d591b5961c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/HackerNewscyber/3265", "content": "\u2708\ufe0f\u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc wp2shell\u061b \u0645\u06cc\u0644\u06cc\u0648\u0646\u200c\u0647\u0627 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0648\u0631\u062f\u067e\u0631\u0633\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u062a\u0635\u0631\u0641 \u06a9\u0627\u0645\u0644\n\n\ud83c\udfa5 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u0645\u0648\u0633\u0648\u0645 \u0628\u0647 wp2shell \u0628\u0631\u0627\u06cc \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0648\u0631\u062f\u067e\u0631\u0633 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2026-63030 \u0648 CVE-2026-60137 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0633\u0627\u0632\u06cc \u0627\u06cc\u0646 \u062f\u0648 \u0646\u0642\u0635\u060c \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 6.9.x \u0648 7.0.x \u0648\u0631\u062f\u067e\u0631\u0633 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f. \u062a\u06cc\u0645 \u062a\u0648\u0633\u0639\u0647 \u0648\u0631\u062f\u067e\u0631\u0633 \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 7.0.2 \u06cc\u0627 6.9.5 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0634\u062f\u062a \u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627\u060c \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0641\u0639\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5\u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0634\u0631\u06a9\u062a Searchlight Cyber \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u0628\u06cc\u0634 \u0627\u0632 \u06f5\u06f0\u06f0 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0627\u0632 \u0648\u0631\u062f\u067e\u0631\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u060c \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0627\u062a \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f. \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0627\u0645\u06a9\u0627\u0646 \u0646\u0635\u0628 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0648\u0642\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0627\u0634\u0646\u0627\u0633 \u0628\u0647 \u0645\u0633\u06cc\u0631 REST API Batch \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0627\u0642\u062f\u0627\u0645 \u062a\u0646\u0647\u0627 \u06cc\u06a9 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0645\u0648\u0642\u062a \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-19T13:00:04.370716Z"}, {"uuid": "cf7fd831-ebcb-4fd7-9e8b-f3c429f56283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mqyzrf6oeu2m", "content": "WordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f - piyolog\nhttps://piyolog.hatenadiary.jp/entry/2026/07/19/181822", "creation_timestamp": "2026-07-19T14:52:04.179564Z"}, {"uuid": "dede6c8d-f82b-4621-ab66-5ef2f55556d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mqyzwwvtmo2q", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\nWordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f - piyolog\n\n2026\u5e747\u670817\u65e5\u3001WordPress\u3092\u958b\u767a\u3059\u308bWordPress.org\u306f\u3001WordPress Core\u306b\u8a8d\u8a3c\u4e0d\u8981\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u306b\u81f3\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u7248WordPress 7.0.2\u3092\u516c\u958b\u3057\u3001\u5bfe\u8c61\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u5229\u7528\u3059\u308b\u30b5\u30a4\u30c8\u306b\u81ea\u52d5\u66f4\u65b0\u30b7\u30b9\u30c6\u30e0\u7d4c\u7531\u3067\u306e\u5f37\u5236\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u9069\u7528\u3059\u308b\u5bfe\u5fdc\u3092\u53d6\u308a\u307e\u3057\u305f\u3002\u3053\u308c\u30892\u4ef6\u306e...", "creation_timestamp": "2026-07-19T14:55:09.551139Z"}, {"uuid": "1914e37d-618e-4c80-b6b9-17d2904ce39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94147", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-compromise-scanner-plugin\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a eyesecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 13:24:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T15:00:04.236861Z"}, {"uuid": "6a7a8554-19e7-4590-8096-f24aef86bd44", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8d6ec1a6-0a0b-4316-8704-6d652396db19", "content": "", "creation_timestamp": "2026-07-19T16:00:32.598106Z"}, {"uuid": "cde30b7b-1a45-4299-a157-856f242857d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a N45HT\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 14:57:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T16:00:12.877869Z"}, {"uuid": "76bbb58e-5907-43e3-870c-0bd708418781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94174", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60137-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dewcode91\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 16:58:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T18:00:03.970858Z"}, {"uuid": "6cf5cce2-a9c7-4ff5-8433-c0c3597de8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94192", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PressVector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vulnquest58\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 19:20:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPressVector - Advanced WordPress Vulnerability Scanner CVE-2026-63030 (REST batch route confusion) / CVE-2026-60137 (SQLi) Developer: Vulnquest\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T21:00:04.962979Z"}, {"uuid": "aa8f1557-74d3-4e10-aba1-11c9e9e56cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp-cve-2026-63030-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Lukols-Dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 19:05:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T21:00:05.044374Z"}, {"uuid": "9c02c3bd-b961-4afe-9a47-86a39707a298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94187", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hidden-investigations\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 18:12:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional PoC, JSON export.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T21:00:05.126915Z"}, {"uuid": "569b9d60-2fdc-4df7-95f8-a08bd2e0200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqzqkt5exc2a", "content": "Two new high severity WordPress vulnerabilities, patch immediately!\n\nThe 7.0.2 WordPress security release addresses one critical and one high severity security issue. The vulnerabilities reported to the WordPress security team include: CVE-2026-60137 \u2013 A facilitated SQL injection \u2026\n#hackernews #news", "creation_timestamp": "2026-07-19T21:39:58.818170Z"}, {"uuid": "18cc2b79-e41c-4454-9db5-cf3906fe3725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/igalog.bsky.social/post/3mqzsjnu52d2y", "content": "WordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f - piyolog\nhttps://piyolog.hatenadiary.jp/entry/2026/07/19/181822\n\n\u4f11\u65e5\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u4f5c\u696d", "creation_timestamp": "2026-07-19T22:15:07.862261Z"}, {"uuid": "bbd373f4-2a11-474b-a8ef-0873a2eacb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3mqzxv6bdcl2m", "content": "\u591c\u884c\u6027\u30a4\u30f3\u30b3\u3055\u3093\u306e\u307e\u3068\u3081\u3002\u5373\u5bfe\u5fdc\u3067\u3059\u306a\u3053\u308c\u306f\uff1aWordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f - piyolog piyolog.hatenadiary.jp/entry/2026/0...", "creation_timestamp": "2026-07-19T23:51:02.735816Z"}, {"uuid": "f1d06ccd-d3d5-42a1-9aa8-f93de8975cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp-cve-2026-63030-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Lukols-Dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 19:05:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:20.116533Z"}, {"uuid": "72dc5230-49c8-4327-bf1d-d4cd488a52bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cybereyeq.bsky.social/post/3mtyvn27rls25", "content": "CISA added CVE-2026-60004, an actively exploited code-injection flaw in self-hosted Gitea, to the KEV Catalog on 25 Aug. Federal fix due 28 Aug under BOD 26-04; patched in Gitea 1.27.1. https://www.cybereyeq.com/?utm_source=bluesky&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-26T17:53:36.887666Z"}, {"uuid": "b83393c4-25a9-4f6f-900c-4f01d42b2ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94192", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PressVector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vulnquest58\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 19:20:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPressVector - Advanced WordPress Vulnerability Scanner CVE-2026-63030 (REST batch route confusion) / CVE-2026-60137 (SQLi) Developer: Vulnquest\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:09.766736Z"}, {"uuid": "94ab402d-f06e-4644-a925-29ce19643698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94187", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hidden-investigations\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 18:12:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress wp2shell vulnerability-chain scanner for CVE-2026-63030 and CVE-2026-60137, with active detection, optional PoC, JSON export.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:20.208123Z"}, {"uuid": "ff90cd50-f07f-4846-87c5-3fec26a0837a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94174", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60137-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dewcode91\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 16:58:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:22.295352Z"}, {"uuid": "3d91cec3-815e-4efa-aba7-6b8305866aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94110", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bahartanir\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 08:54:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 / CVE-2026-60137 - WordPress pre-auth RCE scanner\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.443897Z"}, {"uuid": "fe3f9ace-d8ed-42b5-a4f8-ef956c7f3235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94097", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ikow\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 06:23:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwp2shell \u2014 WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.484772Z"}, {"uuid": "1eb831a7-c3e8-4326-902b-6cf7ea4abe9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a N45HT\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 14:57:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:25.868158Z"}, {"uuid": "cd3ac87f-4eb6-4296-b1c3-0dca24ea0589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94147", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-compromise-scanner-plugin\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a eyesecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 13:24:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:25.951016Z"}, {"uuid": "d8a29b22-3fce-43ca-84a5-0b0ec91c484b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/HackerNewscyber/3265", "content": "\u2708\ufe0f\u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc wp2shell\u061b \u0645\u06cc\u0644\u06cc\u0648\u0646\u200c\u0647\u0627 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0648\u0631\u062f\u067e\u0631\u0633\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u062a\u0635\u0631\u0641 \u06a9\u0627\u0645\u0644\n\n\ud83c\udfa5 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u0645\u0648\u0633\u0648\u0645 \u0628\u0647 wp2shell \u0628\u0631\u0627\u06cc \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0648\u0631\u062f\u067e\u0631\u0633 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2026-63030 \u0648 CVE-2026-60137 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0633\u0627\u0632\u06cc \u0627\u06cc\u0646 \u062f\u0648 \u0646\u0642\u0635\u060c \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 6.9.x \u0648 7.0.x \u0648\u0631\u062f\u067e\u0631\u0633 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f. \u062a\u06cc\u0645 \u062a\u0648\u0633\u0639\u0647 \u0648\u0631\u062f\u067e\u0631\u0633 \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 7.0.2 \u06cc\u0627 6.9.5 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0634\u062f\u062a \u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627\u060c \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0641\u0639\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5\u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0634\u0631\u06a9\u062a Searchlight Cyber \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u0628\u06cc\u0634 \u0627\u0632 \u06f5\u06f0\u06f0 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0627\u0632 \u0648\u0631\u062f\u067e\u0631\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u060c \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0627\u062a \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f. \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0627\u0645\u06a9\u0627\u0646 \u0646\u0635\u0628 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0648\u0642\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0627\u0634\u0646\u0627\u0633 \u0628\u0647 \u0645\u0633\u06cc\u0631 REST API Batch \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0627\u0642\u062f\u0627\u0645 \u062a\u0646\u0647\u0627 \u06cc\u06a9 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0645\u0648\u0642\u062a \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-20T00:00:26.029897Z"}, {"uuid": "5bfc4cf7-3ff7-4704-bd87-3a02cc80de23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/cyberbannews_ir/22721", "content": "\ud83d\udd34 \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc\u061b \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0648\u0631\u062f\u067e\u0631\u0633 \u0628\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\n\n\ud83d\udd3b \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2026-60137 \u0648 CVE-2026-63030 \u062f\u0631 \u0648\u0631\u062f\u067e\u0631\u0633 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0635\u0648\u0631\u062a \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0645\u0632\u0645\u0627\u0646\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\ud83d\udd3b \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0645\u0648\u0646\u0647 \u06a9\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 (PoC) \u0628\u0627 \u0646\u0627\u0645 wp2shell \u0646\u06cc\u0632 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0648 \u062e\u0637\u0631 \u062d\u0645\u0644\u0627\u062a \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd39 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 6.9.5 \u0648 7.0.2 \u0648\u0631\u062f\u067e\u0631\u0633 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u0648 \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n#\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0648\u0631\u062f\u067e\u0631\u0633\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2026-07-20T00:00:26.561561Z"}, {"uuid": "54204fe3-7c22-475e-8313-8bdfbfb0ac17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mqzzr45yny2b", "content": "wp2shell: a defender\u2019s guide (CVE-2026-63030 + CVE-2026-60137) with a list of forensic artifacts, a compromise scanner WordPress plugin and a free Chrome/Edge/Firefox browser extension to in-browser check if a website has been patched.", "creation_timestamp": "2026-07-20T00:24:33.081710Z"}, {"uuid": "3c6892b4-e597-4500-99da-7a9f25edd512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mr2fgj43k42m", "content": "\ud83d\udcf0 Eksploitasi Publik wp2shell Dirilis, Admin WordPress Diminta Patch Segera\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/20/wp2shell-wordpress-rce-public-exploit-patch/\n\n#beritaTeknologi #cve-2026-60137 #cve-2026-63030 #cybersecurity #exploitChain #keamananSiber #publicPoc #r", "creation_timestamp": "2026-07-20T03:53:22.047931Z"}, {"uuid": "c2f35297-8212-42c8-b5fc-3d1566fa1850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116950422284172751", "content": "wp2shell (CVE-2026-63030, CVE-2026-60137) allows unauth RCE in WordPress core (HIGH severity). Active exploitation reported. Patch to 6.9.5, 7.0.2, or 6.8.6. Block REST API batch endpoint if needed. Details: https://radar.offseq.com/threat/wp2shell-critical-wordpress-core-vulnerability-enabling-unauthenticated-rce-detection-and-mitigation-fccca7b8b6429718 #OffSeq #WordPress #RCE #Vulnerability", "creation_timestamp": "2026-07-20T04:30:25.398434Z"}, {"uuid": "73f5ba9e-17b4-4564-9905-1b913dfc9b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-multiple-vulnerabilities_20260720", "content": "", "creation_timestamp": "2026-07-20T04:45:06.327548Z"}, {"uuid": "799c36c3-255c-490a-ab5a-fb3f30162cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mr2ilwyupj2i", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-63030, CVE-2026-60137) #WordPress Core Unauthenticated RCE via wp2shell\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-07-20T04:50:06.143520Z"}, {"uuid": "e7079361-5eb5-4acc-bf2d-738ebef5b528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr2jeblifv2p", "content": "Daily IT Security Digest \u2014 2026-07-20\n# Daily IT Security Digest \u2014 2026-07-20\n\n1. **WordPress RCE (wp2shell) \u2014 Active Exploitation of Critical Flaws**\n   CVE-2026-63030 and CVE-2026-60137 represent unauthenticated remote code execution vulnerabilities in WordPress core. Active exploitation has been", "creation_timestamp": "2026-07-20T05:03:42.400676Z"}, {"uuid": "513a382d-708c-401b-9331-00d3593634df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr2jovvx3226", "content": "Top 3 CVE for last 7 days:\nCVE-2026-58532: 47 interactions\nCVE-2026-63030: 30 interactions\nCVE-2026-60137: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 13 interactions\nCVE-2026-60137: 11 interactions\nCVE-2026-16096: 3 interactions\n", "creation_timestamp": "2026-07-20T05:09:39.500789Z"}, {"uuid": "21cdc79b-d438-411c-bd3d-a52c2cb65ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/sirchamallow.bsky.social/post/3mr2l6w7glk2t", "content": "\ud83d\udd34 #WP2Shell combine deux failles critiques du c\u0153ur WordPress (CVE-2026-63030 et CVE-2026-60137) pour ex\u00e9cuter du code \u00e0 distance sans compte ni plugin, affectant les versions 6.9.0 \u00e0 6.9.4 et 7.0.0 \u00e0 7.0.1.\n\nkorben.info/wp2shell-exp...", "creation_timestamp": "2026-07-20T05:36:33.352131Z"}, {"uuid": "ec2519dd-db47-4ff0-9d4b-c1f284944c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mr2nr6vyac2q", "content": "WP2Shell: Die Kombination zweier CVEs (CVE-2026-63030 und CVE-2026-60137) erm\u00f6glichen eine Remote Code Execution.  Betroffen sind Versionen 6.9.0 < 6.9.5 und 7.0.0 < 7.0.2. Updates sind verf\u00fcgbar. Updates auf Version 6.9.5 oder 7.0.2 verf\u00fcgbar.\n\nAktuelle Trending CVE unter vulndex.at/intel/trendi...", "creation_timestamp": "2026-07-20T06:22:34.874867Z"}, {"uuid": "7d5a5724-459a-44ec-ad62-cc7ca646be3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mr2nvjhwxc2q", "content": "WP2Shell: Die Kombination zweier CVEs (CVE-2026-63030 und CVE-2026-60137) erm\u00f6glichen eine Remote Code Execution. Betroffen sind Versionen 6.9.0 < 6.9.5 und 7.0.0 < 7.0.2. Updates sind verf\u00fcgbar.\n\nAktuelle Trending CVE unter vulndex.at/intel/trendi...\n\n#WordPress #CVE #RCE", "creation_timestamp": "2026-07-20T06:24:58.882808Z"}, {"uuid": "522a1d2a-200f-4b2d-9ba8-5d1216ae2745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/kerzinger.at/post/3mr2ouhi2ms2j", "content": "WP2Shell: Am Freitagabend wurden zwei Schwachstellen (CVE-2026-60137 [CVSS: 9,1] und CVE-2026-63030 [CVSS: 9,8]) ver\u00f6ffentlicht. \u00dcber diese k\u00f6nnen bei verwundbaren WordPress-Installationen Remote Code Executions ausgef\u00fchrt werden. WordPress-Updates stehen bereits zur Verf\u00fcgung.", "creation_timestamp": "2026-07-20T06:42:15.886373Z"}, {"uuid": "794826ba-178f-4df1-bc14-08e1648684d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2pj3m7zs2m", "content": "CVE-2026-60137 and CVE-2026-63030: WP2Shell Vulnerabilities Are Live Threats #CVE2026 #WordPress #CyberSecurity", "creation_timestamp": "2026-07-20T06:53:46.713433Z"}, {"uuid": "df4f8488-afe1-4a0d-9278-e7d157996d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2pj6gscq2g", "content": "CVE-2026-60137 and CVE-2026-63030: WordPress Vulnerabilities Demand Immediate Attention #WordPress #CVE2026 #Cybersecurity", "creation_timestamp": "2026-07-20T06:53:49.443099Z"}, {"uuid": "356f1136-1ee7-44ff-bc75-1b674e34d680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2pjlnz6g2y", "content": "CVE-2026-60137 and CVE-2026-63030: Patch Efficacy vs. User Responsibility #CVE2026 #WordPressSecurity #CyberSecurity", "creation_timestamp": "2026-07-20T06:54:03.738853Z"}, {"uuid": "0f2cec2d-cd5e-4253-ab92-12236d897617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94260", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-checker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xjessie21\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 06:44:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T08:00:04.480854Z"}, {"uuid": "a210c56c-ebc5-4a02-834d-30e4a869d005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mr2umgiun227", "content": "\ud83d\udd17 CVE : CVE-2026-60137, CVE-2026-63030", "creation_timestamp": "2026-07-20T08:25:06.964149Z"}, {"uuid": "a4ce1273-e67b-4a88-a3fa-6084a0ce1c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mr3xki4pck26", "content": "Monday\u2019s fuck up - This Time - Wordpress - WordPress Core \"wp2shell\u201d RCE. The attack consists of two flaws, tracked as CVE-2026-63030 and CVE-2026-60137, that can be chained together to achieve pre-authentication remote code execution against WordPress github.com/Icex0/wp2she... #exploit #wp #cve", "creation_timestamp": "2026-07-20T08:50:41.773592Z"}, {"uuid": "0ea4232e-f7c7-4d5c-9caa-f71048b578c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mr2w56ltyi2p", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\n\nLes vuln\u00e9rabilit\u00e9s CVE-2026-60137 et CVE-2026-63030 affectent WordPress et permettent une ex\u00e9cution de code arbitraire \u00e0 distance non authentifi\u00e9e.\nUne preuve de concept est disponible.\n\nwww.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-07-20T08:52:22.917730Z"}, {"uuid": "33a2de48-517f-44c3-9e83-fabf04355454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/116951452309188132", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLes vuln\u00e9rabilit\u00e9s CVE-2026-60137 et CVE-2026-63030 affectent WordPress et permettent une ex\u00e9cution de code arbitraire \u00e0 distance non authentifi\u00e9e.Une preuve de concept est disponible.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-007/", "creation_timestamp": "2026-07-20T08:52:24.519817Z"}, {"uuid": "89389834-57a1-4e50-9be8-2e4f170f66a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116951475979751457", "content": "\u26a0\ufe0f Si vous administrez un site WordPress ou si vous connaissez quelqu\u2019un qui en g\u00e8re un faites passer l\u2019information.\nUne vuln\u00e9rabilit\u00e9 critique baptis\u00e9e WP2Shell touche directement le c\u0153ur de WordPress. \nCette fois, il ne s\u2019agit pas d\u2019un plugin abandonn\u00e9 ou d\u2019un th\u00e8me douteux : une installation standard peut \u00eatre attaqu\u00e9e \u00e0 distance, sans compte utilisateur, sans mot de passe et sans authentification pr\u00e9alable. \nWP2Shell combine deux failles, CVE-2026-60137 et CVE-2026-63030, permettant \u00e0 un attaquant d\u2019ex\u00e9cuter du code sur le serveur et donc, potentiellement, de prendre le contr\u00f4le du site. \n-> Des tentatives d\u2019exploitation et des compromissions ont d\u00e9j\u00e0 \u00e9t\u00e9 observ\u00e9es dans la nature.\nSont notamment concern\u00e9es les versions :\n\u27a1\ufe0f WordPress 6.9.0 \u00e0 6.9.4\u27a1\ufe0f WordPress 7.0.0 \u00e0 7.0.1\nLes correctifs sont disponibles dans les versions 6.9.5 et 7.0.2. WordPress a activ\u00e9 des mises \u00e0 jour automatiques forc\u00e9es en raison de la gravit\u00e9 de la faille, mais il ne faut pas supposer qu\u2019elles ont forc\u00e9ment fonctionn\u00e9 : elles peuvent avoir \u00e9t\u00e9 d\u00e9sactiv\u00e9es, bloqu\u00e9es par l\u2019h\u00e9bergeur ou emp\u00each\u00e9es par une configuration particuli\u00e8re.\n\u00c0 faire rapidement:\n\u2705 v\u00e9rifier la version r\u00e9ellement install\u00e9e ;\u2705 mettre WordPress \u00e0 jour vers 6.9.5 ou 7.0.2 au minimum ;\u2705 confirmer que la mise \u00e0 jour s\u2019est correctement termin\u00e9e ;\u2705 v\u00e9rifier les comptes administrateurs, les fichiers r\u00e9cemment modifi\u00e9s et les journaux du serveur ;\u2705 rechercher d\u2019\u00e9ventuels fichiers PHP, plugins ou utilisateurs inconnus ;\u2705 s\u2019assurer que des sauvegardes propres et r\u00e9centes sont disponibles.\nEn attendant la mise \u00e0 jour, l\u2019acc\u00e8s anonyme aux routes REST suivantes peut \u00e9galement \u00eatre bloqu\u00e9 au niveau du WAF ou du serveur web :\n/wp-json/batch/v1?rest_route=/batch/v1\nPoint important : installer le correctif emp\u00eache une nouvelle exploitation, mais ne supprime pas une \u00e9ventuelle compromission d\u00e9j\u00e0 pr\u00e9sente. Si le site est rest\u00e9 expos\u00e9, une v\u00e9rification minimale est donc n\u00e9cessaire, m\u00eame apr\u00e8s la mise \u00e0 jour.\nUn site WordPress \u00ab qui fonctionne encore \u00bb n\u2019est pas n\u00e9cessairement un site sain : les attaquants cherchent souvent \u00e0 rester discrets pour installer une porte d\u00e9rob\u00e9e, d\u00e9tourner le trafic, diffuser du spam ou pr\u00e9parer d\u2019autres attaques...\n\ud83d\udd0d wp2shell.com , pour v\u00e9rifier si votre site est vuln\u00e9rable.\nDans les news:\"WP2Shell - La faille qui permet de pirater WordPress sans aucun plugin\"\ud83d\udc47 https://korben.info/wp2shell-exploits-prise-controle-wordpress.html\n\ud83d\udcac \u2b07\ufe0f https://infosec.pub/post/49724018\n#CyberVeille #WordPress", "creation_timestamp": "2026-07-20T08:58:23.112291Z"}, {"uuid": "8ededc2c-cd48-441e-97a3-6e7afe08f4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94276", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Crypto-Cat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 08:26:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T10:00:04.811066Z"}, {"uuid": "e96aedba-fb33-4cc2-98f7-b1769ad81f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://social.bund.de/users/bsi/statuses/116951719172634340", "content": "\u26a0\ufe0f \ud83d\udce2 #Sicherheitswarnung: WordPress \u2013 Schwachstellen erlauben \"Remote Code Execution\"\nAm 17. Juli 2026 wurde seitens #Wordpress eine Aktualisierung bekannt gegeben, die zwei #Schwachstellen in der Wordpress-Software behebt.\n\u2757\ufe0f Die beiden Schwachstellen CVE-2026-60137 und CVE-2026-63030 erm\u00f6glichen einem nicht authentifizierten, entfernten Angreifer Code zur Ausf\u00fchrung zu bringen.\nMehr dazu hier: \ud83d\udc49\ufe0f https://www.bsi.bund.de/dok/1203360", "creation_timestamp": "2026-07-20T10:01:47.126718Z"}, {"uuid": "79fd2750-f662-4004-83bc-8c9772f34c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mr32rnd77l2i", "content": "Critical WordPress core flaws, CVE-2026-60137 and CVE-2026-63030, can be chained for unauthenticated access, SQL injection, and possible RCE. CERT-AGID reports suspicious API activity and new admin accounts. #WordPress #CERTAGID #Italy", "creation_timestamp": "2026-07-20T10:15:25.146017Z"}, {"uuid": "ee45ecd6-06ea-4306-9397-30cb5251ea3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/information_security_channel/55596", "content": "WP2Shell WordPress Vulnerabilities Exploited in the Wild\nhttps://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/\n\nExploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.\nThe post WP2Shell WordPress Vulnerabilities Exploited in the Wild (https://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-20T11:00:04.039702Z"}, {"uuid": "810dfa6f-a200-480d-9f6c-6490f958d07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mr35bzmuag2m", "content": "WP2Shell flaws CVE-2026-60137 and CVE-2026-63030 are being exploited in the wild. Chaining them can enable unauthenticated remote code execution on stock WordPress installs. #WordPress #Cloudflare #CVE-2026-60137", "creation_timestamp": "2026-07-20T11:00:21.704541Z"}, {"uuid": "3c012c5e-5999-4c4d-b414-3d1830ecf1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr36htygq62u", "content": "Just another Tuesday in the wonderful world of content management, where WP2Shell vulnerabilities CVE-2026-60137 and CVE-2026-63030 are already being actively exploited. This lovely headache affects WordPress site owners who dared to dream of a stable web presence without constan...\n\nRead full story", "creation_timestamp": "2026-07-20T11:21:31.354793Z"}, {"uuid": "e9c11c1c-a18c-4c4d-b6b3-8c10d31a3657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94292", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a sxwp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SentinelXofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 10:49:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T12:00:04.346211Z"}, {"uuid": "5ae61004-5090-4988-99ee-6d2e738ccb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/7/kritische-sicherheitslucken-in-wordpress-updates-verfugbar", "content": "", "creation_timestamp": "2026-07-20T12:15:05.772525Z"}, {"uuid": "27ac6863-aac9-4323-9909-8b479acb586f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mr3go2tdz42r", "content": "In-the-wild exploitation seen for the new WP2Shell WordPress vulnerabilities, officially tracked as CVE-2026-60137 and CVE-2026-63030.", "creation_timestamp": "2026-07-20T13:48:09.557017Z"}, {"uuid": "63cc3db9-6979-40d1-8903-7573605c01ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/aeP7rxdaeHgi9l7o5IqMQwPBOzJ-JvO8EcqSGGDOp43yc4w", "content": "", "creation_timestamp": "2026-07-20T18:00:04.936470Z"}, {"uuid": "94a9d9e0-1bac-492e-9943-fcc99837a337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94301", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 31  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 8\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 09:43:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T13:00:03.947074Z"}, {"uuid": "74503465-8d46-41e8-9ccc-a3e686ae85b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/true_secator/8423", "content": "\u0412 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0440\u0430\u0441\u0448\u0430\u0440\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 wp2shell, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e WordPress. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 WordPress 6.9.5 \u0438 7.0.2 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a wp2shell.\n\n\u0410\u0442\u0430\u043a\u0430 wp2shell \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - CVE-2026-63030 \u0438 CVE-2026-60137, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.x \u0438 7.0.x.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0410\u0434\u0430\u043c\u043e\u043c \u041a\u0443\u044d\u0441\u043e\u043c \u0438\u0437 Searchlight Cyber, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0443 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u0438 \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 WordPress \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Searchlight Cyber, \u0431\u043e\u043b\u0435\u0435 500 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 WordPress, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0439\u0447\u0430\u0441, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438, \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c WordPress \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2 \u0438\u043b\u0438 6.9.5.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0432 \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-63030, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0432 WordPress 6.9. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-60137 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 author__not_in\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 WP_Query. WordPress \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0451 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WordPress 6.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c WordPress, \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.0-6.9.4 \u0438 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 7.0.0-7.0.1.\n\nSQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.8.0\u20136.8.5, \u043d\u043e \u0435\u0451 \u043d\u0435\u043b\u044c\u0437\u044f \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 RCE, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043b\u0438\u0448\u044c \u0432 WordPress 6.9.\n\nSearchlight Cyber \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u0430 wp2shell.com, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, Searchlight Cyber \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a REST API \u0438\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c /wp-json/batch/v1 \u0438 ?rest_route=/batch/v1 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 WAF.\n\nCloudflare \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e WAF \u043d\u0430 \u0432\u0441\u0435\u0445 \u0442\u0430\u0440\u0438\u0444\u043d\u044b\u0445 \u043f\u043b\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cloudflare, \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 (CVE-2026-60137), \u0442\u0430\u043a \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API (CVE-2026-63030). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u0430 WAF \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u0442\u0447\u0435\u0439.", "creation_timestamp": "2026-07-20T14:00:05.432820Z"}, {"uuid": "f6285ae7-8707-4543-ad7e-f6719bff1788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mr3hhweoa524", "content": "\ud83d\udee1\ufe0f VULN: WordPress 'wp2shell' pre-auth RCE (CVE-2026-63030 + CVE-2026-60137, chained) now has public exploits targeting 6.9.x/7.0.x. Attackers can run code unauthenticated. If you run WordPress, apply the emergency core patch immediately. Src: BleepingComputer", "creation_timestamp": "2026-07-20T14:02:36.993489Z"}, {"uuid": "c7d5d78a-459e-4953-aa82-5725b1d5311f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/ERt8GGFekkTS_ieiBVGmLfcxPIuM72rFTxS1aPb6SalOFNw", "content": "", "creation_timestamp": "2026-07-20T18:00:04.809912Z"}, {"uuid": "9fc83e6f-7c56-4af8-a421-73fd18124272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/anssi-fr.bsky.social/post/3mr3jbd3dns2r", "content": "\u26a0\ufe0f Vuln\u00e9rabilit\u00e9 WordPress.\n\n\ud83d\udce2 Le CERT-FR a publi\u00e9 une alerte de s\u00e9curit\u00e9 concernant les vuln\u00e9rabilit\u00e9s CVE-2026-60137 et CVE-2026-63030 affectant WordPress.\n\nPlus d'informations sur :\n\u27a1\ufe0f www.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-07-20T14:34:49.648604Z"}, {"uuid": "b306cbf0-6326-4944-b10f-60f3d8f3e099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3l6so5yk2k", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T15:09:06.003768Z"}, {"uuid": "8ac482a7-93bd-41e0-b37b-5399dec09612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116952985194975490", "content": "New.\nPicus: CVE-2026-63030 and CVE-2026-60137 (wp2shell): WordPress RCE Explained https://www.picussecurity.com/resource/blog/cve-2026-63030-and-cve-2026-60137-wp2shell-wordpress-rce-explained #infosec #vulnerability #WordPress", "creation_timestamp": "2026-07-20T15:22:12.139126Z"}, {"uuid": "8941dfc8-640e-497d-9977-6aec6a1e3bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3ooy4ql22c", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T16:11:49.799827Z"}, {"uuid": "c4b8c297-a126-4882-8c9d-51833e8d834e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116953344790464812", "content": "WordPress is used on plenty of websites these days. And unlike vulnerabilities in WordPress plugins, which seem to happen every hour of every day, a vulnerability in WordPress core is kind of a big deal.  This exploit must be doing something very clever, right?\nNo.\nThe endpoint reachable via /?rest_route=/batch/v1 simply takes an author_exclude argument and splats it into a SQL statement.  No need for fancy ' OR 1=1 -- stuff.  Just provide SQL to execute, and WordPress executes it.\nCVE-2026-60137 is this SQL injection stuff, which TBH would make WebGoat blush at. (Nobody would do this ITW)\nCVE-2026-63030 is the REST endpoint route confusion which allows an unauthenticated attacker to reach the vulnerable (to SQL injection) endpoint.\nAt the the point that you have anonymous SQL injection, there are a few steps to get RCE as the user that WordPress runs as.  Throw in any of the bazillion Linux LPEs out there and you can have an attack chain that compromises the entire system.\nOn the upside, the default install of WordPress has an auto-update mechanism enabled by default. And the check happens if it's been more than 12 hours since the last update check. And in the case of my vulnerable VM snapshot from the weekend, it will be updated automatically immediately on boot if it has internet connectivity.", "creation_timestamp": "2026-07-20T16:53:39.973191Z"}, {"uuid": "c7826686-2251-4379-9bbc-ef8a5dfc5213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3rvbiccf2u", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T17:09:04.255951Z"}, {"uuid": "8102ef19-4815-440f-8c34-64a9971d9bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mr3sck6gce2g", "content": "wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core\n\n", "creation_timestamp": "2026-07-20T17:16:28.531861Z"}, {"uuid": "1dafac56-c85f-46fa-ad8e-de4ca7c49b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94345", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Wordpress-TOWN\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lucifer0xf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 16:28:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining CVE-2026-63030 and CVE-2026-60137, potentially leading to full site compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T18:00:04.308034Z"}, {"uuid": "a3b1cc42-b784-41cf-94fd-594953cabd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-20T18:00:04.627645Z"}, {"uuid": "d7b70bc8-a0c9-4c50-98c2-2a5232762ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/9tpNlnwjVZVYwuWejBnBA-eWQSN8G2bIqRE_fuaoLBUZlFA", "content": "", "creation_timestamp": "2026-07-20T18:00:05.087313Z"}, {"uuid": "02ce7083-6e7e-4d56-aa33-1b6a620fb785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/I861C3_8swM8Zs6o-xbOmuIlEkRcvzkBqQS3mepOhzC8vJk", "content": "", "creation_timestamp": "2026-07-20T18:00:05.198875Z"}, {"uuid": "efa79be2-17c3-4b5d-a6b9-ff7497e55297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/NvyRAPdfWiHuFnDgCWisEYzfqycyb2H27n16VkLUJ0UfwkQ", "content": "", "creation_timestamp": "2026-07-20T18:00:05.248021Z"}, {"uuid": "65354cf7-9d23-49eb-9436-bbe6d64e6674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls", "content": "", "creation_timestamp": "2026-07-20T18:00:05.343563Z"}, {"uuid": "210a43a5-a835-4002-8c3f-c0d81fb4b106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-20T18:00:05.510347Z"}, {"uuid": "821b0d8f-86ca-4243-acdb-f70ac6c1b8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/WNPKjULv0ephKNyiWQmiLebMVhKs5Yq19I9tIqi1CZzDTIM", "content": "", "creation_timestamp": "2026-07-20T18:00:05.613530Z"}, {"uuid": "4d9c63d5-af2b-4041-afb1-73867128d1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/VNcCH5gAWr1JFL68o0sjgfBXXg-hp68b6HfdKkREhSwhrzw", "content": "", "creation_timestamp": "2026-07-20T18:00:05.712775Z"}, {"uuid": "2b074f5b-3fc3-4075-9dc9-89b4673146ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/uumWHaZ1gN7bAvwXVT7WzY5HoAqs0x1gXuRvU8DEoe0NnjY", "content": "", "creation_timestamp": "2026-07-20T18:00:05.831697Z"}, {"uuid": "cf8b1d81-533a-458b-a1ec-e67c513a8371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "content": "", "creation_timestamp": "2026-07-20T18:00:05.925844Z"}, {"uuid": "5d528155-9977-4118-918b-93eced991cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/c_Rzplsy8E2pteouDdziBYUOz2Zf4p3Unq7ANnF9Z7n20HM", "content": "", "creation_timestamp": "2026-07-20T18:00:06.157604Z"}, {"uuid": "40e22af3-c453-4a39-a5c8-f2084a54cf42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "content": "", "creation_timestamp": "2026-07-20T18:00:06.262295Z"}, {"uuid": "0bd46f6e-73bc-446a-9f7c-b971a146a795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3vb2zx3m2g", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T18:09:19.815394Z"}, {"uuid": "978e153f-9c2d-4f5f-a6d4-2da8570cf206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60093", "type": "seen", "source": "Telegram/_8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4", "content": "", "creation_timestamp": "2026-08-24T21:00:04.091694Z"}, {"uuid": "55e5ad26-7178-48f5-9fe9-485a0bc1f674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3ykupw2p2e", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T19:08:29.546394Z"}, {"uuid": "e7f76eb8-84e9-4a77-9de4-1180f60c667d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr3zks4pdj2e", "content": "\ud83d\udc1b Exploitation in the Wild of wp2shell\n\nhttps://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-20T19:26:20.717530Z"}, {"uuid": "6d18bd14-670f-43c2-9390-a8c567764251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60032", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr42rp2faa23", "content": "CVE-2026-60032 - jmedia extension for joomla\nThe JMedia extension in Joomla allows authorized users to upload any type of file, potentially allowing attackers to execute malicious code on the server. This is a serious issue\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T19:48:05.911795Z"}, {"uuid": "2265b3a8-b617-4ced-b3a0-c404117f309c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60034", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr42va6iol2e", "content": "CVE-2026-60034 - jmedia extension for joomla\nThe JMedia extension for Joomla allows attackers to inject malicious code into websites through unsanitised SVG uploads. This can happen when a user with administrative access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T19:50:04.701355Z"}, {"uuid": "f036331d-9253-40ad-915e-e5f3bc52bb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mr43hh35n52j", "content": "\ud83d\udce2 Exploitation active de deux vuln\u00e9rabilit\u00e9s WordPress (CVE-2026-60137 et CVE-2026-63030)\n\ud83d\udcdd \ud83d\udcf0 **Source** : SecurityWeek \u2014 publi\u00e9 le 20 juillet \u2026\nhttps://cyberveille.ch/posts/2026-07-20-exploitation-active-de-deux-vulnerabilites-wordpress-cve-2026-60137-et-cve-2026-63030/ #CVE_2026_60137 #Cyberveille", "creation_timestamp": "2026-07-20T20:00:15.754821Z"}, {"uuid": "2085d565-0e92-4775-8ecb-4232bf271a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr43w5haf32x", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T20:08:32.585132Z"}, {"uuid": "11ffb60e-e289-4a08-8045-b04444222962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-723", "content": "", "creation_timestamp": "2026-07-20T20:15:03.710946Z"}, {"uuid": "59080d8a-ac56-4bb0-9f41-e69627e3417c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr44vvd6xf2k", "content": "\ud83d\udc1b Exploitation in the Wild of wp2shell\n\nhttps://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-20T20:26:14.059735Z"}, {"uuid": "ad09a778-a154-4636-8790-28b565b5265e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46cid2y42g", "content": "CVE-2026-60034 - Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension\nCVE ID : CVE-2026-60034\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsaniti...", "creation_timestamp": "2026-07-20T20:51:10.658703Z"}, {"uuid": "a8166f39-63e2-4fc4-8ed5-252cc5131a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-23T00:00:45.658812Z"}, {"uuid": "236c80c0-41d2-42b9-9b4c-dc8326624e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46shkvtn23", "content": "CVE-2026-60032 - Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia\nCVE ID : CVE-2026-60032\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upl...", "creation_timestamp": "2026-07-20T21:00:07.325546Z"}, {"uuid": "75e16b77-6268-4efc-984a-3f5c7765d9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr47bdkscs2l", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T21:08:25.751165Z"}, {"uuid": "1ff1d1be-ed0d-457d-9c92-3b8619004c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr47dtknsf2o", "content": "CVE-2026-60026 - Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder\nCVE ID : CVE-2026-60026\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension Quix Page Builder Pro is vulnerable to an authentic...", "creation_timestamp": "2026-07-20T21:09:49.610462Z"}, {"uuid": "ebc47238-9515-49ca-b007-6d0cec56cb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr47vvpj5n2o", "content": "CVE-2026-60030 - Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder\nCVE ID : CVE-2026-60030\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension Quix Page Builder Pro is vulnerable to an...", "creation_timestamp": "2026-07-20T21:19:55.764958Z"}, {"uuid": "1ce6e05b-ee4a-497d-bb3d-f604350f7fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60027", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4a5lmfox2q", "content": "CVE-2026-60027 - Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder\nCVE ID : CVE-2026-60027\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension Quix Page Builder Pro is vulnerable to a ...", "creation_timestamp": "2026-07-20T21:24:14.914276Z"}, {"uuid": "615db1e2-051e-439d-bf67-f8b2e2dc19cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr4a5y7hqv2j", "content": "\ud83d\udc1b Exploitation in the Wild of wp2shell\n\nhttps://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-20T21:24:27.723684Z"}, {"uuid": "fd503715-8a1f-4143-9923-bdf03b70a133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60028", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ayi6xas2o", "content": "CVE-2026-60028 - Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder\nCVE ID : CVE-2026-60028\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated sto...", "creation_timestamp": "2026-07-20T21:39:16.081172Z"}, {"uuid": "8d4dbc85-9e04-4077-b582-4a4c7fec7a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr4c5g2tg72o", "content": "\ud83e\udd16 CVE-2026-60137 + CVE-2026-63030 (WP2Shell): two WordPress vulns chained for unauthenticated RCE, actively exploited in the wild. Millions of sites exposed.\nhttps://www.darkreading.com/cyberattacks-data-breaches/wp2shell-millions-wordpress-sites-remote-takeover", "creation_timestamp": "2026-07-20T21:59:55.167607Z"}, {"uuid": "94293786-f933-49df-88f5-a2dcb4330abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/VNcCH5gAWr1JFL68o0sjgfBXXg-hp68b6HfdKkREhSwhrzw", "content": "", "creation_timestamp": "2026-07-21T00:00:32.979126Z"}, {"uuid": "24cabf41-e655-4684-8da7-b77a068fecc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr4cnjnubc2k", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T22:08:55.901348Z"}, {"uuid": "c0574ea0-03ac-4da9-9f29-beccb3ae595f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr4dja3xsv2y", "content": "\ud83d\udc1b Exploitation in the Wild of wp2shell\n\nhttps://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-20T22:24:25.469137Z"}, {"uuid": "c24851db-2324-4199-a1f0-035ee76ca2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mr4fmwxlzv2g", "content": "'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover\nBarely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on\u2026\n\n\ud83d\udd17 https://hnow.live/a/cf051d72", "creation_timestamp": "2026-07-20T23:02:17.962444Z"}, {"uuid": "cd49cc59-5fdb-463a-baad-37bfc9c461e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr4fy4kjga2n", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-20T23:08:32.690146Z"}, {"uuid": "5f0c29c3-ff93-44d9-a65c-c2f72568c66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/I861C3_8swM8Zs6o-xbOmuIlEkRcvzkBqQS3mepOhzC8vJk", "content": "", "creation_timestamp": "2026-07-21T00:00:32.111546Z"}, {"uuid": "6840a094-0a6b-41a3-8465-af2a15eb6150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-21T00:00:32.653819Z"}, {"uuid": "1f6c8342-0eef-4dd5-a05d-4b47518e7d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/WNPKjULv0ephKNyiWQmiLebMVhKs5Yq19I9tIqi1CZzDTIM", "content": "", "creation_timestamp": "2026-07-21T00:00:32.821269Z"}, {"uuid": "d4451e10-a5d8-4e7e-8e2c-e6906fbd9b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94276", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Crypto-Cat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 08:26:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:39.667278Z"}, {"uuid": "0a662cbc-557d-43ec-b828-89d5c0a26193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94260", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-checker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xjessie21\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 06:44:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:39.867846Z"}, {"uuid": "d80f613e-4890-408c-bfc9-6052d2fa084a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/ERt8GGFekkTS_ieiBVGmLfcxPIuM72rFTxS1aPb6SalOFNw", "content": "", "creation_timestamp": "2026-07-21T00:00:30.348141Z"}, {"uuid": "c63b0230-346e-4e48-bcd2-0089f2c01e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/aeP7rxdaeHgi9l7o5IqMQwPBOzJ-JvO8EcqSGGDOp43yc4w", "content": "", "creation_timestamp": "2026-07-21T00:00:31.702714Z"}, {"uuid": "ca72adf9-519c-4728-a2fd-80ca24cb286a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/9tpNlnwjVZVYwuWejBnBA-eWQSN8G2bIqRE_fuaoLBUZlFA", "content": "", "creation_timestamp": "2026-07-21T00:00:31.916571Z"}, {"uuid": "9100b66f-c288-49c2-a027-58c6a19b9731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/NvyRAPdfWiHuFnDgCWisEYzfqycyb2H27n16VkLUJ0UfwkQ", "content": "", "creation_timestamp": "2026-07-21T00:00:32.195336Z"}, {"uuid": "6f252b9a-7b70-417e-be57-7ec263adb078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls", "content": "", "creation_timestamp": "2026-07-21T00:00:32.363301Z"}, {"uuid": "802697dd-e0ef-4e5c-a767-84f4ba212189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/c_Rzplsy8E2pteouDdziBYUOz2Zf4p3Unq7ANnF9Z7n20HM", "content": "", "creation_timestamp": "2026-07-21T00:00:33.706238Z"}, {"uuid": "8892b1c1-7b03-45cf-9017-1f77eabaf158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "content": "", "creation_timestamp": "2026-07-21T00:00:33.864415Z"}, {"uuid": "884e0ee2-476a-4226-95e5-28a9094a73cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94345", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Wordpress-TOWN\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lucifer0xf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 16:28:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining CVE-2026-63030 and CVE-2026-60137, potentially leading to full site compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:29.680733Z"}, {"uuid": "385b3568-1db5-40bd-858f-cd2023ea3086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/FDMKvNPIu9DVJe1ShZsaOgvp3N-Hw55ecDYO_07oxLxjtOE", "content": "", "creation_timestamp": "2026-07-21T00:00:30.022663Z"}, {"uuid": "f6a81c58-4b3d-4183-b8ee-1397ad02e3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/uumWHaZ1gN7bAvwXVT7WzY5HoAqs0x1gXuRvU8DEoe0NnjY", "content": "", "creation_timestamp": "2026-07-21T00:00:33.187148Z"}, {"uuid": "5fd4c599-c9cc-4398-b161-0a731038f43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "content": "", "creation_timestamp": "2026-07-21T00:00:33.322673Z"}, {"uuid": "18c6d132-001c-4b83-b244-0e9ae4a58c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8423", "content": "\u0412 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0440\u0430\u0441\u0448\u0430\u0440\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 wp2shell, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e WordPress. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 WordPress 6.9.5 \u0438 7.0.2 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a wp2shell.\n\n\u0410\u0442\u0430\u043a\u0430 wp2shell \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - CVE-2026-63030 \u0438 CVE-2026-60137, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.x \u0438 7.0.x.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0410\u0434\u0430\u043c\u043e\u043c \u041a\u0443\u044d\u0441\u043e\u043c \u0438\u0437 Searchlight Cyber, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0443 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u0438 \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 WordPress \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Searchlight Cyber, \u0431\u043e\u043b\u0435\u0435 500 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 WordPress, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0439\u0447\u0430\u0441, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438, \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c WordPress \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2 \u0438\u043b\u0438 6.9.5.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0432 \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-63030, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0432 WordPress 6.9. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-60137 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 author__not_in\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 WP_Query. WordPress \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0451 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WordPress 6.