{"vulnerability": "CVE-2026-28695", "sightings": [{"uuid": "eca87399-8a40-4266-a302-0bb83f6bd7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28695", "type": "published-proof-of-concept", "source": "https://github.com/craftcms/cms/security/advisories/GHSA-94rc-cqvm-m4pw", "content": "", "creation_timestamp": "2026-03-02T23:04:57.000000Z"}, {"uuid": "2145d54e-e362-4db6-b71d-8e8b968ca80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28695", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103521", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-28695-craft-rce-bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gbuyssens\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 10:20:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAuthenticated, **blind** remote code execution in Craft CMS. Fix for CVE-2026-28695\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T11:00:08.000000Z"}, {"uuid": "b7ae80e0-72ec-4dbf-85b2-7a911211eadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28695", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103569", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-28695\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a predyy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 18:29:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-28695 PoC - Authenticated blind remote code execution in Craft CMS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T19:00:08.000000Z"}, {"uuid": "6695cb69-3892-4048-99a8-35c370097a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28695", "type": "seen", "source": "Telegram/OlS7mOCYJDdHF5bGuQyV5ccTCVSJsR8ZTmdToM9KjFzseyE", "content": "", "creation_timestamp": "2026-09-28T03:00:06.000000Z"}, {"uuid": "f2c8f658-f6d7-4b8b-967c-41659ace7eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28695", "type": "seen", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}, {"uuid": "0bf895b0-5483-4d50-ac99-bee3b91e7f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28695", "type": "published-proof-of-concept", "source": "Telegram/OlS7mOCYJDdHF5bGuQyV5ccTCVSJsR8ZTmdToM9KjFzseyE", "content": "", "creation_timestamp": "2026-09-28T03:00:06.000000Z"}, {"uuid": "ab287e65-ba19-41b0-9218-59d0d3c90d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28695", "type": "published-proof-of-concept", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}]}