{"vulnerability": "cve-2026-1256", "sightings": [{"uuid": "e450c2a3-c926-419d-8b36-d3b11f20a9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12562", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4yawc2rp2l", "content": "\ud83d\udfe0 CVE-2026-12562 - High (8.8)\n\nThe RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12562/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T22:00:47.558462Z"}, {"uuid": "ec59e62b-050d-4f5a-bedf-a32fce2cc9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12562", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrwmrz4q652w", "content": "\u8a8d\u8a3c\u4e0d\u8981\u306a\u30b5\u30fc\u30d3\u30b9\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u3092\u81ea\u7531\u306b\u95b2\u89a7\u30fb\u6539\u5909\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-12562 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-31T09:19:37.091653Z"}, {"uuid": "b1d514de-b96a-4bbb-9cd3-74929d957519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12562", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrwwcsfwf22j", "content": "CVE-2026-12562 \u2013 Unauthenticated TCF debug interface in Phoenix Contact RCU II+ and Multiload II+ grants full root access. CVSS 8.8. No patch yet. Isolate devices and restrict network exposure. #CVE #PhoenixContact #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12562/", "creation_timestamp": "2026-07-31T12:10:04.061400Z"}, {"uuid": "05acd6aa-bf6a-4883-b112-0e283f2422b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mryvhd4xn32b", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-12569: A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM\nCVSS 9.8 \u00b7 EPSS 2.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-12569\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-01T07:00:01.508754Z"}, {"uuid": "f478ac66-83dc-410f-a5a4-b63e3461261c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3ms7pvrkgo42c", "content": "Data-Theft Campaign Targets Windchill and FlexPLM via CVE-2026-12569 RCE", "creation_timestamp": "2026-08-04T00:09:22.741685Z"}, {"uuid": "942d6d9a-4221-4d4f-8de9-e99ce5025193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mt6wx4efed2o", "content": "\ud83d\udd12 Cl0p Ransomware Hits PTC Windchill: CVE-2026-12569 - tech-insider.org\n\nThe Cl0p ransomware group has attacked PTC Windchill, a product lifecycle management software, with the inci...\n\nhttps://tinyurl.com/2ydxavb9 #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-08-16T10:07:55.325914Z"}, {"uuid": "33200715-c673-4147-9b81-e0828a1230f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtgr5hgect2e", "content": "Cl0p has named 40+ alleged victims in a PTC Windchill and FlexPLM campaign tied to CVE-2026-12569, using web shells and a custom implant to steal databases, engineering files, and backups. #Cl0p #PTC #Windchill", "creation_timestamp": "2026-08-19T12:45:24.375481Z"}, {"uuid": "085a6311-4ddc-4c44-b806-fbbfec7da427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mszjwvevhn2y", "content": "\u26a0\ufe0f Menaces actives :\n\u2022 VMware vCenter : RCE critique exploit\u00e9e (reverse SSH), serveurs FR compromis.\n\u2022 Cl0p via PTC Windchill (CVE-2026-12569) : ~50 orgs.\nhttps://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/", "creation_timestamp": "2026-08-14T06:31:50.706208Z"}, {"uuid": "92af026c-1d26-4a98-b02c-89bfdb7ea894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8522", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Cl0p \u043d\u0430\u0437\u0432\u0430\u043b\u0430 \u0438\u043c\u0435\u043d\u0430 \u0431\u043e\u043b\u0435\u0435 40 \u0436\u0435\u0440\u0442\u0432 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0439 \u043d\u043e\u0432\u043e\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 PTC Windchill \u0438 FlexPLM, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0430\u043a\u0438\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Shell, Philips, Fiserv, Zebra, Mindray \u0438 Largan Precision.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 CVE-2026-12569, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043d\u0435, \u043a\u043e\u0433\u0434\u0430 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0435\u0451 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0451.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u043c, \u0438, \u043f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c, \u043f\u043e\u043b\u0438\u0446\u0438\u044f \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u0445. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2026-12569 - \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windchill, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\u00a0\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043b\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0418\u0411-\u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 PLM\u00a0\u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Cl0p. \n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Cl0p \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Windchill.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ReliaQuest \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, \u0447\u0442\u043e Cl0p \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u00ab\u043f\u043e\u043b\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u0412\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430, \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 Windchill \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043a\u043b\u0430\u0441\u0441\u043e\u0432 Java, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 Clop \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043e \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e Cl0p\u00a0\u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0430\u0439\u0442\u0435 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043d\u043e 12 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u0438\u043c\u0435\u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u0436\u0435\u0440\u0442\u0432.