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c WordPress, \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.0-6.9.4 \u0438 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 7.0.0-7.0.1.\n\nSQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.8.0\u20136.8.5, \u043d\u043e \u0435\u0451 \u043d\u0435\u043b\u044c\u0437\u044f \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 RCE, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043b\u0438\u0448\u044c \u0432 WordPress 6.9.\n\nSearchlight Cyber \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u0430 wp2shell.com, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, Searchlight Cyber \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a REST API \u0438\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c /wp-json/batch/v1 \u0438 ?rest_route=/batch/v1 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 WAF.\n\nCloudflare \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e WAF \u043d\u0430 \u0432\u0441\u0435\u0445 \u0442\u0430\u0440\u0438\u0444\u043d\u044b\u0445 \u043f\u043b\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cloudflare, \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 (CVE-2026-60137), \u0442\u0430\u043a \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API (CVE-2026-63030). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u0430 WAF \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u0442\u0447\u0435\u0439.", "creation_timestamp": "2026-07-21T00:00:38.652349Z"}, {"uuid": "dfce4d9f-99f9-41dc-aba5-9e85a79ca346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94301", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 31  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 8\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 09:43:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNon-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:38.892025Z"}, {"uuid": "257dc239-db17-457d-a93a-5b1594c26f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/information_security_channel/55596", "content": "WP2Shell WordPress Vulnerabilities Exploited in the Wild\nhttps://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/\n\nExploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.\nThe post WP2Shell WordPress Vulnerabilities Exploited in the Wild (https://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-21T00:00:39.234915Z"}, {"uuid": "b5ef1769-2200-4ad4-9bd8-b57a0a81e5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94292", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a sxwp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SentinelXofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 10:49:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:39.402375Z"}, {"uuid": "3d5e3a68-3e86-45c2-9fcb-7b17473979c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a N45HT\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 14:57:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:40.312234Z"}, {"uuid": "087659cf-af19-4f70-8e7d-c5220b506707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr4jcab6g42c", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nwp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Co\u2026\n\nhttps://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution\n\n#AISecurity #AI #CISA", "creation_timestamp": "2026-07-21T00:07:53.095175Z"}, {"uuid": "a4f99c79-9129-4d10-bced-0b9c8e6216d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mr4kiqgubj2k", "content": "\ud83d\udc1b Exploitation in the Wild of wp2shell\n\nhttps://www.wiz.io/blog/wp2shell-cve-2026-63030-cve-2026-60137\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-21T00:29:26.286973Z"}, {"uuid": "00ab81ed-dfc6-4f37-8d61-3dfec8634972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.darkreading.com/cyberattacks-data-breaches/wp2shell-millions-wordpress-sites-remote-takeover", "content": "Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.", "creation_timestamp": "2026-07-21T01:00:55.166777Z"}, {"uuid": "72c138a7-72bb-42cc-b183-6bca2872e4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtwozlpcmc27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-60004: Gitea Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-60004", "creation_timestamp": "2026-08-25T20:50:06.496423Z"}, {"uuid": "d80ac399-5bdb-4906-95d0-84762e84cb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/7/kritische-sicherheitslucken-in-wordpress-updates-verfugbar", "content": "20. Juli 2026\n\nBeschreibung\n\nIn WordPress existieren zwei Sicherheitslücken. Eine SQL-Injection-Schwachstelle im Parameter „author__not_in“ von „WP_Query“ betrifft WordPress ab Version 6.8. Ab WordPress 6.9 lässt sich diese laut Advisory in Kombination mit einer Schwachstelle in der REST-API (Batch-Route-Confusion) zur Ausführung von beliebigem Code (Remote Code Execution) ausnutzen. Laut Searchlight Cyber ist diese Angriffskette ohne vorherige Authentifizierung und ohne weitere Voraussetzungen in einer Standardinstallation ohne Plugins nutzbar.\n\nAuf GitHub sind mittlerweile mehrere öffentlich verfügbare Proof-of-Concept-Exploits für CVE-2026-63030 veröffentlicht worden. Damit ist der Aufwand für eine Ausnutzung deutlich reduziert; CERT.at rechnet mit Angriffen auf ungepatchte Systeme.\n\nCVE-Nummer(n): CVE-2026-60137, CVE-2026-63030\n\nCVSS Base Score: N/A (Einstufung im GitHub Security Advisory: CVE-2026-60137 „Moderate“, CVE-2026-63030 „Critical“)\n\nAuswirkungen\n\nIn Kombination mit der Schwachstelle in der REST-API ist ab WordPress 6.9 die Ausführung von beliebigem Code auf dem betroffenen System, und damit eine vollständige Kompromittierung der Webseite und des darunterliegenden Systems möglich.\n\nBetroffene Systeme\n\nCVE-2026-60137 (SQL Injection):\n\n\n\nWordPress 6.8.0 bis 6.8.5\n\nWordPress 6.9.0 bis 6.9.4\n\nWordPress 7.0.0 bis 7.0.1\n\n\nCVE-2026-63030 (REST-API Batch-Route-Confusion, RCE):\n\n\n\nWordPress 6.9.0 bis 6.9.4\n\nWordPress 7.0.0 bis 7.0.1\n\nWordPress 7.1 Beta 1\n\n\nWordPress-Versionen vor 6.8 sind nicht betroffen.\n\nAbhilfe\n\nWordPress hat korrigierte Versionen veröffentlicht:\n\n\n\nWordPress 7.0.2 (behebt beide Schwachstellen)\n\nWordPress 6.9.5 (behebt beide Schwachstellen)\n\nWordPress 6.8.6 (behebt CVE-2026-60137)\n\nWordPress 7.1 Beta 2 (behebt beide Schwachstellen)\n\n\nCERT.at empfiehlt, die Aktualisierung umgehend einzuspielen. Das WordPress.org-Team hat für betroffene Versionen erzwungene Updates über das Auto-Update-System aktiviert.\n\nSofern ein Update nicht unmittelbar möglich ist, nennt Searchlight Cyber folgende temporäre Maßnahmen: Deaktivierung der REST-API für nicht authentifizierte Benutzer:innen, Blockieren des Pfads „/wp-json/batch/v1“ sowie des Query-Parameters „rest_route=/batch/v1“ mittels Web Application Firewall (beide Muster müssen blockiert werden), oder Einsatz eines Plugins, das Batch-Requests an die REST-API nur für authentifizierte Benutzer:innen zulässt. Diese Maßnahmen können den regulären Betrieb der Webseite beeinträchtigen und sind nur als temporäre Notmaßnahme bis zum Update vorgesehen.\n\nHinweis\n\nGenerell empfiehlt CERT.at, sämtliche Software aktuell zu halten und dabei insbesondere auf automatische Updates zu setzen. Regelmäßige Neustarts stellen sicher, dass diese auch zeitnah aktiviert werden.\n\n\n\nInformationsquelle(n):\n\nWordPress 7.0.2 Release (Englisch)https://wordpress.org/news/2026/07/wordpress-7-0-2-release/\n\nFacilitated SQL injection vulnerability in the author__not_in parameter of WP_Query (Englisch)https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf\n\nREST API batch-route confusion and SQL injection issue leading to Remote Code Execution (Englisch)https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ff9f-jf42-662q\n\nwp2shell: Pre Authentication RCE in WordPress Core (Englisch)https://wp2shell.com/\n\nNew wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code (Englisch)https://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html", "creation_timestamp": "2026-07-21T01:00:54.646161Z"}, {"uuid": "a62cafb9-548e-440b-95f7-424afbe29d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr4ozc5zwe2w", "content": "wp2shell, a WordPress Core RCE chain (CVE-2026-63030, CVE-2026-60137), is exploited in the wild. Public PoC code is out. Patch WordPress now.\n\n#wp2shell #WordPress #RCE #CVE202663030 #CVE202660137 #InfoSec #WebSecurity #PatchNow", "creation_timestamp": "2026-07-21T01:50:16.091475Z"}, {"uuid": "d3800860-d3f3-44aa-bdb5-84602671dc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mr4wiof4u42s", "content": "~Akamai~\nUnauthenticated SQLi via WordPress REST Batch API escalates to full RCE on default installations.\n-\nIOCs: CVE-2026-63030, CVE-2026-60137\n-\n#CVE202663030 #RCE #ThreatIntel #WordPress", "creation_timestamp": "2026-07-21T04:04:08.368323Z"}, {"uuid": "5e6fa3cc-1ffd-44f3-bcf9-da1bed25f0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr4z4d3u232r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 65 interactions\nCVE-2026-60137: 51 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 35 interactions\nCVE-2026-60137: 28 interactions\nCVE-2026-42533: 10 interactions\n", "creation_timestamp": "2026-07-21T04:50:54.911359Z"}, {"uuid": "80e38933-1654-47eb-b728-2544ba8e3593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr56futihw2z", "content": "\ud83e\udd16 CVE-2026-60137 + CVE-2026-63030 (WP2Shell): Two critical WordPress core flaws actively exploited. SQLi + REST API confusion enables unauthenticated RCE on millions of sites. PoC public. Patch now.\nhttps://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.html", "creation_timestamp": "2026-07-21T06:25:43.930126Z"}, {"uuid": "22f43846-a1c0-4234-b53b-858573237c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html", "content": "Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.\n\nThe two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed wp2shell.\n\n\"By the early hours of Saturday morning (UTC), successful exploitation was already well", "creation_timestamp": "2026-07-21T10:00:53.875716Z"}, {"uuid": "72c7d8a8-b718-4c98-a72d-6bc546147bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/thehackernews/9893", "content": "\ud83d\udea8 Attackers are exploiting a critical Gitea RCE flaw.\n\nCVE-2026-60004 can let an external attacker gain repo write access via open registration and run shell commands as the Gitea service account.\n\nOne reported attack dropped cryptocurrency-miner-like malware.\n\nRead: https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "creation_timestamp": "2026-08-26T19:00:03.669817Z"}, {"uuid": "5c94d8b1-5d1b-4190-b6c8-25826b153722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mr5ojuv4iq2o", "content": "WordPress\u306b2\u3064\u306e\u8106\u5f31\u6027(CVE-2026-63030, CVE-2026-60137)\u304c\u767a\u898b\u3055\u308c\u3001\u672a\u8a8d\u8a3c\u306eRCE\u3068\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306e\u5b8c\u5168\u306a\u4e57\u3063\u53d6\u308a\u304c\u53ef\u80fd\u3002wp2shell\u3068\u3057\u3066\u77e5\u3089\u308c\u308b\u3002", "creation_timestamp": "2026-07-21T11:14:18.821295Z"}, {"uuid": "e9bd11d0-ced3-4502-8b9f-06016b5ce0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.475284Z"}, {"uuid": "3f88feff-e656-4b70-b2b4-140f43e3c3cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.cert.si/si-cert-2026-04", "content": "", "creation_timestamp": "2026-07-21T12:15:05.780392Z"}, {"uuid": "899085ad-483b-4a06-8b54-b37cf35f5618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-wordpress-core-installeer-updates", "content": "", "creation_timestamp": "2026-07-21T12:45:02.893597Z"}, {"uuid": "5a2e0a50-ea0f-42c3-b571-f443ec0816c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60080", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vklfpwo2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-60080](https://lists.apache.org/thread/svnq03f3ls7vsgk8md4hjmmw1z6stbvy)\nUse After Free...\nhttps://lists.apache.org/thread/svnq03f3ls7vsgk8md4hjmmw1z6stbvy #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-07-21T13:19:57.843939Z"}, {"uuid": "30c3f2e5-8c85-4e4e-a67d-d2508abf2f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mr62lqlj422w", "content": "\ud83d\uded1 CVE-2026-60137\nWordPress Core\nCVSS 5.9 / EPSS 4% / KEV: No\nTL;DR: WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly s\u2026\nhttps://cvesentinel.com/report/CVE-2026-60137?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-21T14:50:05.661794Z"}, {"uuid": "a33f2c6a-cf21-4cbc-8a88-2f4ec5241660", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3cb9cb7-62cf-4de4-b912-478080bf470a", "content": "", "creation_timestamp": "2026-07-21T15:00:01.661613Z"}, {"uuid": "049d0e39-a0a4-4df4-a017-05fe72d39431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mr66vm42l224", "content": "~Cybergcca~\nCanadian Cyber Centre flags 5 advisories; Microsoft and WordPress CVEs actively exploited in the wild.\n-\nIOCs: CVE-2026-56164, CVE-2026-60137, CVE-2026-63030\n-\n#PatchNow #ThreatIntel #Vulnerability", "creation_timestamp": "2026-07-21T16:07:11.391738Z"}, {"uuid": "526a4ba7-7105-4c74-a8a9-1421f929952e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-07-21T16:15:09.496631Z"}, {"uuid": "9481062b-2821-443e-b72f-868561312713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mr6au5yxu62o", "content": "Hackers are exploiting the \"wp2shell\" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers.", "creation_timestamp": "2026-07-21T16:42:10.607292Z"}, {"uuid": "d660e8c6-d326-4dfc-9fff-395c94f890a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60080", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr6boddzqi2g", "content": "CVE-2026-60080: Apache Fory: Rust MetaString heap use-after-free", "creation_timestamp": "2026-07-21T16:56:48.783803Z"}, {"uuid": "0e849470-28d0-4bb5-8081-cc5159d9de5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr6heczzyx2z", "content": "\ud83e\udd16 CVE-2026-63030 & CVE-2026-60137 (Critical): wp2shell WordPress flaws exploited in the wild to deploy persistent webshells. Unauthenticated RCE on affected sites.\nhttps://www.bleepingcomputer.com/news/security/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/", "creation_timestamp": "2026-07-21T18:38:35.257756Z"}, {"uuid": "edc5eb35-120a-48c6-80a7-3d938fbe58ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mr6l3ancmz2o", "content": "WordPress Core\u306ewp2shell\u8106\u5f31\u6027\uff08CVE-2026-63030, CVE-2026-60137\uff09\u304c\u60aa\u7528\u3055\u308c\u3001webshell\u8a2d\u7f6e\u3084\u60aa\u6027\u30d7\u30e9\u30b0\u30a4\u30f3\u5c0e\u5165\u306e\u88ab\u5bb3\u304c\u51fa\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-07-21T19:45:05.524242Z"}, {"uuid": "5b6fe1f6-2a31-47ef-ba2f-c1039197162f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mr6lwfdja42j", "content": "\ud83d\udce2 wp2shell : analyse technique approfondie des CVE-2026-63030 et CVE-2026-60137 dans WordPress\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 18 juillet 2026 \u2026\nhttps://cyberveille.ch/posts/2026-07-21-wp2shell-analyse-technique-approfondie-des-cve-2026-63030-et-cve-2026-60137-dans-wordpress/ #CVE_2026_60137 #Cyberveille", "creation_timestamp": "2026-07-21T20:00:16.493135Z"}, {"uuid": "8bd0902e-b1a3-4446-af19-934b42b7b971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/feilong76.bsky.social/post/3mr6pd4ugj227", "content": "\u201cWordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f - piyolog\u201d htn.to/47Wdhse2Tg", "creation_timestamp": "2026-07-21T21:01:08.227267Z"}, {"uuid": "26b52eeb-4a69-4a03-9d9a-ef59b3f892bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60173", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tc3zhve24", "content": "CVE-2026-60173 - oracle bi publisher\nThe Oracle BI Publisher software, used in Oracle Analytics, has a security weakness. An attacker can access the system without a password, potentially taking control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:12:05.737844Z"}, {"uuid": "f87ce54b-a6cd-416b-b05d-69da703b6bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60197", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tc5xjkc2k", "content": "CVE-2026-60197 - oracle coherence\nOracle Fusion Middleware's Coherence product has a security risk that allows an attacker to take control of the system. This is a serious threat because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:12:07.487175Z"}, {"uuid": "da339251-3f33-4b7f-8449-d04aea17b723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60198", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tfnycod2v", "content": "CVE-2026-60198 - oracle weblogic server\nSome versions of Oracle WebLogic Server have a security flaw that allows hackers to take control of the server if they have access to it through the network. This is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:14:05.081052Z"}, {"uuid": "fcdf3609-bad1-406a-83af-7ca2f3c1bd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60199", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tfpu7o32v", "content": "CVE-2026-60199 - oracle weblogic server\nSome versions of Oracle WebLogic Server are at risk of being taken over by an attacker who can access the server over the internet. This is a serious issue because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:14:07.365873Z"}, {"uuid": "01f65317-14e6-44c2-a714-b26a8af8c05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/qubblelabs.com/post/3mr6tfukeb22g", "content": "Three days. Millions of WordPress sites. Two CVEs chained for RCE via plugin upload. DarkReading confirms active exploitation of CVE-2026-60137 + CVE-2026-63030.\n\nThe structural rot: WordPress has zero code-signing requirement for plugins.", "creation_timestamp": "2026-07-21T22:14:12.046272Z"}, {"uuid": "d4d7e384-167b-45e0-bef5-c291ac6226a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60215", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tjaqh3u23", "content": "CVE-2026-60215 - oracle coherence\nThe Oracle Coherence Core component in certain versions of Oracle Fusion Middleware is vulnerable to a security risk. An attacker with network access could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:16:05.881742Z"}, {"uuid": "3e68af1b-7065-4472-af8a-b406195bc9f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60216", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tjcsbem24", "content": "CVE-2026-60216 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a security weakness that allows hackers to gain unauthorized access and potentially take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:16:07.523701Z"}, {"uuid": "8d85d0c0-61a3-401f-80e5-9538e7de188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60217", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tmsun7m23", "content": "CVE-2026-60217 - oracle coherence\nA security weakness in Oracle Coherence allows unauthorized access to the system. This could lead to a complete takeover of the system, which could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:18:06.761053Z"}, {"uuid": "118f2793-9b49-4e35-bdb5-ea24c9690b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60219", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tmuxvf424", "content": "CVE-2026-60219 - oracle coherence\nSome versions of Oracle Fusion Middleware Coherence can be taken over by an attacker with network access. This is a serious risk because an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:18:08.451672Z"}, {"uuid": "eb655221-c409-4863-a8d9-5bc85b9306f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60220", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tqfrtwu24", "content": "CVE-2026-60220 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, has a security issue that could allow an attacker to access sensitive data without permission.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:20:07.432224Z"}, {"uuid": "5e5357d8-0983-4021-960a-927014d81220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60221", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6tqhvvoe24", "content": "CVE-2026-60221 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a security risk. An attacker with network access can potentially take control of your Oracle\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:20:09.408771Z"}, {"uuid": "7b90f1b3-73c7-4bd8-8625-afcfe3c8571e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60224", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ttxpsvl2a", "content": "CVE-2026-60224 - oracle coherence\nOracle Fusion Middleware Coherence Core is vulnerable to a serious security risk that allows an attacker to take control of the system. This affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:22:05.448295Z"}, {"uuid": "3090265b-83e9-4986-80ba-4b1a88ea6a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60225", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ttzpbdp2j", "content": "CVE-2026-60225 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a vulnerability that allows an attacker with access to its network to take control of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:22:07.095656Z"}, {"uuid": "03eef8c4-9f5c-4822-bc5a-553fcfb7e777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60226", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6txkwoum2v", "content": "CVE-2026-60226 - oracle coherence\nOracle Coherence, a product of Oracle Fusion Middleware, has a security issue that allows hackers to take control of the system without needing a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:24:05.922601Z"}, {"uuid": "6b1d526e-d49f-4d60-ac3c-a3ddecf1e1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60227", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6txnbpq32q", "content": "CVE-2026-60227 - oracle coherence\nCertain versions of the Oracle Coherence product have a security flaw that could allow an unauthorized user to gain control over the system. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:24:08.230267Z"}, {"uuid": "2047d872-8df9-463e-bf70-7023aa033d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60228", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6u354r2m2a", "content": "CVE-2026-60228 - oracle coherence\nOracle Coherence, a product of Oracle Fusion Middleware, has a security flaw that allows hackers with network access to take control of the system. This is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:26:05.565080Z"}, {"uuid": "a24331c7-4a3e-48da-a1ca-c3610707419c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60229", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6u36yys42a", "content": "CVE-2026-60229 - oracle coherence\nCertain versions of Oracle Coherence, a product in Oracle Fusion Middleware, are vulnerable to a severe attack. An attacker without permission can access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:26:07.485888Z"}, {"uuid": "a0e17b9c-f6c9-45c8-b7c8-bfc429f5697c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60230", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6u6oskys2z", "content": "CVE-2026-60230 - oracle coherence\nOracle Coherence, a part of Oracle Fusion Middleware, is at risk of being taken over by an attacker with network access. This means an attacker could gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T22:28:04.742889Z"}, {"uuid": "b224da69-c9cf-464b-8697-4ecb81467e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mr6ucljy7y2q", "content": "\ud83d\udce2 Exploitation active de wp2shell : RCE pr\u00e9-auth critique dans WordPress Core (CVE-2026-63030 & CVE-2026-60137)\n\ud83d\udcdd \u2026\nhttps://cyberveille.ch/posts/2026-07-21-exploitation-active-de-wp2shell-rce-pre-auth-critique-dans-wordpress-core-cve-2026-63030-cve-2026-60137/ #CMSmap__malicious_variant_ #Cyberveil\u2026", "creation_timestamp": "2026-07-21T22:30:16.115307Z"}, {"uuid": "04187b7e-f7cd-4781-8499-4bac626cf819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60200", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6w3itx3c2z", "content": "CVE-2026-60200 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are at risk of being taken over by hackers who can access the server over a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:02:05.522008Z"}, {"uuid": "e08cd3b9-0867-4e17-90a2-6e14a2a7fcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60202", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6w3ky2h72v", "content": "CVE-2026-60202 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are at risk of being taken over by an attacker without a password. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:02:07.553572Z"}, {"uuid": "c6c9db42-b06e-443d-b929-e2df9eaf29e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60204", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6w72shx722", "content": "CVE-2026-60204 - oracle weblogic server\nThe Oracle WebLogic Server software has a security weakness that makes it possible for hackers to gain control of the server without needing a password. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:04:04.786819Z"}, {"uuid": "e91cd080-0c3f-4d8a-9dbf-c0f95fe4b93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60205", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6w74uf2z2e", "content": "CVE-2026-60205 - oracle weblogic server\nThe Oracle WebLogic Server product has a security weakness that allows an attacker to take control of the system without needing a password. This is a serious issue\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:04:06.946484Z"}, {"uuid": "50f01455-4b25-4cd3-a227-543dc41e9230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wcnzhy22u", "content": "CVE-2026-60206 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are at risk of being taken over by attackers who can access the server via a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:06:05.526012Z"}, {"uuid": "360f98ab-7e40-44f3-926a-ca5daae3961d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60208", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wcqcgcp22", "content": "CVE-2026-60208 - oracle weblogic server\nOracle WebLogic Server, part of Oracle Fusion Middleware, has a security weakness. An attacker with internet access can potentially access sensitive information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:06:07.941430Z"}, {"uuid": "bbdc3a08-0aa3-4969-b081-325b0822ba24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60209", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wga6kjz2v", "content": "CVE-2026-60209 - oracle coherence\nThe Oracle Coherence product, part of Oracle Fusion Middleware, has a security weakness that allows an attacker to take control of the system without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:08:05.512012Z"}, {"uuid": "1ad6c85a-2295-45e2-a581-09e728bd518b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60210", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wjrzxac2z", "content": "CVE-2026-60210 - oracle coherence\nCertain versions of Oracle Coherence, a product in Oracle Fusion Middleware, are vulnerable to a serious security threat. An attacker with network access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:10:04.714701Z"}, {"uuid": "5dc73145-ea5f-4881-a9ef-340c553735ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60212", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wju6gyj2j", "content": "CVE-2026-60212 - oracle coherence\nA security weakness in Oracle Fusion Middleware's Coherence Core component allows an attacker to take control of the system without needing a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:10:06.977648Z"}, {"uuid": "39880c6e-7dce-4ccc-ae69-88ba50c8b323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wnfiesz2i", "content": "CVE-2026-60232 - oracle coherence\nAn attacker can remotely take control of Oracle Coherence by exploiting a vulnerability in the software. This can happen if the attacker has access to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:12:05.904883Z"}, {"uuid": "73b4c112-e731-4511-855e-1b10624bb6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60234", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wnhjn5r2j", "content": "CVE-2026-60234 - oracle coherence\nThe Oracle Coherence product, part of Oracle Fusion Middleware, has a security weakness that allows an attacker with network access to take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:12:07.839131Z"}, {"uuid": "b97f2ed6-5a30-4e93-bedd-2b4f65352eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60522", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr6wphsmwz2l", "content": "CVE-2026-60522 - High severity flaw in Oracle WebCenter Content (v12.2.1.4.0 & 14.1.2.0.0). Low-privilege network access + user interaction can lead to significant impact on additional systems. CVSS 7.6. No patch yet. Isolate affected serve...\n\nhttps://www.valtersit.com/cve/CVE-2026-60522/", "creation_timestamp": "2026-07-21T23:13:15.573900Z"}, {"uuid": "83297072-4155-4bfb-9886-2d6ed324a9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60236", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wqxenbc2e", "content": "CVE-2026-60236 - oracle coherence\nThe Oracle Coherence product in Oracle Fusion Middleware has a security flaw that can be exploited by attackers with network access. If left unpatched,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:14:05.123452Z"}, {"uuid": "3a61bd9c-7175-4d14-93cf-bd057f78e6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60239", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wqz5oek2u", "content": "CVE-2026-60239 - oracle coherence\nOracle Coherence, a product in Oracle Fusion Middleware, has a security weakness that allows hackers to access and modify sensitive data without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:14:06.982244Z"}, {"uuid": "1b90f32e-1563-4637-b30b-4521b129560d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60240", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wujpnrg2y", "content": "CVE-2026-60240 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, has a security flaw that can allow hackers to take control of the system. This is a serious risk\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:16:05.051538Z"}, {"uuid": "18581ff3-5e77-4b1b-8543-a2feb6669bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60241", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wultnw22e", "content": "CVE-2026-60241 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, has a vulnerability that allows hackers with network access to take control of the system. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:16:07.450316Z"}, {"uuid": "06c4b103-01b6-4f57-8895-4bd12a4c1466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60242", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wy3doq22a", "content": "CVE-2026-60242 - oracle coherence\nOracle Coherence, a software component of Oracle Fusion Middleware, is vulnerable to a takeover via the internet. This means an attacker could gain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:18:04.406707Z"}, {"uuid": "6a759885-2881-4090-835d-89adee0c797b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60244", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6wy5huul2r", "content": "CVE-2026-60244 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, has a vulnerability that allows an attacker to take control of the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:18:06.882775Z"}, {"uuid": "24a62d1e-6140-4b21-a624-0138d75b4f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60246", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6x3qju4e2r", "content": "CVE-2026-60246 - oracle coherence\nOracle Coherence, a part of Oracle Fusion Middleware, has a vulnerability that allows attackers with network access to take control of the system without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:20:07.120409Z"}, {"uuid": "e133050c-1332-481b-8952-4f19cdd4a752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60247", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6x3s26fx24", "content": "CVE-2026-60247 - oracle coherence\nAn attacker with access to the internet can take control of your Oracle Coherence system without needing a password. This is a serious security risk\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:20:09.163397Z"}, {"uuid": "0ecc1dae-88ca-4334-8f1d-22ff9b6241f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60248", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7arp5x23", "content": "CVE-2026-60248 - oracle coherence\nOracle Coherence Core, part of Oracle Fusion Middleware, has a security weakness that allows an attacker to gain unauthorized access to the system. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:22:04.783749Z"}, {"uuid": "e4759413-9e17-4a64-8b7e-cc41b3760c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60249", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q", "content": "CVE-2026-60249 - oracle coherence\nIf an attacker has direct access to the hardware where Oracle Coherence is running, they can potentially take control of the system. This affects several\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:22:07.355003Z"}, {"uuid": "e0967d84-4160-4be3-ae05-c86b5d26ae5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60250", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xcszldu2v", "content": "CVE-2026-60250 - oracle coherence\nOracle Coherence, a part of Oracle Fusion Middleware, has a security weakness that allows unauthorized users to gain control over the system. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:24:04.642488Z"}, {"uuid": "5b0fed24-1a50-4f92-b947-b012e2bbe248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60251", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xcuij5l2u", "content": "CVE-2026-60251 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, is vulnerable to an attack that can allow unauthorized access and control. This is a serious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:24:06.257395Z"}, {"uuid": "df415834-f4c1-4124-9abd-e9eff54fdeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60253", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xgg7sde2a", "content": "CVE-2026-60253 - oracle coherence\nOracle Fusion Middleware's Coherence product has a security flaw that could allow hackers to take control of it from anywhere on the internet. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:26:05.591048Z"}, {"uuid": "e75d4b2b-dd98-442e-9e6c-e3363cb14341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xgiapqi2k", "content": "CVE-2026-60254 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a security risk that could allow hackers to take control of the system. This affects versions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:26:07.466620Z"}, {"uuid": "baaf919a-2172-46af-adc1-f6740e7309dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60257", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xjxo2fj23", "content": "CVE-2026-60257 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a security flaw that could allow hackers to gain control of the system without needing a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:28:04.367810Z"}, {"uuid": "771df62a-bc3c-4ce7-9b43-4778ce1eeee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60258", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xjzmfxy2y", "content": "CVE-2026-60258 - oracle coherence\nAn attacker can access Oracle Coherence without a password and take control of it. This can lead to sensitive data being compromised and the system being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:28:06.329254Z"}, {"uuid": "01dd5d57-b6e9-4113-b286-025b984085fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xnk54l42r", "content": "CVE-2026-60259 - oracle coherence\nThe Oracle Coherence product in Oracle Fusion Middleware has a security weakness. An attacker with internet access can potentially take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:30:04.411965Z"}, {"uuid": "55600c98-e25e-46fe-9f8f-68726217a7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60262", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xnlwexj2s", "content": "CVE-2026-60262 - oracle coherence\nOracle Coherence, a part of Oracle Fusion Middleware, has a security weakness that could allow hackers to take control of the system without a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:30:06.252634Z"}, {"uuid": "78cc6db2-d723-44f9-b2f9-566d64561bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60264", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr5pmuq2k", "content": "CVE-2026-60264 - oracle coherence\nOracle Coherence versions 14.1.1, 14.1.2, and 15.1.1 have a security flaw that allows an attacker to take control of the system without a password. This is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:32:05.591193Z"}, {"uuid": "7d4b2ee6-07a9-4fea-9ec9-b8a4c0376fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr76ugk23", "content": "CVE-2026-60267 - oracle coherence\nThe Oracle Coherence Core component in certain Oracle Fusion Middleware versions allows an attacker with network access to potentially access or modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:32:07.065429Z"}, {"uuid": "642e3c7f-e72f-4e5a-97b7-6d670eee0b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60269", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xuqd6w42a", "content": "CVE-2026-60269 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a security weakness that allows an attacker without permission to access and control the system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:34:06.128241Z"}, {"uuid": "59dcf291-1e54-48f0-8843-cc2d09b49df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60272", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xurqovh24", "content": "CVE-2026-60272 - oracle coherence\nThe Oracle Coherence product in Oracle Fusion Middleware has a security weakness that allows an attacker with network access to potentially take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:34:07.467421Z"}, {"uuid": "775e1b95-ce71-4c7f-8882-758ebe44cf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60275", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6xydqohz2j", "content": "CVE-2026-60275 - oracle coherence\nOracle Coherence, a part of Oracle Fusion Middleware, has a vulnerability that allows hackers to take control of the system without needing a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:36:07.548076Z"}, {"uuid": "34832241-7769-4923-a243-bc69c0a19962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60276", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6y3uatvm2r", "content": "CVE-2026-60276 - oracle coherence\nThe Oracle Coherence product has a security flaw that allows an attacker without a password to access and control the system through a secure internet\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:38:04.764065Z"}, {"uuid": "7f73fb02-8171-4f1c-a843-79a36ffae03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60278", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6y3vldqu2v", "content": "CVE-2026-60278 - oracle coherence\nOracle Coherence Core versions 12.2.1.4.0 and 14.1.1.0.0 are at risk of being taken over by an attacker who can access the system over the internet. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:38:06.297060Z"}, {"uuid": "17be3f1b-825b-4cfb-bac3-d084e8d93829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60279", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6y7gvv2h2v", "content": "CVE-2026-60279 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a security flaw that allows hackers to take control of the system without a password. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:40:04.955972Z"}, {"uuid": "7d688bf8-8de9-4b5c-b3e2-7988e1c49e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60280", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6y7itcfn2a", "content": "CVE-2026-60280 - oracle coherence\nOracle Fusion Middleware's Coherence product has a vulnerability that allows an attacker with access to the network to take control of the system. This is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:40:07.054940Z"}, {"uuid": "e3afe7fe-32c3-4040-8751-d536abb2fe42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60285", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ycyyexo2q", "content": "CVE-2026-60285 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, has a vulnerability that allows an attacker to take control of the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:42:04.754531Z"}, {"uuid": "8fc0abd3-4d5d-43f1-b7b0-f58b44fa7dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60286", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yd2yztu2r", "content": "CVE-2026-60286 - oracle coherence\nOracle Coherence, a software component of Oracle Fusion Middleware, has a security weakness that could allow hackers to take control of the system without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:42:06.646724Z"}, {"uuid": "7d703efe-5e9c-4421-92fd-13f50298770d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60287", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yglq7rc2i", "content": "CVE-2026-60287 - oracle coherence\nOracle Coherence, part of Oracle Fusion Middleware, has a vulnerability that allows an attacker with network access to take control of the system. This is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:44:05.083944Z"}, {"uuid": "6fc36c83-d119-41e9-9541-8352f272ad79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60288", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ygnmrgp24", "content": "CVE-2026-60288 - oracle coherence\nOracle Fusion Middleware Coherence Core versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected. An attacker with network access can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:44:06.881402Z"}, {"uuid": "c23d040c-0a61-4099-9f7c-ce2491aeacdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60289", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yk76zks2j", "content": "CVE-2026-60289 - oracle coherence\nOracle Coherence, a key component of Oracle Fusion Middleware, is vulnerable to unauthorized takeover. This means that an attacker with access to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:46:06.057282Z"}, {"uuid": "1365f4e1-3ca7-4762-a1bc-dc11c21f28af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ykb4y3r2k", "content": "CVE-2026-60290 - oracle coherence\nVersions 14.1.1, 14.1.2, and 15.1.1 of Oracle Coherence are affected. An attacker with internet access can potentially take control of your Coherence\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:46:07.908429Z"}, {"uuid": "4026e878-f2da-4e9f-89fb-8415051703dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60291", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynr2kqk2y", "content": "CVE-2026-60291 - oracle weblogic server\nOracle WebLogic Server, part of Oracle Fusion Middleware, has a security flaw that allows hackers with internet access to take control of the server. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:48:05.356613Z"}, {"uuid": "7e59a2e3-29eb-4d1c-a96f-34f2523680b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60292", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynsyrfe2v", "content": "CVE-2026-60292 - oracle weblogic server\nOracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 have a security weakness that allows an attacker to take control of the server without a password. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:48:07.343058Z"}, {"uuid": "6b678ffc-e47b-413d-8c28-4f1b878d9b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60294", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yrcxyoi22", "content": "CVE-2026-60294 - oracle weblogic server\nOracle WebLogic Server, a key component of Oracle Fusion Middleware, has a security flaw that allows an attacker to take control of the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:50:05.114991Z"}, {"uuid": "3f9bf5c5-1973-4ba1-874e-e886ab19f030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yretgzi22", "content": "CVE-2026-60296 - oracle coherence\nThe Oracle Coherence product has a vulnerability that allows an attacker to take control of it without needing a password. This can happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:50:06.842691Z"}, {"uuid": "fae7abda-662b-4bae-8755-dbcadfc2b295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60297", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yuvmgfb2k", "content": "CVE-2026-60297 - oracle coherence\nOracle Coherence, a component of Oracle Fusion Middleware, is affected by a serious vulnerability. This means that hackers with access to your network can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:52:05.125540Z"}, {"uuid": "bb8341d8-31af-4b19-8c1d-b28e3e0c3a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60298", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yuxnwyy2j", "content": "CVE-2026-60298 - oracle coherence\nThe Oracle Coherence product in Oracle Fusion Middleware is vulnerable to a serious security threat. An attacker with network access can potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:52:07.121241Z"}, {"uuid": "f46209cf-05a9-424f-8959-98af2277acb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60299", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yyipggn2z", "content": "CVE-2026-60299 - oracle coherence\nA security issue in Oracle Coherence Core affects versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. This means an attacker with access to your network can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:54:05.716596Z"}, {"uuid": "0f732716-7035-474e-bf68-f1a7b2f4f03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60300", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6yykq2jd2v", "content": "CVE-2026-60300 - oracle coherence\nOracle Coherence, a part of Oracle Fusion Middleware, has a security flaw that allows attackers with network access to take control of the system. This is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:54:07.791924Z"}, {"uuid": "83dc5c48-e59d-44c6-aab8-c38128ae1b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60306", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6z42qbtq2r", "content": "CVE-2026-60306 - oracle coherence\nA security flaw in Oracle Fusion Middleware Coherence Core allows attackers to take control of the system without a password. This can happen if an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:56:06.251109Z"}, {"uuid": "8ecc7a6c-f109-4fa7-8c87-dcb8ab5f1cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60308", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6z44jm4c2s", "content": "CVE-2026-60308 - oracle coherence\nThe Oracle Coherence component in Oracle Fusion Middleware has a vulnerability that allows an attacker with network access to potentially take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecoherence #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:56:07.374997Z"}, {"uuid": "00288815-e294-4697-9f49-c1ec50c2e0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60326", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6z7nghko2a", "content": "CVE-2026-60326 - oracle access manager\nOracle Access Manager, used in Oracle Fusion Middleware, has a security flaw that allows hackers to access sensitive data without a password. This means that attackers\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-21T23:58:05.767507Z"}, {"uuid": "cb68e601-107c-4cae-a547-2d8838a4ee26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/c_Rzplsy8E2pteouDdziBYUOz2Zf4p3Unq7ANnF9Z7n20HM", "content": "", "creation_timestamp": "2026-07-22T00:00:07.355889Z"}, {"uuid": "bfd8373f-2e94-4ed1-91a7-a22f3df4b347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/uumWHaZ1gN7bAvwXVT7WzY5HoAqs0x1gXuRvU8DEoe0NnjY", "content": "", "creation_timestamp": "2026-07-22T00:00:07.390823Z"}, {"uuid": "446d637e-c3c8-457f-b298-13d960d41c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/VNcCH5gAWr1JFL68o0sjgfBXXg-hp68b6HfdKkREhSwhrzw", "content": "", "creation_timestamp": "2026-07-22T00:00:07.729903Z"}, {"uuid": "26732443-83c5-4448-9d61-877c8e33bca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "content": "", "creation_timestamp": "2026-07-22T00:00:07.451736Z"}, {"uuid": "231efef4-9e8f-426f-8897-8e83a2580ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/WNPKjULv0ephKNyiWQmiLebMVhKs5Yq19I9tIqi1CZzDTIM", "content": "", "creation_timestamp": "2026-07-22T00:00:07.670450Z"}, {"uuid": "77f43828-d5d4-42e8-b22a-154a0fc0f85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc", "content": "", "creation_timestamp": "2026-07-22T00:00:07.898428Z"}, {"uuid": "ef681720-dafd-4df9-85c6-57c25367be2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94345", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Wordpress-TOWN\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lucifer0xf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 16:28:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining CVE-2026-63030 and CVE-2026-60137, potentially leading to full site compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T00:00:21.340456Z"}, {"uuid": "7bfeb6c7-4dfe-4f7b-984b-bd32cb028c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "content": "", "creation_timestamp": "2026-07-22T00:00:07.225822Z"}, {"uuid": "8e575c61-47bb-4f6d-8a94-49342c461d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls", "content": "", "creation_timestamp": "2026-07-22T00:00:07.787758Z"}, {"uuid": "d0922817-2082-4b3a-ad96-401f0cee64d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/NvyRAPdfWiHuFnDgCWisEYzfqycyb2H27n16VkLUJ0UfwkQ", "content": "", "creation_timestamp": "2026-07-22T00:00:07.996814Z"}, {"uuid": "87c04747-03c6-4d25-9467-25cfcdaf0170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html", "content": "Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.\n\nThe two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed wp2shell.\n\n\"By the early hours of Saturday morning (UTC), successful exploitation was already well", "creation_timestamp": "2026-07-22T01:00:42.500837Z"}, {"uuid": "3d11d853-7c77-4790-86c0-65edd3c50552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtwtnyru6y2k", "content": "\ud83d\udea8 Critical Threat Intel: CVE-2026-60004 targets Gitea via diffpatch API code injection. Review execution vectors, persistence mechanics, and active endpoint hardening actions to secure your version control infrastructure. https://thecybermind.co/jily", "creation_timestamp": "2026-08-25T22:13:02.862747Z"}, {"uuid": "c98441a8-a34d-4d99-abd8-0ce8a326b18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mr7fmo5iqh2s", "content": "\uff1e WordPress\u306e\u8106\u5f31\u6027\u5bfe\u7b56\u306b\u3064\u3044\u3066(CVE-2026-60137\u3001CVE-2026-63030\uff1awp2shell)\nhttps://www.ipa.go.jp/security/security-alert/2026/alert20260722.html\n", "creation_timestamp": "2026-07-22T03:40:07.567952Z"}, {"uuid": "0b7ff8b3-5543-4859-964d-c38e05e99858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mr7jkmsapj2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 68 interactions\nCVE-2026-60137: 54 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 10 interactions\nCVE-2026-0257: 6 interactions\nCVE-2026-6875: 5 interactions\n", "creation_timestamp": "2026-07-22T04:50:34.031259Z"}, {"uuid": "58fd9ad7-29fc-4e32-a16a-5a538fc32a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/seeck.jp/post/3mr7jmtloo22k", "content": "WordPress\u306e\u8106\u5f31\u6027\u5bfe\u7b56\u306b\u3064\u3044\u3066(CVE-2026-60137\u3001CVE-2026-63030\uff1awp2shell) | \u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 | IPA \u72ec\u7acb\u884c\u653f\u6cd5\u4eba \u60c5\u5831\u51e6\u7406\u63a8\u9032\u6a5f\u69cb www.ipa.go.jp/security/sec...", "creation_timestamp": "2026-07-22T04:51:49.167449Z"}, {"uuid": "eec8990a-3e88-4d58-92a8-7f2db83fb9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60114", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7jujtuaf2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-60114 \u0432 Sustainable Irrigation Platform: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/191EA23C-E569-4C50-96AC-4AEAEA132482", "creation_timestamp": "2026-07-22T04:56:06.312360Z"}, {"uuid": "082b2fb6-ec75-451a-88cb-aad86bb16e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60114", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mr7juo3rz32i", "content": "CVE-2026-60114:Sustainable Irrigation Platform 5.2.16 JSON\u5907\u4efd\u6062\u590d\u4e2d\u7684\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\u5206\u6790\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/2574C136-46BC-4EF4-AFB6-C921133EAE55", "creation_timestamp": "2026-07-22T04:56:10.752981Z"}, {"uuid": "60828188-b174-4526-afef-51ad49b1ee9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hasegawa.bsky.social/post/3mr7qrymwvc2d", "content": "\uff08\u4ed5\u4e8b\uff09 \u300cScutum\u3067\u306f\u30012026\u5e747\u670819\u65e5\u6642\u70b9\u3067\u3001\u672c\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u9632\u5fa1\u5bfe\u5fdc\u3092\u884c\u3044\u3001\u9632\u5fa1\u3067\u304d\u308b\u72b6\u614b\u306b\u66f4\u65b0\u3057\u3066\u304a\u308a\u307e\u3059\u3002\u300d  / WordPress Core\u306e\u8106\u5f31\u6027\u300cwp2shell\u300d\uff08CVE-2026-63030\u3001CVE-2026-60137\uff09\u306b\u3064\u3044\u3066 - Scutum\u304a\u5ba2\u69d8\u30b5\u30dd\u30fc\u30c8\u30b5\u30a4\u30c8\uff08\u672c\u756a\uff09 support.scutum.jp/2026/07/wp2s...", "creation_timestamp": "2026-07-22T06:59:57.458508Z"}, {"uuid": "45a5e256-f2f2-4a82-a6ba-e2c0d175d114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mr7td726bst3", "content": "WordPress\u306e\u8106\u5f31\u6027\u5bfe\u7b56\u306b\u3064\u3044\u3066(CVE-2026-60137\u3001CVE-2026-63030\uff1awp2shell) | \u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 | IPA \u72ec\u7acb\u884c\u653f\u6cd5\u4eba \u60c5\u5831\u51e6\u7406\u63a8\u9032\u6a5f\u69cb https://www.ipa.go.jp/security/security-alert/2026/alert20260722.html", "creation_timestamp": "2026-07-22T07:45:37.807124Z"}, {"uuid": "481163af-b3bb-4f72-bb5c-bba3cff6e5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60137", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mr7z3iwfpx2v", "content": "\ud83d\udcf0 Celah Kritis Wp2Shell WordPress Dieksploitasi untuk Pasang Webshell\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/22/wp2shell-wordpress-dieksploitasi-pasang-webshell/\n\n#cve-2026-60137 #cve-2026-63030 #cybersecurity #keamananSiber #rce #vulnerability #webshell #wordpress #wor", "creation_timestamp": "2026-07-22T09:28:26.567923Z"}, {"uuid": "0fab6f1b-fbb0-4967-9d10-37f1c72e8387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mra2rw3efd2e", "content": "Oracle's July 2026 patch fixes 11 Oracle WebLogic Server vulnerabilities. CVE-2026-60206 rates CVSS 9.9 and allows full server takeover. Patch now.