{"vulnerability": "CVE-2025-70841", "sightings": [{"uuid": "fac64a53-ab37-4b3e-bbf0-d0a49e5ce43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-70841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxyafvo3o25", "content": "", "creation_timestamp": "2026-02-03T18:24:28.782025Z"}, {"uuid": "4ace5c3e-424e-4089-99ab-603078875c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-70841", "type": "seen", "source": "https://t.me/CyberDispatch/657", "content": "CVE-2025-70841 \n\nDokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file.", "creation_timestamp": "2026-08-30T00:00:48.209735Z"}, {"uuid": "4a425fa1-342d-41a6-a87c-674bdb173284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-70841", "type": "seen", "source": "https://t.me/CyberDispatch/657", "content": "CVE-2025-70841 \n\nDokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file.", "creation_timestamp": "2026-08-29T20:00:22.407781Z"}, {"uuid": "3857d0c2-e38c-4ed7-bd34-20b7db728e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-70841", "type": "seen", "source": "https://t.me/CyberDispatch/657", "content": "CVE-2025-70841 \n\nDokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file.", "creation_timestamp": "2026-08-31T00:00:12.162047Z"}]}