\n\n\u041d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 40 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Windchill. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u0442\u0438\u043f \u0438 \u043e\u0431\u044a\u0435\u043c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\u00a0\n\n\u041a \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0444\u0430\u0439\u043b\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b, \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u0430\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f, \u0447\u0435\u0440\u0442\u0435\u0436\u0438, \u0441\u0445\u0435\u043c\u044b, \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043e\u0431\u044a\u0435\u043c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0434\u043d\u0443 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u0442 1 \u0413\u0411 \u0434\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0442\u0435\u0440\u0430\u0431\u0430\u0439\u0442.\n\n\u0412\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c, \u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0438\u0445 \u0447\u0430\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043b\u0430\u0442\u0438\u0442\u044c \u0432\u044b\u043a\u0443\u043f.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u0436\u0435\u0440\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u043d\u0435\u0444\u0442\u0435\u0433\u0430\u0437\u043e\u0432\u044b\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Shell, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Philips, \u0444\u0438\u043d\u0442\u0435\u0445-\u0433\u0438\u0433\u0430\u043d\u0442 Fiserv, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 Zebra Technologies, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f Ingersoll Rand, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u0442\u043e\u0447\u0435\u043a \u043f\u0440\u043e\u0434\u0430\u0436 Toast, \u043c\u0438\u0440\u043e\u0432\u043e\u0439 \u043b\u0438\u0434\u0435\u0440 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Mindray \u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u044a\u0435\u043a\u0442\u0438\u0432\u043e\u0432 \u0434\u043b\u044f \u043a\u0430\u043c\u0435\u0440 Apple, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Largan Precision.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GE \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435, \u043d\u043e \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0431\u044b\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0441 \u0441\u0430\u0439\u0442\u0430 Cl0p, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u0432\u044b\u043a\u0443\u043f \u0438\u043b\u0438 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u044b \u0441 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0422\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Shell, Philips, Fiserv \u0438 GE, \u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u0432\u0448\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u0438 \u043e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0444\u0430\u043a\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0443\u0436\u043d\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a Cl0p, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 Oracle E-Business Suite, MOVEit, Cleo \u0438 GoAnywhere, \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u043f\u043e\u0437\u0438\u0446\u0438\u0435\u0439. \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-08-19T14:00:06.633415Z"}, {"uuid": "20c2ae93-9587-49e4-b46c-a6d14489d6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117105802114554772", "content": "\ud83d\udcf0 Clop Group Claims Massive Data Heist from Shell, Philips, GE via PTC Flaw\nClop ransomware group claims massive data theft from Shell, Philips, GE, and 40+ others by exploiting a critical PTC Windchill vulnerability (CVE-2026-12569). #Clop #Ransomware #SupplyChainAttack\n\ud83d\udd17 https://cyber.netsecops.io/articles/clop-ransomware-exploits-ptc-vulnerability-hits-shell-philips-ge/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-16T15:05:33.958990Z"}, {"uuid": "8a1e23a4-4023-4486-888f-836f5e8bcd70", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/35aad638-4268-4603-abcf-c6cdb33026aa", "content": "", "creation_timestamp": "2026-08-20T08:12:45.601698Z"}, {"uuid": "6a87120c-2a48-48c2-972f-8d43ffd317d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12564", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ifjsmmafl4fm2", "content": "CVE-2026-12564 - Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf\nCVE ID : CVE-2026-12564\n \n Published : Aug. 18, 2026, 3:50 p.m. | 22\u00a0minutes ago\n \n Description : A flaw was found in the AAP Contro...", "creation_timestamp": "2026-08-18T16:41:36.967501Z"}, {"uuid": "cd92063e-5edf-4c66-beae-f1e8ef2ab487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mtj4oz2nqi2t", "content": "Here we go again, as the Clop gang casually leveraged an input validation flaw, CVE-2026-12569, across PTC Windchill and FlexPLM software to walk away with engineering diagrams. Industrial giants like Shell, GE, Philips, and dozens more are now left investigating their missing bl...