\n\n#OracleWebLogic #CVE202660206 #WebLogicServer #OracleCPU #RCE #InfoSec", "creation_timestamp": "2026-07-22T09:58:52.668454Z"}, {"uuid": "a4943205-3aba-4d87-90b5-6a511d6579ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60799", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mra6z3whu22o", "content": "CVE-2026-60799 - Oracle E-Business Suite (Compensation Workbench) info leak. Low-privilege HTTP exploit exposes critical data. CVSS 7.1. No patch yet. Restrict access now. #CVE #Oracle #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-60799/", "creation_timestamp": "2026-07-22T11:14:28.344879Z"}, {"uuid": "4719cf46-2a58-4842-809a-71fcc5c12194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60799", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116963335733043048", "content": "CVE-2026-60799 - Oracle E-Business Suite (Compensation Workbench) info leak. Low-privilege HTTP exploit exposes critical data. CVSS 7.1. No patch yet. Restrict access now. #CVE #Oracle #infosec\nhttps://www.valtersit.com/cve/CVE-2026-60799/", "creation_timestamp": "2026-07-22T11:14:30.340685Z"}, {"uuid": "65ba98d2-748a-45f5-babf-0a1ab2f683a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/idenhaus.bsky.social/post/3mtz7kd3dkr2z", "content": "CISA is warning of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. CVE-2026-60004 is a remote code execution vulnerability that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-26T20:51:06.483181Z"}, {"uuid": "ece1346a-915e-4ebc-acf4-af0a6737d976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60926", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrabntkjs426", "content": "CVE-2026-60926 - High severity privilege escalation in Oracle E-Business Suite Public Sector Payroll (12.2.3-12.2.15). CVSS 7.2. No patch available. Review access controls immediately. #CVE #Oracle #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-60926/", "creation_timestamp": "2026-07-22T12:01:51.950448Z"}, {"uuid": "c41fed4b-c960-4bef-8e20-ec658622dd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60926", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116963522069918531", "content": "CVE-2026-60926 - High severity privilege escalation in Oracle E-Business Suite Public Sector Payroll (12.2.3-12.2.15). CVSS 7.2. No patch available. Review access controls immediately. #CVE #Oracle #infosec\nhttps://www.valtersit.com/cve/CVE-2026-60926/", "creation_timestamp": "2026-07-22T12:01:52.623402Z"}, {"uuid": "8933dfa4-c3ae-4055-bd42-dcbead5f6b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrabtksxen2n", "content": "CISA warns of active exploitation of WordPress Core vulnerabilities CVE-2026-63030 and CVE-2026-60137; update to latest versions now. #WordPress #Security #CISA #Vulnerabilities thedailytechfeed.com/cisa-alerts-...", "creation_timestamp": "2026-07-22T12:05:05.294238Z"}, {"uuid": "2a7e463c-b34f-4d4e-b445-df238892c555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrahp7spu322", "content": "\u26a0\ufe0f THREAT ALERT: CVE-2026-60137 in WordPress Core enables unauthenticated SQL injection that chains for remote code execution! Active exploitation is confirmed. Get the forensic detection queries and hardening strategies you need to protect your web assets now.\u2026", "creation_timestamp": "2026-07-22T13:50:00.904979Z"}, {"uuid": "35a14eab-e667-44ee-8821-47868b13c9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60642", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mraittycpx2t", "content": "CVE-2026-60642 - High-severity DoS in Oracle WebCenter Content. Unauthenticated HTTP access. CVSS 7.6. No patch available. Mitigate immediately. #CVE #Oracle #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-60642/", "creation_timestamp": "2026-07-22T14:10:29.526549Z"}, {"uuid": "b9553b62-ec91-4848-9283-7413ad93b477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60642", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116964027874383696", "content": "CVE-2026-60642 - High-severity DoS in Oracle WebCenter Content. Unauthenticated HTTP access. CVSS 7.6. No patch available. Mitigate immediately. #CVE #Oracle #infosec\nhttps://www.valtersit.com/cve/CVE-2026-60642/", "creation_timestamp": "2026-07-22T14:10:30.463881Z"}, {"uuid": "e23b5574-8f9c-4b7b-9039-f9e1283b6636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/BleepingComputer/25158", "content": "\u200aCritical wp2shell WordPress flaws exploited to install webshells\n\nHackers are exploiting the \"wp2shell\" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/", "creation_timestamp": "2026-07-22T15:00:04.559045Z"}, {"uuid": "99800b68-92d4-44da-a35d-ff76407390e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60785", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mralvna2i52l", "content": "CVE-2026-60785 - High-severity supply chain attack in Oracle iReceivables (E-Business Suite 12.2.3-12.2.15). Unauthenticated takeover via HTTP. CVSS 8.1. No patch available. Monitor and restrict access immediately. #CVE #Oracle #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-60785/", "creation_timestamp": "2026-07-22T15:05:10.928817Z"}, {"uuid": "8ac45f4d-4826-4c5e-b2ca-816937a30290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60785", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116964242921793174", "content": "CVE-2026-60785 - High-severity supply chain attack in Oracle iReceivables (E-Business Suite 12.2.3-12.2.15). Unauthenticated takeover via HTTP. CVSS 8.1. No patch available. Monitor and restrict access immediately. #CVE #Oracle #infosec\nhttps://www.valtersit.com/cve/CVE-2026-60785/", "creation_timestamp": "2026-07-22T15:05:12.547467Z"}, {"uuid": "3412fbac-d32f-4d2f-8ef8-c9e44dcd2496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/raplsworks.bsky.social/post/3mram2hmczk2c", "content": "WordPress Core\u306e\u300cWP2Shell\u300d(CVE-2026-63030 / CVE-2026-60137)\u3001\u672a\u8a8d\u8a3cRCE\u3068\u3044\u3046\u306a\u304b\u306a\u304b\u306e\u3084\u3064\u3067\u3072\u3084\u3063\u3068\u3057\u305f\u3002\u62c5\u5f53\u30b5\u30a4\u30c8\u3092\u4e00\u901a\u308a\u898b\u3066\u56de\u3063\u3066\u78ba\u8a8d\u5b8c\u4e86\u3002\n\n\u4fee\u6b63\u7248\u306f 6.9.5 / 7.0.2\u3002\u81ea\u52d5\u66f4\u65b0\u4efb\u305b\u306b\u305b\u305a\u3001\u8a72\u5f53\u30d0\u30fc\u30b8\u30e7\u30f3\u306a\u3089\u5b9f\u969b\u306b\u5f53\u305f\u3063\u3066\u308b\u304b\u78ba\u8a8d\u3057\u3066\u304a\u304d\u305f\u3044\u3068\u3053\u308d\u3002\n\n#WordPress #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-22T15:07:53.137801Z"}, {"uuid": "e58a33eb-9244-4e17-8225-2706cc0f8a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/116964298203115730", "content": "This week in GreyNoise data, rented crawlers probed for credentials and configuration secrets across widely deployed web software.\nA matched pair of crawlers sharing one client fingerprint probed NGINX UI (CVE-2026-27944) and LiteSpeed Cache (CVE-2024-44000), two CVSS 9.8 flaws that leak credentials, private keys, or session material, from two different hosting providers. \nAlongside them, an RDP brute force cohort spread across three networks under one transport fingerprint. WordPress core SQL injection CVE-2026-60137 also entered the CISA KEV catalog this week. The rented hosts rotate; the fingerprints persist.\nCustomers get the full weekly brief. Our public At The Edge one-pager \ud83d\udc49https://www.greynoise.io/resources/at-the-edge-clear-072026", "creation_timestamp": "2026-07-22T15:19:15.241209Z"}, {"uuid": "ca5d0be9-92d7-47a7-be12-a24d2b9dbd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60093", "type": "published-proof-of-concept", "source": "Telegram/_8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4", "content": "", "creation_timestamp": "2026-08-25T00:00:10.212173Z"}, {"uuid": "d332dfa6-8c53-453a-96da-5bfd40e757e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60217", "type": "seen", "source": "https://www.ncsc.nl/alerts/update-oracle-fusion-middleware-direct-vanwege-kritieke-kwetsbaarheden", "content": "", "creation_timestamp": "2026-07-22T16:15:11.173653Z"}, {"uuid": "2115ba1b-374b-4a9a-bd0c-52d55fa1d587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116964653150323533", "content": "\ud83d\udcf0 CISA Adds Four Actively Exploited Flaws in DD-WRT, Langflow, WordPress\nCISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-four-actively-exploited-vulnerabilities-in-dd-wrt-langflow-wordpress-to-kev-catalog/?utm_s\u2026", "creation_timestamp": "2026-07-22T16:49:32.173211Z"}, {"uuid": "d46a84b5-088c-4c44-b8b9-5805725139e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrarr25fd22q", "content": "CISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-22T16:49:59.805480Z"}, {"uuid": "5148e41a-d80e-4897-b3b9-acb2633a93bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-22T17:00:04.014612Z"}, {"uuid": "73d304f7-1333-4a06-8137-6f555359553c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6013", "type": "seen", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-22T17:00:04.535668Z"}, {"uuid": "3d8deaca-9d82-4d73-86ac-5fe17b89ed49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-22T17:00:04.872399Z"}, {"uuid": "b7681997-7373-4305-8e0f-991b9ed7a2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/7mI1XR-YBo8-oaXN9qxsH1n50-oEMIH7yLn9iwYoK3prrhI", "content": "", "creation_timestamp": "2026-07-22T17:00:05.001852Z"}, {"uuid": "2715b9c9-d01f-4f5d-bc43-2c1e314b95f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-22T17:00:06.233219Z"}, {"uuid": "a75b260c-82ba-4033-a62a-abfa6c6906e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "seen", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-22T17:00:06.417241Z"}, {"uuid": "ddb29e40-07ac-4a57-bd90-a42a98df285b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60656", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrasjur3vv2z", "content": "CVE-2026-60656 - Authentication bypass in Oracle WebCenter Content. Low-privilege network access leads to full takeover. CVSS 8.8. No patch yet. Mitigate immediately. #CVE #Oracle #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-60656/", "creation_timestamp": "2026-07-22T17:03:52.173534Z"}, {"uuid": "0edf7cf0-c9d2-42ef-b273-7bda71cf904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60656", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116964709622529749", "content": "CVE-2026-60656 - Authentication bypass in Oracle WebCenter Content. Low-privilege network access leads to full takeover. CVSS 8.8. No patch yet. Mitigate immediately. #CVE #Oracle #infosec\nhttps://www.valtersit.com/cve/CVE-2026-60656/", "creation_timestamp": "2026-07-22T17:03:53.386459Z"}, {"uuid": "34b4cec6-cafe-497d-9b8f-d72cfc891cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrasurlpkk2a", "content": "Critical wp2shell WordPress flaws exploited to install webshells\n\nHackers are exploiting the \"wp2shell\" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]\n#hackernews #news", "creation_timestamp": "2026-07-22T17:09:58.584965Z"}, {"uuid": "e2245663-b366-4529-b097-7c7a8ca2737d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mrb4nj6z322o", "content": "@elastic.co\nwp2shell exploits a REST batch endpoint route confusion in WordPress Core enabling unauthenticated remote code execution via SQL injection and webshell deployment.\n-\nIOCs: CVE-2026-63030, CVE-2026-60137, wp2shell\n-\n...", "creation_timestamp": "2026-07-22T20:04:52.005857Z"}, {"uuid": "aee4ac08-ba75-4477-b28a-f2aeecc4fc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-22T22:00:03.758836Z"}, {"uuid": "ae067123-6c50-4422-8240-a63c942273a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6071", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrbde4g7bk23", "content": "CVE-2026-6071: RCE in Rockwell Arena Simulation via Malicious DOE File", "creation_timestamp": "2026-07-22T22:04:53.127957Z"}, {"uuid": "ab53a69a-f54d-4d48-8a82-86cb79e49194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60366", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrbih7zxst2q", "content": "CVE-2026-60366\nA critical vulnerability in Oracle Fusion Middleware's Java security system could allow hackers to access and control the system without a password. This could impact not only the Java security system but also\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T23:36:05.552300Z"}, {"uuid": "b2503329-d575-4bcb-842b-de008f22f886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60367", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrbikr4j5g2j", "content": "CVE-2026-60367\nSome versions of Oracle Fusion Middleware's Java security system can be taken over by hackers who have access to the internet. This means that an attacker could potentially gain control of the system and use it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T23:38:04.319646Z"}, {"uuid": "75dff508-fd9f-4720-8d2a-9ad786612bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60369", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrbiksnd2z2i", "content": "CVE-2026-60369\nThe Oracle Fusion Middleware Platform Security for Java product has a vulnerability that allows an attacker to take control of the system. This affects versions 12.2.1.4.0 and 14.1.2.0.0. If not addressed, an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T23:38:05.675427Z"}, {"uuid": "e3e1cba4-f326-4249-b86c-35c69a57292e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60372", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrbiodo4x62j", "content": "CVE-2026-60372\nThe Oracle Fusion Middleware Java security feature is at risk of being taken over by an unauthorized attacker who can access the system over the internet. This means an attacker could gain full control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T23:40:04.258825Z"}, {"uuid": "38e60475-c1b6-4a0b-8c4f-ccc488244519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-23T00:00:04.809462Z"}, {"uuid": "606debba-780b-4c02-be18-0eb925187613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60121", "type": "published-proof-of-concept", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-23T00:00:07.663898Z"}, {"uuid": "4c2fe116-86b6-44db-9b0b-49db8a848d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/7mI1XR-YBo8-oaXN9qxsH1n50-oEMIH7yLn9iwYoK3prrhI", "content": "", "creation_timestamp": "2026-07-23T00:00:09.328516Z"}, {"uuid": "d15daaf3-b59c-4e72-a45c-d74ca7d6b0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-23T00:00:09.630340Z"}, {"uuid": "8b0b89c2-661f-4571-a9b6-36f714126dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6013", "type": "published-proof-of-concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-23T00:00:09.681314Z"}, {"uuid": "219ebb2f-0cdb-4baa-91e5-50ce934705bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/BleepingComputer/25158", "content": "\u200aCritical wp2shell WordPress flaws exploited to install webshells\n\nHackers are exploiting the \"wp2shell\" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/", "creation_timestamp": "2026-07-23T00:00:23.049512Z"}, {"uuid": "82d449f3-0a1c-46ef-9cde-cc08b13445e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60369", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjsv4isa2e", "content": "\ud83d\udd34 CVE-2026-60369 - Critical (9.9)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60369/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T00:00:36.430432Z"}, {"uuid": "9cd99e8a-e08a-4ebe-ade9-5e2cfe40b16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-23T00:00:10.341850Z"}, {"uuid": "67281537-cfe0-42e1-9a70-de23e606097f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60370", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjt3re7r2c", "content": "\ud83d\udfe0 CVE-2026-60370 - High (7.5)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60370/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T00:00:39.513917Z"}, {"uuid": "a5c19d24-1314-45a8-9a69-2c9e265753de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60439", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjv36d322d", "content": "\ud83d\udfe0 CVE-2026-60439 - High (8.8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60439/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T00:01:44.785989Z"}, {"uuid": "4fbc6e78-88e6-42ba-93af-a2c1bcbb575a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtza6hfxms2o", "content": "\ud83d\udd34 CVE-2026-60004 - Critical (9.8)\n\nGitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60004/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T21:02:19.570682Z"}, {"uuid": "a24814df-9da2-4735-8535-1f1511148def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60371", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjtchhw62x", "content": "\ud83d\udfe0 CVE-2026-60371 - High (8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60371/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T00:00:45.062090Z"}, {"uuid": "f4b7d8b6-aff8-46ab-b73f-9fec7ebfec71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60372", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjunxony2e", "content": "\ud83d\udd34 CVE-2026-60372 - Critical (9.8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60372/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T00:01:30.756607Z"}, {"uuid": "dbecea25-bfd0-4ef1-a9db-35de646a87cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60373", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjuumq222d", "content": "\ud83d\udfe0 CVE-2026-60373 - High (8.8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60373/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T00:01:37.763304Z"}, {"uuid": "16248020-bf1d-4cbf-ba90-9515ae51445a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60439", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrbllgkk3q2c", "content": "Oracle Ships Another Patch; Hope Dies in a Conference Room\nPANIC 78% | Lag 0.0h | CVE-2026-60439 is a high-severity vulnerability in Oracle Platform Security for Java inside Oracle F\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-23T00:32:07.828537Z"}, {"uuid": "41400b00-5137-4601-b5d2-7a46fdef6ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbme6owj322", "content": "CVE-2026-60366 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60366\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T00:45:58.544547Z"}, {"uuid": "890b76d3-c71d-4fa0-8065-378d280b9c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmjkocd42q", "content": "CVE-2026-60367 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60367\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T00:48:59.059500Z"}, {"uuid": "48af1169-a370-4750-9b73-a3fc750b8383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmpjs7sj2q", "content": "CVE-2026-60455 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60455\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T00:52:19.439139Z"}, {"uuid": "b9017556-1667-4aea-ac45-0ed10760a302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-23T01:00:04.543514Z"}, {"uuid": "f8563850-b1f0-4eda-8729-416447bfd968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbn5xyb2r2q", "content": "CVE-2026-60368 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60368\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T01:00:23.918405Z"}, {"uuid": "d870d114-aa40-4db8-b835-b7dbb7be61fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60455", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbn6chrjh22", "content": "\ud83d\udfe0 CVE-2026-60455 - High (8.8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60455/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T01:00:36.560034Z"}, {"uuid": "dfea01ac-15ad-49a6-8554-fa273f7ea08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60967", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtpzfollti2b", "content": "\ud83d\udccc CVE-2026-60967 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision).  Supported versions that are affected are 8.... https://www.cyberhub.blog/cves/CVE-2026-60967", "creation_timestamp": "2026-08-23T05:07:07.333025Z"}, {"uuid": "ff834866-10ad-41cf-892c-4bb6f2dc7392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60366", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbn6vrsq72m", "content": "\ud83d\udd34 CVE-2026-60366 - Critical (10)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60366/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T01:00:55.786473Z"}, {"uuid": "39c27884-40a6-4349-b22f-f1cfafbcb341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60373", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbngwj6ip2i", "content": "CVE-2026-60373 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60373\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T01:05:24.517293Z"}, {"uuid": "b37ce6bb-633e-406e-9173-6e2c4f59c540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbnpuzl3b24", "content": "CVE-2026-60369 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60369\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T01:10:24.930886Z"}, {"uuid": "6d098b2a-a94a-4257-8bc5-63d395c881d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbnytie5e23", "content": "CVE-2026-60371 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60371\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T01:15:25.223478Z"}, {"uuid": "55edc098-8d3e-4570-b75d-3bfd2723a8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbobryfuw2s", "content": "CVE-2026-60372 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60372\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T01:20:25.750127Z"}, {"uuid": "70eb89bb-0243-47fe-8bb8-fb98e6e1f3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbokqivib2s", "content": "CVE-2026-60439 - Vulnerability in the Oracle Platform Security for\nCVE ID : CVE-2026-60439\n \n Published : July 22, 2026, 11:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: ...", "creation_timestamp": "2026-07-23T01:25:26.169250Z"}, {"uuid": "96e0fe2f-3f8a-42d1-92f9-c5b65d8d6b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60367", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbqiztah22u", "content": "\ud83d\udd34 CVE-2026-60367 - Critical (9.8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60367/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T02:00:17.027178Z"}, {"uuid": "9f303908-53ce-4345-b1d7-8a9c6238d77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94648", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-vulnerability-scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Adrees-Basheer\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 12:34:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV reporting.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.583610Z"}, {"uuid": "f439fefe-af30-4def-86f8-4889b5482e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94678", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-63030-CVE-2026-60137-wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 16:30:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 Wp2shell Poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.851571Z"}, {"uuid": "c1a1d83f-b2a9-48dd-a93b-20302bf73b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Colere-Sys\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 17:49:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAnalysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.566388Z"}, {"uuid": "b275f8db-ba30-45da-a899-d4adf63bd0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60879", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtq33cw7tq2x", "content": "\ud83d\udccc CVE-2026-60879 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager).  Supported versions that are a... https://www.cyberhub.blog/cves/CVE-2026-60879", "creation_timestamp": "2026-08-23T05:37:07.061546Z"}, {"uuid": "a657b94a-ac38-4a83-a7b5-c30c45c1e426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94529", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mrmtwoj\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 17:49:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.429491Z"}, {"uuid": "486b54ae-c5c7-4787-8b97-afe36de11d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94635", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mcipekci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:58:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE PoC for WordPress core \u2014 chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.251414Z"}, {"uuid": "c0f32383-9c7c-447d-a720-80925640abc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94519", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell-CVE-2026-63030-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Bhanunamikaze\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 17:51:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion) + CVE-2026-60137 (author__not_in SQL injection). For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.812883Z"}, {"uuid": "35939fb6-65ea-45f9-bf01-bccb5748a11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60368", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbxafd5kr2a", "content": "\ud83d\udfe0 CVE-2026-60368 - High (8.8)\n\nVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (compo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60368/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T04:00:43.481159Z"}, {"uuid": "31230f30-4a89-4648-a32f-427ee786fded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrc2ecn4ld2c", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 71 interactions\nCVE-2026-60137: 57 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 17 interactions\nCVE-2026-16232: 5 interactions\nCVE-2026-58644: 5 interactions\n", "creation_timestamp": "2026-07-23T04:56:35.231560Z"}, {"uuid": "14ee43e5-bbb1-4ca8-a731-fd2b75f86499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60367", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116967795890680634", "content": "A new vulnerability with increased severity was disclosed for Oracle Platform Security for Java (CVE-2026-60367) https://vuldb.com/vuln/382452", "creation_timestamp": "2026-07-23T06:08:45.020939Z"}, {"uuid": "2425b410-e8f9-46f9-970c-27d8de15ea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/116968675172587890", "content": "Elastic researchers analyse wp2shell, a pre-authentication remote code execution chain in WordPress Core (CVE-2026-63030, CVE-2026-60137).  https://www.elastic.co/security-labs/wp2shell-wordpress-rce-detection-elastic-defend", "creation_timestamp": "2026-07-23T09:52:22.214854Z"}, {"uuid": "39dd161a-8817-4f78-93c5-6fb1e448a84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mrckvdwlos2u", "content": "Elastic researchers analyse wp2shell, a pre-authentication remote code execution chain in WordPress Core (CVE-2026-63030, CVE-2026-60137).  www.elastic.co/security-lab...", "creation_timestamp": "2026-07-23T09:52:36.786188Z"}, {"uuid": "b1c3c930-00ee-4bc0-a000-daf11e4afad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60731", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtq4qxknsr2y", "content": "\ud83d\udccc CVE-2026-60731 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2... https://www.cyberhub.blog/cves/CVE-2026-60731", "creation_timestamp": "2026-08-23T06:07:06.906109Z"}, {"uuid": "2ccb22e9-18b7-4851-9834-f98ac1c9fcb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60716", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtq6glqinv2u", "content": "\ud83d\udccc CVE-2026-60716 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60716", "creation_timestamp": "2026-08-23T06:37:06.691776Z"}, {"uuid": "f91ac488-f2cd-4cba-97ff-ef8900eeecb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60722", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqa4ahkos24", "content": "\ud83d\udccc CVE-2026-60722 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60722", "creation_timestamp": "2026-08-23T07:07:06.793718Z"}, {"uuid": "ee4ec033-1ebb-4536-ace3-e24b8fa0d58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60150", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.936886Z"}, {"uuid": "ec441dd2-29b4-4fd7-93c6-366c8a65e3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60155", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:18.986870Z"}, {"uuid": "4c03cf5f-c512-484e-ac5b-e6518fc5b188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60158", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:19.038655Z"}, {"uuid": "c36d7d39-74b2-4148-8190-273be867ea35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60159", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:19.078394Z"}, {"uuid": "1f34f3b7-05d3-4b20-a17f-c999a987ea75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60160", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:19.128615Z"}, {"uuid": "365885f8-f274-40b5-b2d9-aec208a5015d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60161", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47047, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, CVE-2026-60161, CVE-2026-60162", "creation_timestamp": "2026-07-23T11:55:19.163522Z"}, {"uuid": "dad32bbd-f2f0-497b-86fa-bf05bd11f2ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60659", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrraokts2b", "content": "\ud83d\udd17 CVE : CVE-2026-60659, CVE-2026-60661, CVE-2026-60833, CVE-2026-60834, CVE-2026-61000, CVE-2026-61010, CVE-2026-61052, CVE-2026-61202, CVE-2026-61285, CVE-2026-61287", "creation_timestamp": "2026-07-23T11:55:25.178723Z"}, {"uuid": "cc6ab6f2-9668-4457-a1c3-1440d54a4e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60661", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrraokts2b", "content": "\ud83d\udd17 CVE : CVE-2026-60659, CVE-2026-60661, CVE-2026-60833, CVE-2026-60834, CVE-2026-61000, CVE-2026-61010, CVE-2026-61052, CVE-2026-61202, CVE-2026-61285, CVE-2026-61287", "creation_timestamp": "2026-07-23T11:55:25.239677Z"}, {"uuid": "b691bfe8-ac62-40fa-b721-4d3b998e20ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60833", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrraokts2b", "content": "\ud83d\udd17 CVE : CVE-2026-60659, CVE-2026-60661, CVE-2026-60833, CVE-2026-60834, CVE-2026-61000, CVE-2026-61010, CVE-2026-61052, CVE-2026-61202, CVE-2026-61285, CVE-2026-61287", "creation_timestamp": "2026-07-23T11:55:25.293697Z"}, {"uuid": "d4f0210e-3546-4561-bcbd-cabd36845d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60834", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrraokts2b", "content": "\ud83d\udd17 CVE : CVE-2026-60659, CVE-2026-60661, CVE-2026-60833, CVE-2026-60834, CVE-2026-61000, CVE-2026-61010, CVE-2026-61052, CVE-2026-61202, CVE-2026-61285, CVE-2026-61287", "creation_timestamp": "2026-07-23T11:55:25.336032Z"}, {"uuid": "9b1f6306-d998-4d46-9209-01da2ffc2ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60370", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrcsak4lmw2v", "content": "CVE-2026-60370 - Insecure Deserialization in Oracle Fusion Middleware. Low-privilege network attacker can take over Oracle Platform Security for Java. CVSS 7.5. No patch yet. Mitigate now. #CVE #Oracle #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-60370/", "creation_timestamp": "2026-07-23T12:03:58.557177Z"}, {"uuid": "9ad31173-2a77-4ad1-9ad8-561867b02cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60370", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116969192698691544", "content": "CVE-2026-60370 - Insecure Deserialization in Oracle Fusion Middleware. Low-privilege network attacker can take over Oracle Platform Security for Java. CVSS 7.5. No patch yet. Mitigate now. #CVE #Oracle #infosec\nhttps://www.valtersit.com/cve/CVE-2026-60370/", "creation_timestamp": "2026-07-23T12:03:59.079088Z"}, {"uuid": "a24feecf-da5d-4491-ab44-89e98ae8f3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "Telegram/3_PCmixRZKD616mGgxZ7XjOgGlkrPu2pELMCZYyqXilYjQ", "content": "", "creation_timestamp": "2026-08-28T00:01:00.571139Z"}, {"uuid": "1b340f1b-3ac3-42ef-93ed-48d9e4200c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/39Qy9vqSvx-h1k5WwJekEuwBwlXKBIMprCkBU5G7GSt60tAA", "content": "", "creation_timestamp": "2026-07-23T15:00:05.030267Z"}, {"uuid": "7e18d157-d64b-45bb-b565-c014a1bd53ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60143", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:52.344857Z"}, {"uuid": "cfaf4863-4b32-4b01-a484-00cbf7360b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60150", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:54.901977Z"}, {"uuid": "17ccfc42-5207-4357-b0b9-80dbb09ce28a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60153", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:57.244941Z"}, {"uuid": "7e5867b9-c754-4295-823d-c52f19560ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60155", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:46:59.588798Z"}, {"uuid": "2de52708-6ac1-4065-8cb4-f81fd427884f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60157", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:02.157628Z"}, {"uuid": "968d8f04-2c34-4bf0-9384-c1119fbcd440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60159", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:04.750856Z"}, {"uuid": "aeb66cae-4930-422c-907a-289df2351ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60163", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:07.101033Z"}, {"uuid": "597e171d-d4cb-441b-867d-3f48652ad97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60167", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:09.475040Z"}, {"uuid": "17a2be29-bdd9-4590-add9-58c119a8b1b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60168", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:11.812125Z"}, {"uuid": "213d8b39-478a-4ef0-8c99-6d9ff7535929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60169", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:14.214789Z"}, {"uuid": "6f931c8b-6221-44c4-9469-b73c54a0bc86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60170", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:16.840363Z"}, {"uuid": "58214f82-5ccb-473e-82e1-3f2d2bf2d31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60173", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:19.265161Z"}, {"uuid": "24e0e517-919d-479b-bb19-1c0c9595de3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60175", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:21.697768Z"}, {"uuid": "82ffaf24-0584-4563-9673-d9e9c7f540d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60176", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:24.070940Z"}, {"uuid": "419aeefc-c46e-4451-b6ef-ec223141f9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60179", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:26.426144Z"}, {"uuid": "2ccb279c-8e73-4247-a5f7-9d2e0018051b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60180", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:28.827248Z"}, {"uuid": "93bf947b-0382-4c6b-988a-7c76297f41dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60192", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:31.184323Z"}, {"uuid": "d60fbde1-5fa2-490c-b01a-00dfe51f46af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60193", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:33.535829Z"}, {"uuid": "7c9bce9b-8b6b-4300-88c9-b05a3fdceaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60196", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:35.879875Z"}, {"uuid": "38042d88-2923-4cf3-95a6-14d42fcbfd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60197", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:38.221128Z"}, {"uuid": "64f94878-7ebc-42ed-acb3-570836b4172c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60198", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:40.539057Z"}, {"uuid": "4be2b5c9-f3cc-465e-a956-fc091973b736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60199", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:42.858887Z"}, {"uuid": "f381d950-cd4d-487e-8c8a-1cac120d9e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60200", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:45.408931Z"}, {"uuid": "ef0ec605-a698-4424-961b-90f25614a0a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60201", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:47.753884Z"}, {"uuid": "c544dc3c-d862-4fa6-ae62-d0e2f0f41185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60202", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:50.080316Z"}, {"uuid": "fdccccad-3917-40c7-b6a7-c02d1e0ea215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60204", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:54.792339Z"}, {"uuid": "a0e1f4ad-15c8-46fc-86d8-581104d1b767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60244", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:18.548556Z"}, {"uuid": "dfe46167-2c70-4cdc-a0c7-5349c0c85703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60246", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:23.217037Z"}, {"uuid": "8e18cb62-f432-4572-bc03-02063c77869b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60249", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:30.237240Z"}, {"uuid": "9ce6978f-6b40-499f-a6e8-338ae67e717f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60255", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:44.372744Z"}, {"uuid": "8eb06624-c010-4e67-a451-700adc3b867c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60203", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:52.391100Z"}, {"uuid": "1d8ce60d-9021-4d99-a41e-3842ec08155a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60222", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:36.320221Z"}, {"uuid": "8e5ee556-e98d-48d1-8bb0-ed5de68488bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtzdsvzm7u25", "content": "\ud83d\udea8 CVE-2026-60004 \u2014 CVSS 9.8 CRITICAL\n\nGitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60004\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T22:07:26.098571Z"}, {"uuid": "2c274f75-580a-4083-948a-822683bcaa53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60205", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:57.368189Z"}, {"uuid": "d59c1a6b-2992-42d9-8213-580c44b9b1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:47:59.689412Z"}, {"uuid": "c15242b9-96aa-4bf2-b69e-663dfdcd1eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60209", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:07.689920Z"}, {"uuid": "efb59896-c682-45c4-85ef-580a8162ea63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60207", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:02.098334Z"}, {"uuid": "81984037-aa6c-4448-8022-c6939744fcc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60208", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:05.318303Z"}, {"uuid": "c07d5c77-3395-4d28-8dd2-edb5bbe9a9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60216", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:22.251188Z"}, {"uuid": "f1dd0b5f-4d21-4c4e-b02e-db925e9398aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60220", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:31.545810Z"}, {"uuid": "7eba8d13-180e-4c65-a648-2e053db63990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60726", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqbrvi5as24", "content": "\ud83d\udccc CVE-2026-60726 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60726", "creation_timestamp": "2026-08-23T07:37:07.406838Z"}, {"uuid": "7b1b5646-280f-4690-9eba-88efae419d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60210", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:10.034700Z"}, {"uuid": "b59727c7-3f8a-446b-8b35-7a64e76b52d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60234", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:01.827666Z"}, {"uuid": "ee3db5fa-f163-4c55-8eab-03e1915cc6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60239", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:08.848112Z"}, {"uuid": "b829e5d1-8f03-46f5-b1b1-b5eadd5a1b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60271", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:15.062177Z"}, {"uuid": "c673a63f-57d0-42fd-b33b-b43d17ca038c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60280", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:36.137313Z"}, {"uuid": "6f3ef612-34db-42ba-a051-cc0800f21e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60292", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:59.880959Z"}, {"uuid": "81def7c1-fee5-42d9-a4d3-4ae07ed4de3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60211", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:12.644385Z"}, {"uuid": "347211bc-2fa6-4ca4-a17d-b6c1f6781886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60212", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:15.032272Z"}, {"uuid": "39963353-a3c0-4dc9-bf47-a8117878c10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60223", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:38.682427Z"}, {"uuid": "c6fd1bc7-8809-4461-85fe-c172c1a1a887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60226", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:47.278334Z"}, {"uuid": "0bc73843-b71e-45c0-a192-674d288295f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60227", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:49.872001Z"}, {"uuid": "1e03e8d1-ee47-4a15-82d3-2e3d4f0eb26b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60232", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:59.457476Z"}, {"uuid": "5f197086-9d1e-470b-9c38-9da836375ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60251", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:34.901496Z"}, {"uuid": "01ab2e6b-abba-44ee-ae0c-6acb81b3dfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60253", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:39.636066Z"}, {"uuid": "420d556e-c834-490a-9c9a-5606c5961bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60258", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:51.368924Z"}, {"uuid": "49e5f038-c0a1-4401-8488-a6d0c8d65716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60268", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:08.156879Z"}, {"uuid": "fb25ef12-eea4-4c54-afec-59f27bc540d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60298", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:14.536877Z"}, {"uuid": "e3a41dfc-d735-4ec4-bce4-d2b4c4018bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60306", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:28.688255Z"}, {"uuid": "3ed30651-c8ed-460c-97e4-10d299ecc75c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60314", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:40.419589Z"}, {"uuid": "9b984b45-0962-4f9b-ac27-750eedba8048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60214", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:17.380434Z"}, {"uuid": "5d41173f-a2a6-4deb-b445-760c8982ae2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60219", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:29.237431Z"}, {"uuid": "60f9dd21-3e69-4a2d-9c60-877cfbe8a6f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60228", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:52.300636Z"}, {"uuid": "e81f9921-b072-48cd-8aa5-0d210c552dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60236", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:06.518069Z"}, {"uuid": "88a81a9e-b2db-4604-a000-7300dd8e1e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60241", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:13.874486Z"}, {"uuid": "8e97bc10-2fee-4418-91e0-c0b2161bade8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60273", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:19.726052Z"}, {"uuid": "174e7b0f-124c-4d94-bdf6-46864ecaf3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60281", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:38.744920Z"}, {"uuid": "c79df85d-9d80-4f47-88c2-1dab6c72a23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60215", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:19.924693Z"}, {"uuid": "20cd213f-52c7-41cf-88d1-4de6410ef11f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60218", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:26.905356Z"}, {"uuid": "ff7aa9d6-2221-436a-b57d-653cda065ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60230", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:57.086918Z"}, {"uuid": "1978b638-bc5c-4471-abbd-c277e337c844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60729", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqdhjwqkh2h", "content": "\ud83d\udccc CVE-2026-60729 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).  Supported versions that are affected are 12.2... https://www.cyberhub.blog/cves/CVE-2026-60729", "creation_timestamp": "2026-08-23T08:07:07.498306Z"}, {"uuid": "c29c17f5-9241-4a75-a325-0f58d9153c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60217", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:24.567085Z"}, {"uuid": "cc689bea-b3d5-4f17-99c5-76050f3745e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60289", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:52.869797Z"}, {"uuid": "a155fa4b-0a45-4c85-8b4e-3deadd540c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60221", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:33.948490Z"}, {"uuid": "37c978a4-63cd-4f63-a180-55778cdea65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60287", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:48.144744Z"}, {"uuid": "2c2acf6b-06fe-4e6d-a6ac-dcce0695e9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60224", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:42.591185Z"}, {"uuid": "3922b41d-e6fa-4871-9f17-0be7a2a23e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/true_secator/8549", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0430\u043c\u043e\u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c GitHub \u0438\u043b\u0438 GitLab SaaS, Gitea \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DevOps, \u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Salesforce \u0428\u0430\u0435\u043c \u0420\u043e\u0434\u043e\u043c CVE-2026-60004 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b Gitea, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API diffpatch.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441\u0430\u043c\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 diffpatch \u0432 Gitea \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Git-\u0445\u0443\u043a\u0430 \u0438\u0437 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gitea.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439.\n\nGitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 27 \u0438\u044e\u043b\u044f 1.27.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2026-60004, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u043e\u043a\u043e\u043b\u043e 5000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-60004.