\n\nRead full story", "creation_timestamp": "2026-08-20T11:17:23.851778Z"}, {"uuid": "27c1d43e-a679-4ab3-86fb-cb1a144fd0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12564", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtesrpya5d2c", "content": "\ud83d\udea8 CVE-2026-12564 \u2014 CVSS 9.6 CRITICAL\n\nA flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12564\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:09:18.034192Z"}, {"uuid": "1877f3ba-3934-4d07-a8f1-71148df05b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12564", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtest47g4w25", "content": "CVE-2026-12564 - red hat ansible automation platform 2\nAn attacker with certain privileges can steal a Kubernetes service account token, which allows them to access sensitive data and perform actions within the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-18T18:10:04.157377Z"}, {"uuid": "0cfb7373-5d7d-45a0-a032-8a57b8c7eece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/pphm_HackerNews/2737", "content": "\ud83d\udd34 Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign\n\nThe Cl0p ransomware group has named more than 40 organizations allegedly targeted in the recent campaign that exploited a vulnerability in PTC\u2019s product lifecycle management (PLM) platforms Windchill and FlexPLM.\n\nThe exploitation of the vulnerability, tracked as CVE-2026-12569, came to light in June, when CISA added it to its KEV catalog and the vendor warned of attacks targeting it.\n\nThe flaw is an improper input validation issue that allows a remote, unauthenticated attacker to achieve arbitrary code execution via specially crafted requests.\n\nExploitation of the vulnerability was expected, with police in Germany reportedly alerting organizations about imminent attacks.", "creation_timestamp": "2026-08-21T23:00:05.537277Z"}, {"uuid": "1feccb67-e030-47d9-9932-ca76e604b659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12564", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtevcvdenf2m", "content": "AAP Controller\u306eHashiCorp Vault\u30d7\u30e9\u30b0\u30a4\u30f3\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u30c8\u30fc\u30af\u30f3\u3092\u7a83\u53d6\u3057\u3001Kubernetes API\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306b\u306a\u308b\u8106\u5f31\u6027\u3002\nCVE-2026-12564 CVSS 9.6 | CRITICAL", "creation_timestamp": "2026-08-18T18:54:41.579895Z"}, {"uuid": "d2cac780-b90f-4f20-a431-5598fea76f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mtbablfzcw25", "content": "Clop names Shell, Philips, GE & Fiserv as victims of a PTC Windchill data-theft campaign (CVE-2026-12569) \u2014 months after the flaw was patched. \n\n\ud83c\uddec\ud83c\udde7 zurl.co/I1GGz \n\ud83c\udde9\ud83c\uddea zurl.co/Fmbmy \n\n#Ransomware #CVE #Manufacturing", "creation_timestamp": "2026-08-17T08:00:10.893433Z"}, {"uuid": "2a7e6004-c4f8-4313-b546-ba87d1935819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjckeih622u", "content": "ReliaQuest found Clop deploying a purpose-built JSP web shell that abuses Windchill's internal APIs to decrypt secrets and steal files after exploiting CVE-2026-12569.\n\n#Clop #Windchill #CVE202612569 #WebShell #DataExfiltration", "creation_timestamp": "2026-08-20T13:02:10.514475Z"}, {"uuid": "65801110-a868-44e2-b1a4-99c3f88b71a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/pphm_HackerNews/2281", "content": "\ud83d\udd34 Clop ransomware targets Windchill, FlexPLM in data theft attacks\n\nThe Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.\n\nClop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances.\n\nAs cybersecurity company ReliaQuest reported on Thursday, Clop operators have been deploying JSP webshells that allow them to exfiltrate sensitive data from targeted companies' compromised PLM platforms.", "creation_timestamp": "2026-08-21T23:00:07.746602Z"}, {"uuid": "1174b25c-26fa-407b-a6aa-448f1ecf2755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msejn2hcol22", "content": "Clop claims a ransomware attack on ecc******* via CVE-2026-12569, with DBF, CAD, project, software, and backup data exfiltrated. #Clop #Ransomware #DataLeak", "creation_timestamp": "2026-08-05T22:00:25.834997Z"}, {"uuid": "32716292-a51f-4416-89e2-81c83eae60a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/pphm_HackerNews/1665", "content": "\ud83d\udd34 First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\n\nThe vulnerability is tracked as CVE-2026-12569 and it affects PTC\u2019s Windchill and FlexPLM products. The improper input validation flaw can be exploited by a remote, unauthenticated attacker to execute arbitrary code via specially crafted requests.\n\nThe cybersecurity agency CISA added the security hole to its Known Exploited Vulnerabilities (KEV) catalog, instructing federal agencies to address it by June 28.\n\nThis is the first-ever PTC product vulnerability added to CISA\u2019s KEV catalog, and there do not appear to be any public reports describing the exploitation of other flaws.", "creation_timestamp": "2026-08-21T23:00:11.195462Z"}, {"uuid": "b5b83067-378b-43aa-a703-61803823e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msekhsn7fg2i", "content": "Clop ransomware reportedly hit ipm*******, exploiting CVE-2026-12569 and exfiltrating PDF, CAD, and other sensitive software data. #Clop #Ransomware #DataLeak", "creation_timestamp": "2026-08-05T22:15:23.856515Z"}, {"uuid": "990021f3-2125-4845-950c-bccf40388700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mselcolh4622", "content": "Clop claims a ransomware hit on nuv*******, exploiting CVE-2026-12569 and exfiltrating Project and Soft data. #Clop #Ransomware #DataLeak", "creation_timestamp": "2026-08-05T22:30:25.311324Z"}, {"uuid": "0c033849-3253-4c6a-b9a7-00440da5e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtbrime76k2i", "content": "\ud83d\udcf0 Philips dan GE Selidiki Klaim Pencurian Data oleh Ransomware Clop\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/17/clop-ransomware-ge-philips-data-theft/\n\n#clop #cve-2026-12569 #cybersecurity #dataBreach #dataTheft #exploit #ge #generalElectric #hacker #keamananSiber #keboco", "creation_timestamp": "2026-08-17T13:08:19.123349Z"}, {"uuid": "9e2b79b7-645f-4d75-a633-7014a9baf1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mojojjvsnz2c", "content": "Critical RCE in PTC Windchill PDMLink (CVE-2026-12569, CVSS 9.3) \u2014 no patch yet. Restrict network access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-12569-cwe-20-improper-input-validation-in-d3c6b7768402d666 #OffSeq #CVE202612569 #Security", "creation_timestamp": "2026-06-18T01:30:29.748192Z"}, {"uuid": "1aa99b78-e198-40fa-bfad-a6ff83939fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojqerhu472k", "content": "CVE-2026-12569 - Remote Code Execution (RCE) vulnerability in Windchill PDMlink\nCVE ID : CVE-2026-12569\n \n Published : June 18, 2026, 12:11 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PD...", "creation_timestamp": "2026-06-18T02:03:39.548287Z"}, {"uuid": "049982c1-aedd-4d2a-ad5b-e9ec2203d828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12567", "type": "seen", "source": "https://gist.github.com/alon710/ab95b5b68cf65f68ecfb103546b48b28", "content": "# CVE-2026-12567: CVE-2026-12567: Symlink Following Vulnerability in BBOT github_workflows Module\n\n> **CVSS Score:** 2.2\n> **Published:** 2026-06-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-12567\n\n## Summary\nThe github_workflows module in BBOT (Black Lantern Security OSINT framework) versions 2.0.0 through 2.8.4 constructs local directory paths from user-controlled repository and owner names without validating for symbolic links. A local attacker sharing the scan directory can pre-plant a symlink at the predictable output path, forcing BBOT to write downloaded workflow artifacts or run logs to an arbitrary location on the filesystem.\n\n## TL;DR\nA local symlink-following vulnerability in BBOT's github_workflows module allows an attacker sharing the scan directory to overwrite arbitrary local files when a victim scans a targeted repository.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-59\n- **Attack Vector**: Local\n- **CVSS v3.1 Score**: 2.2\n- **EPSS Score**: 0.0009 (Percentile: 0.60%)\n- **Impact**: Low Integrity Impact (Unsanitized local file write)\n- **Exploit Status**: Proof of Concept (PoC) available in official test suite\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- BBOT installations running on multi-user or shared filesystem configurations\n- **BBOT**: >= 2.0.0, <= 2.8.4 (Fixed in: `2.8.5`)\n\n## Mitigation\n\n- Upgrade BBOT to version 2.8.5 or later to apply the path-validation logic.\n- Enforce operating system-level link protections to block unauthorized link resolution.\n- Use unique, restricted output directories rather than shared folders like /tmp.\n\n**Remediation Steps:**\n1. Identify the current BBOT installation version: bbot --version\n2. Upgrade the installation using pip: pip install --upgrade bbot\n3. Configure your system's sysctl configuration to enforce symlink and hardlink security protections.\n4. Verify that bbot scan output configurations point to user-specific directories with permissions restricted to 0700.\n\n## References\n\n- [CVE-2026-12567 MITRE Record](https://www.cve.org/CVERecord?id=CVE-2026-12567)\n- [BBOT Git Patch Commit](https://github.com/blacklanternsecurity/bbot/commit/16d9c42b6c591c07ee94d260cb0588e72d4eae2b)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-12567) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-18T15:41:36.000000Z"}, {"uuid": "c08e57bc-2bba-4d03-8016-6fd55afeced5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12568", "type": "seen", "source": "https://gist.github.com/alon710/77831f5963e3a7aeac8b1ac3758c9a18", "content": "# CVE-2026-12568: CVE-2026-12568: Path Traversal and Arbitrary File Write in BBOT postman_download Module\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-06-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-12568\n\n## Summary\nCVE-2026-12568 is a path traversal vulnerability (CWE-22) in the postman_download module of BBOT (Babbage Border Obsession Tool) version 2.1.0 through 2.8.5. The vulnerability allows an attacker to perform arbitrary file writes on the local machine running the BBOT scan via a maliciously named remote Postman workspace.\n\n## TL;DR\nA path traversal vulnerability in BBOT's postman_download module allows remote attackers to execute arbitrary file writes using crafted Postman workspace names.\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 6.5\n- **EPSS Score**: 0.00251 (Percentile: 16.15%)\n- **Impact**: Arbitrary File Write\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- BBOT (Babbage Border Obsession Tool)\n- **BBOT**: >= 2.1.0, <= 2.8.5 (Fixed in: `2.8.6`)\n\n## Mitigation\n\n- Upgrade BBOT to a version newer than 2.8.5\n- Apply path sanitization and canonical path validation checks to the postman_download module\n\n**Remediation Steps:**\n1. Identify installations running BBOT versions <= 2.8.5.\n2. Execute pip install --upgrade bbot or update the dependency in your environment manager.\n3. Verify the installation of version 2.8.6 or newer.\n4. If updating is restricted, manually apply the path validation logic using pathlib's resolve() and is_relative_to() methods to the postman_download.py module.