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445,\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0438\u044e\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Gitea (CVE-2026-20896) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Gitea \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a X-WEBAUTH-USER.", "creation_timestamp": "2026-08-28T00:01:01.918315Z"}, {"uuid": "1af36c11-9567-44fe-9a0e-763254a74939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60225", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:44.924893Z"}, {"uuid": "1dc642c9-c6ff-4181-aa72-867dbaf98770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60229", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:48:54.729832Z"}, {"uuid": "5af1e333-ce62-49d2-b16f-aadc3a649ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60235", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:04.170464Z"}, {"uuid": "ddd548de-a8fd-47ee-8f37-a781b3b54a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60248", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:27.891778Z"}, {"uuid": "01f63961-0009-4964-baf9-3cec222ccb6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60250", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:32.567153Z"}, {"uuid": "2c6c0794-78da-4611-9072-3b267279e996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60286", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:45.828627Z"}, {"uuid": "c8e59c67-b2fe-4217-b60a-0ec971c3425a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60288", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:50.473030Z"}, {"uuid": "914b130f-2913-48c5-a231-7ec941dfbb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60240", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:11.398563Z"}, {"uuid": "9a3c5f42-5023-4c63-aeb9-7bc598bcdd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60242", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:16.235684Z"}, {"uuid": "3cc5400e-8d5e-45be-b34b-8921fa377870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60245", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:20.874962Z"}, {"uuid": "1e6d61b9-6079-4b5a-8ad7-3da3ad4f2a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60247", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:25.552425Z"}, {"uuid": "d5c69b1f-5f02-4831-8694-d1e8592fb951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60252", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:37.295581Z"}, {"uuid": "63cdd734-945f-46d7-8346-975b1d2cfcbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60254", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:41.978705Z"}, {"uuid": "6b2b0db5-fb70-4076-b2ca-563caeeefe64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60256", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:46.702992Z"}, {"uuid": "fc759fbf-faa6-4157-b587-781de80ac31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60257", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:49.022220Z"}, {"uuid": "68896ae6-1e0a-44bd-8b49-2fa4e3d240e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60259", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:53.678835Z"}, {"uuid": "4ec6b4f4-420a-4d92-9f26-305d0bda0fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60261", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:56.217180Z"}, {"uuid": "52a953d7-1b75-45cd-8ed3-5c55ae4b6ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60262", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:49:58.575587Z"}, {"uuid": "976fa04d-74d8-409e-9360-11e40f749634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60263", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:01.108579Z"}, {"uuid": "492ec25c-b6a5-484c-a842-c01cc0d76087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60264", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:03.429630Z"}, {"uuid": "e8de20d7-44b4-484a-af87-f501c0f0782c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60267", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:05.768164Z"}, {"uuid": "ff733229-9498-4ba5-895b-09edbfc09285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60269", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:10.497960Z"}, {"uuid": "ce3ca394-f4a4-4079-9a5c-1817b613fb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60272", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:17.402653Z"}, {"uuid": "01674c0d-c515-49a4-bedb-faffd71a963b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60274", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:22.041236Z"}, {"uuid": "5de6e921-22be-47af-b9d2-5d3a9b62ec9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60275", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:24.443497Z"}, {"uuid": "60b7d373-8380-448d-aee2-b6b6854cc0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60276", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:26.788329Z"}, {"uuid": "a1c53445-250e-419c-92b5-ba10086af2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60277", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:29.127808Z"}, {"uuid": "607c46c6-7762-4597-b6a0-7da1b58bffff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60278", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:31.451407Z"}, {"uuid": "eac73fba-e428-47da-a831-07384f1caf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60279", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:33.792631Z"}, {"uuid": "1b56a574-d8cc-44c7-bd96-207042ae9b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60284", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:41.112364Z"}, {"uuid": "401d1889-b45a-4e3c-a04e-efda4d17df81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60285", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:43.484681Z"}, {"uuid": "39ea0e74-ad16-4021-9ea2-cab9e907a30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60290", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:55.221158Z"}, {"uuid": "e4b44aed-212d-4c28-a086-72b353f992a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60291", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:50:57.553590Z"}, {"uuid": "d6f25e13-e978-473a-9e44-b16428f1af20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60293", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:02.191063Z"}, {"uuid": "f9396331-b356-4b94-af51-6b0654f4808d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60294", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:04.511810Z"}, {"uuid": "d6c5d472-78ce-43e0-9337-95b1fd9d8fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60295", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:06.842449Z"}, {"uuid": "e701385c-c89a-4117-97fd-a9ecb3bde40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60296", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:09.155740Z"}, {"uuid": "8947b06e-192f-44c1-8850-18c9902583b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60297", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:11.467772Z"}, {"uuid": "3b535e52-4c62-46c2-9dfe-6ce5e0b1d757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60299", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:16.883729Z"}, {"uuid": "744dbdbf-505e-4f78-a2c2-abf23abe980e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60300", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:19.215533Z"}, {"uuid": "d7994946-a0f3-4b4e-b6f1-139f6c86b1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60301", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:21.581033Z"}, {"uuid": "d140a741-980a-4982-90ca-7c9330aeeaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60302", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:23.929971Z"}, {"uuid": "6c3382e0-b2ec-4332-8a5a-db86f5f2ab20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60305", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:26.280291Z"}, {"uuid": "3a5f2208-64a3-453f-b164-54aa7fba01dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60308", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:31.059092Z"}, {"uuid": "e181e3cd-2400-442e-a6cc-9b134502d64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60309", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:33.407206Z"}, {"uuid": "b40ea91b-7bf5-437b-a606-f03ad38211bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60312", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:35.741705Z"}, {"uuid": "ab76f842-ade8-4c8a-bbc2-66df493efecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60313", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:38.081884Z"}, {"uuid": "27beb2d6-f4f8-4874-b427-cb470c7f6715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60315", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:42.764189Z"}, {"uuid": "8d1d04c0-bd78-4992-a605-af16fd872785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:45.097590Z"}, {"uuid": "29b70a16-9689-4252-934c-d219067e5c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60317", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:47.474730Z"}, {"uuid": "8061482a-76a6-494f-9591-f616dc8b41e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60320", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:49.829390Z"}, {"uuid": "cc18d8a3-d818-4b1e-9d69-831e099255ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60323", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:52.149718Z"}, {"uuid": "bc7fb87d-551a-4a52-aa0c-49495493d556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60325", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:54.477159Z"}, {"uuid": "39fbb0e6-56b6-42d5-9137-021aa6f7dca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60326", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:57.063061Z"}, {"uuid": "a6ff9b7f-073e-4525-8f76-e6fd50389f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60327", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:51:59.389268Z"}, {"uuid": "9cdc4e00-c39e-44b1-9778-aa24d0e5d476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60328", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:01.764032Z"}, {"uuid": "c088f373-cd52-4b96-a0f8-7505d143e06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60329", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:04.106528Z"}, {"uuid": "dab13d66-db6a-446b-89fe-e099b8536dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60715", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqf56pusb2c", "content": "\ud83d\udccc CVE-2026-60715 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60715", "creation_timestamp": "2026-08-23T08:37:07.376905Z"}, {"uuid": "c107778a-5144-4fe5-9fdf-30016802cfe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60335", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:14.085539Z"}, {"uuid": "a30f5f6c-3a0a-45ae-b091-e79ccf45d7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60355", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:23.426750Z"}, {"uuid": "9b27f6bc-f7b3-4d4f-b5a8-8a4bc8630abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60360", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:33.951294Z"}, {"uuid": "7d31a38f-d38b-4ebf-bcf9-6ffcdffcf821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60361", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:36.281817Z"}, {"uuid": "09b82944-7381-457c-a032-d1dc23745761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60362", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:38.592678Z"}, {"uuid": "2e3727c1-7b3b-4186-aa2b-ebc7ef0de082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60368", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:52.725536Z"}, {"uuid": "4e2bea09-70a9-4cab-ab4b-f1df6e1d64cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60369", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:55.061518Z"}, {"uuid": "cd93f5d4-f364-4acd-a9d9-592094747e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60330", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:06.959210Z"}, {"uuid": "ae23ef4f-4ab6-48fa-9320-b8cdf6d95aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60333", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:09.346042Z"}, {"uuid": "235b65a5-e06e-45b3-a441-28ca7dccc0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/endoflife.ai/post/3mu43gys5qd2f", "content": "\ud83d\udcd6 New from endoflife.ai:\n\nGitea's First KEV Entry: CVE-2026-60004, a Two-Day Federal Deadline, and a Release Policy With Nowhere to Hide\n\nhttps://endoflife.ai/article-gitea-cve-2026-60004", "creation_timestamp": "2026-08-28T00:15:35.974940Z"}, {"uuid": "73bd935c-6904-42eb-93f0-5db6d13be45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60334", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:11.694628Z"}, {"uuid": "c1b549e4-0d3d-4650-b8a7-4de8d816e239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60372", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:53:02.161323Z"}, {"uuid": "86bfe96d-d7fa-4568-b2b6-c44822dc49be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mu7yrdz3dt2u", "content": "More than 8,300 internet-exposed Gitea servers are still vulnerable to CVE-2026-60004, now under active attack. If you self-host Gitea, update to 1.27.1 or newer and check for compromise\u2014not just patch and move on. \ud83d\udd12\n\n#Security #SelfHosting #OpenSource", "creation_timestamp": "2026-08-29T13:38:22.111026Z"}, {"uuid": "c9826d50-036a-4a95-a029-68a550162975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60340", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:16.443028Z"}, {"uuid": "07e40efd-2665-4dbc-9216-10bb8b98fd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60343", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:18.757445Z"}, {"uuid": "e2a610b6-408a-4896-8bba-01d16b43d4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60371", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:59.843626Z"}, {"uuid": "fea8889f-78e3-43c8-851d-377b6e577088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60345", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:21.086779Z"}, {"uuid": "ee4fd7ff-195b-48b2-87bb-7af8f86fc5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60356", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:25.976114Z"}, {"uuid": "36d91f53-6d04-4454-a58b-46f5a9702184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60358", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:28.311188Z"}, {"uuid": "629c4e54-4641-4c0f-8499-097e7846275d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:30.643338Z"}, {"uuid": "9d20f946-1aa0-41cd-ab56-524a593d189e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60363", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:40.983944Z"}, {"uuid": "657f2b03-96f7-4f5a-87a8-3d90c3194b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60364", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:43.341278Z"}, {"uuid": "92e6297b-2b81-41fa-9821-fcea7f7e9506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60365", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:45.692204Z"}, {"uuid": "f77a1fa5-535c-4b24-b899-061789935a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60366", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:48.048842Z"}, {"uuid": "eb0ffe05-7eb5-4eec-92fd-2f19dca4eb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60367", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:50.388802Z"}, {"uuid": "23175403-5d9a-4f08-8a23-99ddcaae0e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60370", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T16:52:57.497768Z"}, {"uuid": "f112563e-8a31-4a74-a6da-4dc4569e139b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60435", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:29.546011Z"}, {"uuid": "79a3872d-c7b0-41a5-a79a-1e81a16af829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu5hchhbzm2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-41992: 41 interactions\nCVE-2026-60137: 10 interactions\nCVE-2026-63030: 10 interactions\n", "creation_timestamp": "2026-08-28T13:20:28.164061Z"}, {"uuid": "668e4304-ea97-4489-bcf8-48e3bdc1507b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60374", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:02.666205Z"}, {"uuid": "d69ad022-d366-43ed-9aa9-935c9bfcff1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60375", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:06.229797Z"}, {"uuid": "d67afc39-1831-4081-85d0-e536386c364f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60376", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:08.584901Z"}, {"uuid": "4e09e9b6-68c5-492f-b189-4cac5aef95f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60377", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:10.931679Z"}, {"uuid": "a5c85e79-a9d2-46c0-8916-f24c1badfa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60378", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:13.271207Z"}, {"uuid": "5a516255-a805-4d2b-9671-e1d6682a714d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60379", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:15.619315Z"}, {"uuid": "d7405232-3c16-4f19-b058-206db55d52ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60380", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:18.014312Z"}, {"uuid": "6ff9e3c3-b8b6-47c6-b639-3723b286e447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60381", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:20.433976Z"}, {"uuid": "932ffcdd-50c5-4f4c-93bb-c5b1880e81f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60382", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:22.997363Z"}, {"uuid": "bb9e57f2-2584-4120-ac9d-cab103158678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60383", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:25.371419Z"}, {"uuid": "fc86e606-a756-4fda-b193-858fef0c34a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60384", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:27.813121Z"}, {"uuid": "5535bf51-2050-44c0-bb39-8352b0198c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60385", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:30.253082Z"}, {"uuid": "15c2c1bf-1c73-460f-ac42-b27341bed209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60386", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:32.599149Z"}, {"uuid": "174a4dc9-e99f-4e4c-bd36-2de38f72945c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60387", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:34.933281Z"}, {"uuid": "3da826b8-a3f6-4c89-a14b-9a8226cb91fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60388", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:37.273316Z"}, {"uuid": "b094072b-ce81-4df0-9b1a-5759580965dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60389", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:39.601034Z"}, {"uuid": "7b426442-2797-45aa-99bd-ef864f611dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60396", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:41.941541Z"}, {"uuid": "6626e64b-e9e4-479f-9c7d-0b3cebc0bb45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60398", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:44.293307Z"}, {"uuid": "06a31747-6d99-41d7-88ca-a8eec2944124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60400", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:47.052756Z"}, {"uuid": "1ec12469-8b2e-477f-bd40-ea54b4f2c155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60402", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:49.397438Z"}, {"uuid": "a1914441-2ddf-4265-9b37-268cad23b241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60416", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:51.737110Z"}, {"uuid": "b81a75de-c6b5-4e29-8785-2e5de3cdef88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60417", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:54.139524Z"}, {"uuid": "0cf16079-6b25-4ccd-87e0-f1a82caa9469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60418", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:56.564759Z"}, {"uuid": "565cf62b-3bf6-47dc-846a-c5fc3809e1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60419", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:15:58.927436Z"}, {"uuid": "9d5cffe4-1f22-475b-8590-c8b244e6ce7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60420", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:01.305842Z"}, {"uuid": "55ad1ec2-94b7-4a18-842e-424234d2288f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60421", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:03.684774Z"}, {"uuid": "a589ed9e-cda4-40a6-9a16-c5de2c12f04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60422", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:06.029165Z"}, {"uuid": "6fb8b0e2-d3aa-476f-94f1-f8d624907bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60423", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:08.398358Z"}, {"uuid": "bd6cc958-ce4f-442a-9edc-661b702de5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60424", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:10.734939Z"}, {"uuid": "f4d0fab9-5254-4687-a51c-46dbabf4cb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60425", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:13.068268Z"}, {"uuid": "abdd26be-6c7f-440b-b882-a6c8ff3210e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60426", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:15.398116Z"}, {"uuid": "c573266b-335e-48df-8f69-f5efab009119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60427", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:17.716431Z"}, {"uuid": "3d0da0fd-2a06-4dc0-a4e9-ed4f8369b90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60428", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:20.060261Z"}, {"uuid": "129a312a-26bb-4812-9cff-9c6dd673b507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60429", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:22.473725Z"}, {"uuid": "8d22f698-0035-4934-b2c6-a99bfba27c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60430", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:24.843110Z"}, {"uuid": "b27716d2-055d-4627-9b26-ac7df48c042d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60431", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:27.216791Z"}, {"uuid": "0a04fee8-7226-4b34-b043-80d8a9964ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60436", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:32.088723Z"}, {"uuid": "2a420553-2782-4dad-aebc-0dcafa67eb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60438", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:36.779434Z"}, {"uuid": "7b555423-688b-4d87-8796-64a1d7fe5ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60442", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:46.191004Z"}, {"uuid": "2484189e-83e5-4a3d-a612-e84dc50ead86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60446", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:55.718413Z"}, {"uuid": "1272593d-81ef-4b3c-9188-517b442f62cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60447", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:58.071481Z"}, {"uuid": "7e562fb8-5448-46e1-8855-350945e0a265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60458", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:21.544521Z"}, {"uuid": "22b69ba9-b1a5-4214-90f4-e54670971d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60437", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:34.437078Z"}, {"uuid": "9c8c9c30-67d1-433c-be73-b9b3fd0a8a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60460", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:26.274548Z"}, {"uuid": "5f1eb38b-d52d-4389-8599-dd31a8a3bc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60439", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:39.122733Z"}, {"uuid": "96dd96ec-d1c1-4944-9d10-6a81d96d6560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60440", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:41.438841Z"}, {"uuid": "2259c270-c08f-42a9-b8b2-7e2ba738e8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60441", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:43.838162Z"}, {"uuid": "c6368678-278d-4a65-bc6a-a49113bf7fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60443", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:48.543199Z"}, {"uuid": "5eba2767-cf2d-4b80-9df3-a4c01a64256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60444", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:50.888338Z"}, {"uuid": "e9abcf3f-7388-49c3-88ca-e93122e72c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60445", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:16:53.366544Z"}, {"uuid": "cf61987b-3ffd-412f-b017-63e35ba908cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60448", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:00.422106Z"}, {"uuid": "902f396e-89dd-462f-99b3-44d3e0f80a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60449", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:02.767027Z"}, {"uuid": "ec5503e8-8041-4960-afc9-6aa2e931478e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60450", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:05.105745Z"}, {"uuid": "f3d82930-e42e-4e95-8a3b-3c83caf41924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60451", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:07.511558Z"}, {"uuid": "d9571ba9-8f0a-4632-95b2-74c3bb626f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60452", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:09.870290Z"}, {"uuid": "ac0a41c9-0d34-4f17-9a09-c41dc1d5281c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60454", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:12.223873Z"}, {"uuid": "53fc2b49-83d8-46e0-beaf-53342fe2e747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60459", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:23.938985Z"}, {"uuid": "171f1ed5-d146-407c-baca-f9a9d05281c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60461", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:28.605320Z"}, {"uuid": "63a32576-bbd4-465f-8dc6-7f809a97d9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60462", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:31.151813Z"}, {"uuid": "aa85d25f-e309-4708-8148-581b1b20de5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60463", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:33.483711Z"}, {"uuid": "b1043116-58ff-4171-92ee-d4a8862fcea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60465", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:38.236253Z"}, {"uuid": "69e891b6-3a0e-445a-86f6-b88ba4744900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60466", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:40.607084Z"}, {"uuid": "8d3af242-6269-46d1-9ca2-af1b22887947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60470", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:50.035329Z"}, {"uuid": "d9451c7b-eff9-4c47-8062-f61278d42f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60496", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:11.418823Z"}, {"uuid": "cc7ace67-3f29-402b-83f5-bd19d1736493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60499", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:18.694336Z"}, {"uuid": "60eec320-1042-4e36-89b0-ab8491630313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60503", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:23.426332Z"}, {"uuid": "a010ee82-757e-4147-a860-fcd5498d3859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60522", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:30.515105Z"}, {"uuid": "fd58dedd-1a4d-47ba-8077-f31ac3e39bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60523", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:32.867532Z"}, {"uuid": "69f8d14a-b09e-4eb6-9b46-538b1d7c52e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60525", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:37.559892Z"}, {"uuid": "11b0d4f3-541d-4927-9df2-79efcd3e04a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60530", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:46.917808Z"}, {"uuid": "8b44ce5d-84f8-4ec7-9b96-956d4b43d12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60531", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:49.530301Z"}, {"uuid": "ccf56a08-cb56-4349-aaf7-f7aa8a86ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60543", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:18.383778Z"}, {"uuid": "4c3a8866-28f1-415e-9efb-529df9e529cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60551", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:37.568114Z"}, {"uuid": "1417c077-086b-47e0-ac7f-69ceba047f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60553", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:42.281923Z"}, {"uuid": "dc154432-a6b3-403b-b804-4a9c62e92e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60555", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:47.250991Z"}, {"uuid": "1a15cd10-89a5-41b7-9322-60183f9f146b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60562", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:01.551983Z"}, {"uuid": "d6afc2f1-a9f8-4c07-9bc6-1061489d1634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60565", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:08.759327Z"}, {"uuid": "d5529db6-20a7-4d4f-9f5e-dc7d0338d0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60455", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:14.542876Z"}, {"uuid": "87fa1c47-f8d8-41f0-bb3d-2a081c74bc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60456", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:16.882711Z"}, {"uuid": "3ff98ea0-c72e-4e5a-b1c3-b31d25fcfcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60457", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:19.217859Z"}, {"uuid": "98d6be6e-20fb-49c1-b52e-7082b504e38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60464", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:35.833995Z"}, {"uuid": "5ac3fe54-7fe8-4207-bf18-180855756e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60467", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:42.964086Z"}, {"uuid": "138706c6-9a12-4836-8a72-5397dc586853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60468", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:45.301856Z"}, {"uuid": "3f98d450-c104-4156-b864-c7efca13e0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60469", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:47.699260Z"}, {"uuid": "b5ab57c0-2e67-492b-91c3-4006a0628c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60471", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:52.555235Z"}, {"uuid": "b9cf6a86-315e-4b0d-9338-17ac867ff6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60472", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:54.925478Z"}, {"uuid": "8134351b-4270-4c5a-a7ae-d6f491fc02b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60489", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:57.282234Z"}, {"uuid": "e05c2e46-83b3-419e-8d23-bd53c51b450f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60490", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:17:59.625510Z"}, {"uuid": "46c41006-8dc6-4400-ba27-acdb515c84fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60492", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:01.959028Z"}, {"uuid": "8f681e1e-19ff-48c9-af65-3311c12f66ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60493", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:04.369834Z"}, {"uuid": "52be858e-67b3-4ee1-8c53-a121f83fa0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60494", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:06.746511Z"}, {"uuid": "14d5c4ab-10cf-4a58-9b7f-43966a331f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60495", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:09.083535Z"}, {"uuid": "fb58fb80-0784-4b23-af00-e1bcbdeed050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60497", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:13.741573Z"}, {"uuid": "9a550437-806a-47d3-a575-7e8040bacdd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60498", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:16.340759Z"}, {"uuid": "0bde06a2-47c9-46f5-8ae3-72637fe03f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60502", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:21.076878Z"}, {"uuid": "a34950df-8148-49fb-9341-0f453f88d6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60519", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:25.769899Z"}, {"uuid": "e3e8cd2e-b152-4acb-912e-e4d58bf36099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60520", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:28.121166Z"}, {"uuid": "ef0f183a-f041-463f-85da-978d10f883a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60524", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:35.206842Z"}, {"uuid": "d2aa3c50-dd24-452b-8422-229a3e991747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60527", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:39.895798Z"}, {"uuid": "23828e88-f665-475f-9b06-01d022573c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60528", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:42.233777Z"}, {"uuid": "a5dd41be-97bf-4f1d-bf85-6175350f7b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60529", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:44.578074Z"}, {"uuid": "8510d210-0a0e-444c-98a5-d50253cff80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60532", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:51.883734Z"}, {"uuid": "7d317e7e-7722-4096-968d-8145e3d42a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60533", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:54.222722Z"}, {"uuid": "db8f4460-0143-4935-8c6d-b5be4843022d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60534", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:56.632254Z"}, {"uuid": "991bda82-3314-4c18-8149-cf2d6f50a35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60535", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:18:58.972179Z"}, {"uuid": "49246304-d740-4d9d-97be-9ce0fc80c9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60536", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:01.308751Z"}, {"uuid": "39c1293d-0a4a-4f03-914a-81686a7380cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60537", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:03.680152Z"}, {"uuid": "875ab83a-825a-4319-b915-7c7154266edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60538", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:06.001180Z"}, {"uuid": "c45d967f-b882-4a5c-930b-8a37f4902da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60539", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:08.340479Z"}, {"uuid": "84d27e74-d687-4156-ba73-6b3fe4dd4a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60540", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:10.673078Z"}, {"uuid": "ae304306-5395-48d7-8663-3899747aab82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60541", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:13.252459Z"}, {"uuid": "4fe06aa1-9232-401d-b3c5-a0cd41ac14a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60542", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:16.047123Z"}, {"uuid": "6e6d972c-efb2-4e4b-b1fb-09c222abc02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60544", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:20.702481Z"}, {"uuid": "f7138342-b49c-44b5-9a73-d2429099b12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60545", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:23.034410Z"}, {"uuid": "ca22b47e-8294-4606-8c56-d8ad4dab237c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60546", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:25.577127Z"}, {"uuid": "eafc1b0d-7bda-4309-97ed-b9638fb192df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60547", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:27.892973Z"}, {"uuid": "db1605d4-8fa9-40cc-ad23-4d30364f3d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60548", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:30.450187Z"}, {"uuid": "7719e2f6-a1e6-4d8c-b4c9-7047bee19684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60549", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:32.863080Z"}, {"uuid": "d1034149-72ef-48ea-84de-2c356b836686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60550", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:35.221342Z"}, {"uuid": "faf33709-a806-4b8d-b3fe-45e303096216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60552", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:39.884785Z"}, {"uuid": "f502b184-0158-4681-ab8e-3a22cce4d730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60554", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:44.848262Z"}, {"uuid": "23dfb15c-2dad-4d98-9697-15febb77fc05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60556", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:49.649921Z"}, {"uuid": "a288464c-d875-477e-b9de-51ac98633243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60558", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:52.209240Z"}, {"uuid": "bd685a31-b415-4206-a21a-a16fcd0948eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60559", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:54.526185Z"}, {"uuid": "3cf36676-ae40-423c-8727-5f38469964a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60560", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:56.881599Z"}, {"uuid": "e4009e54-6d9f-4b82-bd6e-3b8bedf492f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60561", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:19:59.229406Z"}, {"uuid": "f66c6eb8-0e04-4564-ad31-d0955407bbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60563", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:03.892747Z"}, {"uuid": "74c272a1-f4d2-41e5-89e8-d86a59b3c945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60564", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:06.211672Z"}, {"uuid": "500b6539-ae6f-4964-9b9e-d45f2991db6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60593", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:44.597930Z"}, {"uuid": "feca1f2a-191a-4ea7-b70b-201b2826f101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60566", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:11.098811Z"}, {"uuid": "e65e89cf-57de-4db0-a259-348b306ebc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60567", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:13.944059Z"}, {"uuid": "e52698cc-012e-44ed-bac8-ac501a6c21b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60568", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:16.265057Z"}, {"uuid": "2f01076e-66b8-4a18-bcea-53eaa5e26e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60570", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:18.573679Z"}, {"uuid": "d24469a3-5857-4ed9-9448-701bac324eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60576", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:21.134190Z"}, {"uuid": "a7895580-3b4e-4439-b261-f26db223794b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60577", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:23.482985Z"}, {"uuid": "1cc34fa4-98b9-43cc-81fb-5b08416f6b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60578", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:25.889089Z"}, {"uuid": "ee7d0c2e-35f5-49f2-a69a-b2e594fd4451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60579", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:28.236810Z"}, {"uuid": "5d4714c9-35c1-4639-999f-1b41383f0ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60580", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:30.587625Z"}, {"uuid": "66289d82-7266-4cd6-9754-9a3dce1535f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60581", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:32.924345Z"}, {"uuid": "bfcdf4e8-6abe-4e0a-a26b-37edbadf1d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60582", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:35.228360Z"}, {"uuid": "337bc724-a62c-45e3-9281-d5df24b9ff35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60583", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:37.602254Z"}, {"uuid": "84d52f7e-9072-4da6-bb0c-bd01af12a8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60584", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:39.934018Z"}, {"uuid": "0caba164-9ac6-433b-a452-e345e3832431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60586", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:42.275759Z"}, {"uuid": "d50b8bb8-347d-47a0-98e1-712e73f7fd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60594", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:46.925032Z"}, {"uuid": "9cde70eb-e4c7-44a2-bfa9-df3a7d1561d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60597", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:49.251276Z"}, {"uuid": "e4ec7b91-8610-4019-9597-5eea744947fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60598", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:51.571533Z"}, {"uuid": "3414a60f-bfd1-4be2-8437-b453c633ab79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60599", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:53.912864Z"}, {"uuid": "343652a8-1ac7-455d-b760-4cf2536a4249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60600", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:56.451814Z"}, {"uuid": "92318898-5cb2-43c6-bd06-2a36429515d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60602", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:20:58.772233Z"}, {"uuid": "50f18f7a-a1a9-4315-a68b-cc15087d1faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60603", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:01.159525Z"}, {"uuid": "92a391f8-ca65-44ad-a13f-62273e89c0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60604", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:03.513257Z"}, {"uuid": "835d9209-3a89-4590-98e4-ca26c6481277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60605", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:06.865126Z"}, {"uuid": "02d844d0-352f-46f1-bae5-2fd12b3c061c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60606", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:09.175028Z"}, {"uuid": "e2591f36-1ad7-465f-936d-d99719f140a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60614", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:11.499997Z"}, {"uuid": "c054d431-1bb0-4e2b-b860-665c9affde5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60615", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:13.818179Z"}, {"uuid": "bb65ff45-ab24-4989-85d0-9962d1db7929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60621", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:20.827905Z"}, {"uuid": "c14124de-2eb8-4ec1-9b9d-51d148b209e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60622", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:40.217057Z"}, {"uuid": "ea58946f-cc66-4f23-a4b6-d2e76f9b6017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60627", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:47.272649Z"}, {"uuid": "3655466a-25c2-427e-bd37-eb9274f93561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60629", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:49.572575Z"}, {"uuid": "6b3429e9-57d3-4c45-8451-2169ad8757aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60631", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:51.912816Z"}, {"uuid": "ff43f6de-f1ba-4451-a0d5-130aa6505bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60634", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:58.895299Z"}, {"uuid": "e82b6600-9feb-4d80-b873-40fdc3d1d31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60635", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:01.275780Z"}, {"uuid": "fbd71690-3f71-435e-9ed3-4c7f1cebc1cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60636", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:03.616895Z"}, {"uuid": "3fda7781-6270-449e-9473-0e6dcc4c960d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60638", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:08.475756Z"}, {"uuid": "afe47a28-ff42-4cca-8e7a-36697582651d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60640", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:13.194052Z"}, {"uuid": "0fbfdf32-9a29-4268-95d3-31a36f8877a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60645", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:25.133047Z"}, {"uuid": "c1c7a0ad-7525-400c-ba12-ef9030d8b563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60648", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:32.324425Z"}, {"uuid": "ca573783-ad5d-49fa-a9e7-b21a2a1d0a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60664", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:06.421304Z"}, {"uuid": "1d550a62-b64e-4402-b80c-aa792a38ac4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60618", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:16.150183Z"}, {"uuid": "7dada2e9-443f-4246-8fb2-040db6faf222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60619", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:18.494838Z"}, {"uuid": "5c6762c4-aca2-4ea9-b543-b65042d82ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60623", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:42.535714Z"}, {"uuid": "cc4152eb-cf5c-4663-a280-e39caece9899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60625", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:44.918702Z"}, {"uuid": "a63c8d23-f890-40cc-826b-60405a2771f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60632", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:54.229996Z"}, {"uuid": "873ab08d-2833-4e60-889a-754e2574d256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60633", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:21:56.552477Z"}, {"uuid": "1160eaf5-b732-4347-a0fc-efb4ac382570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60637", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:05.940982Z"}, {"uuid": "31025f9b-8983-4d08-ba01-3e4c485c7c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60639", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:10.800109Z"}, {"uuid": "5d3cf542-8a33-431e-b9e0-0c7cb301cdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60641", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:15.819814Z"}, {"uuid": "22f326fb-0edb-4156-a472-f480a64d4bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60642", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:18.199225Z"}, {"uuid": "57dc636f-65eb-4bf3-9189-45d2d57b3068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60643", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:20.520236Z"}, {"uuid": "93a5926e-165c-45ec-af55-9a946d2bb474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60644", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:22.833998Z"}, {"uuid": "5620cbe7-ea19-4e1c-98b8-1e6917705d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60646", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:27.467712Z"}, {"uuid": "b9ca29c9-db01-460e-b081-2ad8593870d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60647", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:30.006183Z"}, {"uuid": "06431afb-fa07-4696-a4aa-4d44a31d3f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60649", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:34.662948Z"}, {"uuid": "7c8d0ce3-ba6a-4b9c-abf1-6ea1b4da6e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60650", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:37.001806Z"}, {"uuid": "cfdfe34f-0dd5-4f59-9a5c-c905284248fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60651", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:39.590667Z"}, {"uuid": "80c8f7c6-4a54-49a4-99be-8218206f59b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60652", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:41.991720Z"}, {"uuid": "0ef4394b-c0c5-4599-b9e9-d08a39bb5ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60653", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:44.391665Z"}, {"uuid": "b773f9f7-350a-4018-8342-314cf9e609c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60654", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:46.752150Z"}, {"uuid": "7ef10f7a-4ec0-4fa0-b460-fcf3dc6bae6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60655", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:49.693373Z"}, {"uuid": "9595a4ab-ff57-4dd0-9b26-4dd4bce7b192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60656", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:52.046118Z"}, {"uuid": "89db8257-631d-4966-a51c-f8c12ed9f6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60657", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:54.369652Z"}, {"uuid": "9dabca31-5aca-4425-b4d0-11dec7b92de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60658", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:56.772117Z"}, {"uuid": "7510d1a2-eca1-4ecc-b5de-f2eb6306e862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60659", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:22:59.118738Z"}, {"uuid": "fabde38d-6d12-4dd2-992f-90ddc9def0e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60661", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:01.501190Z"}, {"uuid": "9b04625a-b8b9-4420-aff0-2ba04d4f394d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60663", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:03.824293Z"}, {"uuid": "9d612128-9e9d-451c-aad9-c8b58b9807fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60665", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:08.845905Z"}, {"uuid": "9c52196f-b1b0-4050-92db-6249c83b6569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60667", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:11.215186Z"}, {"uuid": "212bbadc-8b2b-498e-950a-795013cc4ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60668", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:13.553281Z"}, {"uuid": "8adf6359-ee36-4bbe-bfc4-06d2d4206bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60373", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:23:15.959044Z"}, {"uuid": "3de8f4b5-d872-4bf0-8f93-ea455dd0cc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60670", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:02.867951Z"}, {"uuid": "ba186346-897f-444f-b096-fb32157f1892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60671", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:05.184445Z"}, {"uuid": "83400335-2cf5-4423-9428-9f47c047b50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60674", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:07.514346Z"}, {"uuid": "a413eb8c-34d1-4f45-90ab-d8aa718b49ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60675", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:09.840297Z"}, {"uuid": "e5bdb0c7-f54b-4380-8bdc-ed4ac226d688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60676", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:12.177613Z"}, {"uuid": "01f2a9a9-3c58-40c2-8916-7a6b844b185c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60677", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:14.722160Z"}, {"uuid": "214299ef-8559-4b9b-b984-53de70fa954e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60678", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:17.065961Z"}, {"uuid": "d745d3fb-e2a6-4ca1-93bc-4d5e507b5f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60681", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:19.605827Z"}, {"uuid": "e6da728d-f6e6-4360-a32c-b8ff7919a8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60683", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:21.941820Z"}, {"uuid": "83b60c84-ef25-4f67-a194-b6d13c47a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60686", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:24.316882Z"}, {"uuid": "4774c688-f5ea-4b5b-b7e8-89639e0768f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60689", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:26.654934Z"}, {"uuid": "ffa0a176-f98c-4e21-adbd-77bcf7f58050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60690", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:29.043217Z"}, {"uuid": "85b50229-4485-40b1-ba06-1ea726b55c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60691", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:31.394645Z"}, {"uuid": "080de3da-94c5-4ea9-837c-02c2c04ccac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60692", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:34.030471Z"}, {"uuid": "018aeaab-c66e-4cb5-9b1d-3a450caa569f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60700", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:36.376242Z"}, {"uuid": "2ba8034b-2409-49be-a0eb-7fe8920d39a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60703", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:38.715864Z"}, {"uuid": "3ae44dd6-30d6-46e0-ad8b-fd8076a4751d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60704", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:41.050285Z"}, {"uuid": "080c3276-2215-4836-920c-d4f0cb9074cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60705", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:43.393513Z"}, {"uuid": "2db417cb-4ded-4b79-8350-143ccd9639b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60706", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:45.967430Z"}, {"uuid": "9b904a97-d850-4ddb-93c1-d7b43cda767d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60708", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:48.317671Z"}, {"uuid": "45fcf1e7-e463-46c4-801d-a954d2518dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60710", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:50.704972Z"}, {"uuid": "ac325477-2841-48d5-9428-fbdb117836d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60711", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:53.113582Z"}, {"uuid": "84496431-d97d-4248-a5c5-fb0392ab66fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60714", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:55.443412Z"}, {"uuid": "f7ce600c-eb4d-4665-8eb2-3242d708561c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60719", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:45:57.764369Z"}, {"uuid": "ec2f4f66-51a3-4be0-ba78-2f6f29e2f614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60723", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:00.165113Z"}, {"uuid": "cb389ebe-e9e3-4cd8-9e0d-7bc5fa9a7268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60725", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:02.568104Z"}, {"uuid": "49ed3615-2876-4e5e-a85b-a23d3d882a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60732", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:04.899097Z"}, {"uuid": "9c725e52-864b-4ee5-a3d9-41871802d0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60734", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:07.224645Z"}, {"uuid": "bdd63bfe-db7f-49af-9834-2be5124fa037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60735", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:10.382699Z"}, {"uuid": "32ff4a2d-cc16-4e6b-ba9b-4e25d1d71642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60736", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:12.727965Z"}, {"uuid": "13262e49-68bb-4be5-8b7b-817695c1eb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60738", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:15.050607Z"}, {"uuid": "102ecba8-d037-4a74-9a10-b514a762f5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60739", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:17.376106Z"}, {"uuid": "e6fe85c3-f3e3-4d23-9af7-7f61884acc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60740", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:19.674311Z"}, {"uuid": "a520a5bb-70a6-4aa9-a9f1-3050c582bfb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60741", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:21.983572Z"}, {"uuid": "b0f4a134-2a9b-4d8b-a072-705e3b5abc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60749", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:24.368021Z"}, {"uuid": "c8227ddd-938e-4d13-96f6-8fff10111364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60750", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:26.701442Z"}, {"uuid": "13255eaa-cd3c-42b8-a451-c91301f886e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60755", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:29.039396Z"}, {"uuid": "bb223547-d922-4071-8ff5-365ffcd2f0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60756", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:31.377095Z"}, {"uuid": "1d593354-a04e-41c0-8588-a7c84f171534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60763", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:33.699870Z"}, {"uuid": "caaac7be-8aef-4834-9631-dcb6e37a2e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60764", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:36.031099Z"}, {"uuid": "8aed13ea-ed74-4a39-ac00-94336be7cc74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60768", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:38.356638Z"}, {"uuid": "37464dab-578d-440b-b1e2-8efc2b166377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60770", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:40.911998Z"}, {"uuid": "aa9a63c9-07a3-4e9a-8863-e216a47ad037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60771", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:43.295587Z"}, {"uuid": "262f4dfb-61ce-44f2-90da-65c12ba16f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60772", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:45.642467Z"}, {"uuid": "89e932af-572e-4ac0-982f-f056ae683834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60774", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:50.317575Z"}, {"uuid": "71be6e65-95b0-45fa-96e3-7af0bcce77c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60783", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:57.549088Z"}, {"uuid": "7da6938e-bddd-4091-a8c3-bdf51031708c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60773", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:47.962185Z"}, {"uuid": "6e141053-3b2b-476a-ac9e-b1cbf9c72ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60810", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:28.055407Z"}, {"uuid": "af2e198d-ee2a-4a4b-9979-5abb21683c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60823", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:35.032910Z"}, {"uuid": "d7a7e972-9524-43c8-98f5-4d2354f18202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60834", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:49.300505Z"}, {"uuid": "0fef1e4b-92c2-41d9-abaf-c634d1ab9ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60778", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:52.626249Z"}, {"uuid": "32089837-3016-43de-ae3f-231f3a6c6ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60780", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:55.003044Z"}, {"uuid": "44c09b84-7def-4d97-a0b3-cbe7afdab0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60784", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:46:59.875250Z"}, {"uuid": "6c16ff8b-c8ed-42d2-a6bf-7e39c3a3efce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60787", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:06.789614Z"}, {"uuid": "6748ab59-d4fb-4d79-93a1-c2c2e820dc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60799", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:18.474760Z"}, {"uuid": "63f7a90c-c82d-483b-aed2-0e87ea304112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60837", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:54.159544Z"}, {"uuid": "029d42d7-410b-4a36-8c2a-bfa819909668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60844", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:01.249344Z"}, {"uuid": "f78db15c-336d-4b33-b406-492a82b0f6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60848", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:05.873704Z"}, {"uuid": "2cb34e31-21fd-4f62-908b-63f16e9a30b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60854", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:10.488070Z"}, {"uuid": "9ac675a6-777b-4e07-965f-8883068c858c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60863", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:19.778425Z"}, {"uuid": "2786478c-3738-4e85-b7a7-f2517dc8a665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mtzhd5igt52r", "content": "Every