\n\n## References\n\n- [https://www.cve.org/CVERecord?id=CVE-2026-12568](https://www.cve.org/CVERecord?id=CVE-2026-12568)\n- [https://github.com/blacklanternsecurity/bbot/commit/36bc20818206a59f6d430e905248f85c439e5397](https://github.com/blacklanternsecurity/bbot/commit/36bc20818206a59f6d430e905248f85c439e5397)\n- [https://api.first.org/data/v1/epss?cve=CVE-2026-12568](https://api.first.org/data/v1/epss?cve=CVE-2026-12568)\n- [https://attack.mitre.org/search/?search=CVE-2026-12568](https://attack.mitre.org/search/?search=CVE-2026-12568)\n- [https://www.shodan.io/search?query=CVE-2026-12568](https://www.shodan.io/search?query=CVE-2026-12568)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-12568) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-18T16:21:14.000000Z"}, {"uuid": "68613644-59ab-4394-b841-9335a538b3b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12566", "type": "seen", "source": "https://gist.github.com/alon710/d4f4b73b0a184d9eef118aa0970357bf", "content": "# CVE-2026-12566: CVE-2026-12566: Server-Side Request Forgery (SSRF) in Black Lantern Security BBOT docker_pull Module\n\n> **CVSS Score:** 3.1\n> **Published:** 2026-06-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-12566\n\n## Summary\nA Server-Side Request Forgery (SSRF) vulnerability exists in the docker_pull module of Black Lantern Security BBOT. By returning a maliciously crafted WWW-Authenticate header from a rogue Docker registry or executing a Man-in-the-Middle (MitM) attack, an attacker can coerce the BBOT scanner into making arbitrary HTTP requests to internal system services or external infrastructure, potentially disclosing sensitive authorization tokens and host metadata.\n\n## TL;DR\nBlack Lantern Security BBOT's docker_pull module blindly parses and requests the realm URL from a Docker registry's WWW-Authenticate header, leading to Server-Side Request Forgery (SSRF) and potential credential exposure.\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.1 (Low)\n- **EPSS Score**: 0.00167\n- **Impact**: Low-severity information disclosure and Server-Side Request Forgery\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Black Lantern Security BBOT (docker_pull module)\n- **BBOT**: >= 2.0.0, <= 2.8.4 (Fixed in: `2.8.5`)\n\n## Mitigation\n\n- Upgrade BBOT to version 2.8.5 or higher.\n- Enforce network segmentation and firewall rules to block scanner egress traffic to private IP addresses (RFC 1918).\n- Enforce IMDSv2 with a hop limit of 1 on cloud instances executing active scanning utilities.\n- Implement a forwarding proxy configured to reject connection requests targeting local or loopback interfaces.\n\n**Remediation Steps:**\n1. Identify all running BBOT deployments and check their current versions.\n2. Execute the update procedure using the package manager: `pip install --upgrade bbot` or update the Docker container pull to use the latest image tag (>= 2.8.5).\n3. Review the outgoing network security groups of scanning hosts and restrict outbound routing strictly to public IP spaces.\n\n## References\n\n- [BBOT Git Commit Patch](https://github.com/blacklanternsecurity/bbot/commit/c2f4bc0f4e4bb4d00f06750dcabf1d9c74c0d3b4)\n- [CVE-2026-12566 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-12566)\n- [NVD Vulnerability Detail Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-12566)\n- [CWE-918: Server-Side Request Forgery](https://cwe.mitre.org/data/definitions/918.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-12566) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-18T16:41:21.000000Z"}, {"uuid": "2f8d8b71-06f9-4c1f-9370-9f8d906528d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12565", "type": "seen", "source": "https://gist.github.com/alon710/8812bad8b22fe18c159a9af87742e425", "content": "# CVE-2026-12565: CVE-2026-12565: Arbitrary File Write via Path Traversal in BBOT unarchive Module\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-12565\n\n## Summary\nCVE-2026-12565 is a medium-severity path traversal (Zip-Slip) vulnerability within the internal unarchive module of the BBOT (Black Lantern Security) OSINT framework. The vulnerability exists due to a failure to validate target paths before extracting archives using host-level command-line utilities. This allows remote, unauthenticated attackers to write arbitrary files outside of the target extraction folder on environments running legacy versions of GNU tar.\n\n## TL;DR\nUnauthenticated remote attackers can write arbitrary files and potentially achieve remote code execution via a directory traversal exploit in BBOT's unarchive module when executed on legacy platforms.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 5.3 (Medium)\n- **EPSS Score**: 0.00208 (Percentile: 10.84%)\n- **Impact**: Arbitrary File Write / Potential Remote Code Execution\n- **Exploit Status**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- BBOT framework (versions 2.3.1 to 2.8.4)\n- Operating systems utilizing GNU tar < 1.34 (Ubuntu 20.04 LTS, Debian 10 Buster, CentOS 7, legacy Docker base images)\n- **BBOT**: >= 2.3.1, <= 2.8.4 (Fixed in: `Post-2.8.4 patch release`)\n\n## Mitigation\n\n- Upgrade GNU tar on the host system to version 1.34 or later.\n- Run BBOT under non-root users and within containerized environments configured with read-only root filesystems.\n- Manually intercept and validate archive structures prior to invoking external extraction commands.\n\n**Remediation Steps:**\n1. Identify environments running BBOT with legacy GNU tar versions (Ubuntu 20.04, CentOS 7).\n2. Install GNU tar version 1.34+ or migrate to modern base container images (such as Ubuntu 22.04+).\n3. Restrict container write permissions using security constraints like '--read-only' and isolate mount points.