self-hosted Gitea server on a version before 1.27.1 is a live target. CISA added CVE-2026-60004 to its exploited-vulnerabilities catalog on August 25 and gave federal agencies until August 28 to patch. Basic repo write access is enough to run shell commands on the server.", "creation_timestamp": "2026-08-26T23:10:13.039995Z"}, {"uuid": "91bcf6f9-20d4-4b80-9039-cb8076b62dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60785", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:02.177784Z"}, {"uuid": "e19ca641-42b9-4c32-867e-24a165fbc5f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60786", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:04.497296Z"}, {"uuid": "dae3236d-615a-40e4-9aa8-90b98c1d2e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60788", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:09.100945Z"}, {"uuid": "3458f931-2c61-4bcc-9174-00c8137e32f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60817", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:32.706186Z"}, {"uuid": "03b9493f-778a-4bf5-801c-7f0c5ba8040c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60833", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:46.973306Z"}, {"uuid": "60ffb8ce-4bdc-4146-9d65-c0b9e35d2b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60867", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:22.084065Z"}, {"uuid": "c978692c-7dab-4514-97e8-ec5aa980c699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60789", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:11.455657Z"}, {"uuid": "5593321e-9a91-43df-9cda-8826893b44b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60790", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:13.836880Z"}, {"uuid": "19484b65-a7ec-4a68-8b87-c043716df468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60828", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:42.287745Z"}, {"uuid": "42493972-def0-4b5d-be60-33dc51800d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60857", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:15.078393Z"}, {"uuid": "47107323-6310-497c-83ab-30020bbe4fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60793", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:16.166008Z"}, {"uuid": "422c8d78-f93e-4f0b-99d4-c4db956207bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60800", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:20.789654Z"}, {"uuid": "f7602c90-2456-413c-8950-6f59d7ad2abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu5l6zrewt2u", "content": "\ud83d\udce2 [VULN] CVE-2026-60004 : RCE critique de Gitea exploit\u00e9e pour d\u00e9ployer des charges utiles semblables \u00e0 des mineurs | SOC Prime\n\nUne vuln\u00e9rabilit\u00e9 critique d\u2019ex\u00e9cution de code \u00e0 distance dans Gitea est pass\u00e9e de la divulgation \u00e0 une exploitation active moins d\u2019un m\u2026\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-08-28T14:30:10.798699Z"}, {"uuid": "cf037af3-6eb9-45fe-8ac7-44cfe65ed276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60806", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:23.291812Z"}, {"uuid": "a5d168d8-0b32-4984-ab41-766bb2e0bf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60860", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqk64fnef24", "content": "\ud83d\udccc CVE-2026-60860 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60860", "creation_timestamp": "2026-08-23T10:07:07.067983Z"}, {"uuid": "f9a70cf1-a87d-45e5-a5f7-1029258cac8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60807", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:25.647230Z"}, {"uuid": "cafff3ff-263d-462b-abcf-ed6741e93704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60824", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:37.356362Z"}, {"uuid": "11f2e3fb-f506-4042-b4cd-987dca768346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60813", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:30.415804Z"}, {"uuid": "4e6a7161-e580-448f-b236-483740e78098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60827", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:39.830492Z"}, {"uuid": "b424e51c-26ef-4661-a4a3-cab25a58f949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60829", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:44.624824Z"}, {"uuid": "7f5158f6-841c-44b2-8897-01ff40373f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60836", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:51.792876Z"}, {"uuid": "f5f1dda4-56d8-4d19-8ddb-78c287762764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60838", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:56.472414Z"}, {"uuid": "7c661488-d084-491f-be19-27db7de75a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60840", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:47:58.833190Z"}, {"uuid": "b1d2d42b-8eca-4ea2-9ff6-30f44236e24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60845", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:03.585637Z"}, {"uuid": "b6a1b9ff-4c8a-4f69-ba9f-5e12c7360cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60852", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:08.193328Z"}, {"uuid": "50b605b9-1256-4bb7-8e3c-23f98dd5ee08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60855", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:12.772463Z"}, {"uuid": "967178f2-e662-4ba8-b564-587360ec0c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60859", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:17.443474Z"}, {"uuid": "28dc8d2c-910f-4bed-a308-4a219a99ac87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60868", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:24.450066Z"}, {"uuid": "ce827e53-d4cb-4332-8a84-5736ec04ea7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60870", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:28.773508Z"}, {"uuid": "04cecc18-0dcf-4bde-93f7-5e2a160c97a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60871", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:31.095787Z"}, {"uuid": "31b8bc10-6e19-4ed7-8efe-24a179e7b728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60872", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:33.437133Z"}, {"uuid": "e7d73ca6-995f-443e-8f2a-539a226137ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60875", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:36.776659Z"}, {"uuid": "c1d9c262-e0ce-485a-8974-238f78dac509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60877", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:39.110834Z"}, {"uuid": "4d8baafb-275d-408e-b7b9-ec6db95c0633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60880", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:41.543684Z"}, {"uuid": "0e1437cb-6eb8-4d9e-a88e-8bb216617440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:43.875887Z"}, {"uuid": "115d4850-8a3a-4230-a15f-03be6b22b526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60890", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:46.266411Z"}, {"uuid": "3e663312-92cd-4ca3-9204-cb2678768a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60894", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:48.824376Z"}, {"uuid": "ce866322-a64b-4715-bfd0-e0f72116669a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60897", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:51.356262Z"}, {"uuid": "09903a2d-0abd-4a33-abd0-99bd658d871b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:53.677348Z"}, {"uuid": "8cd1b783-5ea9-4986-af97-832b1de7b7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60900", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:56.249958Z"}, {"uuid": "b1484745-ea91-40a7-804e-025d60341d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60901", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:48:58.651476Z"}, {"uuid": "db345030-1276-4b7e-afaa-76396ab4e065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60904", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:00.958801Z"}, {"uuid": "43044aeb-a6d1-4d26-93fb-b83ece26f658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60908", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:03.254201Z"}, {"uuid": "d5dff5bb-1b43-49ee-8c87-891bdbe7949e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60910", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:05.550844Z"}, {"uuid": "073f0e46-5418-43f2-ac06-3ab4e3d298c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60917", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:08.081374Z"}, {"uuid": "7f494585-84e8-484e-9bf3-cb0369afd999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60918", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:10.412187Z"}, {"uuid": "a41f56ab-727f-44fc-99c1-bd63957d47c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60920", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:12.718663Z"}, {"uuid": "16b67a32-6172-433d-8243-428dd9916152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60923", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:15.135746Z"}, {"uuid": "76057e8a-17ed-44b3-8c50-de336fa052eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60924", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:17.529477Z"}, {"uuid": "4961e932-b626-451f-9ddf-d2fb88074ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60925", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:19.881739Z"}, {"uuid": "fe632dad-cc93-4858-82c3-907e681e48c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60926", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:22.228637Z"}, {"uuid": "2bac796d-4ff1-4445-9d40-f3a4ca3b5b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60927", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:24.540697Z"}, {"uuid": "372ef9b3-5a46-4367-936c-316e46dbd1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60931", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:26.879707Z"}, {"uuid": "5ea93c60-ffc2-422d-b420-365ece290e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60932", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:29.226677Z"}, {"uuid": "89dbcb1d-a9b3-408d-9006-214191c36793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60941", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:31.572177Z"}, {"uuid": "47d14c41-0ed0-4ec0-b937-44a915cd5618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60942", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:34.544077Z"}, {"uuid": "e425b3ac-b6e1-4652-925d-a678f6bf543c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60943", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:37.111025Z"}, {"uuid": "dc0f6143-b73a-4831-83b8-b47cb9f18f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60945", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:39.418303Z"}, {"uuid": "f43938b4-40ff-4f7b-920a-dd71e2b3ff24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60948", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:42.170031Z"}, {"uuid": "2e75575d-756e-42f7-843c-9ae45f7c6d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60951", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:44.504829Z"}, {"uuid": "5c27be28-3df9-4739-8d98-f01aa6de60b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60952", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:47.048411Z"}, {"uuid": "40c6bef3-7cc1-4beb-8e37-8bf7b6d76897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60953", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:49.379090Z"}, {"uuid": "a6632fc1-685c-43a2-b33f-21736bf60301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60959", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:51.956989Z"}, {"uuid": "9d10f295-ebb3-419b-9acb-54a8f3acc399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60960", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:54.310317Z"}, {"uuid": "b8ed9548-98ad-4740-8854-687fa44c3e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60963", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:56.665309Z"}, {"uuid": "72b47ebb-14fe-47a5-a0fa-cd62828fca84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60965", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:49:59.042102Z"}, {"uuid": "b076c861-d567-4f1c-bcdc-e00fdfcf6b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60966", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:01.686952Z"}, {"uuid": "3ec13538-3718-4fd5-91d2-8c54b157ede7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60972", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:04.044441Z"}, {"uuid": "bb0ad811-41fb-42aa-9f82-69ceb4c0185c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60973", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:06.396799Z"}, {"uuid": "dc6d5c4d-e550-4f9b-a820-a6874a7e47bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60974", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:08.735898Z"}, {"uuid": "d02c93a2-8e3b-41a5-bc61-65fbac88a7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60986", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:20.794131Z"}, {"uuid": "d318a9ed-9c08-4e18-813f-5df53ba76478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60987", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:23.194356Z"}, {"uuid": "a36a3802-824a-47e9-a30d-c0c0cfc3e534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60979", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:11.131815Z"}, {"uuid": "d69dd786-4d25-42a6-9aa6-41779e8786f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60982", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:13.550803Z"}, {"uuid": "2ba58eda-c5d7-4d5a-b840-f5cd3d9e4d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60989", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:28.153049Z"}, {"uuid": "cc32da6e-46fc-43c1-964d-9074cb5db584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60984", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:16.115505Z"}, {"uuid": "7178cb5f-5592-4cf3-92eb-c9def4c8e45c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60985", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:18.477474Z"}, {"uuid": "1bae9acb-09b0-4944-bd76-d04b9fea18a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60999", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:33.184664Z"}, {"uuid": "7301f2e8-b398-4dee-bd99-478e8e7d1691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60988", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:25.758182Z"}, {"uuid": "f05b46c3-638a-4957-8267-7c1dc153afc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60997", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T17:50:30.557118Z"}, {"uuid": "f005fbe2-96a3-4285-894c-043c3f2188e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/HackerNewscyber/3371", "content": "\u2708\ufe0f  \u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 Gitea\n\n\ud83c\udfa4\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-60004 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u00ab\u06af\u06cc\u062a\u06cc\u0627\u00bb (Gitea) \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u062e\u0632\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0648\u0634\u062a\u0646 \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc diffpatch\u060c \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0646\u0633\u062e\u0647 1.27.1 \u06af\u06cc\u062a\u06cc\u0627 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 CISA \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631\u06af\u0631\u0641\u062a\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-08-27T00:00:10.163341Z"}, {"uuid": "0e7d8a93-845f-4916-b43f-8f5f5b6dfe09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/true_secator/8549", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0430\u043c\u043e\u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c GitHub \u0438\u043b\u0438 GitLab SaaS, Gitea \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DevOps, \u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Salesforce \u0428\u0430\u0435\u043c \u0420\u043e\u0434\u043e\u043c CVE-2026-60004 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b Gitea, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API diffpatch.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441\u0430\u043c\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 diffpatch \u0432 Gitea \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Git-\u0445\u0443\u043a\u0430 \u0438\u0437 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gitea.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439.\n\nGitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 27 \u0438\u044e\u043b\u044f 1.27.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2026-60004, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u043e\u043a\u043e\u043b\u043e 5000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-60004.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445,\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0438\u044e\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Gitea (CVE-2026-20896) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Gitea \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a X-WEBAUTH-USER.", "creation_timestamp": "2026-08-27T00:00:06.791312Z"}, {"uuid": "2b5199e7-21e3-41e8-8878-bea977735f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/thehackernews/9893", "content": "\ud83d\udea8 Attackers are exploiting a critical Gitea RCE flaw.\n\nCVE-2026-60004 can let an external attacker gain repo write access via open registration and run shell commands as the Gitea service account.\n\nOne reported attack dropped cryptocurrency-miner-like malware.\n\nRead: https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "creation_timestamp": "2026-08-27T00:00:09.500837Z"}, {"uuid": "63862733-666e-45dc-991a-ab6144d9afd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2869", "content": "\ud83d\udd34 Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-27T00:00:09.555709Z"}, {"uuid": "2fe33034-10dc-4305-85cf-45da7725964e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60707", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqltqxgvm2f", "content": "\ud83d\udccc CVE-2026-60707 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security).  Supported versions that are affected are 12.2... https://www.cyberhub.blog/cves/CVE-2026-60707", "creation_timestamp": "2026-08-23T10:37:06.827398Z"}, {"uuid": "2d720c0a-a49c-4b26-a38f-74785d7de448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/information_security_channel/55803", "content": "CISA Warns of Exploited Gitea Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability (https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-27T00:00:10.372965Z"}, {"uuid": "78e8b8f1-2c5a-4c80-a6cf-1eb2cf51ddb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60328", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdmmppfvc2u", "content": "CVE-2026-60328 - oracle access manager\nSome versions of Oracle Access Manager, a security tool used in Oracle Fusion Middleware, can be exploited by hackers to take control of the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-23T19:56:04.740370Z"}, {"uuid": "562e97af-bedd-4040-9345-dc38e3daa75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60329", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdmmquvlw2v", "content": "CVE-2026-60329 - oracle identity manager\nAn attacker can access and take control of Oracle Identity Manager without permission, which could lead to sensitive data being stolen or altered. Affected versions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-23T19:56:06.126696Z"}, {"uuid": "e82ca384-8f62-42b7-8c25-942827ff019a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/39Qy9vqSvx-h1k5WwJekEuwBwlXKBIMprCkBU5G7GSt60tAA", "content": "", "creation_timestamp": "2026-07-24T00:00:08.111023Z"}, {"uuid": "b20f8aa3-0436-4ce3-a588-196e7c14e51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94519", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell-CVE-2026-63030-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Bhanunamikaze\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 17:51:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion) + CVE-2026-60137 (author__not_in SQL injection). For authorized security testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.391851Z"}, {"uuid": "002fc693-16b7-492f-9214-5d89ade86502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Colere-Sys\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 17:49:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAnalysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.608050Z"}, {"uuid": "9aaab06a-b8cb-4119-81bd-dd3d0fa74f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94678", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-63030-CVE-2026-60137-wp2shell-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 16:30:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 Wp2shell Poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:11.722459Z"}, {"uuid": "9ad434a8-9967-4cb2-add6-b663dfd7d070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94648", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-vulnerability-scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Adrees-Basheer\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 12:34:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nScan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV reporting.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:11.919142Z"}, {"uuid": "a43a2254-3158-4f0f-9c38-0807ffe32d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94529", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mrmtwoj\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 17:49:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.740070Z"}, {"uuid": "558b4006-24c7-4284-98e3-4416188703ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94635", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mcipekci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:58:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE PoC for WordPress core \u2014 chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.913395Z"}, {"uuid": "503c74af-ac7f-4c31-bf48-a664a897fd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60366", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mreczt53ym22", "content": "\ud83d\udccc CVE-2026-60366 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60366", "creation_timestamp": "2026-07-24T02:37:08.979284Z"}, {"uuid": "477f76ac-aecb-436c-ae6d-ea320265be12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://t.me/GithubRedTeam/94894", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-60206\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 02:46:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\ncve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T04:00:04.007736Z"}, {"uuid": "ccfa041a-3ffd-48f2-bac6-4b2d2839f6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4bofuumd23", "content": "\ud83d\udccc CVE-2026-60004 - Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. https://www.cyberhub.blog/cves/CVE-2026-60004", "creation_timestamp": "2026-08-28T02:07:07.302983Z"}, {"uuid": "6cc5110b-4714-4876-93e1-4b8df07ea236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrekllz3lr24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 72 interactions\nCVE-2026-60137: 58 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 9 interactions\nCVE-2026-64600: 9 interactions\nCVE-2026-12569: 8 interactions\n", "creation_timestamp": "2026-07-24T04:52:19.662646Z"}, {"uuid": "0be3e2c9-cc5f-44a2-9a05-1921ec347c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mrewqx2tps2o", "content": "wp2shell: unauthenticated RCE in WordPress core (CVE-2026-63030 + CVE-2026-60137). No plugin needed. Patched July 17 (6.9.5/7.0.2), both CVEs now in CISA KEV. Check your version today.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/YAUNn\n\ud83c\udde9\ud83c\uddea zurl.co/mtIxP \n\n#CyberSecurity #WordPress #CISA", "creation_timestamp": "2026-07-24T08:30:04.150379Z"}, {"uuid": "9ca39ce2-f3eb-4711-8301-8df5fe336831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/nakachiy.bsky.social/post/3mrf26mx72k24", "content": "\u793e\u4f1a\u904b\u52d5\u3067\u81ea\u9bd6\u3084\u901a\u4fe1NGO\u306e\u30b5\u30fc\u30d3\u30b9\u3067WordPress\u4f7f\u308f\u308c\u3066\u3044\u308b\u65b9\u3005\u3082\u5927\u52e2\u3044\u3089\u3063\u3057\u3083\u308b\u3067\u3057\u3087\u3046\u306e\u3067\u6ce8\u610f\u559a\u8d77\u3068\u3057\u3066\n\nWordPress\u306e\u8106\u5f31\u6027\u5bfe\u7b56\u306b\u3064\u3044\u3066(CVE-2026-60137\u3001CVE-2026-63030\uff1awp2shell)\nwww.ipa.go.jp/security/sec...", "creation_timestamp": "2026-07-24T09:31:25.890720Z"}, {"uuid": "561343e6-54e8-4af8-9949-c581ebf962a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu7gsjtnnx2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-73570: 20 interactions\nCVE-2026-60004: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-60004: 11 interactions\nCVE-2026-65643: 9 interactions\nCVE-2026-19313: 4 interactions\n", "creation_timestamp": "2026-08-29T08:16:53.561924Z"}, {"uuid": "c269d3af-630b-492c-a95b-97f7eb4a790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mu5pfo7vqd22", "content": "Over 8,300 Internet-exposed Gitea servers remain unpatched for CVE-2026-60004, a critical code injection flaw used for remote code execution and crypto-mining malware via the diffpatch API. #Gitea #CVE202660004 #CISA", "creation_timestamp": "2026-08-28T15:45:26.461069Z"}, {"uuid": "c143b6da-b08d-4fec-b64a-3907f83dc1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrfasopu7v2g", "content": "(CISA TS-SOC) CVE-2026-60137 \u2013 WordPress Core SQL Injection\u00a0Vulnerability\n\nSeverity: MEDIUM Impact Summary: Allows unauthenticated attackers to perform SQL injection, which can be chained with CVE-2026-63030 to achieve remote code execution on default WordPress installations....", "creation_timestamp": "2026-07-24T11:29:59.748268Z"}, {"uuid": "6de812e9-6748-4d7f-afb7-d3b92999520f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrfbkpbdjz2j", "content": "Attackers are dropping webshells into WordPress sites. They aren't breaking in - they're using unpatched flaws.\n\nCVE-2026-60137 and CVE-2026-63030.\n\nhttps://www.yazoul.net/news/article/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-24T11:43:25.137798Z"}, {"uuid": "e03ce04c-e49e-40d3-be96-2519e12df9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94951", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-63030\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 10:50:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T12:00:04.284720Z"}, {"uuid": "ce1185ef-9f82-4bb1-8e11-93de876cb9a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "Telegram/CAgNXP7QCJ0ImmaZujxERj5g-FS7jqScPpLDOt1x7u-ghTY", "content": "", "creation_timestamp": "2026-07-24T12:00:04.377357Z"}, {"uuid": "66733262-28c2-4128-b6cc-434ea0daef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflgliea52z", "content": "CVE-2026-60379 - service delivery platform\nOracle Fusion Middleware's Messaging Enabler, used for communication between systems, has a security flaw that allows hackers to access and control it without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:40:04.375789Z"}, {"uuid": "19f2efcc-cc2b-408d-af8b-6ba766d7040d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60380", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflgmth6z2a", "content": "CVE-2026-60380 - service delivery platform\nSome versions of Oracle's Fusion Middleware Messaging Enabler are vulnerable to unauthorized access, which could allow an attacker to take control of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:40:05.566560Z"}, {"uuid": "51ee307c-ec75-4984-b068-ac9d93faf221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60381", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflk67c3n2v", "content": "CVE-2026-60381 - service delivery platform\nThe Messaging Enabler component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is at risk of being taken over by an attacker with network access.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:42:04.576398Z"}, {"uuid": "1b5c70ea-1ff0-4d44-bbb6-53fea8035fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60422", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflk7rlwq2u", "content": "CVE-2026-60422 - oracle unified directory\nA security weakness in Oracle Unified Directory (version 14.1.2.1.0) makes it possible for an attacker with limited privileges to access or delete sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:42:06.188844Z"}, {"uuid": "2ba7d072-ee50-4bcd-9261-e7ef788b1a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60435", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflnqwrnf2r", "content": "CVE-2026-60435 - oracle webcenter content\nThe Oracle WebCenter Content product, part of Oracle Fusion Middleware, has a security flaw that allows an attacker to take control of it without a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:44:05.481488Z"}, {"uuid": "55d2f9ef-dab7-4135-92a7-8c35fccc0fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60438", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflns566c2j", "content": "CVE-2026-60438 - oracle http server\nOracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0 have a security flaw that allows an attacker to access and modify sensitive data without needing a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:44:06.601460Z"}, {"uuid": "9cce7871-203b-4d30-90db-999d2fb36332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60441", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflrfsuia2u", "content": "CVE-2026-60441 - service delivery platform\nOracle Fusion Middleware's Messaging Enabler in versions 12.2.1.4.0 and 14.1.2.0.0 is at risk of being taken over by an attacker without a password. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:46:07.470370Z"}, {"uuid": "d62349d0-3428-4969-a8ae-233e23c1e762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60442", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrflrgztyb2a", "content": "CVE-2026-60442 - service delivery platform\nOracle Fusion Middleware's Messaging Enabler is vulnerable to a serious security risk. If exploited, an attacker could take control of the system, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:46:08.539177Z"}, {"uuid": "9474acf2-e07a-4368-adf7-2982691da44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60456", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfluve4sn2v", "content": "CVE-2026-60456 - oracle webcenter enterprise capture\nThe Oracle WebCenter Enterprise Capture product's Client Bundle in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a security threat. This means that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T14:48:04.493685Z"}, {"uuid": "dfe9116d-917d-4f8e-bc82-7d9302728533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60457", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfovjcwlg22", "content": "CVE-2026-60457\nSome versions of Oracle WebCenter Enterprise Capture are at risk of being taken over by an attacker who has access to the network. This could impact not only the affected product but also other connected\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T15:42:06.650260Z"}, {"uuid": "225c7e35-ac66-444d-91ee-63c81ad5a19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60458", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfoyzjg752a", "content": "CVE-2026-60458\nOracle WebCenter Enterprise Capture, a component of Oracle Fusion Middleware, has a security issue that allows an attacker with network access to take control of the system. This could impact other connected\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T15:44:04.200400Z"}, {"uuid": "b2143796-cf66-45bc-a558-9c5bec82d3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60459", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfoz2wteg2v", "content": "CVE-2026-60459\nA critical vulnerability in Oracle WebCenter Enterprise Capture allows hackers to take control of the system by exploiting a weakness in the product's web interface. This affects versions 12.2.1.4.0 and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T15:44:05.740896Z"}, {"uuid": "4ad5ac36-54d1-4d3a-9012-66fdb89882a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60461", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfp4nc22h2a", "content": "CVE-2026-60461\nA security flaw in Oracle WebCenter Enterprise Capture makes it possible for attackers with some privileges to take control of the software. This could affect not only the software itself but also other related\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T15:46:05.653528Z"}, {"uuid": "b1eb782c-ac74-497a-a846-878634469291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60460", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfpa6kytw2e", "content": "CVE-2026-60460\nOracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to a security threat that allows an attacker to take control of the system. This means sensitive information could be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T15:48:04.388993Z"}, {"uuid": "5d37d489-29d3-47cf-923d-e0d286dd8dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/M-3cLQvPgI-q_MEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw", "content": "", "creation_timestamp": "2026-07-24T18:00:04.107072Z"}, {"uuid": "7ee48e7a-d25c-4854-b3d5-cdddf5efd8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrftlnrxrx23", "content": "CVE-2026-60424\nOracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0 are vulnerable to unauthorized access and takeover by an attacker with network access via LDAP. This could impact not just the directory, but also\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T17:06:04.443670Z"}, {"uuid": "d008c843-0c63-4453-858d-dda5de51c6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60445", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrftlp4zbx2r", "content": "CVE-2026-60445\nThe Oracle WebCenter Enterprise Capture software has a security flaw that allows an attacker with network access to take control of the system. This could impact other connected systems and compromise sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T17:06:05.668763Z"}, {"uuid": "709102a1-6263-432a-944f-c1388e1b01b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60446", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrftpac2nn2y", "content": "CVE-2026-60446\nThe Oracle WebCenter Enterprise Capture software has a security flaw that allows an attacker to take control of the system without needing a password. This affects versions 12.2.1.4.0 and 14.1.2.0.0. To protect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T17:08:04.582879Z"}, {"uuid": "e0548f27-7a66-47b7-a56e-4d233d927959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60447", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrftpbmymv2u", "content": "CVE-2026-60447\nThe Oracle WebCenter Enterprise Capture product has a security flaw in its Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0. If not addressed, this could allow an attacker to take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T17:08:05.740014Z"}, {"uuid": "ab3b5c4b-edee-40bd-8d0a-d598e0f9042f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60999", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrftssylri24", "content": "CVE-2026-60999\nIf an attacker can access your Oracle Data Integrator system over the internet, they may be able to take control of it. This is a serious risk because it could allow them to access sensitive information,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T17:10:04.781002Z"}, {"uuid": "ba96bfd4-4ad9-48ce-89e6-608b788c748a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-27T01:00:32.597316Z"}, {"uuid": "1bee61ef-1472-4a2c-a8b6-bea7cffdbcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfx6425fv2s", "content": "CVE-2026-60333 - oracle access manager\nThe Oracle Access Manager in Oracle Fusion Middleware has a security weakness that allows a low-privileged attacker to take control of the system. This could impact\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:10:04.731578Z"}, {"uuid": "997f736a-896a-4b6d-9260-6224dc287b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfx65f4ic2a", "content": "CVE-2026-60362 - oracle unified directory\nOracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0 are vulnerable to takeover by an attacker who can access the directory via the LDAP network protocol\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:10:06.048456Z"}, {"uuid": "8f5187fd-bb8d-4ac7-988c-27b72ae8850a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxbolxvu2e", "content": "CVE-2026-60363 - oracle http server\nAn attacker can take control of Oracle HTTP Server by sending malicious HTTP requests. This affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle HTTP Server. To protect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:12:04.737478Z"}, {"uuid": "cfe91733-3e42-4b8a-9b96-8dbd0e459e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60364", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxfbqakz2z", "content": "CVE-2026-60364 - oracle http server\nAn attacker can access sensitive data in Oracle Weblogic Server Proxy Plug-in without needing a password. This is a serious issue because it allows unauthorized changes\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:14:05.324567Z"}, {"uuid": "0f5832e6-09c5-4ca1-9b16-67eb3e2f2ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60374", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxfcvfgh2j", "content": "CVE-2026-60374 - service delivery platform\nThe Oracle Fusion Middleware Messaging Enabler, used for sending messages between systems, has a security flaw that could allow an attacker with network access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:14:06.659949Z"}, {"uuid": "5936f55a-3840-4603-9df6-e17242fdca7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60375", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxit4vlo23", "content": "CVE-2026-60375 - service delivery platform\nCertain versions of Oracle Fusion Middleware's Messaging Enabler are vulnerable to a serious security risk. An attacker with network access can potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:16:04.444673Z"}, {"uuid": "84d0019f-cfce-4543-a839-9931aac9f00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60376", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxiujamm2q", "content": "CVE-2026-60376 - service delivery platform\nA vulnerability in Oracle Fusion Middleware's Messaging Enabler allows an attacker with network access to take control of the Service Delivery Platform. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:16:05.650681Z"}, {"uuid": "fe26de21-987c-43a0-a37c-d3a3cb14f36d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60377", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxmfu6ug2u", "content": "CVE-2026-60377 - service delivery platform\nA security weakness in Oracle Fusion Middleware's Messaging Enabler allows attackers with network access to create, delete, or modify sensitive data, or gain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:18:04.525550Z"}, {"uuid": "e2a442c0-877b-4cf6-ad0a-66d21279804f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxmgzecl2y", "content": "CVE-2026-60378 - service delivery platform\nThe Messaging Enabler component of Oracle Fusion Middleware has a security flaw that allows an attacker to take control of the system without needing a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:18:05.640503Z"}, {"uuid": "fafabe3c-f348-4194-8a6c-f90ad03f98ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60384", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxpybzca2r", "content": "CVE-2026-60384 - service delivery platform\nOracle Fusion Middleware's Messaging Enabler in versions 12.2.1.4.0 and 14.1.2.0.0 has a security flaw that can allow an unauthorized attacker to take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:20:04.674137Z"}, {"uuid": "f5b861f3-2b06-4db9-9a19-ef6fcba08855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxpzidux2j", "content": "CVE-2026-60385 - service delivery platform\nThe Oracle Fusion Middleware Messaging Enabler is vulnerable to a serious issue that allows an attacker to take control of the system without a password. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:20:05.728767Z"}, {"uuid": "d74a7ef9-11c5-42e1-89ec-691ea588dc1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60386", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxtkonfo2e", "content": "CVE-2026-60386 - service delivery platform\nOracle's Messaging Enabler in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 have a security weakness that allows an attacker to gain control of the system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:22:04.731641Z"}, {"uuid": "4766e6a0-1ad1-49ce-8d39-546a2f3131ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60387", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxtmacft2s", "content": "CVE-2026-60387 - service delivery platform\nOracle Fusion Middleware's Messaging Enabler is vulnerable to a serious security threat. An attacker with network access can potentially take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:22:09.416673Z"}, {"uuid": "0a67f4b5-15bb-4625-8825-abe4b2f932ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60388", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxx65yjz2z", "content": "CVE-2026-60388 - service delivery platform\nThe Messaging Enabler component of Oracle Fusion Middleware has a security flaw that could allow an attacker to take control of the system without a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:24:05.626878Z"}, {"uuid": "d76e0ca9-001b-4619-831f-a26c36223c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfxx7cdm42s", "content": "CVE-2026-60880 - oracle work in process\nOracle E-Business Suite's Work in Process feature is at risk of being taken over by an attacker with internet access. This could happen if someone with malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T18:24:06.699138Z"}, {"uuid": "cf0339a6-184a-4c22-8060-3f2478e71143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfy2pkj7b2r", "content": "CVE-2026-60402\nA security flaw in Oracle TimesTen In-Memory Database's Kubernetes Operator allows an attacker with network access to potentially take control of the database. This affects version 26.1.1.1.0 and could have\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T18:26:04.674585Z"}, {"uuid": "1c37d92a-a598-4355-9e47-5996a7050717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfy2qxk652q", "content": "CVE-2026-60429\nA security weakness in Oracle Unified Directory makes it possible for an unauthorized user with access to the directory via the LDAP network protocol to gain control of the system. This could allow them to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T18:26:06.046192Z"}, {"uuid": "5e101a14-be7b-4647-b9a8-a7b7035e9de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60355", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2my3mre2v", "content": "CVE-2026-60355 - oracle access manager\nOracle Access Manager, a part of Oracle Fusion Middleware, has a security weakness in its authentication system. This weakness allows an attacker with internet access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:12:04.956987Z"}, {"uuid": "db6cd6ce-b903-4d77-a19e-1d1c36a114b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60358", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2mzbp3h2u", "content": "CVE-2026-60358 - oracle access manager\nThe Oracle Access Manager software has a security weakness that allows hackers to access the system without a password. This could lead to the entire system being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:12:06.209542Z"}, {"uuid": "866b2dde-f1e8-4bdd-9bba-c1f5a02e6b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60360", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2qkihkr2r", "content": "CVE-2026-60360 - oracle unified directory\nOracle Unified Directory, a directory service for Oracle Fusion Middleware, has a vulnerability that allows an attacker without a login to take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:14:04.966332Z"}, {"uuid": "a3406b2b-24df-4d97-932b-4107745a6539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60361", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2qm2waf23", "content": "CVE-2026-60361 - oracle unified directory\nOracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0 are at risk. An attacker with network access can potentially take control of the directory. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:14:06.464321Z"}, {"uuid": "bf48cef0-b896-4dc6-90de-50bde463e37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60365", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2u4iz6g2a", "content": "CVE-2026-60365 - oracle http server\nA critical vulnerability in Oracle WebLogic Server Proxy Plug-in allows an attacker to access sensitive data without authentication. This affects version 15.1.1.0.0 and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:16:04.645501Z"}, {"uuid": "06022cde-7f52-48a3-b19d-0812caa1e25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60389", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2u5oyow24", "content": "CVE-2026-60389 - service delivery platform\nThe Messaging Enabler component of Oracle Fusion Middleware's Service Delivery Platform has a security flaw that can be exploited by anyone with access to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:16:05.736750Z"}, {"uuid": "99345817-d154-4304-a058-70faede7070b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60463", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2xoyhzy2v", "content": "CVE-2026-60463 - webcenter content: imaging\nThe WebCenter Content Imaging product in Oracle Fusion Middleware has a security flaw that allows an attacker to take control of the system without a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:18:04.669439Z"}, {"uuid": "48e67373-87db-4424-a123-9f01be349083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60524", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg2xqcp3322", "content": "CVE-2026-60524 - oracle webcenter enterprise capture\nOracle WebCenter Enterprise Capture's client bundle in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a serious security issue. This could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:18:06.658839Z"}, {"uuid": "02b72bee-5d7b-448d-b57f-d1758ac710dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg33be4wd2s", "content": "CVE-2026-60531 - oracle identity manager connector\nA security weakness in Oracle Identity Manager Connector, part of Oracle Fusion Middleware, allows an attacker with some privileges and internet access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:20:04.692135Z"}, {"uuid": "33c40995-82d9-4fc2-9c30-20288d5384bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60532", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg33cjpoy2u", "content": "CVE-2026-60532 - oracle identity manager connector\nAn attacker without permission can take control of the Oracle Identity Manager Connector in PeopleSoft Applications, which is part of Oracle Fusion\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:20:05.743991Z"}, {"uuid": "0a894c2d-cf2e-4b36-99dd-caf70845158b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60711", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg36tpnvq2v", "content": "CVE-2026-60711 - siebel crm cloud applications\nThe Oracle Siebel CRM Cloud Manager has a security weakness that allows a hacker with some privileges and access to the internet to take control of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T19:22:04.530454Z"}, {"uuid": "421a38fb-aa0f-4c84-87c9-f4150c8e539c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60561", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg36v5yad2j", "content": "CVE-2026-60561 - webcenter_portal\nOracle WebCenter Portal, a software used for creating and managing websites, has a security issue that allows an attacker with basic access to the internet to take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webcenterportal #oracle #CVE #infosec", "creation_timestamp": "2026-07-24T19:22:06.228117Z"}, {"uuid": "3db7cedd-e894-4020-83e8-665a0931b93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60562", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3cgcot72i", "content": "CVE-2026-60562 - webcenter_portal\nOracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 are at risk of unauthorized takeover by hackers with network access. This means that an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webcenterportal #oracle #CVE #infosec", "creation_timestamp": "2026-07-24T19:24:04.569062Z"}, {"uuid": "ca457811-6704-428e-9b9c-8496251e725b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60564", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3chionh2i", "content": "CVE-2026-60564 - webcenter_portal\nAn attacker can access sensitive data on Oracle WebCenter Portal if they have network access via HTTP. This could allow them to create, delete, or modify critical\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webcenterportal #oracle #CVE #infosec", "creation_timestamp": "2026-07-24T19:24:05.542469Z"}, {"uuid": "76c96aab-bf72-4d18-833e-9ce056993187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60565", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3fysvti2e", "content": "CVE-2026-60565 - webcenter_portal\nOracle WebCenter Portal, used in Oracle Fusion Middleware, has a security issue that allows an attacker to gain unauthorized access. This could lead to the complete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webcenterportal #oracle #CVE #infosec", "creation_timestamp": "2026-07-24T19:26:04.517648Z"}, {"uuid": "999de522-a2b5-4e61-bd66-2b23b52b34fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60566", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3g25cft22", "content": "CVE-2026-60566 - webcenter_portal\nThe Oracle WebCenter Portal, a tool for creating and managing websites, has a security flaw that allows hackers to take control of the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webcenterportal #oracle #CVE #infosec", "creation_timestamp": "2026-07-24T19:26:06.020349Z"}, {"uuid": "339b688e-ab04-4b94-b029-696557be941a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60568", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jlbbci2z", "content": "CVE-2026-60568 - webcenter_portal\nOracle WebCenter Portal, a component of Oracle Fusion Middleware, is at risk of takeover by an attacker with network access via HTTP. This could happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webcenterportal #oracle #CVE #infosec", "creation_timestamp": "2026-07-24T19:28:04.641960Z"}, {"uuid": "84981854-df62-431e-a470-1a156ffa12cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg67g4j462r", "content": "CVE-2026-60663 - oracle webcenter content\nThe Oracle WebCenter Content product, part of Oracle Fusion Middleware, has a security issue that allows a low-privileged attacker with access to the system via the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T20:16:05.015031Z"}, {"uuid": "932743da-2f81-4133-a172-180f886cfcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60719", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg67hebam2k", "content": "CVE-2026-60719 - oracle bi publisher\nOracle BI Publisher's Web Service API in certain versions has a security weakness that lets an attacker with network access compromise the system. This could allow them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-24T20:16:06.429417Z"}, {"uuid": "86e712c4-1764-438b-8bcb-22b7003eb78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60535", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg6cyfiqz2y", "content": "CVE-2026-60535\nAn attacker can take control of the Oracle Identity Manager Connector used with PeopleSoft Applications, potentially disrupting business operations or exposing sensitive information. Affected versions include\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T20:18:05.098306Z"}, {"uuid": "31fa0e3a-74f3-4370-ab5f-2bf29262a67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60537", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg6czpvo42a", "content": "CVE-2026-60537\nThe Oracle Managed File Transfer product in Oracle Fusion Middleware has a security weakness that could allow an attacker to take control of the system. This is a serious issue because it could impact not just\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T20:18:05.936667Z"}, {"uuid": "6148f5bc-4791-4b3c-80eb-6340cbc71a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60538", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gktmaz2y", "content": "CVE-2026-60538\nAn attacker can take control of Oracle SOA Suite by sending a malicious request over the internet. This affects Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0. It's essential to update these versions to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T20:20:04.723905Z"}, {"uuid": "ce81eee3-3ceb-406b-a55c-20740ac42518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://t.me/GithubRedTeam/95022", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60206-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 21:44:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc7e CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework \u26a1Bash & Python versions. Features: --detect safe check, --exploit combo/unsigned/xsw/nameid/all, --shodan integration, --tor support, mass scanning, JSON/CSV/JSONL output, cookie validation. \ud83d\udee1\ufe0f CVSS 9.9 Critical - Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:08.920117Z"}, {"uuid": "9fa81997-16c7-41f0-9c20-d69a1a8813f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/M-3cLQvPgI-q_MEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw", "content": "", "creation_timestamp": "2026-07-25T00:00:09.758440Z"}, {"uuid": "58bb1905-a7b6-47cd-82b5-650e7f52311d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "Telegram/CAgNXP7QCJ0ImmaZujxERj5g-FS7jqScPpLDOt1x7u-ghTY", "content": "", "creation_timestamp": "2026-07-25T00:00:10.598229Z"}, {"uuid": "3c39f42e-3a1b-494e-b60f-b89c2668cb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/94951", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-63030\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 10:50:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:10.737719Z"}, {"uuid": "73d5b495-7697-4565-8ecc-319862f62a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60134", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrgkqnv2yo2q", "content": "\ud83d\udfe0 CVE-2026-60134 - High (8.8)\n\nWeintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60134/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-25T00:00:28.880720Z"}, {"uuid": "28195423-5273-4be2-a7f3-eb6ee76b1417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtzooxgxa52o", "content": "Gitea\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-60004\uff09 \n\nCritical Gitea vulnerability now exploited in the wild (CVE-2026-60004)  #HelpNetSecurity (Aug 26)\n\nwww.helpnetsecurity.com/2026/08/26/g...", "creation_timestamp": "2026-08-27T01:22:05.868627Z"}, {"uuid": "b5402ac5-7393-476f-807c-f9f97b79fd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94894", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-60206\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 02:46:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\ncve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T01:00:05.142111Z"}, {"uuid": "f7bb1d29-62cd-4123-8956-3faf76925e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60217", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrgrt44o2a2l", "content": "\ud83d\udccc CVE-2026-60217 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60217", "creation_timestamp": "2026-07-25T02:07:06.710831Z"}, {"uuid": "1a2b729b-1163-4077-b9d3-e2e5b9800bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60369", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrgtiqttvp23", "content": "\ud83d\udccc CVE-2026-60369 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60369", "creation_timestamp": "2026-07-25T02:37:06.903824Z"}, {"uuid": "2d0a0deb-d810-4533-960a-defdfeeddb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60457", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrh3uxjf5323", "content": "\ud83d\udccc CVE-2026-60457 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60457", "creation_timestamp": "2026-07-25T05:07:06.237097Z"}, {"uuid": "bc79b49d-5f3e-4e0c-b2e7-2521a1e3a571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60568", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrgwu244bo2y", "content": "\ud83d\udccc CVE-2026-60568 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60568", "creation_timestamp": "2026-07-25T03:37:06.849963Z"}, {"uuid": "07a35b83-6a5a-4593-8bd7-d1b5afeaafa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "Telegram/MD-MwBd_W8uwTqsEvI7HPalRa1bGoxdlVd6D-EmkL4FhnPg", "content": "", "creation_timestamp": "2026-07-25T04:00:03.861608Z"}, {"uuid": "c5316729-f7d6-4845-9753-740e16ac45a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60562", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrgyjos7r222", "content": "\ud83d\udccc CVE-2026-60562 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60562", "creation_timestamp": "2026-07-25T04:07:07.202606Z"}, {"uuid": "5a1c8c52-9b56-4225-bcfc-d1fd27fc9e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60565", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrh27eqglk2c", "content": "\ud83d\udccc CVE-2026-60565 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60565", "creation_timestamp": "2026-07-25T04:37:08.800187Z"}, {"uuid": "7d5bdcda-badc-411e-9b88-424adea5e57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrh2tlntcc24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 75 interactions\nCVE-2026-60137: 57 interactions\nCVE-2026-50522: 42 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 6 interactions\nCVE-2026-56164: 6 interactions\nCVE-2026-58644: 6 interactions\n", "creation_timestamp": "2026-07-25T04:48:26.678960Z"}, {"uuid": "c2ed8787-8b5a-4ed9-8dd7-a7f99b4646d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60459", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrh5klzdls2y", "content": "\ud83d\udccc CVE-2026-60459 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60459", "creation_timestamp": "2026-07-25T05:37:06.459749Z"}, {"uuid": "3ef57981-aeae-4d0b-8481-2194afd7ed90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60461", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrh7ab7mub2s", "content": "\ud83d\udccc CVE-2026-60461 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60461", "creation_timestamp": "2026-07-25T06:07:07.276189Z"}, {"uuid": "fbf37880-2656-4680-a567-3658ef60dc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60447", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhavvyuzv2v", "content": "\ud83d\udccc CVE-2026-60447 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60447", "creation_timestamp": "2026-07-25T06:37:06.966594Z"}, {"uuid": "4da2510c-e190-4bcd-9e92-597f3650e7ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60456", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhclknvbt22", "content": "\ud83d\udccc CVE-2026-60456 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60456", "creation_timestamp": "2026-07-25T07:07:07.088769Z"}, {"uuid": "87e76697-b5e9-4b1d-b36f-8dfa0dd34ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60445", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrheb763dp26", "content": "\ud83d\udccc CVE-2026-60445 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60445", "creation_timestamp": "2026-07-25T07:37:07.779151Z"}, {"uuid": "4b6770d2-607e-46ea-9817-f7a52d3a07ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60372", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhfwtnp262u", "content": "\ud83d\udccc CVE-2026-60372 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60372", "creation_timestamp": "2026-07-25T08:07:06.770627Z"}, {"uuid": "28d308af-af05-4d7e-b6d0-8ef8862e4a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60367", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhhmhs3bc2c", "content": "\ud83d\udccc CVE-2026-60367 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60367", "creation_timestamp": "2026-07-25T08:37:06.964252Z"}, {"uuid": "f847a005-f198-4ea0-a6f5-463b1d6d1c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17649", "content": "\ud83d\udea8 CVE-2026-60206 \u2014 Oracle WebLogic SAML Authentication Bypass (Research PoC)\nA research repository demonstrating CVE-2026-60206, a critical SAML authentication bypass vulnerability affecting Oracle WebLogic Server. The project is intended for security research, vulnerability validation, and authorized security testing only.\n\n\ud83d\udccc GitHub\n\ud83d\udc49 https://github.com/imbas007/POC-CVE-2026-60206\n\n\u2728 Features\n\u2022 Detect affected Oracle WebLogic Server versions and exposed SAML endpoints.\n\u2022 Supports non-invasive vulnerability detection mode for validation.\n\u2022 Single-target and bulk target assessment workflows.\n\u2022 JSON report export for assessment results.\n\u2022 Multiple SAML validation and research modes for analyzing authentication handling.\n\u2022 Configurable proxy support for authorized testing environments.\n\u2022 Multi-threaded scanning support for large authorized environments.\n\u2022 Verbose logging for troubleshooting and research.\n\u2022 HTTPS/TLS verification controls for lab environments.\n\u2022 Python-based implementation for easy deployment and customization.\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 Oracle WebLogic Server\n\u2022 SAML\n\u2022 XML\n\u2022 HTTPS\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Red Team Operators\n\u2022 Blue Team Validation\n\u2022 Incident Response Teams\n\u2022 Enterprise Security Administrators\n\n\u26a0\ufe0f Note: This repository is intended for vulnerability research and validation in environments where you have explicit authorization. Organizations using affected Oracle WebLogic Server versions should apply Oracle's security updates and verify their deployments against the latest vendor guidance as soon as possible.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T04:00:05.448749Z"}, {"uuid": "2fd2baf7-4eb1-4fe5-84d6-bb5c9bbe6d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqxlbii3d2y", "content": "\ud83d\udccc CVE-2026-60699 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60699", "creation_timestamp": "2026-08-23T14:07:06.994080Z"}, {"uuid": "ef9bdb62-4ff1-49c5-8a6e-5245bfb0a022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60566", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhpypfbp523", "content": "\ud83d\udccc CVE-2026-60566 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60566", "creation_timestamp": "2026-07-25T11:07:07.246829Z"}, {"uuid": "ff528222-7498-4b64-bd92-dc7f4228eb89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60460", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhrodwi3222", "content": "\ud83d\udccc CVE-2026-60460 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60460", "creation_timestamp": "2026-07-25T11:37:07.644504Z"}, {"uuid": "047ca960-086a-40b7-a344-6a0a25e9da1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60446", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhtdxy2i62y", "content": "\ud83d\udccc CVE-2026-60446 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60446", "creation_timestamp": "2026-07-25T12:07:06.825402Z"}, {"uuid": "06414775-db22-439b-8328-c18641e2940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60435", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrhuzmnrdf2s", "content": "\ud83d\udccc CVE-2026-60435 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60435", "creation_timestamp": "2026-07-25T12:37:06.420741Z"}, {"uuid": "4cc4250f-45d1-4835-877c-0403e846e360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60299", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mri22kswyt2c", "content": "\ud83d\udccc CVE-2026-60299 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60299", "creation_timestamp": "2026-07-25T14:07:06.553364Z"}, {"uuid": "bb62d341-3f63-4b17-a83c-1a8078bf0c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60300", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mri3q6xnxl2u", "content": "\ud83d\udccc CVE-2026-60300 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60300", "creation_timestamp": "2026-07-25T14:37:06.306711Z"}, {"uuid": "8e5bcb0e-8de4-4885-a316-9f7837ced996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/ZerodayAlert/771", "content": "wp2shell. \u041e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u044f\u0434\u0440\u0435 WordPress \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432\n\n\u0412 \u044f\u0434\u0440\u0435 WordPress \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0434\u043d\u0438\u043c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c. \u041d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u043d\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u044b. \u0426\u0435\u043f\u043e\u0447\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 wp2shell, \u043e\u043d\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE-2026-60137 \u0438 CVE-2026-63030. \u041f\u043e\u043b\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 WordPress 6.9.0\u20136.9.4 \u0438 7.0.0\u20137.0.1. \u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.8.6, 6.9.5 \u0438 7.0.2.\n\n\u041a\u0440\u0430\u0441\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u043e\u0439. \u041f\u0435\u0440\u0432\u0430\u044f - SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0441\u0435 WP_Query \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 author__not_in. \u0412\u0442\u043e\u0440\u0430\u044f - \u0441\u0431\u043e\u0439 \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 REST API /wp-json/batch/v1, \u0433\u0434\u0435 \u0447\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e\u0434\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0434\u0440\u0443\u0433\u043e\u0433\u043e. \u0422\u0430\u043a \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0435\u0437\u0436\u0430\u0435\u0442 \u0434\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u0438 \u0434\u0432\u0435 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0442\u0447\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0430 Cloudflare \u0441 17 \u0438\u044e\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0434\u043b\u044f \u043e\u0431\u0435\u0438\u0445 CVE. \u041d\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 \u0432\u0440\u0443\u0447\u043d\u0443\u044e: \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u041f\u0430\u0442\u0447 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u043e \u0440\u0430\u0437\u043d\u0438\u0446\u0435 \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n#WordPress #wp2shell #RCE #CVE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.480196Z"}, {"uuid": "f4c0cb76-cfd3-4549-b237-3df823ba3e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60246", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mriuuufd2l22", "content": "\ud83d\udccc CVE-2026-60246 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60246", "creation_timestamp": "2026-07-25T22:07:07.218900Z"}, {"uuid": "521ccd39-3408-438d-b8b0-abade2b52ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "Telegram/MD-MwBd_W8uwTqsEvI7HPalRa1bGoxdlVd6D-EmkL4FhnPg", "content": "", "creation_timestamp": "2026-07-26T00:00:46.783165Z"}, {"uuid": "d708ad6b-80a8-4a99-8215-925cb35eba86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60247", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mriwkjk3gz2y", "content": "\ud83d\udccc CVE-2026-60247 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and ... https://www.cyberhub.blog/cves/CVE-2026-60247", "creation_timestamp": "2026-07-25T22:37:06.953122Z"}, {"uuid": "0379a87f-c70f-4655-b59c-0bf0bc1be926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "content": "", "creation_timestamp": "2026-07-25T23:00:03.252565Z"}, {"uuid": "2494a190-a32d-4086-9c8c-7e5d698b9af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60250", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mriya6d4rf22", "content": "\ud83d\udccc CVE-2026-60250 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60250", "creation_timestamp": "2026-07-25T23:07:07.262547Z"}, {"uuid": "68cf41cc-fc36-4db1-abfa-4e5bb6112ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "Telegram/nPdorxgilRpeUK74owvb_SQJPx7ceIG4883buRWavnmG2X8", "content": "", "creation_timestamp": "2026-07-25T20:00:03.438983Z"}, {"uuid": "fc8df8f1-f993-4546-83e8-250ab1aceb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrio6ccfdx23", "content": "\ud83d\udccc CVE-2026-60256 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60256", "creation_timestamp": "2026-07-25T20:07:06.871060Z"}, {"uuid": "04bc7b5c-f7f3-405a-8ef0-7580a3457e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60253", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mriptwxt5j26", "content": "\ud83d\udccc CVE-2026-60253 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60253", "creation_timestamp": "2026-07-25T20:37:07.083010Z"}, {"uuid": "a0fe9091-2219-4562-a4f2-f92669d73a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60242", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrirjlnzpa2l", "content": "\ud83d\udccc CVE-2026-60242 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and ... https://www.cyberhub.blog/cves/CVE-2026-60242", "creation_timestamp": "2026-07-25T21:07:06.823937Z"}, {"uuid": "c93ffef0-e195-417c-a763-a5e698285a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60286", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mri5ftrcqe26", "content": "\ud83d\udccc CVE-2026-60286 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60286", "creation_timestamp": "2026-07-25T15:07:06.751238Z"}, {"uuid": "075f630b-4b82-48eb-8dc4-6ad6028fa6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60287", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mri73j4z2n2v", "content": "\ud83d\udccc CVE-2026-60287 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60287", "creation_timestamp": "2026-07-25T15:37:07.607510Z"}, {"uuid": "f0036b1d-4e49-4990-9b20-530115f8d563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mri73xj6oi2v", "content": "\u26a0\ufe0f PATCH NOW\n\nA public exploit is out for a critical Oracle WebLogic flaw (CVE-2026-60206) that forges a login to take over the server.\n\nRated CVSS 9.9, it hits WebLogic 12.2, 14.1 and 15.1.\n\nApply Oracle's July 2026 patch now, then hunt for forged admin logins.", "creation_timestamp": "2026-07-25T15:37:22.463876Z"}, {"uuid": "0baeed08-6efa-4d7d-bec5-d46702a90e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60288", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mriar5amos2c", "content": "\ud83d\udccc CVE-2026-60288 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60288", "creation_timestamp": "2026-07-25T16:07:06.972431Z"}, {"uuid": "ac5e7374-4094-4834-aabd-6948922a496c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mricgrudz326", "content": "\ud83d\udccc CVE-2026-60289 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60289", "creation_timestamp": "2026-07-25T16:37:06.704615Z"}, {"uuid": "6fb38450-ff66-4e9d-a02c-f76f14d53f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95134", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60206\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Debajyoti0-0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 15:32:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T17:00:04.138896Z"}, {"uuid": "36354f3e-a265-4aa8-a525-32b9c4939169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60289", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mridr3aory2c", "content": "\ud83d\udccc CVE-2026-60289 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.potatohub.blog/cves/CVE-2026-60289", "creation_timestamp": "2026-07-25T17:00:45.812310Z"}, {"uuid": "6aa86ad3-a909-4bbc-aaab-8bbcfcf88273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60278", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrie4gpopi2u", "content": "\ud83d\udccc CVE-2026-60278 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and ... https://www.cyberhub.blog/cves/CVE-2026-60278", "creation_timestamp": "2026-07-25T17:07:06.742009Z"}, {"uuid": "fa9fa9f3-27d3-4982-9899-95b8afcad7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60244", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrit7a6bvx2y", "content": "\ud83d\udccc CVE-2026-60244 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and ... https://www.cyberhub.blog/cves/CVE-2026-60244", "creation_timestamp": "2026-07-25T21:37:06.920868Z"}, {"uuid": "13d8c93d-4a7b-437f-a0cc-b64d1caa8501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60280", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrifs2vymz2v", "content": "\ud83d\udccc CVE-2026-60280 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60280", "creation_timestamp": "2026-07-25T17:37:06.553473Z"}, {"uuid": "34d68685-f73d-4591-a1e3-70d39a205fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60285", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrihhpwi7w2y", "content": "\ud83d\udccc CVE-2026-60285 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60285", "creation_timestamp": "2026-07-25T18:07:06.699557Z"}, {"uuid": "97b4ecad-4dfa-4e79-bb77-38d07eae4b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60251", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrij5dvt6522", "content": "\ud83d\udccc CVE-2026-60251 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60251", "creation_timestamp": "2026-07-25T18:37:06.438936Z"}, {"uuid": "25bf4c2d-2059-44d3-ae34-03c25fba56f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60254", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mriminheir2s", "content": "\ud83d\udccc CVE-2026-60254 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60254", "creation_timestamp": "2026-07-25T19:37:07.139085Z"}, {"uuid": "07379d1b-4c7a-442b-b24b-d0d95624eee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "Telegram/nPdorxgilRpeUK74owvb_SQJPx7ceIG4883buRWavnmG2X8", "content": "", "creation_timestamp": "2026-07-26T00:00:32.479624Z"}, {"uuid": "d765952d-7f7e-457b-b19e-d65bcb25784c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "content": "", "creation_timestamp": "2026-07-26T00:00:14.251630Z"}, {"uuid": "d122e766-723e-44fb-b124-a8974de6d4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtzv2sz7dc2o", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a critical RCE vulnerability in Gitea (CVE-2026-60004, CVSS 9.8). This flaw allows attackers with repository write access to execute arbitrary commands. It affects all versions prior to 1.27.1.", "creation_timestamp": "2026-08-27T03:16:06.627354Z"}, {"uuid": "c4200b2c-c549-4338-87f6-b6efa07d581f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60563", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrm355qcen2m", "content": "\ud83d\udccc CVE-2026-60563 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60563", "creation_timestamp": "2026-07-27T04:37:07.024006Z"}, {"uuid": "44faff2f-37a2-42c3-b57b-157e575310cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95134", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60206\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Debajyoti0-0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 15:32:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-26T00:00:38.360303Z"}, {"uuid": "58fd0f03-c804-42ae-bc2d-c6d43d44f24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/771", "content": "wp2shell. \u041e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u044f\u0434\u0440\u0435 WordPress \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432\n\n\u0412 \u044f\u0434\u0440\u0435 WordPress \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0434\u043d\u0438\u043c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c. \u041d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u043d\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u044b. \u0426\u0435\u043f\u043e\u0447\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 wp2shell, \u043e\u043d\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE-2026-60137 \u0438 CVE-2026-63030. \u041f\u043e\u043b\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 WordPress 6.9.0\u20136.9.4 \u0438 7.0.0\u20137.0.1. \u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.8.6, 6.9.5 \u0438 7.0.2.\n\n\u041a\u0440\u0430\u0441\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u043e\u0439. \u041f\u0435\u0440\u0432\u0430\u044f - SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0441\u0435 WP_Query \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 author__not_in. \u0412\u0442\u043e\u0440\u0430\u044f - \u0441\u0431\u043e\u0439 \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 REST API /wp-json/batch/v1, \u0433\u0434\u0435 \u0447\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e\u0434\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0434\u0440\u0443\u0433\u043e\u0433\u043e. \u0422\u0430\u043a \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0435\u0437\u0436\u0430\u0435\u0442 \u0434\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u0438 \u0434\u0432\u0435 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0442\u0447\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0430 Cloudflare \u0441 17 \u0438\u044e\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0434\u043b\u044f \u043e\u0431\u0435\u0438\u0445 CVE. \u041d\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 \u0432\u0440\u0443\u0447\u043d\u0443\u044e: \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u041f\u0430\u0442\u0447 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u043e \u0440\u0430\u0437\u043d\u0438\u0446\u0435 \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n#WordPress #wp2shell #RCE #CVE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:39.533529Z"}, {"uuid": "ba1bc07e-afdf-42d8-980f-fc46e000acff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95022", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60206-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 21:44:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc7e CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework \u26a1Bash & Python versions. Features: --detect safe check, --exploit combo/unsigned/xsw/nameid/all, --shodan integration, --tor support, mass scanning, JSON/CSV/JSONL output, cookie validation. \ud83d\udee1\ufe0f CVSS 9.9 Critical - Use Ethically, Stay Legal. \ud83d\udd12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-26T00:00:47.824021Z"}, {"uuid": "863d67e1-eb28-48ba-8c16-7439d6429f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60240", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrj3lhgfqt26", "content": "\ud83d\udccc CVE-2026-60240 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60240", "creation_timestamp": "2026-07-26T00:07:07.130076Z"}, {"uuid": "f009ced5-1714-42ec-b4f9-a2d3f1dd4d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60241", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrj5b3rd7u2v", "content": "\ud83d\udccc CVE-2026-60241 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60241", "creation_timestamp": "2026-07-26T00:37:06.928064Z"}, {"uuid": "c87a3499-87bd-4c7d-a39c-6f6991eba6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60224", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrj6wq46ca2u", "content": "\ud83d\udccc CVE-2026-60224 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60224", "creation_timestamp": "2026-07-26T01:07:06.457213Z"}, {"uuid": "a16ecc7e-4dea-4f6b-9bbb-1e49e948cc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60225", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjamehm3p22", "content": "\ud83d\udccc CVE-2026-60225 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60225", "creation_timestamp": "2026-07-26T01:37:06.338625Z"}, {"uuid": "922447b9-85a3-4416-8d97-78cf48d7cffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/cyberwarehouse/1170", "content": "wp2shell \u2014 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u043e\u0442 \u0438 \u0434\u043e.\n\n\u042d\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432:\n\n\ud83d\udccd CVE-2026-63030 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e REST API. CWE-436.\n\n\ud83d\udccd CVE-2026-60137 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430 (SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f). CWE-89.\nwp2shell \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u0432 \u0421MS Wordpress. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: 6.8.0\u20136.8.5; 6.9.0\u20136.9.4; 7.0.0\u2013 7.0.1.\n\n\ud83e\udee1 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 serve_batch_request_v1, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /wp-json/batch/v1.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0434\u0432\u0430 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432: $requests[] (\u0441\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b) \u0438 $matches[] (\u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438). \n\n\u0415\u0441\u043b\u0438 \u043f\u0443\u0442\u044c \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, http://), \u0444\u0443\u043d\u043a\u0446\u0438\u044f wp_parse_url() \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 false. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432 \u043c\u0430\u0441\u0441\u0438\u0432 $validation[] \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430 (WP_Error), \u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u043c\u0430\u0441\u0441\u0438\u0432 $matches[] \u043d\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 (\u0447\u0435\u0440\u0435\u0437 continue).\n\n\u041d\u0438\u0436\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0447\u0430\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f wp-includes/rest-api/class-wp-rest-server.php \nforeach ( $batch_request['requests'] as $args ) {\n            $parsed_url = wp_parse_url( $args['path'] );\n            if ( false === $parsed_url ) {\n                $requests[] = new WP_Error( 'parse_path_failed', __( 'Could not parse the path.' ), array( 'status' => 400 ) ); // \u0437\u0430\u043f\u0438\u0441\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043b\u044f http:// \n\n                continue;\n            }\n\n            $single_request = new WP_REST_Request( $args['method'] ?? 'POST', $parsed_url['path'] );\n ....\n\n$matches    = array();\n$validation = array();\n$has_error  = false;\nforeach ( $requests as $single_request ) {\n    if ( is_wp_error( $single_request ) ) {\n        $has_error    = true;\n        $validation[] = $single_request;  \n        continue; // \u043f\u0440\u043e\u043f\u0443\u0441\u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 $matches[]\n    }\n\n\u0418\u0437-\u0437\u0430 continue \u043c\u0430\u0441\u0441\u0438\u0432\u044b $requests \u0438 $matches \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0434\u043d\u043e\u043c\u0443 \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0433\u043e.\n\n\u0421\u0434\u0432\u0438\u0433 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u2192 \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 continue \u2192 \u041c\u0430\u0441\u0441\u0438\u0432\u044b $requests \u0438 $matches \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u2192 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0447\u0443\u0436\u0438\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u2192 \u0412\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 batch \u2192 \u0417\u0430\u043f\u0440\u043e\u0441 /wp/v2/posts \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a batch \u2192 \u0412\u043d\u0443\u0442\u0440\u0438 \u0441\u043d\u043e\u0432\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u0434\u0432\u0438\u0433 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u2192 \u0417\u0430\u043f\u0440\u043e\u0441 \u043a /categories?author_exclude=SLEEP(2) \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a /posts (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442) -> SQLi.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQLi\nauthor_exclude \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0442\u0438\u043f\u0430 array \u0432 get_collection_params().\n\u0412 get_items() \u043e\u043d \u043c\u0430\u043f\u0438\u0442\u0441\u044f \u0432 author_not_in \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430.\n\u0418\u0437-\u0437\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u043e\u043a\u0430.\nWP_Query \u043d\u0435 \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441\u0442\u0440\u043e\u043a\u043e\u0432\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0421\u0442\u0440\u043e\u043a\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 SQL.\n\nif (is_array($query_vars['author__not_in'])) {\n    $query_vars['author__not_in'] = array_map('absint', ...);  // sanitize\n}\n$author__not_in = implode(',', (array) $query_vars['author__not_in']);\n$where .= \" AND post_author NOT IN ($author__not_in) \"\n\n\ud83e\udee1 \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438:\n\u0417\u0430\u043f\u0440\u043e\u0441:\n\u2013 POST /wordpress/batch/v1 + \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\u2013 POST /?rest_route=/batch/v1 + \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \n\u2013 GET /?_method=POST&rest_route=/batch/v1&validation=normal + \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \nSQLi - \"path\": \"/wp/v2/ author_exclude=\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\u00a0\u2014 \u043d\u0430 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0435.\n\n\ud83e\udee1 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f:\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2.\n2. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c WAF/IDS \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u043e\u0442 SQLi.\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 php-\u0444\u0430\u0439\u043b\u043e\u0432.\n4. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0433\u0434\u0435 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 \u0438\u043b\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b /batch/v1.\n5. \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a /batch/v1 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\n\ud83e\udee1 \u041b\u043e\u0432\u0438\u0442\u0435 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u0443\u044e \u2014 docker-compose.yml \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c wordpress \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d \u043a \u043f\u043e\u0441\u0442\u0443.\n\u0417\u0430\u043f\u0443\u0441\u043a docker-compose up.", "creation_timestamp": "2026-07-26T02:00:05.307332Z"}, {"uuid": "81b74182-545f-442b-86dd-85cab206c60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/cyberwarehouse/1166", "content": "\u0412 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0440\u0430\u0441\u0448\u0430\u0440\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 wp2shell, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e WordPress. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 WordPress 6.9.5 \u0438 7.0.2 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a wp2shell.\n\n\u0410\u0442\u0430\u043a\u0430 wp2shell \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - CVE-2026-63030 \u0438 CVE-2026-60137, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.x \u0438 7.0.x.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0410\u0434\u0430\u043c\u043e\u043c \u041a\u0443\u044d\u0441\u043e\u043c \u0438\u0437 Searchlight Cyber, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0443 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u0438 \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 WordPress \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Searchlight Cyber, \u0431\u043e\u043b\u0435\u0435 500 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 WordPress, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0439\u0447\u0430\u0441, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438, \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c WordPress \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2 \u0438\u043b\u0438 6.9.5.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0432 \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-63030, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0432 WordPress 6.9. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-60137 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 author__not_in\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 WP_Query. WordPress \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0451 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WordPress 6.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c WordPress, \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.0-6.9.4 \u0438 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 7.0.0-7.0.1.\n\nSQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.8.0\u20136.8.5, \u043d\u043e \u0435\u0451 \u043d\u0435\u043b\u044c\u0437\u044f \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 RCE, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043b\u0438\u0448\u044c \u0432 WordPress 6.9.\n\nSearchlight Cyber \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u0430 wp2shell.com, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, Searchlight Cyber \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a REST API \u0438\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c /wp-json/batch/v1 \u0438 ?rest_route=/batch/v1 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 WAF.\n\nCloudflare \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e WAF \u043d\u0430 \u0432\u0441\u0435\u0445 \u0442\u0430\u0440\u0438\u0444\u043d\u044b\u0445 \u043f\u043b\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cloudflare, \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 (CVE-2026-60137), \u0442\u0430\u043a \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API (CVE-2026-63030). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u0430 WAF \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u0442\u0447\u0435\u0439.", "creation_timestamp": "2026-07-26T02:00:05.435378Z"}, {"uuid": "58fd7e48-545e-4528-a35f-27de739ac6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60268", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrm4ssvmzg2y", "content": "\ud83d\udccc CVE-2026-60268 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60268", "creation_timestamp": "2026-07-27T05:07:07.036523Z"}, {"uuid": "112afabc-00e6-412a-bb94-75c35006b643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrm5yz6suo25", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 46 interactions\nCVE-2026-50522: 42 interactions\nCVE-2026-60137: 37 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-42945: 3 interactions\nCVE-2026-45755: 2 interactions\nCVE-2026-48021: 2 interactions\n", "creation_timestamp": "2026-07-27T05:28:28.690505Z"}, {"uuid": "f41f8ccc-a572-43c2-ba3b-1ac69f1ce267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60564", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrkdsw3vdq2y", "content": "\ud83d\udccc CVE-2026-60564 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60564", "creation_timestamp": "2026-07-26T12:07:07.137102Z"}, {"uuid": "1f9f1f13-ba5e-4e86-bcb6-300d7450be21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60239", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrkfikieai26", "content": "\ud83d\udccc CVE-2026-60239 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60239", "creation_timestamp": "2026-07-26T12:37:07.146522Z"}, {"uuid": "2dbb9c29-9c97-4b2a-b898-a4990194bcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60248", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrkh66y7rz22", "content": "\ud83d\udccc CVE-2026-60248 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60248", "creation_timestamp": "2026-07-26T13:07:06.903256Z"}, {"uuid": "5fe00aa6-7aae-4e24-a5b1-72cf7ba81ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60220", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrkittd2zk2s", "content": "\ud83d\udccc CVE-2026-60220 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60220", "creation_timestamp": "2026-07-26T13:37:06.402186Z"}, {"uuid": "99651ca6-6429-4d2b-953c-0368ffd2d2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "content": "", "creation_timestamp": "2026-07-26T22:00:03.828046Z"}, {"uuid": "b5602e04-ba99-49f5-a62e-b43679d3d71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60249", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrlip3it4y2m", "content": "\ud83d\udccc CVE-2026-60249 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60249", "creation_timestamp": "2026-07-26T23:07:07.050515Z"}, {"uuid": "4e0de459-e6bc-467d-9135-faad42adc7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 59 interactions\nCVE-2026-60137: 48 interactions\nCVE-2026-50522: 42 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-30623: 7 interactions\nCVE-2026-58662: 4 interactions\nCVE-2026-12569: 2 interactions\n", "creation_timestamp": "2026-07-26T05:02:37.945127Z"}, {"uuid": "9ffe51ed-030a-4e25-89af-5c32840c1ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60219", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjmdvhi6v2m", "content": "\ud83d\udccc CVE-2026-60219 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60219", "creation_timestamp": "2026-07-26T05:07:07.694339Z"}, {"uuid": "11bc6a0d-02a6-4675-942d-af1f967a2243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60221", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjnzjmmxh26", "content": "\ud83d\udccc CVE-2026-60221 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60221", "creation_timestamp": "2026-07-26T05:37:06.460283Z"}, {"uuid": "ba84e335-74c0-48bd-b4da-c0d5eada7c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60841", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtr7xig22y2x", "content": "\ud83d\udccc CVE-2026-60841 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60841", "creation_timestamp": "2026-08-23T16:37:06.897761Z"}, {"uuid": "2b44bb1c-099e-4ad2-8c38-45be550f15ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60209", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjpp6r3n322", "content": "\ud83d\udccc CVE-2026-60209 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60209", "creation_timestamp": "2026-07-26T06:07:07.464343Z"}, {"uuid": "f9b5ded7-33ef-410b-8444-f173890dc2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60210", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjretl7ff23", "content": "\ud83d\udccc CVE-2026-60210 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60210", "creation_timestamp": "2026-07-26T06:37:07.345903Z"}, {"uuid": "94404fb1-5893-4b24-bb5a-49f5e55345de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60849", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtrbn4xffo2y", "content": "\ud83d\udccc CVE-2026-60849 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60849", "creation_timestamp": "2026-08-23T17:07:06.671469Z"}, {"uuid": "eb57fbbf-6bfc-48ed-a4a1-c02bc5a7994e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60226", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjcbzaphi2c", "content": "\ud83d\udccc CVE-2026-60226 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60226", "creation_timestamp": "2026-07-26T02:07:07.016306Z"}, {"uuid": "fb9b31d0-86d2-46f5-8605-4f23b7f141d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60227", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjdxnxqck23", "content": "\ud83d\udccc CVE-2026-60227 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60227", "creation_timestamp": "2026-07-26T02:37:06.371681Z"}, {"uuid": "c7c45da6-a568-442e-ab77-edec1c895508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60228", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjfndd6h22l", "content": "\ud83d\udccc CVE-2026-60228 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60228", "creation_timestamp": "2026-07-26T03:07:07.324248Z"}, {"uuid": "3a5edf8b-a913-4200-9feb-853391e78911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60229", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjhcxff6w2m", "content": "\ud83d\udccc CVE-2026-60229 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60229", "creation_timestamp": "2026-07-26T03:37:07.201436Z"}, {"uuid": "d41b8083-e864-4405-9c9c-f17490e62b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60230", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjiymfeh22u", "content": "\ud83d\udccc CVE-2026-60230 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60230", "creation_timestamp": "2026-07-26T04:07:07.511165Z"}, {"uuid": "58bea9f3-159e-461c-8ddd-cc26f12e789e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60216", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjkoa7hku2u", "content": "\ud83d\udccc CVE-2026-60216 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60216", "creation_timestamp": "2026-07-26T04:37:06.384638Z"}, {"uuid": "0c690787-b87b-4846-ab71-3178bf15c9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60218", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrm6ihgfp72c", "content": "\ud83d\udccc CVE-2026-60218 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60218", "creation_timestamp": "2026-07-27T05:37:06.820402Z"}, {"uuid": "93e8aa88-167f-4708-ba42-a4e0b2ff44ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60295", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmpav663s2m", "content": "\ud83d\udccc CVE-2026-60295 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60295", "creation_timestamp": "2026-07-27T10:37:06.293345Z"}, {"uuid": "4ad78d88-6bd9-41e2-93e8-4496599b84af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu22pqrkhk2m", "content": "\ud83d\udea8 CVE-2026-60004 \u2014 Gitea RCE actively exploited\n\nPublic PoC available, real-world attacks confirmed, and CISA has added it to KEV. Fixed in Gitea 1.27.1.\n\nstemshop.top/blog/cve-202...\n\n#CVE #Gitea #RCE #CyberSecurity #InfoSec #CISA", "creation_timestamp": "2026-08-27T04:57:23.987713Z"}, {"uuid": "3199e6b4-4382-4eab-b39c-c899efe3d4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60212", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjt2hupiq2c", "content": "\ud83d\udccc CVE-2026-60212 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60212", "creation_timestamp": "2026-07-26T07:07:06.764237Z"}, {"uuid": "d7bec677-15c6-4c08-b9cd-929a8abbdac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60215", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjuq44mxq2y", "content": "\ud83d\udccc CVE-2026-60215 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60215", "creation_timestamp": "2026-07-26T07:37:06.847418Z"}, {"uuid": "69e20086-1f0f-456a-938d-4cdb2d4463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60197", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrjwfqyypt2i", "content": "\ud83d\udccc CVE-2026-60197 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60197", "creation_timestamp": "2026-07-26T08:07:06.876548Z"}, {"uuid": "ba9a1f0a-46df-4403-a525-9b393f69b428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/95320", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yuag\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 04:52:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 + CVE-2026-60137+poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T06:00:04.932981Z"}, {"uuid": "2426a1db-c829-4f70-93bd-7732fbb94ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "content": "", "creation_timestamp": "2026-07-27T00:00:08.963042Z"}, {"uuid": "185bab11-aa4a-4da8-b8a0-7c0a8d199799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-29T00:00:16.534125Z"}, {"uuid": "8bba4520-b6f9-40c3-b979-924923bdd96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60211", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrma63xr2t2y", "content": "\ud83d\udccc CVE-2026-60211 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60211", "creation_timestamp": "2026-07-27T06:07:06.844276Z"}, {"uuid": "2b5116a4-5f78-4ea2-9c51-7b44ce8ed226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1166", "content": "\u0412 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0440\u0430\u0441\u0448\u0430\u0440\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 wp2shell, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u044f\u0434\u0440\u043e WordPress. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 WordPress 6.9.5 \u0438 7.0.2 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a wp2shell.\n\n\u0410\u0442\u0430\u043a\u0430 wp2shell \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - CVE-2026-63030 \u0438 CVE-2026-60137, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.x \u0438 7.0.x.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0410\u0434\u0430\u043c\u043e\u043c \u041a\u0443\u044d\u0441\u043e\u043c \u0438\u0437 Searchlight Cyber, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0443 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u0438 \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 WordPress \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Searchlight Cyber, \u0431\u043e\u043b\u0435\u0435 500 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 WordPress, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0439\u0447\u0430\u0441, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438, \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c WordPress \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2 \u0438\u043b\u0438 6.9.5.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0432 \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-63030, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0432 WordPress 6.9. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-60137 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 author__not_in\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 WP_Query. WordPress \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0451 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WordPress 6.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c WordPress, \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.0-6.9.4 \u0438 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 7.0.0-7.0.1.\n\nSQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.8.0\u20136.8.5, \u043d\u043e \u0435\u0451 \u043d\u0435\u043b\u044c\u0437\u044f \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 RCE, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435 \u043f\u0440\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API, \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043b\u0438\u0448\u044c \u0432 WordPress 6.9.\n\nSearchlight Cyber \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u0430 wp2shell.com, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043b\u0438 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, Searchlight Cyber \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a REST API \u0438\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c /wp-json/batch/v1 \u0438 ?rest_route=/batch/v1 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 WAF.\n\nCloudflare \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e WAF \u043d\u0430 \u0432\u0441\u0435\u0445 \u0442\u0430\u0440\u0438\u0444\u043d\u044b\u0445 \u043f\u043b\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cloudflare, \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 (CVE-2026-60137), \u0442\u0430\u043a \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 REST API (CVE-2026-63030). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u0430 WAF \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u0442\u0447\u0435\u0439.", "creation_timestamp": "2026-07-27T00:00:35.219680Z"}, {"uuid": "3951985f-e83d-4f12-8a31-03511387ede1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1170", "content": "wp2shell \u2014 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u043e\u0442 \u0438 \u0434\u043e.\n\n\u042d\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432:\n\n\ud83d\udccd CVE-2026-63030 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e REST API. CWE-436.\n\n\ud83d\udccd CVE-2026-60137 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430 (SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f). CWE-89.\nwp2shell \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u0432 \u0421MS Wordpress. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: 6.8.0\u20136.8.5; 6.9.0\u20136.9.4; 7.0.0\u2013 7.0.1.\n\n\ud83e\udee1 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 serve_batch_request_v1, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /wp-json/batch/v1.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0434\u0432\u0430 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432: $requests[] (\u0441\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b) \u0438 $matches[] (\u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438). \n\n\u0415\u0441\u043b\u0438 \u043f\u0443\u0442\u044c \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, http://), \u0444\u0443\u043d\u043a\u0446\u0438\u044f wp_parse_url() \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 false. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432 \u043c\u0430\u0441\u0441\u0438\u0432 $validation[] \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430 (WP_Error), \u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u043c\u0430\u0441\u0441\u0438\u0432 $matches[] \u043d\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 (\u0447\u0435\u0440\u0435\u0437 continue).\n\n\u041d\u0438\u0436\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0447\u0430\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f wp-includes/rest-api/class-wp-rest-server.php \nforeach ( $batch_request['requests'] as $args ) {\n            $parsed_url = wp_parse_url( $args['path'] );\n            if ( false === $parsed_url ) {\n                $requests[] = new WP_Error( 'parse_path_failed', __( 'Could not parse the path.' ), array( 'status' => 400 ) ); // \u0437\u0430\u043f\u0438\u0441\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043b\u044f http:// \n\n                continue;\n            }\n\n            $single_request = new WP_REST_Request( $args['method'] ?? 'POST', $parsed_url['path'] );\n ....\n\n$matches    = array();\n$validation = array();\n$has_error  = false;\nforeach ( $requests as $single_request ) {\n    if ( is_wp_error( $single_request ) ) {\n        $has_error    = true;\n        $validation[] = $single_request;  \n        continue; // \u043f\u0440\u043e\u043f\u0443\u0441\u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 $matches[]\n    }\n\n\u0418\u0437-\u0437\u0430 continue \u043c\u0430\u0441\u0441\u0438\u0432\u044b $requests \u0438 $matches \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0434\u043d\u043e\u043c\u0443 \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0433\u043e.\n\n\u0421\u0434\u0432\u0438\u0433 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u2192 \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 continue \u2192 \u041c\u0430\u0441\u0441\u0438\u0432\u044b $requests \u0438 $matches \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u2192 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0447\u0443\u0436\u0438\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u2192 \u0412\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 batch \u2192 \u0417\u0430\u043f\u0440\u043e\u0441 /wp/v2/posts \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a batch \u2192 \u0412\u043d\u0443\u0442\u0440\u0438 \u0441\u043d\u043e\u0432\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u0434\u0432\u0438\u0433 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u2192 \u0417\u0430\u043f\u0440\u043e\u0441 \u043a /categories?author_exclude=SLEEP(2) \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a /posts (\u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442) -> SQLi.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQLi\nauthor_exclude \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0442\u0438\u043f\u0430 array \u0432 get_collection_params().\n\u0412 get_items() \u043e\u043d \u043c\u0430\u043f\u0438\u0442\u0441\u044f \u0432 author_not_in \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430.\n\u0418\u0437-\u0437\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u043e\u043a\u0430.\nWP_Query \u043d\u0435 \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441\u0442\u0440\u043e\u043a\u043e\u0432\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0421\u0442\u0440\u043e\u043a\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 SQL.\n\nif (is_array($query_vars['author__not_in'])) {\n    $query_vars['author__not_in'] = array_map('absint', ...);  // sanitize\n}\n$author__not_in = implode(',', (array) $query_vars['author__not_in']);\n$where .= \" AND post_author NOT IN ($author__not_in) \"\n\n\ud83e\udee1 \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438:\n\u0417\u0430\u043f\u0440\u043e\u0441:\n\u2013 POST /wordpress/batch/v1 + \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\u2013 POST /?rest_route=/batch/v1 + \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \n\u2013 GET /?_method=POST&rest_route=/batch/v1&validation=normal + \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \nSQLi - \"path\": \"/wp/v2/ author_exclude=\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\u00a0\u2014 \u043d\u0430 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0435.\n\n\ud83e\udee1 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f:\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2.\n2. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c WAF/IDS \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u043e\u0442 SQLi.\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 php-\u0444\u0430\u0439\u043b\u043e\u0432.\n4. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0433\u0434\u0435 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 \u0438\u043b\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b /batch/v1.\n5. \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a /batch/v1 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\n\ud83e\udee1 \u041b\u043e\u0432\u0438\u0442\u0435 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u043d\u0443\u044e \u2014 docker-compose.yml \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c wordpress \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d \u043a \u043f\u043e\u0441\u0442\u0443.\n\u0417\u0430\u043f\u0443\u0441\u043a docker-compose up.", "creation_timestamp": "2026-07-27T00:00:35.333933Z"}, {"uuid": "80880f4a-fd72-4e9c-8633-954c9fc37c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60211", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrmbg5kryk2f", "content": "\ud83d\udccc CVE-2026-60211 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.potatohub.blog/cves/CVE-2026-60211", "creation_timestamp": "2026-07-27T06:29:30.525269Z"}, {"uuid": "b9eac266-80a5-42b0-bf90-11ae1d8efd17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60439", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrlnpyyk2r2y", "content": "\ud83d\udccc CVE-2026-60439 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60439", "creation_timestamp": "2026-07-27T00:37:07.084517Z"}, {"uuid": "93b6d188-6151-4a5f-8a70-c21067a33d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60439", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrlnq4vuji2w", "content": "\ud83d\udccc CVE-2026-60439 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.potatohub.blog/cves/CVE-2026-60439", "creation_timestamp": "2026-07-27T00:37:10.450927Z"}, {"uuid": "35d6c8f6-4d6d-4406-b42e-c796b34e171c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60443", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmk7x53qp2v", "content": "\ud83d\udccc CVE-2026-60443 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60443", "creation_timestamp": "2026-07-27T09:07:06.791489Z"}, {"uuid": "8b8bcad3-8e05-4e9c-bc9c-1beb361734a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60455", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrlpfo2ler22", "content": "\ud83d\udccc CVE-2026-60455 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60455", "creation_timestamp": "2026-07-27T01:07:07.297542Z"}, {"uuid": "51779800-ef47-4e4f-a7c0-e617d71dd86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60368", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrlr3cmj6r23", "content": "\ud83d\udccc CVE-2026-60368 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60368", "creation_timestamp": "2026-07-27T01:37:07.074761Z"}, {"uuid": "1a9d76c7-a96b-43da-846c-3c8eb6340b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60448", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmikdajjq2y", "content": "\ud83d\udccc CVE-2026-60448 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60448", "creation_timestamp": "2026-07-27T08:37:07.566461Z"}, {"uuid": "c24c7ce2-1dc0-4feb-bd71-ef3c69797a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/T9GQGrhFX-f2wpOxZaSVD3422spbtNh3v6uYSjmkW6OcFxI", "content": "", "creation_timestamp": "2026-07-28T05:00:03.708266Z"}, {"uuid": "bb53c5b4-89dd-4639-b639-d1d4ecb8f4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mu24n5wnpc2q", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nAttackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities \u2026\n#hackernews #news", "creation_timestamp": "2026-08-27T05:31:37.569511Z"}, {"uuid": "6e8990b4-9949-4239-a2e2-dfc2c132d95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60214", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmlvlzrbj23", "content": "\ud83d\udccc CVE-2026-60214 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60214", "creation_timestamp": "2026-07-27T09:37:06.574780Z"}, {"uuid": "6819f7f1-6b0f-4c0a-96d9-42f0163a3764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/kn38l-BAxVCicUp4xe_VlmwdfqsYeVojoIvsltdH6OF8az4", "content": "", "creation_timestamp": "2026-07-27T10:00:04.612348Z"}, {"uuid": "20d4dc36-f1a5-4157-ab63-1d166c53134a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60525", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmsm6moxv2y", "content": "\ud83d\udccc CVE-2026-60525 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60525", "creation_timestamp": "2026-07-27T11:37:06.485599Z"}, {"uuid": "f7b61230-2c12-42ba-8ecf-4aef01235121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mrmtx7nzd52d", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-16232, CVE-2026-63030, CVE-2026-60137, CVE-2026-6875, CVE-2026-50522\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-27T12:01:10.383245Z"}, {"uuid": "83d8a93e-047b-4a43-9619-07138f928862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60284", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmubtc7z32v", "content": "\ud83d\udccc CVE-2026-60284 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60284", "creation_timestamp": "2026-07-27T12:07:06.790908Z"}, {"uuid": "52ef12b8-43c3-410e-bc63-01f24d3d20b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60255", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmvxhkl252s", "content": "\ud83d\udccc CVE-2026-60255 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60255", "creation_timestamp": "2026-07-27T12:37:06.712870Z"}, {"uuid": "338e4770-5cfc-4b30-b009-2288b5360af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60965", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrndemopse2v", "content": "\ud83d\udccc CVE-2026-60965 - Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR).  Supported versions that are affected are 12.2.3-... https://www.cyberhub.blog/cves/CVE-2026-60965", "creation_timestamp": "2026-07-27T16:37:06.684171Z"}, {"uuid": "2aae46b1-239b-46e4-80e1-3db92145bc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/technews4869.bsky.social/post/3mrndo2m77g2s", "content": "piyolog.hatenadiary.jp/ent...\nWordPress Core\u306e\u8106\u5f31\u6027 CVE-2026-63030 / CVE-2026-60137 (\u901a\u79f0\u300cwp2shell\u300d)\u306b\u3064\u3044\u3066\u307e\u3068\u3081\u3066\u307f\u305f - piyolog", "creation_timestamp": "2026-07-27T16:42:23.498868Z"}, {"uuid": "70cf49ac-390e-4ec3-8b63-490aae3fbab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60277", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrnf2bur232i", "content": "\ud83d\udccc CVE-2026-60277 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60277", "creation_timestamp": "2026-07-27T17:07:07.111743Z"}, {"uuid": "8910dc17-d6ea-40fb-b071-269872d8694a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60281", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrngpvqxot2y", "content": "\ud83d\udccc CVE-2026-60281 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60281", "creation_timestamp": "2026-07-27T17:37:06.621055Z"}, {"uuid": "f2a31033-7191-4e50-8dd5-6e281683141f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrnh4nbasl2j", "content": "Active exploitation of two WordPress flaws. Webshells being deployed right now.\n\nCVE-2026-63030 and CVE-2026-60137.\n\nhttps://www.yazoul.net/news/article/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-27T17:44:13.538393Z"}, {"uuid": "9faa88af-4bdb-4b1f-9446-c59b718ed2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/95429", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Hestia-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BytesPulse-OE\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 21:10:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites \u2014 per-user email reports, core file diff against clean WordPress, PHP/JS/htaccess/image analysis, and optional AI evaluation via Claude API.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T23:00:04.012816Z"}, {"uuid": "0681fba8-80c5-4417-afe2-c17f721bee35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60371", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrnz5yv2xl2s", "content": "\ud83d\udccc CVE-2026-60371 - Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).  Supported versio... https://www.cyberhub.blog/cves/CVE-2026-60371", "creation_timestamp": "2026-07-27T23:07:07.235815Z"}, {"uuid": "863e2b69-cbfa-4c89-bdfa-d9d69661568c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/95429", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-Hestia-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BytesPulse-OE\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 21:10:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 / CVE-2026-60137) across all hosted sites \u2014 per-user email reports, core file diff against clean WordPress, PHP/JS/htaccess/image analysis, and optional AI evaluation via Claude API.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:08.031791Z"}, {"uuid": "9918f089-a7a6-4433-a899-0fa9050c6301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60275", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrp4ejskba2m", "content": "\ud83d\udccc CVE-2026-60275 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60275", "creation_timestamp": "2026-07-28T09:37:07.240466Z"}, {"uuid": "d0733143-2de7-4278-8596-df37ffe610cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/kn38l-BAxVCicUp4xe_VlmwdfqsYeVojoIvsltdH6OF8az4", "content": "", "creation_timestamp": "2026-07-28T00:00:37.871261Z"}, {"uuid": "cbdc562a-e285-470e-82d0-cc0fd8fe95b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95320", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yuag\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 04:52:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 + CVE-2026-60137+poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:44.359029Z"}, {"uuid": "f36760e3-3d4f-43a0-95dd-ca8beeff9fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mu262bm7fh2w", "content": "\ud83d\udcf0 Peretas Aktif Eksploitasi Celah Kritis Gitea untuk Serangan Injeksi Kode dan Malware Mining\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/27/peretas-eksploitasi-celah-kritis-gitea-dalam-serangan-injeksi-kode/\n\n#cisaKev #codeInjection #cryptomining #cve-2026-60004 #devops #gi", "creation_timestamp": "2026-08-27T05:56:50.866288Z"}, {"uuid": "bc29134d-99f2-4853-b6ea-d71e7e8bda07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60329", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mroqmzvoki23", "content": "\ud83d\udccc CVE-2026-60329 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60329", "creation_timestamp": "2026-07-28T06:07:07.618637Z"}, {"uuid": "45a3b185-fb1e-4727-9f2c-53a2f519a0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60333", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mroeviksri2m", "content": "\ud83d\udccc CVE-2026-60333 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60333", "creation_timestamp": "2026-07-28T02:37:06.757882Z"}, {"uuid": "629d3a23-9d71-40c1-9452-a5e6a0514a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60306", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mroscntpc32l", "content": "\ud83d\udccc CVE-2026-60306 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60306", "creation_timestamp": "2026-07-28T06:37:06.680830Z"}, {"uuid": "0473bb86-afbf-42fa-9e5b-6ba2c82f9c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60328", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrooxeu2gj2l", "content": "\ud83d\udccc CVE-2026-60328 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60328", "creation_timestamp": "2026-07-28T05:37:07.280017Z"}, {"uuid": "9061db6c-a4ea-42e0-91d7-7cd707640dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtxllxfdz52f", "content": "CISA Adds One Known Exploited Vulnerability to Catalog (CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0) #CISA (Aug 25)\n\nCVE-2026-60004 Gitea\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-26T05:21:23.424327Z"}, {"uuid": "e93c0d06-467b-440f-b6a4-3440cee3859d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60308", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrotycmovh2y", "content": "\ud83d\udccc CVE-2026-60308 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60308", "creation_timestamp": "2026-07-28T07:07:07.297972Z"}, {"uuid": "1869ca57-fdd7-437c-adc0-48f87dbf7e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60302", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrovnxbcnh2y", "content": "\ud83d\udccc CVE-2026-60302 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60302", "creation_timestamp": "2026-07-28T07:37:06.704337Z"}, {"uuid": "0da85663-98d6-46e7-b3fa-331b0e7faf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60290", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mroxdm4bri2m", "content": "\ud83d\udccc CVE-2026-60290 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60290", "creation_timestamp": "2026-07-28T08:07:07.345051Z"}, {"uuid": "ddad1452-0b3a-4b44-9193-cd121ba30602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60272", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mroyz7y3la2m", "content": "\ud83d\udccc CVE-2026-60272 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60272", "creation_timestamp": "2026-07-28T08:37:06.375018Z"}, {"uuid": "6b27c307-03b0-4504-bc3f-e124a54af677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtxm7z6owf2v", "content": "CVE-2026-60004 in Gitea enables remote code execution via diffpatch injection and is being exploited, prompting CISA to require rapid patching.\n", "creation_timestamp": "2026-08-26T05:32:36.839635Z"}, {"uuid": "66fe3425-2099-4768-81d5-ecb199b3c566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60274", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrp2ov5dch2y", "content": "\ud83d\udccc CVE-2026-60274 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60274", "creation_timestamp": "2026-07-28T09:07:06.725661Z"}, {"uuid": "aae966a1-ec22-4716-9f69-082ffb1f307d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60262", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrp6264bml2u", "content": "\ud83d\udccc CVE-2026-60262 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60262", "creation_timestamp": "2026-07-28T10:07:06.470117Z"}, {"uuid": "9bd35532-5642-406d-845a-ddbd4cb70c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60264", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrp7ptchmy2m", "content": "\ud83d\udccc CVE-2026-60264 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60264", "creation_timestamp": "2026-07-28T10:37:07.876297Z"}, {"uuid": "74b7b34c-4f66-4c09-bbd1-724bd80b5705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60259", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpd33s3ch23", "content": "\ud83d\udccc CVE-2026-60259 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60259", "creation_timestamp": "2026-07-28T11:37:06.829289Z"}, {"uuid": "66516caa-0038-40ec-bbcb-4ad613cd22f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60258", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpbfhpxtq2m", "content": "\ud83d\udccc CVE-2026-60258 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60258", "creation_timestamp": "2026-07-28T11:07:07.694798Z"}, {"uuid": "3e0bc0e7-47f6-426b-b1f7-2c9b2d6bf8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60232", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpggfmq2o2l", "content": "\ud83d\udccc CVE-2026-60232 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 14.1.1.0.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60232", "creation_timestamp": "2026-07-28T12:37:07.139841Z"}, {"uuid": "60e34eab-affd-4061-950b-9a6f94f900ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60234", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpeqqvfi522", "content": "\ud83d\udccc CVE-2026-60234 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60234", "creation_timestamp": "2026-07-28T12:07:06.773963Z"}, {"uuid": "e1a1bad4-0388-45fe-be46-2c9d2122ba27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtxr667dqn2q", "content": "Gitea 1.27.1\u3067\u4fee\u6b63\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-60004\uff09\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-26T07:01:07.169151Z"}, {"uuid": "3465a79a-d483-4a5a-8670-613b0241da9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60567", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpttka4232s", "content": "\ud83d\udccc CVE-2026-60567 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60567", "creation_timestamp": "2026-07-28T16:37:06.705491Z"}, {"uuid": "3b74f528-b05a-4477-b4c0-55049abc8c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17649", "content": "\ud83d\udea8 CVE-2026-60206 \u2014 Oracle WebLogic SAML Authentication Bypass (Research PoC)\nA research repository demonstrating CVE-2026-60206, a critical SAML authentication bypass vulnerability affecting Oracle WebLogic Server. The project is intended for security research, vulnerability validation, and authorized security testing only.\n\n\ud83d\udccc GitHub\n\ud83d\udc49 https://github.com/imbas007/POC-CVE-2026-60206\n\n\u2728 Features\n\u2022 Detect affected Oracle WebLogic Server versions and exposed SAML endpoints.\n\u2022 Supports non-invasive vulnerability detection mode for validation.\n\u2022 Single-target and bulk target assessment workflows.\n\u2022 JSON report export for assessment results.\n\u2022 Multiple SAML validation and research modes for analyzing authentication handling.\n\u2022 Configurable proxy support for authorized testing environments.\n\u2022 Multi-threaded scanning support for large authorized environments.\n\u2022 Verbose logging for troubleshooting and research.\n\u2022 HTTPS/TLS verification controls for lab environments.\n\u2022 Python-based implementation for easy deployment and customization.\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python\n\u2022 Oracle WebLogic Server\n\u2022 SAML\n\u2022 XML\n\u2022 HTTPS\n\u2022 JSON\n\n\ud83c\udfaf Ideal For\n\u2022 Security Researchers\n\u2022 Penetration Testers\n\u2022 Red Team Operators\n\u2022 Blue Team Validation\n\u2022 Incident Response Teams\n\u2022 Enterprise Security Administrators\n\n\u26a0\ufe0f Note: This repository is intended for vulnerability research and validation in environments where you have explicit authorization. Organizations using affected Oracle WebLogic Server versions should apply Oracle's security updates and verify their deployments against the latest vendor guidance as soon as possible.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-29T00:00:28.883038Z"}, {"uuid": "5fe231e2-4dd4-40f6-8e3d-48452313a467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60326", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpvj6itog2y", "content": "\ud83d\udccc CVE-2026-60326 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60326", "creation_timestamp": "2026-07-28T17:07:12.783610Z"}, {"uuid": "8d5c043f-2546-41f2-aa3d-8789c99ece2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://bsky.app/profile/hilarybaumann.com/post/3mu3ortrc7s2h", "content": "IF you manage any WP websites, you may want to go check them all for extra users & plugins.\n\nI thought I didn't get hit by this but I spotted a problem yesterday related to WordPress Core vulnerabilities CVE-2026-63030 & CVE-2026-60137\n\nNot my host but the most useful info I've found yet \u2193", "creation_timestamp": "2026-08-27T20:29:02.550087Z"}, {"uuid": "dd0a1b91-491a-4dc3-977b-f2b6cc39474f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60992", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtsxbqnj762x", "content": "\ud83d\udccc CVE-2026-60992 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected ar... https://www.cyberhub.blog/cves/CVE-2026-60992", "creation_timestamp": "2026-08-24T09:07:07.088723Z"}, {"uuid": "828bdd59-b2e5-4e9e-a317-beff40159ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/3_PCmixRZKD616mGgxZ7XjOgGlkrPu2pELMCZYyqXilYjQ", "content": "", "creation_timestamp": "2026-08-27T08:00:05.823918Z"}, {"uuid": "62213ac4-14db-48f1-b68e-347f7ddc59f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60831", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtsyxeqdmh2x", "content": "\ud83d\udccc CVE-2026-60831 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).  Supported versions that are affe... https://www.cyberhub.blog/cves/CVE-2026-60831", "creation_timestamp": "2026-08-24T09:37:06.464675Z"}, {"uuid": "b59e4128-f599-4f28-80fb-e2aedca0b437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60267", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpx6ttbut2m", "content": "\ud83d\udccc CVE-2026-60267 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60267", "creation_timestamp": "2026-07-28T17:37:07.156525Z"}, {"uuid": "aff660bd-b541-400d-a29f-211b6ad1c5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-26T10:00:38.811048Z"}, {"uuid": "f1198e6d-f801-4ad3-b03a-cfaa634b802b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mty3d3nvma2b", "content": "Gitea CVE-2026-60004: Real-World Victim Reports CPU Spike and Dropper", "creation_timestamp": "2026-08-26T10:02:45.973929Z"}, {"uuid": "727a19c8-ea6e-4dfc-92cc-5f91fc0fd263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60789", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrqgbmvcfh22", "content": "\ud83d\udccc CVE-2026-60789 - Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected a... https://www.cyberhub.blog/cves/CVE-2026-60789", "creation_timestamp": "2026-07-28T22:07:07.499593Z"}, {"uuid": "c7952e74-8dc3-4992-bb5d-859470ceed07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60309", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrqhxbul4k2v", "content": "\ud83d\udccc CVE-2026-60309 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60309", "creation_timestamp": "2026-07-28T22:37:06.983526Z"}, {"uuid": "2c0bccc4-feae-4185-b82d-d9c8332a653b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60261", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrqjmwovd226", "content": "\ud83d\udccc CVE-2026-60261 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0, 14.... https://www.cyberhub.blog/cves/CVE-2026-60261", "creation_timestamp": "2026-07-28T23:07:07.472570Z"}, {"uuid": "09106a97-7302-4e47-bdc3-44a8ecf06028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w", "content": "CVE-2026-60004 is a critical Gitea RCE via a diffpatch Git hook, rated CVSS 9.8. Full details and a public PoC are out. Update to Gitea 1.27.1 now.\n\n#Gitea #CVE202660004 #RCE #RemoteCodeExecution #GitHook #CyberSecurity", "creation_timestamp": "2026-07-29T07:59:42.761850Z"}, {"uuid": "ed553eff-9a4a-4ef2-8104-26e40f9269c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60742", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtt2n23imw23", "content": "\ud83d\udccc CVE-2026-60742 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).  Supported versions that are aff... https://www.cyberhub.blog/cves/CVE-2026-60742", "creation_timestamp": "2026-08-24T10:07:07.804311Z"}, {"uuid": "acb78515-7a1c-4368-a436-09a41e76a7bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/T9GQGrhFX-f2wpOxZaSVD3422spbtNh3v6uYSjmkW6OcFxI", "content": "", "creation_timestamp": "2026-07-29T00:00:46.843314Z"}, {"uuid": "5fa2d2a4-4181-4c1e-b36d-70ba65802dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60377", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrg4uwhor2u", "content": "\ud83d\udccc CVE-2026-60377 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60377", "creation_timestamp": "2026-07-29T07:37:06.815970Z"}, {"uuid": "56a7a6bf-c4cd-4769-bb49-be8a034ffafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60379", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrqyppczuk2s", "content": "\ud83d\udccc CVE-2026-60379 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60379", "creation_timestamp": "2026-07-29T03:37:06.570955Z"}, {"uuid": "ca4b74c3-55b8-47fe-828c-2cd4f8cc99cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60379", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrqyprbvua2r", "content": "\ud83d\udccc CVE-2026-60379 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.potatohub.blog/cves/CVE-2026-60379", "creation_timestamp": "2026-07-29T03:37:08.202780Z"}, {"uuid": "06ce6229-ac62-41e7-ae75-f9884ce96a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60358", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrr2fensmd22", "content": "\ud83d\udccc CVE-2026-60358 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60358", "creation_timestamp": "2026-07-29T04:07:07.172912Z"}, {"uuid": "5c94b04b-4b12-4cbe-92d1-503296329bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60358", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrr3eiua552k", "content": "\ud83d\udccc CVE-2026-60358 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.potatohub.blog/cves/CVE-2026-60358", "creation_timestamp": "2026-07-29T04:24:31.594003Z"}, {"uuid": "5ad1cab5-3e32-4f2e-9856-62f4456c0892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60360", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrr42ydpwt22", "content": "\ud83d\udccc CVE-2026-60360 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60360", "creation_timestamp": "2026-07-29T04:37:06.031848Z"}, {"uuid": "b4b51adf-72a5-4610-bbcf-f3afdf398953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60547", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrr5qnlwhq2l", "content": "\ud83d\udccc CVE-2026-60547 - Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-60547", "creation_timestamp": "2026-07-29T05:07:06.693535Z"}, {"uuid": "4d321275-9a55-4c54-870f-938686faf720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60537", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrr7gcacjg26", "content": "\ud83d\udccc CVE-2026-60537 - Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-60537", "creation_timestamp": "2026-07-29T05:37:06.544231Z"}, {"uuid": "805e07e0-9871-4e00-aa7f-0614b4303a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60537", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrr7gd2xh22r", "content": "\ud83d\udccc CVE-2026-60537 - Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).  Supported versions that are af... https://www.potatohub.blog/cves/CVE-2026-60537", "creation_timestamp": "2026-07-29T05:37:07.341681Z"}, {"uuid": "2046ef52-afbc-413d-8454-30f5853ba0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60531", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrb3wohg62y", "content": "\ud83d\udccc CVE-2026-60531 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected ar... https://www.cyberhub.blog/cves/CVE-2026-60531", "creation_timestamp": "2026-07-29T06:07:06.744376Z"}, {"uuid": "908c9e75-74a3-4918-8c10-a9f34906fb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60429", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrcrl7etb2u", "content": "\ud83d\udccc CVE-2026-60429 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60429", "creation_timestamp": "2026-07-29T06:37:07.259291Z"}, {"uuid": "86fc899f-4758-4e10-939d-405454365340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60422", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrehaedgo2s", "content": "\ud83d\udccc CVE-2026-60422 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).   The supported version that is affected is 1... https://www.cyberhub.blog/cves/CVE-2026-60422", "creation_timestamp": "2026-07-29T07:07:06.995894Z"}, {"uuid": "7df74447-6d02-4fb5-84e0-fe19a74bbc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23", "content": "Gitea's critical RCE flaw (CVE-2026-60004) lets repo writers run shell commands. Update to 1.27.1 now. #Gitea #CVE202660004 #RCE #CyberSecurity #Git #DevOps thedailytechfeed.com/critical-rce...", "creation_timestamp": "2026-07-29T08:02:34.108623Z"}, {"uuid": "85e638e6-be60-4bb5-8660-652e8494a004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60381", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrhsjssua2m", "content": "\ud83d\udccc CVE-2026-60381 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60381", "creation_timestamp": "2026-07-29T08:07:07.672828Z"}, {"uuid": "723aec41-866a-443b-b13a-693622e64827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60361", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrji5pnlc22", "content": "\ud83d\udccc CVE-2026-60361 - Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-60361", "creation_timestamp": "2026-07-29T08:37:06.536645Z"}, {"uuid": "88e89b88-e186-4976-af20-41494eed6f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/thehackernews/9644", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-29T09:00:07.191717Z"}, {"uuid": "e24ed049-e92a-46cf-8f2d-ff5cc3006210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrl5ssapn2y", "content": "\ud83d\udccc CVE-2026-60206 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60206", "creation_timestamp": "2026-07-29T09:07:07.870203Z"}, {"uuid": "a36375c9-95a4-4b7d-80ce-b211ee837a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60880", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrmtgqpnr2m", "content": "\ud83d\udccc CVE-2026-60880 - Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected... https://www.cyberhub.blog/cves/CVE-2026-60880", "creation_timestamp": "2026-07-29T09:37:06.298406Z"}, {"uuid": "e925a674-38a8-4085-ac1d-0225e1dc80f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60535", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrroj3jorc2c", "content": "\ud83d\udccc CVE-2026-60535 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).  Supported versions t... https://www.cyberhub.blog/cves/CVE-2026-60535", "creation_timestamp": "2026-07-29T10:07:06.656173Z"}, {"uuid": "28c63739-91fb-4369-b257-d94941cd95e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60532", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrq6qqenc2c", "content": "\ud83d\udccc CVE-2026-60532 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications).  Supported versions t... https://www.cyberhub.blog/cves/CVE-2026-60532", "creation_timestamp": "2026-07-29T10:37:07.253446Z"}, {"uuid": "4ce281d0-1f07-4feb-bdf4-88a8c75b1936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60463", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrrufid4v2m", "content": "\ud83d\udccc CVE-2026-60463 - Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.... https://www.cyberhub.blog/cves/CVE-2026-60463", "creation_timestamp": "2026-07-29T11:07:07.262843Z"}, {"uuid": "cc86b085-e5c2-4889-ab7d-c8787566025d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrrtfaoc2f2o", "content": "\ud83e\udd16 CVE-2026-60004 (CVSS 9.8): RCE in Gitea. A repo write user can submit a crafted patch to the /diffpatch endpoint, plant a Git hook, and execute shell commands. Versions < 1.27.1. Patch out.\nhttps://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-29T11:34:26.284976Z"}, {"uuid": "1963dba1-ecec-43fe-a567-b87144da0d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60384", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrtjzmsse2l", "content": "\ud83d\udccc CVE-2026-60384 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60384", "creation_timestamp": "2026-07-29T11:37:07.347839Z"}, {"uuid": "ce6a6887-2ac5-4969-8ae5-7faba94e56a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mu63cmosde2f", "content": "CISA just added another Gitea RCE to its list. How many of you have already patched?\n\nCVE-2026-60004.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-08-28T19:18:33.921637Z"}, {"uuid": "9c916a5a-cf9f-457b-9559-63731e7d2f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60415", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtt4codpdm2x", "content": "\ud83d\udccc CVE-2026-60415 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60415", "creation_timestamp": "2026-08-24T10:37:06.883368Z"}, {"uuid": "87fc0515-c867-4915-bcfd-fcc9b0f08f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60680", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtt5ydt3ll24", "content": "\ud83d\udccc CVE-2026-60680 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60680", "creation_timestamp": "2026-08-24T11:07:07.611354Z"}, {"uuid": "b0f0a3d0-c0be-4060-8281-b6add2d04ae2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab65f384-88ac-4a9f-ba63-0becdc49d154", "content": "", "creation_timestamp": "2026-08-26T11:00:28.834034Z"}, {"uuid": "8ac4838b-587d-4b6f-82c0-9c4c3dce6ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mty6unl4g22p", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/26/g...\n\n #exploit #opensource #cybersecurity", "creation_timestamp": "2026-08-26T11:06:18.657974Z"}, {"uuid": "23ed05a5-d52d-46a9-8ebb-0e83013b218c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mty6vru4ej2i", "content": "CISA advierte de explotaci\u00f3n de vulnerabilidad en Gitea\n\nCISA alerta sobre explotaci\u00f3n de una vulnerabilidad en Gitea CVE-2026-60004. La falla\u2026\n\nhttps://mentehackers.com/cisa-advierte-de-explotacion-de-vulnerabilidad-en-gitea-1fb16fb5\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-26T11:06:54.438881Z"}, {"uuid": "de68e703-fcb3-44f7-b26c-cc0210453c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mty6xreyro2f", "content": "Gitea \u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\uff08CVE-2026-60004\uff09\n\nGit\u306e\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cGitea\u300d\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027CVE-2026-60004\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u59cb\u3081\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002CISA\u306f\u706b\u66dc\u65e5\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u3053\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002 KEV\u306e\u8a18\u8f09\u5185\u5bb9\u306b\u306f\u3001\u3053\u306e\u653b\u6483\u306e...", "creation_timestamp": "2026-08-26T11:08:00.626438Z"}, {"uuid": "3ac1b78d-750b-4902-9b49-87b3485ef2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6017", "type": "seen", "source": "https://cert.pl/en/posts/2026/08/CVE-2025-63080", "content": "", "creation_timestamp": "2026-08-24T12:15:06.009363Z"}, {"uuid": "b5cdfbd3-0919-40f9-b82a-2af3f6c41d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60385", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrv7o2qwd2y", "content": "\ud83d\udccc CVE-2026-60385 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60385", "creation_timestamp": "2026-07-29T12:07:06.703629Z"}, {"uuid": "99fac821-1355-4566-b9b4-6d3575ddcd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60386", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrwvcobgp22", "content": "\ud83d\udccc CVE-2026-60386 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60386", "creation_timestamp": "2026-07-29T12:37:06.757432Z"}, {"uuid": "d0fbd556-4abe-4d13-85ab-45d700f93376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-29T13:00:06.264990Z"}, {"uuid": "431844fb-cab1-418d-9f25-b7c750062b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "content": "Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The", "creation_timestamp": "2026-07-29T13:00:52.185090Z"}, {"uuid": "427a94c5-d177-4ffd-a0ab-9530d5be1916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60375", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrrykxgyzj2s", "content": "\ud83d\udccc CVE-2026-60375 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60375", "creation_timestamp": "2026-07-29T13:07:07.402507Z"}, {"uuid": "2ed450d9-45b9-4769-91ec-faf5ad1ee2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrs23ihcpb2e", "content": "Gitea RCE (CVE-2026-60004, CVSS 9.8): anyone with repo write access can plant a git hook and run shell commands as the Gitea service account. Open registration is on by default, so self-hosters\u2014update to 1.27.1 and disable open registration now. \ud83d\udd12\n\n#SelfHosting #Security #FOSS", "creation_timestamp": "2026-07-29T13:34:15.274358Z"}, {"uuid": "a2fc5e68-f720-48f3-8a05-fafa934ab631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60378", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrs3wb3c262s", "content": "\ud83d\udccc CVE-2026-60378 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60378", "creation_timestamp": "2026-07-29T14:07:07.007487Z"}, {"uuid": "cf6c82eb-572b-4b34-9018-e7c034fafe13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60380", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrs5lvcw4u2s", "content": "\ud83d\udccc CVE-2026-60380 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60380", "creation_timestamp": "2026-07-29T14:37:06.769367Z"}, {"uuid": "80033435-40c0-4455-b412-c44cc7c84b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60376", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrs7bjtkwe2s", "content": "\ud83d\udccc CVE-2026-60376 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60376", "creation_timestamp": "2026-07-29T15:07:06.655447Z"}, {"uuid": "c9dea8c1-510e-40ad-abc4-a8b0e7f7b194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60374", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsax6lsng2v", "content": "\ud83d\udccc CVE-2026-60374 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60374", "creation_timestamp": "2026-07-29T15:37:06.559824Z"}, {"uuid": "7eea89ba-37dc-4407-83c3-73b4259b27aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60374", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrsax7ak2p2f", "content": "\ud83d\udccc CVE-2026-60374 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).  Supported versions that are affect... https://www.potatohub.blog/cves/CVE-2026-60374", "creation_timestamp": "2026-07-29T15:37:07.248338Z"}, {"uuid": "99ef7283-96bb-45b1-8602-ef0ac1dd42a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60355", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrscmtlmoa26", "content": "\ud83d\udccc CVE-2026-60355 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).  Supported versions that are affect... https://www.cyberhub.blog/cves/CVE-2026-60355", "creation_timestamp": "2026-07-29T16:07:07.740633Z"}, {"uuid": "0bde9482-6bc3-44cd-8389-7ed8164bba1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsechgv4n23", "content": "\ud83d\udccc CVE-2026-60291 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60291", "creation_timestamp": "2026-07-29T16:37:06.767516Z"}, {"uuid": "43621dd9-fbfd-4e4d-b0c4-1f178f2e1b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60112", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsesike222i", "content": "CVE-2026-60112 - ait-gui\nThe AMMOS Instrument Toolkit (AIT) GUI before version 2.5.1 has a security flaw that allows anyone to access it without a password. This could potentially let attackers control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aitgui #nasaammos #CVE #infosec", "creation_timestamp": "2026-07-29T16:46:04.273990Z"}, {"uuid": "3d4cd493-a6ae-441b-95e2-f161d2388a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60113", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsesjzl6h2u", "content": "CVE-2026-60113 - ait-dsn\nThe AIT-DSN interface is vulnerable to unauthenticated access, allowing attackers to control and intercept Deep Space Network communication sessions. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aitdsn #nasaammos #CVE #infosec", "creation_timestamp": "2026-07-29T16:46:05.959584Z"}, {"uuid": "c6c56ca3-5bf1-453c-8cba-873b533f31e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60292", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsfy4nxry2m", "content": "\ud83d\udccc CVE-2026-60292 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60292", "creation_timestamp": "2026-07-29T17:07:07.169708Z"}, {"uuid": "03cb3ebf-097b-4811-8318-dce1c296eee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60294", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrshnquf5f2i", "content": "\ud83d\udccc CVE-2026-60294 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60294", "creation_timestamp": "2026-07-29T17:37:07.014305Z"}, {"uuid": "95dbdcf3-5741-44bb-940d-d4482f4677ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60113", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiqplp2l2g", "content": "CVE-2026-60113 - AIT-DSN\nCVE ID : CVE-2026-60113\n \n Published : July 29, 2026, 4:17 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link E...", "creation_timestamp": "2026-07-29T17:56:39.782932Z"}, {"uuid": "18cac024-1207-4786-ac68-2d996b6f2751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60198", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsjdfy6an22", "content": "\ud83d\udccc CVE-2026-60198 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60198", "creation_timestamp": "2026-07-29T18:07:06.936888Z"}, {"uuid": "85db5f6f-0c75-4807-8818-6bb2ce8c49f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60112", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjkzwybm2a", "content": "CVE-2026-60112 - AIT-GUI\nCVE ID : CVE-2026-60112\n \n Published : July 29, 2026, 4:17 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker t...", "creation_timestamp": "2026-07-29T18:11:22.678461Z"}, {"uuid": "850c5fa6-6ce8-4181-a4a9-3dc6cf7a4572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60199", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrskz2srcv22", "content": "\ud83d\udccc CVE-2026-60199 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60199", "creation_timestamp": "2026-07-29T18:37:07.426563Z"}, {"uuid": "554d912f-eaf2-4fe8-9b53-6fa8c09d561d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60202", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsoehobge23", "content": "\ud83d\udccc CVE-2026-60202 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60202", "creation_timestamp": "2026-07-29T19:37:11.609788Z"}, {"uuid": "50268a60-f178-4556-b803-163cc68b61d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:04.165151Z"}, {"uuid": "15e59a44-8191-4cfc-b09b-069e431ad408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60204", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrspzxxhb523", "content": "\ud83d\udccc CVE-2026-60204 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60204", "creation_timestamp": "2026-07-29T20:07:06.508024Z"}, {"uuid": "d4eee412-9a57-432d-bd8e-9f75cfb6adc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60113", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-60113", "content": "", "creation_timestamp": "2026-07-29T20:15:10.154085Z"}, {"uuid": "188e2b94-1d99-408f-a8ac-c69ff525ee68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60112", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-60112", "content": "", "creation_timestamp": "2026-07-29T20:15:12.539413Z"}, {"uuid": "0f43377d-876b-4dbf-b659-bffbeaf880d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrsrpmxc4i22", "content": "\ud83d\udccc CVE-2026-60205 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60205", "creation_timestamp": "2026-07-29T20:37:07.819276Z"}, {"uuid": "9d6cc699-ddb0-4d78-a796-8c23cd0ec624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60208", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrt3riohhi2s", "content": "\ud83d\udccc CVE-2026-60208 - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.... https://www.cyberhub.blog/cves/CVE-2026-60208", "creation_timestamp": "2026-07-29T23:37:07.261667Z"}, {"uuid": "44845c3b-caa5-4660-bb14-5f01eaaae754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/FFZlII9he5d1Fuscjf7MrqE5pZIDGxpq32yulECS4VZGDw", "content": "", "creation_timestamp": "2026-07-30T00:00:03.776170Z"}, {"uuid": "5b682ab8-3e0e-4878-bb2d-e61c094526c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-30T00:00:29.489611Z"}, {"uuid": "25dd6a62-1d55-4e0d-a85c-98513b449e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mtyah7suik2y", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nwww.helpnetsecurity.com/2026/08/26/g...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-08-26T11:34:34.407381Z"}, {"uuid": "99ed8bfa-ef0b-409a-b4dd-6b657347502b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:21.580567Z"}, {"uuid": "70d0982c-20f2-40b6-9953-ad1026e6d0a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60998", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mttczacvsq2m", "content": "\ud83d\udccc CVE-2026-60998 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory).  Supported version... https://www.cyberhub.blog/cves/CVE-2026-60998", "creation_timestamp": "2026-08-24T12:37:06.259137Z"}, {"uuid": "513d749d-caac-445a-8c7e-3256a0aa3a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9644", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-30T00:02:07.182182Z"}, {"uuid": "3a6ad9f6-05f2-43cf-998f-5261a9ec8cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://t.me/angie_software/176", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Angie \u0438 Angie PRO 1.12.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 nginx.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0438\u0437 \n\u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0435 \"map\" (CVE-2026-42533 \u0438 CVE-2026-60005), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0443\u043b\u044f SSI (CVE-2026-56434).\n\n\u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043c\u0435\u0442\u0440\u0438\u043a (Metric) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u043e \u043d\u0430\u0438\u043c\u0435\u043d\u044c\u0448\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 (least_time).\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Angie \u0438 Angie PRO.\n\nP.S.\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \u043c\u0435\u0442\u0440\u0438\u043a. \n\u0412\u044b \u2014 \u043b\u0443\u0447\u0448\u0438\u0435! \ud83e\udd70", "creation_timestamp": "2026-08-30T00:00:53.770174Z"}, {"uuid": "6eda7880-83ea-4cba-9e48-a2df61863bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mucfwlarh42u", "content": "CISA just flagged a Gitea RCE as actively exploited. Your self-hosted instance is next on the scan list.\n\nCVE-2026-60004.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-30T12:39:14.397437Z"}, {"uuid": "41c3863c-72b6-42eb-90d5-402e00f25674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100381", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Sec-Dan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 15:57:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T18:00:03.811605Z"}, {"uuid": "5075c522-e721-4255-a46d-479827fd13db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mud3njrwan2o", "content": "\ud83d\udea8 CVSS 9.8. Unauthenticated RCE. Patch your Gitea before someone patches it for you.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-60004-gitea-unauthenticated-rce-exploited-in-wild-poc/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-30T19:07:53.056453Z"}, {"uuid": "3a49adc7-dbd6-4ad8-8554-b8276effa5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-Gitea-Validator\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a InfoSec-DB\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 20:35:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83e\uded6 Contract-correlated discovery and authorized validation tool for Gitea CVE-2026-60004\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:07.929652Z"}, {"uuid": "0893d33e-9d62-445c-9ef3-5eed0a5ace35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100415", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-Gitea-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a InfoSec-DB\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 20:45:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83e\uded6 Direct single-target Gitea CVE-2026-60004 RCE validation PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:08.042921Z"}, {"uuid": "d22ebe65-fc6e-41c3-8569-5f0adcac2881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100381", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP2Shell-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Sec-Dan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 15:57:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:08.851510Z"}, {"uuid": "6210b97d-ad70-4dc2-9b06-c4b84578a17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3muebsvumlt2n", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-60004: \u26a0\ufe0f CVE-2026-60004: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 84.6%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-60004-gitea-before-1271-allows-remote-code", "creation_timestamp": "2026-08-31T06:30:55.403415Z"}, {"uuid": "882ebc3b-aed5-4afa-b5d2-3a7c0b3163a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mueff3fdks27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-60004: 20 interactions\nCVE-2026-73570: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-53362: 3 interactions\nCVE-2026-82657: 2 interactions\nCVE-2026-55565: 1 interactions\n", "creation_timestamp": "2026-08-31T07:34:46.587987Z"}, {"uuid": "2c483eab-b0f4-4a5a-a796-4d1fd3267e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3muftlova3x2x", "content": "CVE-2026-60004. Gitea before 1.27.1.\n\nCVSS 9.8.