\n\n## References\n\n- [Black Lantern Security Vulnerable Commit](https://github.com/blacklanternsecurity/bbot/commit/4fb38fd6e77cbf43b198ee8ddbaf380a9eb69d09)\n- [Official CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-12565)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-12565) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-18T17:11:50.000000Z"}, {"uuid": "e7582c1e-01c0-4fbd-a40d-65c8fc000c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msf6z6eny72m", "content": "Clop Ransomware Strikes Again: New Attack Exploits CVE-2026-12569 to Steal Sensitive Project and Software Data +\u00a0Video\n\nIntroduction: A New Warning Sign in the Growing Ransomware War The ransomware landscape continues to evolve as cybercriminal groups become more aggressive, technically advanced,\u2026", "creation_timestamp": "2026-08-06T04:23:01.508700Z"}, {"uuid": "2a20897c-75bd-4c8c-9e13-28a74bc0ea61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msfbwsmvjr2e", "content": "Clop claims a breach of qc******* via CVE-2026-12569, saying database and project data were exfiltrated. No country was identified. #Clop #Ransomware #DataBreach", "creation_timestamp": "2026-08-06T05:15:51.098606Z"}, {"uuid": "a164d374-6a55-4c28-86b5-01fd7554a620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msfcrndtra2m", "content": "Clop ransomware claims to have hit st*******, exfiltrating Database and Project data and exploiting CVE-2026-12569 in the attack chain. #Clop #Ransomware #DataLeak", "creation_timestamp": "2026-08-06T05:30:23.275203Z"}, {"uuid": "e1de66cc-bf7d-45a9-8ee9-bd8204bfb549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msfcrp5bzn2r", "content": "Clop Ransomware Exploits New Vulnerability to Target Enterprise Data, Raising Fresh Concerns Over Supply Chain Security +\u00a0Video\n\nA New Cybersecurity Threat Emerges Through CVE-2026-12569 The cybersecurity landscape continues to face a growing wave of sophisticated attacks as threat groups adapt\u2026", "creation_timestamp": "2026-08-06T05:30:25.681712Z"}, {"uuid": "194fb8e5-c201-478e-a805-8f3769c929ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msfdghckel2x", "content": "Clop Ransomware Strikes Again: New Attack Exploits CVE-2026-12569 to Steal Database and Project Data +\u00a0Video\n\nA New Wave of Cyber Extortion Targets Critical Business Data The ransomware landscape continues to evolve as threat actors increasingly combine advanced exploitation techniques with\u2026", "creation_timestamp": "2026-08-06T05:42:03.582991Z"}, {"uuid": "1c59a595-a4a9-4460-85fd-c909cb0a99be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msflynj4ab25", "content": "Clop reportedly hit mid******* by exploiting CVE-2026-12569, with exfiltration of databases and project files. The claim does not name a country. #Clop #CVE202612569 #Ransomware", "creation_timestamp": "2026-08-06T08:15:22.450084Z"}, {"uuid": "aa6242f0-9e74-430f-bb24-f51fe4c2aa17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msfmtifkbk2m", "content": "Clop claimed a ransomware attack on flu*******, exploiting CVE-2026-12569 to steal databases, project data, and CAD files. #Ransomware #Clop #DataLeak", "creation_timestamp": "2026-08-06T08:30:33.020279Z"}, {"uuid": "76ad10ff-35cf-40c1-8e80-1c16c55fec16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msfqc7j6cc2s", "content": "Dark Web Ransomware Watch: Clop Claims Attack on Engineering Target Using CVE-2026-12569 to Steal Sensitive Data +\u00a0Video\n\nIntroduction: A New Chapter in the Ransomware War Ransomware groups continue to evolve beyond simple file encryption, increasingly focusing on data theft, intellectual property\u2026", "creation_timestamp": "2026-08-06T09:32:18.845246Z"}, {"uuid": "eeb0e546-db1d-4f04-91f5-410052ab54e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mp55wjyy7k2f", "content": "\ud83d\uded1 CVE-2026-12569\nPTC Windchill and FlexPLM\nCVSS 9.3 / EPSS 0% / KEV \u2705\nTL;DR: A critical remote code execution (RCE) vulnerability has been reported in PTC Windc\u2026\nhttps://cvesentinel.com/report/CVE-2026-12569?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-25T19:26:46.258675Z"}, {"uuid": "929023a8-4de2-4970-afdc-a2828bf9ab1e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/318c6fab-1fd9-4f64-acc3-edc7d13d4030", "content": "", "creation_timestamp": "2026-06-25T20:00:01.914560Z"}, {"uuid": "f3529425-bca6-4fb9-9e62-42a278801060", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eafceb5e-2031-4547-b567-fef9e152991e", "content": "", "creation_timestamp": "2026-06-25T20:00:17.176811Z"}, {"uuid": "f16f8f1a-50f9-44c3-98a0-6091e454ec3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6837277", "content": "2026-06-25: [CVE-2026-12569] PTC Windchill and FlexPLM Improper Input Validation VulnerabilityPTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.\ncisakev", "creation_timestamp": "2026-06-25T20:02:50.934463Z"}, {"uuid": "99138e98-3a5f-43a9-a3d7-832b5eaa4d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mp5bmys3wq2x", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-12569 PTC Windchill and\u2026\n\n\ud83d\udd17 https://hnow.live/a/1d9bc7d6", "creation_timestamp": "2026-06-25T20:33:00.999932Z"}, {"uuid": "7d7594df-1947-427c-9161-682052cab8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mp5g37q2xe2e", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Jun 25)\n\nCVE-2026-12569 PTC Windchill\u304a\u3088\u3073FlexPLM\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u306e\u8106\u5f31\u6027\nCVE-2026-20230 Cisco Unified Communications Manager\u306e\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-25T21:52:34.150487Z"}, {"uuid": "8374c7f3-845c-4bf1-bd8d-87d1cea9d35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mp6jugnkkr2w", "content": "CVE-2026-12569 in PTC Windchill/FlexPLM is being exploited in the wild by remote unauthenticated attackers to execute arbitrary code.\n", "creation_timestamp": "2026-06-26T08:33:00.907568Z"}, {"uuid": "44b467de-1a2f-4544-95b9-a3ecb412c912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mp6vknvr4w26", "content": "CISA added the PTC Windchill CVE-2026-12569 remote execution flaw to its known exploited list. Another day, another critical vulnerability being actively abused in the wild.\n\n#windchillrce #patchingagain", "creation_timestamp": "2026-06-26T12:02:20.840603Z"}, {"uuid": "fb3eca59-ecb7-4338-830b-c66c8e476fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mp6vkqlzcj22", "content": "CISA has kindly added the remote code execution flaw CVE-2026-12569 in PTC Windchill to its ever-expanding catalog of active threats. This means the wild exploits are officially running amok, affecting unfortunate enterprises relying on this software. Protecting ourselves from th...\n\nRead full story", "creation_timestamp": "2026-06-26T12:02:21.954214Z"}, {"uuid": "c61b2285-cb07-4708-a1f1-19f54e44b0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mp6vkw2kgo2r", "content": "CISA adds CVE-2026-12569 to the KEV catalog as adversaries actively exploit PTC Windchill & FlexPLM input validation vulnerabilities. Lock down your supply chain assets. Full forensic indicators, lateral movement tracking, and active endpoint hardening protocols are live:\u2026", "creation_timestamp": "2026-06-26T12:02:26.103473Z"}, {"uuid": "5cbd62a1-f72f-438f-aeb8-27eaeb1f1e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mp6zgoti4k2p", "content": "CISA adds CVE-2026-12569 to the KEV catalog as adversaries actively exploit PTC Windchill & FlexPLM platforms. This is an immediate threat to supply chain integrity and intellectual property. Access our complete executive risk mitigation framework for corporate leadership:\u2026", "creation_timestamp": "2026-06-26T13:11:39.052326Z"}, {"uuid": "b4a8d3f1-47d4-49a6-8f76-3f54e531043b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mp727buqmn2t", "content": "CISA added CVE-2026-12569 to KEV after evidence of active exploitation of PTC Windchill and FlexPLM systems via malicious requests.\n", "creation_timestamp": "2026-06-26T13:25:24.469663Z"}, {"uuid": "c25268cb-a0fc-47d1-a986-01f27e4aa681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116816986268752727", "content": "\ud83d\udcf0 CISA Adds Actively Exploited PTC and Cisco Flaws to KEV Catalog, Mandates Federal Patching\n\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-actively-exploited-ptc-and-cisco-flaws-to-kev-cata\u2026", "creation_timestamp": "2026-06-26T14:55:55.843061Z"}, {"uuid": "0ec3f548-3318-4915-b86e-99f07a4ac55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mp77bxemxo2f", "content": "\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-26T14:56:22.718008Z"}, {"uuid": "ccb07665-b7c4-4a58-9a94-bcd65a15ef6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mp7ffsykag2s", "content": "\ud83e\udd16 CISA adds CVE-2026-12569 (PTC Windchill RCE) to KEV \u2014 actively exploited. Unauthenticated RCE deploys JSP web shells in enterprise PDM/PLM systems.\nhttps://thehackernews.com/2026/06/cisa-adds-exploited-ptc-windchill-rce.html", "creation_timestamp": "2026-06-26T16:45:54.714735Z"}, {"uuid": "79cf9c4a-f7f3-4dad-a2a2-78f18a589723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mp7fjtd7k72h", "content": "\ud83d\udd34 EXPLOITED\n\nThe server holding your product blueprints can be taken over with no password.\n\nCISA just put PTC Windchill on its must-patch list, and web shells are landing on the login page.\n\nRun Windchill or FlexPLM? Patch to 11.0 M030 by Sunday. (CVE-2026-12569)", "creation_timestamp": "2026-06-26T16:48:09.407862Z"}, {"uuid": "f124401b-378f-4ca1-aecb-1fd5f46fec0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpaix7pvdv2b", "content": "PTC Windchill Under Siege: 93 CVSS RCE Flaw (CVE-2026-12569) Actively Exploited for JSP Web Shell Deployment \u2013 CISA KEV Adds Urgency +\u00a0Video\n\nIntroduction: A critical remote code execution vulnerability in PTC Windchill PDMLink and FlexPLM enterprise Product Lifecycle Management (PLM) solutions is\u2026", "creation_timestamp": "2026-06-27T03:22:00.190360Z"}, {"uuid": "e5cf4886-d73e-4bc5-8dbd-36625fb47d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpbfy5a7zz2p", "content": "CISA\u3001PTC Windchill RCE\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \u2014 Web\u30b7\u30a7\u30eb\u653b\u6483\u304c\u7d99\u7d9a\u4e2d\n\nPTC Windchill \u306e RCE \u8106\u5f31\u6027 CVE-2026-12569 \u304c CISA \u306e Known Exploited Vulnerabilities \u30ab\u30bf\u30ed\u30b0\u306b\u767b\u9332\u3055\u308c\u307e\u3057\u305f\u3002\u653b\u6483\u8005\u304c JSP Web\u30b7\u30a7\u30eb\u3092\u5c55\u958b\u3057\u3066\u60aa\u7528\u4e2d\u3067\u3042\u308a\u3001\u88fd\u9020\u30fb\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u4f01\u696d\u306f\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u9808\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-06-27T12:01:29.610830Z"}, {"uuid": "50d6ec07-c8b1-487e-a26a-ed5f7ef1047b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpeabajlfp2u", "content": "\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-28T14:57:10.872806Z"}, {"uuid": "ed3a1ca3-6930-4785-ab01-e98481ed6007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpeo46zkz32m", "content": "First PTC Windchill RCE in CISA KEV. CVE-2026-12569 is under active exploitation, web shells spreading on exposed instances. PLM operators: patch and hunt now. #ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/ptc-windchill-rce-cve-2026-12569-kev-web-shells-2026", "creation_timestamp": "2026-06-28T19:04:54.728393Z"}, {"uuid": "b929cc53-3fd1-499b-95ef-715fb6626f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mpg37n4b3722", "content": "\ud83d\udcf0 CISA Tetapkan Tenggat Waktu Darurat untuk Perbaiki Celah Keamanan Cisco dan PTC