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-31T21:21:40.695426Z"}, {"uuid": "9e2947a8-7c6e-469a-b1fb-4e8b155c22a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/icsda.bsky.social/post/3mufwapvmde2w", "content": "AI\u5e33\u865f\u4e0d\u4fdd\uff1fClaude\u7528\u6236\u88ab\u7aca\u5bc6\uff0c\u4f60\u5011\u7684prompt\u90fd\u9732\u9921\u5566\uff01\ud83d\ude02\u5fae\u8edfDefender\u9084\u5728\u73a9\u300e\u72fc\u4f86\u4e86\u300f\uff0c\u986f\u793a\u95dc\u9589\u4f46\u5176\u5be6\u6c92\u4e8b\uff1f\u8cc7\u5b89\u9ebb\u75fa\u75c7\u982d\u5c0f\u5fc3\u767c\u4f5c\uff01\ud83d\udc8a\u66f4\u7d55\u7684\u662fGitea\uff0cCVE-2026-60004\u300e\u672a\u4f86\u6f0f\u6d1e\u300f\u63d0\u524d\u7206\uff0c8000\u53f0\u7cfb\u7d71\u88f8\u5954\u4e2d\uff01\u9019\u64cd\u4f5c\uff0c\u662f\u8981\u9810\u7d04\u660e\u5e74\u982d\u689d\u55ce\uff1f\ud83d\ude31 \u8cc7\u5b89\u8001\u9ce5\u63d0\u9192\uff1a\u5225\u628a\u9810\u8a2d\u7576\u9632\u8b77\uff0c\u5b9a\u671f\u6aa2\u67e5\u3001\u66f4\u65b0\u624d\u662f\u738b\u9053\uff01#\u8cc7\u5b89\u8001\u53f8\u6a5f #AI\u8cc7\u5b89 #\u6f0f\u6d1e\u9810\u8a00\u5bb6", "creation_timestamp": "2026-08-31T22:09:14.433846Z"}, {"uuid": "160d760d-d57a-4fa8-a764-cd3734c58211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mugszsy5ri24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-60004: 21 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-62626: 10 interactions\nCVE-2023-28252: 8 interactions\nCVE-2026-81578: 6 interactions\n", "creation_timestamp": "2026-09-01T06:44:20.830000Z"}, {"uuid": "a09a3f62-a3a4-48cb-8e14-7cedd6286690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3muhg36e3go2c", "content": "CISA just confirmed the exploit you haven't patched yet.\n\nCVE-2026-60004.\n\nhttps://www.yazoul.net/malware/vidar-2026-08/reports/2026-08-30/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-09-01T12:25:07.349930Z"}, {"uuid": "a2f2e28b-b43b-4da4-bfde-88892039a85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60102", "type": "seen", "source": "https://t.me/Russian_OSINT/7482", "content": "\ud83d\ude37 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 OpenWRT (9.6 CVSS)\n\n\u0421\u043e\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Hacker House \u041c\u044d\u0442\u0442\u044c\u044e \u0425\u0438\u043a\u0438, \u043e\u043d \u0436\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e offensive security, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c hackerfantastic, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (0-day) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 OpenWRT. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0434\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (root) \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0441\u0430\u043c\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 9.6 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWRT, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0441\u0442\u0430\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439. \u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0435\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0430 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0438\u043d\u0444\u0435\u0440\u0435\u043d\u0441\u0430, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0437\u0430\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0444\u0430\u0437\u0435 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e\u043c\u0438\u043c\u043e OpenWRT, \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u0442\u043e\u0442 \u043f\u043e\u0434\u0445\u043e\u0434 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445, \u043a\u0430\u043a Horde, Django, WordPress, Gitlab \u0438 Dropbear. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f Horde Framework \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u0438\u0445 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u0438\u0439 \u0443\u0436\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-60102.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u0442\u0430\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0443\u0432\u0435\u0440\u0435\u043d, \u0447\u0442\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u0430\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435 \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:16.888906Z"}, {"uuid": "2dcc9b8e-717b-4a00-adcf-0f93526f4ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/Russian_OSINT/7565", "content": "\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 WordPress 7.0.2, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u043e\u0434\u043d\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 WordPress \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CVE-2026-60137), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 TF1T, dtro \u0438 haongo.\n\n\u0412\u0442\u043e\u0440\u0430\u044f, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-63030), \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0410\u0434\u0430\u043c\u043e\u043c \u041a\u044c\u044e\u0441\u043e\u043c (Adam Kues) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Searchlight Cyber (Assetnote).\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\nhttps://wordpress.org/news/2026/07/wordpress-7-0-2-release/\n--------------------------\n\n\ud83e\udd14\u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435: \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u0435\u0439\u0441\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0440\u044b\u043d\u043e\u0447\u043d\u0430\u044f \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0431\u0440\u043e\u043a\u0435\u0440\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 500 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0431\u044b\u043b \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u043e\u0432\u0435\u0439\u0448\u0435\u0439 \u044f\u0437\u044b\u043a\u043e\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c\u044e \u2b55\ufe0f GPT5.6 Sol Ultra. \u0418\u0418 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u00ab\u0441 \u0447\u0438\u0441\u0442\u043e\u0433\u043e \u043b\u0438\u0441\u0442\u0430\u00bb \u0432\u0441\u0435\u0433\u043e \u0437\u0430 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0442\u0440\u0430\u0442\u0430\u0445 \u043e\u043a\u043e\u043b\u043e 25 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 (batch-route confusion) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 REST API, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u043e\u043c \u0435\u0449\u0435 \u0432 WordPress 5.6. \u0418\u0418 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u0434\u0432\u0438\u0433 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u043e\u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0438\u043d\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432.\n\n\u0422\u043e, \u0447\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u043a\u0438\u0431\u0435\u0440\u043e\u0440\u0443\u0436\u0438\u044f \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 500 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043e \u043f\u0440\u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0437\u0430\u0442\u0440\u0430\u0442\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0432 25 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 (\u0438\u043c\u0435\u043d\u043d\u043e \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0440\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0435 \u043d\u0430 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c). \u0418\u0418\u0448\u043a\u0430 \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0437\u0430 10 \u0447\u0430\u0441\u043e\u0432.\n\n\u0418\u0418 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0430\u0448\u0435\u043b \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443, \u043e\u043d \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u043b \u0444\u0435\u043d\u043e\u043c\u0435\u043d\u0430\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u0443\u044e, \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041a\u0430\u043a \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0441\u044f \u0441\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u043d\u0438 \u043e\u0434\u0438\u043d \u044d\u043a\u0441\u043f\u0435\u0440\u0442-\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0432 \u043c\u0438\u0440\u0435 \u043d\u0435 \u0441\u043c\u043e\u0433 \u0431\u044b \u0441 \u043d\u0443\u043b\u044f \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0437\u0430 \u0441\u0442\u043e\u043b\u044c \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:17.071381Z"}, {"uuid": "b40b8ea9-abdb-438c-8b6e-42b0711c56a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mujcbrqrdu2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 41 interactions\nCVE-2026-60004: 16 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-62911: 10 interactions\nCVE-2026-70551: 8 interactions\nCVE-2026-83548: 7 interactions\n", "creation_timestamp": "2026-09-02T06:22:33.438490Z"}, {"uuid": "5e52a4fa-5208-4a50-9415-323f74dbc14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/SecLabNews/17958", "content": "wp2shell. \u041e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u044f\u0434\u0440\u0435 WordPress \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432\n\n\u0412 \u044f\u0434\u0440\u0435 WordPress \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0434\u043d\u0438\u043c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c. \u041d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u043d\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u044b. \u0426\u0435\u043f\u043e\u0447\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 wp2shell, \u043e\u043d\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE-2026-60137 \u0438 CVE-2026-63030. \u041f\u043e\u043b\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 WordPress 6.9.0\u20136.9.4 \u0438 7.0.0\u20137.0.1. \u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.8.6, 6.9.5 \u0438 7.0.2.\n\n\u041a\u0440\u0430\u0441\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u043e\u0439. \u041f\u0435\u0440\u0432\u0430\u044f - SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0441\u0435 WP_Query \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 author__not_in. \u0412\u0442\u043e\u0440\u0430\u044f - \u0441\u0431\u043e\u0439 \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 REST API /wp-json/batch/v1, \u0433\u0434\u0435 \u0447\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e\u0434\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0434\u0440\u0443\u0433\u043e\u0433\u043e. \u0422\u0430\u043a \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0435\u0437\u0436\u0430\u0435\u0442 \u0434\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u0438 \u0434\u0432\u0435 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0442\u0447\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0430 Cloudflare \u0441 17 \u0438\u044e\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0434\u043b\u044f \u043e\u0431\u0435\u0438\u0445 CVE. \u041d\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 \u0432\u0440\u0443\u0447\u043d\u0443\u044e: \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u041f\u0430\u0442\u0447 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u043e \u0440\u0430\u0437\u043d\u0438\u0446\u0435 \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n#WordPress #wp2shell #RCE #CVE\n\n@ZerodayAlert", "creation_timestamp": "2026-09-02T17:00:19.552840Z"}, {"uuid": "cdaf0025-8bb4-4d79-bf9a-fdf0facfdde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/proxy_bar/3589", "content": "CVE-2026-60004 Gitea RCE \n(CVSS 9.8)\n*\nPoC", "creation_timestamp": "2026-09-02T18:00:05.848622Z"}, {"uuid": "748df31d-80df-4358-bd6d-9033138b8ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-03T00:00:38.850358Z"}, {"uuid": "8a60bf7a-1ec5-481e-8539-faa54e4dacf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/zg4wR79y8Xs5TR-sEF4ufViDE8nGerP6bqE6yl_hOH2_qzw", "content": "", "creation_timestamp": "2026-09-03T00:00:40.704840Z"}, {"uuid": "659acb96-8d57-4a11-b74b-1dfc1ef2a30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3589", "content": "CVE-2026-60004 Gitea RCE \n(CVSS 9.8)\n*\nPoC", "creation_timestamp": "2026-09-03T00:00:40.244094Z"}, {"uuid": "3ab502e3-6797-4a46-ae08-6a33c5ce215f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/SecLabNews/17958", "content": "wp2shell. \u041e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u044f\u0434\u0440\u0435 WordPress \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432\n\n\u0412 \u044f\u0434\u0440\u0435 WordPress \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0434\u043d\u0438\u043c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c. \u041d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u043d\u0438 \u043e\u0441\u043e\u0431\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u044b. \u0426\u0435\u043f\u043e\u0447\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 wp2shell, \u043e\u043d\u0430 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 CVE-2026-60137 \u0438 CVE-2026-63030. \u041f\u043e\u043b\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 WordPress 6.9.0\u20136.9.4 \u0438 7.0.0\u20137.0.1. \u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.8.6, 6.9.5 \u0438 7.0.2.\n\n\u041a\u0440\u0430\u0441\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u043e\u0439. \u041f\u0435\u0440\u0432\u0430\u044f - SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0441\u0435 WP_Query \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 author__not_in. \u0412\u0442\u043e\u0440\u0430\u044f - \u0441\u0431\u043e\u0439 \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 REST API /wp-json/batch/v1, \u0433\u0434\u0435 \u0447\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e\u0434\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0434\u0440\u0443\u0433\u043e\u0433\u043e. \u0422\u0430\u043a \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0435\u0437\u0436\u0430\u0435\u0442 \u0434\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430, \u0438 \u0434\u0432\u0435 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0430\u0442\u0447\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0430 Cloudflare \u0441 17 \u0438\u044e\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 WAF \u0434\u043b\u044f \u043e\u0431\u0435\u0438\u0445 CVE. \u041d\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 \u0432\u0440\u0443\u0447\u043d\u0443\u044e: \u0430\u0432\u0442\u043e\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u041f\u0430\u0442\u0447 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u043e \u0440\u0430\u0437\u043d\u0438\u0446\u0435 \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n#WordPress #wp2shell #RCE #CVE\n\n@ZerodayAlert", "creation_timestamp": "2026-09-03T00:00:41.191811Z"}, {"uuid": "8761a0cd-7d96-482b-a7a4-2dfb20cf39cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/Russian_OSINT/7565", "content": "\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 WordPress 7.0.2, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u043e\u0434\u043d\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 WordPress \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CVE-2026-60137), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 TF1T, dtro \u0438 haongo.\n\n\u0412\u0442\u043e\u0440\u0430\u044f, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-63030), \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0410\u0434\u0430\u043c\u043e\u043c \u041a\u044c\u044e\u0441\u043e\u043c (Adam Kues) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Searchlight Cyber (Assetnote).\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\nhttps://wordpress.org/news/2026/07/wordpress-7-0-2-release/\n--------------------------\n\n\ud83e\udd14\u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435: \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u0435\u0439\u0441\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0440\u044b\u043d\u043e\u0447\u043d\u0430\u044f \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0431\u0440\u043e\u043a\u0435\u0440\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 500 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0431\u044b\u043b \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u043e\u0432\u0435\u0439\u0448\u0435\u0439 \u044f\u0437\u044b\u043a\u043e\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c\u044e \u2b55\ufe0f GPT5.6 Sol Ultra. \u0418\u0418 \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u00ab\u0441 \u0447\u0438\u0441\u0442\u043e\u0433\u043e \u043b\u0438\u0441\u0442\u0430\u00bb \u0432\u0441\u0435\u0433\u043e \u0437\u0430 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0442\u0440\u0430\u0442\u0430\u0445 \u043e\u043a\u043e\u043b\u043e 25 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 (batch-route confusion) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 REST API, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u043e\u043c \u0435\u0449\u0435 \u0432 WordPress 5.6. \u0418\u0418 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u0434\u0432\u0438\u0433 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u043e\u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u0438\u043d\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432.\n\n\u0422\u043e, \u0447\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u043a\u0438\u0431\u0435\u0440\u043e\u0440\u0443\u0436\u0438\u044f \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 500 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043e \u043f\u0440\u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0437\u0430\u0442\u0440\u0430\u0442\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0432 25 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 (\u0438\u043c\u0435\u043d\u043d\u043e \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0440\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0435 \u043d\u0430 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c). \u0418\u0418\u0448\u043a\u0430 \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0437\u0430 10 \u0447\u0430\u0441\u043e\u0432.\n\n\u0418\u0418 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0430\u0448\u0435\u043b \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443, \u043e\u043d \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u043b \u0444\u0435\u043d\u043e\u043c\u0435\u043d\u0430\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u0443\u044e, \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b. \u041a\u0430\u043a \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0441\u044f \u0441\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u043d\u0438 \u043e\u0434\u0438\u043d \u044d\u043a\u0441\u043f\u0435\u0440\u0442-\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0432 \u043c\u0438\u0440\u0435 \u043d\u0435 \u0441\u043c\u043e\u0433 \u0431\u044b \u0441 \u043d\u0443\u043b\u044f \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u043a\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0437\u0430 \u0441\u0442\u043e\u043b\u044c \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:45.964738Z"}, {"uuid": "9cbc2a1d-5829-47a7-8e17-02a3386b65ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60102", "type": "seen", "source": "https://t.me/Russian_OSINT/7482", "content": "\ud83d\ude37 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 \u043f\u043e\u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 OpenWRT (9.6 CVSS)\n\n\u0421\u043e\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Hacker House \u041c\u044d\u0442\u0442\u044c\u044e \u0425\u0438\u043a\u0438, \u043e\u043d \u0436\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e offensive security, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c hackerfantastic, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (0-day) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 OpenWRT. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0434\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (root) \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0441\u0430\u043c\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 9.6 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWRT, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0441\u0442\u0430\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439. \u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0435\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0430 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0438\u043d\u0444\u0435\u0440\u0435\u043d\u0441\u0430, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0437\u0430\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0444\u0430\u0437\u0435 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e\u043c\u0438\u043c\u043e OpenWRT, \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u0442\u043e\u0442 \u043f\u043e\u0434\u0445\u043e\u0434 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445, \u043a\u0430\u043a Horde, Django, WordPress, Gitlab \u0438 Dropbear. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f Horde Framework \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u0438\u0445 \u0438\u0437\u044b\u0441\u043a\u0430\u043d\u0438\u0439 \u0443\u0436\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-60102.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u0442\u0430\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0443\u0432\u0435\u0440\u0435\u043d, \u0447\u0442\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u0430\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435 \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:46.072365Z"}, {"uuid": "50f6653d-a5bf-4fd1-9cd0-606ff8293469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "seen", "source": "https://gist.github.com/alon710/2ed2ec5aa094c7ca5a79e63f27744f8a", "content": "# CVE-2026-60206: CVE-2026-60206: Unauthenticated SAML Authentication Bypass in Oracle WebLogic Server\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-07-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-60206\n\n## Summary\nA critical vulnerability (CVE-2026-60206) in Oracle WebLogic Server allows unauthenticated or low-privileged attackers to bypass SAML authentication controls. This flaw stems from improper validation of XML signatures and parsing discrepancies in SAML assertions, allowing arbitrary administrative session creation.\n\n## TL;DR\nUnauthenticated SAML authentication bypass in Oracle WebLogic Server leading to administrative console access and remote code execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-306 / CWE-287\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.9\n- **EPSS Score**: 0.00541\n- **Impact**: Administrative Takeover / Remote Code Execution\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Oracle WebLogic Server 12.2.1.4.0\n- Oracle WebLogic Server 14.1.1.0.0\n- Oracle WebLogic Server 14.1.2.0.0\n- Oracle WebLogic Server 15.1.1.0.0\n- **WebLogic Server**: 12.2.1.4.0 (Fixed in: `Patch Applied`)\n- **WebLogic Server**: 14.1.1.0.0 (Fixed in: `Patch Applied`)\n- **WebLogic Server**: 14.1.2.0.0 (Fixed in: `Patch Applied`)\n- **WebLogic Server**: 15.1.1.0.0 (Fixed in: `Patch Applied`)\n\n## Mitigation\n\n- Apply Oracle July 2026 Critical Patch Update (CPU)\n- Restrict access to WebLogic admin console ports (7001/7002)\n- Implement Web Application Firewall (WAF) inspection rules for SAML XML payloads\n\n**Remediation Steps:**\n1. Download the patch corresponding to your WebLogic Server version from Oracle Support.\n2. Use the OPatch utility to apply the patch to the WebLogic Server home directory.\n3. Restart the WebLogic Server domains to apply the security changes.\n4. Verify the patch installation using 'opatch lsinventory'.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-60206) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T10:01:40.198478Z"}, {"uuid": "f39d3508-b150-4c92-8755-218654451c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/bizone_channel/2810", "content": "\ud83d\udd3a\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WP2Shell \u0432 WordPress Core \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9,8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS\n\nCVE-2026-63030 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2026-60137 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u044f\u0434\u0440\u043e WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.0\u20136.9.4 \u0438 7.0.0\u20137.0.1 (SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f CVE-2026-60137 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0442\u043a\u0443 6.8.0\u20136.8.5). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 REST API batch \u2014 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f remote code execution (RCE) \u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n17 \u0438\u044e\u043b\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b, \u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b BI.Z\u041eNE WAF \u0443\u0436\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c:\n\n\ud83d\udd35\u041a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c WordPress \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2 (\u0432\u0435\u0442\u043a\u0430 7.0), 6.9.5 (\u0432\u0435\u0442\u043a\u0430 6.9) \u0438\u043b\u0438 6.8.6 (\u0432\u0435\u0442\u043a\u0430 6.8, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e).\n\n\ud83d\udd35\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /wp-json/batch/v1 \u0438 ?rest_route=/batch/v1, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WordPress \u2014 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 BI.Z\u041eNE WAF \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 WP2Shell, \u0430 \u0432 BI.Z\u041eNE EASM \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-03T12:00:06.467023Z"}, {"uuid": "66093760-20d9-4650-bfc1-cc7d071f07e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/bizone_channel/2810", "content": "\ud83d\udd3a\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WP2Shell \u0432 WordPress Core \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9,8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS\n\nCVE-2026-63030 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2026-60137 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u044f\u0434\u0440\u043e WordPress \u0432\u0435\u0440\u0441\u0438\u0439 6.9.0\u20136.9.4 \u0438 7.0.0\u20137.0.1 (SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f CVE-2026-60137 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0442\u043a\u0443 6.8.0\u20136.8.5). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 REST API batch \u2014 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f remote code execution (RCE) \u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.\n\n17 \u0438\u044e\u043b\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b, \u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b BI.Z\u041eNE WAF \u0443\u0436\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c:\n\n\ud83d\udd35\u041a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c WordPress \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.2 (\u0432\u0435\u0442\u043a\u0430 7.0), 6.9.5 (\u0432\u0435\u0442\u043a\u0430 6.9) \u0438\u043b\u0438 6.8.6 (\u0432\u0435\u0442\u043a\u0430 6.8, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e).\n\n\ud83d\udd35\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /wp-json/batch/v1 \u0438 ?rest_route=/batch/v1, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WordPress \u2014 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 BI.Z\u041eNE WAF \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 WP2Shell, \u0430 \u0432 BI.Z\u041eNE EASM \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-09-04T00:00:51.386513Z"}, {"uuid": "2ed86b98-032e-44ed-b1ca-788d713f71eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2pkby5k2r", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\u3001\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3082 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670815\u65e5\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306b\u3082\u5bfe\u51e6\u3057\u3066\u3044\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95937\u670815\u65e5\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42533\u300d\u300cCVE-2026-60005\u300d\u300cCVE-2026-56434\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u300cCVE-2026-42533\u300d\u306f\u3001\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u300cmap\u300d\u30c7\u30a3\u30ec\u30af...", "creation_timestamp": "2026-09-04T13:23:04.560873Z"}, {"uuid": "d6cb21a7-f2ed-400f-a14d-02a0edd8eda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/1026", "content": "#poc #pentest \n\nwp2shell \ud83d\udccc\n\nwp2shell \u2014 \u044d\u0442\u043e PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0438\u0439 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2026-63030 & CVE-2026-60137) WordPress Core \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE.\n\n \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\n\u25fd\ufe0f\u0412\u0435\u0440\u0441\u0438\u044f WordPress: 6.9.0 \u2013 6.9.4 \u0438\u043b\u0438 7.0.0 \u2013 7.0.1. \n\n\u0418\u043c\u0435\u043d\u043d\u043e \u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e, \u043e\u0431\u0440\u0430\u0437\u0443\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE. \u0411\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 (6.8.x) \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0442\u043e\u043b\u044c\u043a\u043e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u043d\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439\n\n\u25fd\ufe0f\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c REST API: \u0426\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0430\u0439\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 REST API endpoint \u043f\u043e \u043f\u0443\u0442\u0438 /wp-json/batch/v1\n\n\u25fd\ufe0f\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u043d\u043e\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438: \u042d\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u044d\u0442\u0430\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 wp2shell \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e (CVE-2026-60137) \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f UNION SELECT-\u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0427\u0442\u043e\u0431\u044b \u044d\u0442\u043e\u0442 UNION-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438 \u0441\u043e\u0437\u0434\u0430\u043b \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u044a\u0435\u043a\u0442\u044b,  \u043d\u0443\u0436\u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u0441\u0430\u0439\u0442\u0430.\n\n\u26a0\ufe0f  \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.9.5 \u0438\u043b\u0438 7.0.2 \u2014 \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 WAF \u0438\u043b\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043b\u044f REST API \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435 \u0441\u0442\u0430\u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c.", "creation_timestamp": "2026-09-04T14:00:05.260908Z"}, {"uuid": "97d0d17a-d6bc-4641-9362-c81c27d2ee4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60921", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muq6p77pl42k", "content": "\ud83d\udccc CVE-2026-60921 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60921", "creation_timestamp": "2026-09-05T00:07:06.880662Z"}, {"uuid": "47e9cc1a-6d51-42ec-a404-aba32cce9b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ", "content": "", "creation_timestamp": "2026-09-05T01:00:04.912414Z"}, {"uuid": "500da775-c5e1-41f7-b6eb-5781b0d94bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/1026", "content": "#poc #pentest \n\nwp2shell \ud83d\udccc\n\nwp2shell \u2014 \u044d\u0442\u043e PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0438\u0439 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2026-63030 & CVE-2026-60137) WordPress Core \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE.\n\n \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\n\u25fd\ufe0f\u0412\u0435\u0440\u0441\u0438\u044f WordPress: 6.9.0 \u2013 6.9.4 \u0438\u043b\u0438 7.0.0 \u2013 7.0.1. \n\n\u0418\u043c\u0435\u043d\u043d\u043e \u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e, \u043e\u0431\u0440\u0430\u0437\u0443\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE. \u0411\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 (6.8.x) \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0442\u043e\u043b\u044c\u043a\u043e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u043d\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439\n\n\u25fd\ufe0f\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c REST API: \u0426\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0430\u0439\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 REST API endpoint \u043f\u043e \u043f\u0443\u0442\u0438 /wp-json/batch/v1\n\n\u25fd\ufe0f\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u043d\u043e\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438: \u042d\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u044d\u0442\u0430\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 wp2shell \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e (CVE-2026-60137) \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f UNION SELECT-\u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0427\u0442\u043e\u0431\u044b \u044d\u0442\u043e\u0442 UNION-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438 \u0441\u043e\u0437\u0434\u0430\u043b \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u0431\u044a\u0435\u043a\u0442\u044b,  \u043d\u0443\u0436\u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u0441\u0430\u0439\u0442\u0430.\n\n\u26a0\ufe0f  \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.9.5 \u0438\u043b\u0438 7.0.2 \u2014 \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 WAF \u0438\u043b\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043b\u044f REST API \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435 \u0441\u0442\u0430\u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c.", "creation_timestamp": "2026-09-05T01:00:27.312321Z"}, {"uuid": "ac76334a-5eea-4647-b2ac-96dd9d895922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60970", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muraa3nuk32w", "content": "\ud83d\udccc CVE-2026-60970 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).  Supported versions that are ... https://www.cyberhub.blog/cves/CVE-2026-60970", "creation_timestamp": "2026-09-05T10:07:07.515839Z"}, {"uuid": "eba01f09-92f0-4ada-85d9-89e9e639fa70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60721", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3murxp4kyqs2w", "content": "\ud83d\udccc CVE-2026-60721 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).  Supported versions that are affected are... https://www.cyberhub.blog/cves/CVE-2026-60721", "creation_timestamp": "2026-09-05T17:07:07.546307Z"}, {"uuid": "09ca8587-d208-4623-8a06-5410151a6ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60206", "type": "published-proof-of-concept", "source": "Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ", "content": "", "creation_timestamp": "2026-09-06T00:01:04.334674Z"}, {"uuid": "504f5cd1-c107-43bb-819c-89834d0a9f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpress_wp2shell_sqli.rb", "content": "{\"actions\": [{\"description\": \"Dump username and password hash for COUNT users via blind SQLi\", \"name\": \"List Users\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"dividesbyzer0\", \"Searchlight Cyber\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"WordPress core 6.9.0 - 6.9.4 and 7.0.0 - 7.0.1 are affected by an unauthenticated\\n          SQL injection reachable through the REST API batch endpoint (/batch/v1).\\n\\n          The batch controller builds parallel $matches (the matched handler per sub-request)\\n          and $validation (the validation result per sub-request) arrays, then indexes both by\\n          the same offset when dispatching. A sub-request whose path fails wp_parse_url() is\\n          appended to $validation but not to $matches, desynchronising the two arrays so a\\n          sub-request is dispatched under a different sub-request's handler (CVE-2026-63030).\\n\\n          Nesting the primitive twice lets a GET on the single-post item route\\n          /wp/v2/posts/999999, carrying the collection-only parameter author_exclude, be\\n          dispatched under the posts collection get_items() handler, where author_exclude maps\\n          to the WP_Query author__not_in query var. The vulnerable builds interpolate that value\\n          into SQL as a string (CVE-2026-60137), producing a pre-authentication boolean- and\\n          time-based blind SQL injection in the post_author NOT IN (...) clause.\\n\\n          This module confirms the route-confusion primitive with a benign marker probe, then\\n          uses a time-based blind injection to dump WordPress user logins and password hashes.\\n          It is read-only and does not create posts, users, or other content.\", \"disclosure_date\": \"2026-07-17\", \"fullname\": \"auxiliary/scanner/http/wordpress_wp2shell_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-08-16 12:54:09 +0000\", \"name\": \"WordPress Core wp2shell Unauthenticated SQL Injection via REST Batch Route Confusion\", \"needs_cleanup\": false, \"notes\": {\"RelatedModules\": [\"exploit/multi/http/wp_batch_desync_rce\"], \"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wordpress_wp2shell_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wordpress_wp2shell_sqli\", \"references\": [\"CVE-2026-63030\", \"CVE-2026-60137\", \"URL-https://www.rapid7.com/blog/post/etr-cve-2026-63030-wp2shell-a-critical-remote-code-execution-vulnerability-in-wordpress-core/\", \"URL-https://blog.zsec.uk/wp2shell-code-trace-deep-dive/\", \"URL-https://github.com/Icex0/wp2shell-poc\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:55.992113Z"}, {"uuid": "3489758a-92ce-48a8-bad8-1777039134b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Adam Kues\", \"TF1T\", \"dtro\", \"haongo\", \"Crypto-Cat\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module chains two WordPress core vulnerabilities, together known as\\n          WP2Shell, to gain unauthenticated remote code execution against default\\n          installs of WordPress 6.9.0-6.9.4 and 7.0.0-7.0.1.\\n          The vulnerabilities are fixed in WordPress 6.9.5 and 7.0.2.\\n\\n          CVE-2026-60137 is an SQL injection in WP_Query's author__not_in parameter, and\\n          CVE-2026-63030 is a REST API batch endpoint route-confusion bug that lets an\\n          unauthenticated request reach that injection.\\n\\n          The module uses the injection to read the database table prefix and the\\n          administrator user ID, poisons WordPress' object cache to publish a crafted\\n          customizer changeset, and re-enters the REST API with administrator privileges\\n          to create a new administrator account. It then logs in as that account, uploads\\n          a plugin containing a Metasploit payload, and executes it for a session. Once a\\n          session is obtained the uploaded plugin is removed, and the created administrator\\n          account is removed as well unless KeepAdmin is set.\", \"disclosure_date\": \"2026-07-17\", \"fullname\": \"exploit/multi/http/wp_batch_desync_rce\", \"is_install_path\": true, \"mod_time\": \"2026-08-06 12:35:36 +0000\", \"name\": \"WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_batch_desync_rce.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_batch_desync_rce\", \"references\": [\"CVE-2026-63030\", \"CVE-2026-60137\", \"URL-https://wordpress.org/news/2026/07/wordpress-7-0-2-release/\", \"URL-https://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/\", \"URL-https://github.com/Crypto-Cat/wp2shell\", \"URL-https://wp2shell.com/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:20.837744Z"}, {"uuid": "1fd51e56-2668-4eff-999e-9d76ef227180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "content": "", "creation_timestamp": "2026-09-08T18:35:05.863537Z"}, {"uuid": "8d7f4669-4ffd-4055-9001-988a0ad2a619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvpi5wt2c", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-60004: Gitea: Remote Code Execution via diffpatch Git Hook Installation\nCVSS 9.8 \u00b7 EPSS 86.8% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-60004\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:56.593600Z"}, {"uuid": "454d078e-31b3-42d3-a581-40423cbe76ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60105.yaml", "content": "", "creation_timestamp": "2026-09-09T03:00:12.822824Z"}, {"uuid": "dfab1043-4bb2-4508-ba48-4ef2e0ab85fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60105.yaml", "content": "", "creation_timestamp": "2026-09-10T00:00:14.038127Z"}, {"uuid": "76d8323a-df68-43a1-98f2-35e00a9e422a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60105.yaml", "content": "", "creation_timestamp": "2026-09-11T00:00:10.616752Z"}, {"uuid": "1a5e20b4-2e3a-46ea-96a9-5f6c9fc239db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/xakep_ru/20040", "content": "\u0411\u043e\u043b\u0435\u0435 8300 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Gitea \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 The Shadowserver Foundation \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 8300 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Gitea \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-60004. \u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2026/09/11/gitea-rce/", "creation_timestamp": "2026-09-11T14:00:06.469520Z"}, {"uuid": "c62097d1-5530-44e8-a63e-381e8327cc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60105", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60105.yaml", "content": "", "creation_timestamp": "2026-09-12T00:00:11.507164Z"}, {"uuid": "bbc477b8-3a74-49c7-a300-184c6d0ee370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/xakep_ru/20040", "content": "\u0411\u043e\u043b\u0435\u0435 8300 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Gitea \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 The Shadowserver Foundation \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 8300 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Gitea \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-60004. \u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2026/09/11/gitea-rce/", "creation_timestamp": "2026-09-12T00:00:41.360033Z"}, {"uuid": "7d6eaf34-68e7-41d3-9a77-19b6a0b24af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6001", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n  \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n  \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n  \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n  \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n  \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n  \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n  \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n  \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n  \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n  \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n  \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n  \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n  \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n  \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n  \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n  \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n  \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:06.036386Z"}, {"uuid": "461c9663-2e59-46c1-a08e-dd613394bf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6002", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n  \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n  \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n  \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n  \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n  \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n  \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n  \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n  \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n  \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n  \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n  \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n  \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n  \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n  \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n  \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:13.520480Z"}, {"uuid": "8826a742-9c4d-4a93-a9cb-56ddf9e27458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6002", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n  \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n  \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n  \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n  \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n  \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n  \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n  \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n  \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n  \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n  \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n  \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n  \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n  \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n  \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n  \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:37.689702Z"}, {"uuid": "5a7e3b30-7e24-49e9-98e7-452fca7fda0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6001", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n  \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n  \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n  \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n  \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n  \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n  \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n  \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n  \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n  \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n  \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n  \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n  \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n  \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n  \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n  \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n  \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n  \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:54.799964Z"}, {"uuid": "1fc75cb8-5a93-4c9a-bfba-378f926735c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/CIwg3dUruFUkA2IiAP63EE_3LOdvwiOYKhxCOUQk67UuENI", "content": "", "creation_timestamp": "2026-09-14T03:00:07.448064Z"}, {"uuid": "89433177-9f58-43ee-91b0-06dc67e4075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102315", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a erberkan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 15:57:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T19:00:05.651099Z"}, {"uuid": "f44c2637-ac72-4951-bd2f-db6edfc09712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvispqshge2e", "content": "Red Heron, a China-linked group, has automated exploitation of Gitea RCE CVE-2026-60004, hitting 13 orgs in 6 countries per Acronis TRU. Patch Gitea now. https://thehackernews.com/2026/09/red-heron-exploits-gitea-rce-to.html", "creation_timestamp": "2026-09-14T19:09:13.963678Z"}, {"uuid": "5af3d757-94c3-4f4a-8bb3-69950a6f56dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102315", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a erberkan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 15:57:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:11.818721Z"}, {"uuid": "ea3a8f06-533c-44ac-93c9-380740b3893d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/CIwg3dUruFUkA2IiAP63EE_3LOdvwiOYKhxCOUQk67UuENI", "content": "", "creation_timestamp": "2026-09-15T00:00:29.163070Z"}, {"uuid": "8cf43bb1-5539-4ef3-b6f6-4db3100dfef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mvka7r3pxc2q", "content": "Acronis TRU uncovered a multinational campaign in which Red Heron, a Chinese-speaking threat actor, rapidly weaponized CVE-2026-60004 to compromise internet-facing instances of Gitea, a self-hosted source-code management platform. www.acronis.com/en/tru/posts...", "creation_timestamp": "2026-09-15T08:43:33.406998Z"}, {"uuid": "f0b2b107-6c8a-4c68-9d69-3aadf93f072b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvkfmmz7qk22", "content": "Critical Gitea RCE bug CVE-2026-60004 in versions 1.17-1.27.0 now in live attacks\u2014upgrade ASAP. #Security #CVE2026-60004 #Gitea #RCE #Infosec #CyberAttack https://thedailytechfeed.com/critical-gitea-rce-vulnerability-under-active-attack-what-you-need-to-know/", "creation_timestamp": "2026-09-15T10:20:09.837029Z"}, {"uuid": "3d241152-a21e-4c66-9bc2-9d095ed42a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvmvkvvblk2g", "content": "Original text: \"Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit\" \u2014 Subhajeet Singha, Acronis Threat Research Unit (13 September 2026). Figures, sector/command/IOC tables and publish\nhttps://core-jmp.org/2026/09/red-heron-gitea-cve-2026-60004-jitterly-sixzut/", "creation_timestamp": "2026-09-16T10:10:52.623959Z"}, {"uuid": "9cb9167d-957e-44ba-8c67-aea58e557668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://gist.github.com/alon710/8bb76681f888e7031338e0a8853407f6", "content": "# CVE-2026-60137: CVE-2026-60137: SQL Injection in WordPress Core WP_Query Class via author__not_in Parameter\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-07-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-60137\n\n## Summary\nCVE-2026-60137 is a critical SQL injection vulnerability in the Core component of WordPress. The flaw occurs within the WP_Query class during the processing of the author__not_in parameter, where user-supplied array inputs are constructed into a SQL string without strict integer type-casting. When chained with CVE-2026-63030, an unauthenticated remote attacker can exploit this SQL injection to read database values, extract administrator credential hashes, or modify administrative options to execute arbitrary PHP code on the server.\n\n## TL;DR\nWordPress Core contains an SQL injection vulnerability in the WP_Query class when parsing author__not_in parameters. When chained with CVE-2026-63030, unauthenticated attackers can execute arbitrary SQL and escalate privileges to Remote Code Execution.\n\n## Exploit Status: ACTIVE\n\n## Technical Details\n\n- **CWE ID**: CWE-89\n- **Attack Vector**: Network\n- **CVSS Base Score**: 5.9 (Standalone) / 9.8 (Chained)\n- **Exploit Status**: active\n- **CISA KEV Status**: Listed\n- **EPSS Score**: 0.78305\n\n## Affected Systems\n\n- WordPress Core 6.8.0 through 6.8.5\n- WordPress Core 6.9.0 through 6.9.4\n- WordPress Core 7.0.0 through 7.0.1\n- **WordPress Core**: >= 6.8.0, < 6.8.6 (Fixed in: `6.8.6`)\n- **WordPress Core**: >= 6.9.0, < 6.9.5 (Fixed in: `6.9.5`)\n- **WordPress Core**: >= 7.0.0, < 7.0.2 (Fixed in: `7.0.2`)\n\n## Mitigation\n\n- Upgrade WordPress Core immediately to a patched version\n- Disable or block unauthorized access to the REST API batch routes\n- Implement restrictive WAF rules to detect nested array manipulations in REST requests\n\n**Remediation Steps:**\n1. Access the administrative control panel of the WordPress installation.\n2. Navigate to the Updates section and select Update Now to apply the latest security version.\n3. For headless or automated deployments, update the composer.json or version lockfiles to reference 6.8.6, 6.9.5, or 7.0.2.\n4. Configure the Web Application Firewall to block POST requests directed at /wp-json/batch/v1 and /?rest_route=/batch/v1.\n\n## References\n\n- [WordPress Core Advisory (GHSA-fpp7-x2x2-2mjf)](https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf)\n- [WordPress 7.0.2 Security Release](https://wordpress.org/news/2026/07/wordpress-7-0-2-release/)\n- [CISA KEV Catalog Reference](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60137)\n- [Searchlight Cyber Research on wp2shell](https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core)\n- [Aikido Security Blog Analysis](https://www.aikido.dev/blog/unauthenticated-rce-in-wordpress-wp2shell)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-60137) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-16T13:01:54.533652Z"}, {"uuid": "2ded3e6b-6919-47d3-9543-5cb086441373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvomyrzrpk2p", "content": "Forty-eight hours, Morty. Acronis says Red Heron flipped a public Gitea RCE\u2014CVE-2026-60004\u2014into an automated heist across ~1,386 boxes. Defense, elections, energy nested. Self-hosted git as a spy gift shop. Your patch calendar just auctioned the keys. day260.008", "creation_timestamp": "2026-09-17T02:42:54.849177Z"}, {"uuid": "02c5c97c-24a2-4b25-ad93-170fd7b3a4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvpw72c6432n", "content": "\ud83d\udce2 Red Heron exploite CVE-2026-60004 dans Gitea pour d\u00e9ployer un rootkit Linux in\u00e9dit\n\nL'Acronis Threat Research Unit (TRU) a publi\u00e9 le 13 septembre 2026 une analyse d\u00e9taill\u00e9e d'une campagne multinationale men\u00e9e par un acteur\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RedHeron #RootkitLinux #Cyberveille", "creation_timestamp": "2026-09-17T15:00:07.499039Z"}]}