Windchill yang Dieksploitasi Peretas\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/29/cisa-sets-urgent-deadline-to-fix-cisco-and-ptc-flaws/\n\n#cisa #cisco #cve-2026-12569 #cve-2026-20230 #defusedT", "creation_timestamp": "2026-06-29T08:32:07.784946Z"}, {"uuid": "00a908a7-c2ec-4521-9b2f-323fd86e44b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpggudv6x32m", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20230, CVE-2026-12569, CVE-2026-8461, CVE-2026-20245, CVE-2025-25205\nActors: Play, Ransomware, Apt\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-29T12:00:33.847053Z"}, {"uuid": "b5cc6199-5aa2-420d-a603-151bf2ef877d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2737", "content": "\ud83d\udd34 Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign\n\nThe Cl0p ransomware group has named more than 40 organizations allegedly targeted in the recent campaign that exploited a vulnerability in PTC\u2019s product lifecycle management (PLM) platforms Windchill and FlexPLM.\n\nThe exploitation of the vulnerability, tracked as CVE-2026-12569, came to light in June, when CISA added it to its KEV catalog and the vendor warned of attacks targeting it.\n\nThe flaw is an improper input validation issue that allows a remote, unauthenticated attacker to achieve arbitrary code execution via specially crafted requests.\n\nExploitation of the vulnerability was expected, with police in Germany reportedly alerting organizations about imminent attacks.", "creation_timestamp": "2026-08-22T00:00:09.184766Z"}, {"uuid": "d417b7f9-1fae-440d-9dff-e96ab6a5a04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgw656sb62o", "content": "A Web of Overreactions: Is CVE-2026-12569 Really the Next Cyber Apocalypse?", "creation_timestamp": "2026-06-29T16:34:29.132904Z"}, {"uuid": "58cc9dba-5479-4efc-b6da-c37da15a86fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpgy374q6m2m", "content": "\ud83d\udea8 CISA KEV [CVSS 9.8 \u00b7 CRITICAL]\nJSP webshells being dropped on unpatched PTC Windchill instances\n\nhttps://www.helpnetsecurity.com/2026/06/29/ptc-windchill-cve-2026-12569-exploited/\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-06-29T17:08:37.508226Z"}, {"uuid": "b7c6fa7e-edd8-4d1a-bbea-dba6cb318514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mph6xy6rqy26", "content": "\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306ePTC Windchill\u3078\u306eJSP Web\u30b7\u30a7\u30eb\u8a2d\u7f6e\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001PTC\u304c\u958b\u767a\u3059\u308b\u88fd\u54c1\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u7ba1\u7406\uff08PLM\uff09\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u3042\u308bWindchill\u304a\u3088\u3073FlexPLM\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-12569\uff09\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f", "creation_timestamp": "2026-06-29T19:12:38.760116Z"}, {"uuid": "d94ef853-527c-4ff7-ae23-30ce74b1f183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpiarzio7v2g", "content": "PTC Windchill Under Active Attack: How CVE-2026-12569 JSP Webshells Are Compromising Manufacturing PLM Systems +\u00a0Video\n\nIntroduction: A critical remote code execution vulnerability in PTC Windchill and FlexPLM product lifecycle management (PLM) platforms is being actively exploited in the wild,\u2026", "creation_timestamp": "2026-06-30T05:17:13.500625Z"}, {"uuid": "1426882a-3932-45c4-b783-2b1f84e559e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/HackerNewscyber/3337", "content": "\u2708\ufe0f\u062d\u0645\u0644\u0647 \u06a9\u0644\u0627\u067e \u0628\u0647 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af\n\n\ud83c\udfa4\u06af\u0631\u0648\u0647 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u06a9\u0644\u0627\u067e (Clop) \u0645\u062f\u0639\u06cc \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0632 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af\u06cc \u0645\u0627\u0646\u0646\u062f \u062c\u0646\u0631\u0627\u0644 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u060c \u0641\u06cc\u0644\u06cc\u067e\u0633 \u0648 \u0634\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-12569 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u00ab\u067e\u06cc\u200c\u062a\u06cc\u200c\u0633\u06cc \u0648\u06cc\u0646\u062f\u0686\u06cc\u0644\u00bb \u0648 \u00ab\u0641\u0644\u06a9\u0633\u200c\u067e\u06cc\u200c\u0627\u0644\u200c\u0627\u0645\u00bb \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\ud83c\udfa5 \u06a9\u0644\u0627\u067e \u0645\u062f\u0639\u06cc \u0634\u062f\u0647 \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633\u06cc \u0645\u0627\u0646\u0646\u062f \u0646\u0642\u0634\u0647\u200c\u0647\u0627\u060c \u0627\u0633\u0646\u0627\u062f \u0641\u0646\u06cc\u060c \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u067e\u0631\u0648\u0698\u0647 \u0648 \u062a\u0635\u0627\u0648\u06cc\u0631 \u062a\u0623\u0633\u06cc\u0633\u0627\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0641\u06cc\u0644\u06cc\u067e\u0633 \u0648\u0642\u0648\u0639 \u06cc\u06a9 \u0646\u0641\u0648\u0630 \u0645\u062d\u062f\u0648\u062f \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0646 \u062d\u0627\u062f\u062b\u0647 \u0628\u0631 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062a\u0623\u062b\u06cc\u0631\u06cc \u0646\u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u067e\u06cc\u0634\u200c\u062a\u0631 \u0627\u0632 \u0633\u0648\u06cc \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0648 \u0622\u0644\u0645\u0627\u0646 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0646\u0642\u0635 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f \u0648 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062f\u0631\u0628\u0627\u0631\u0647 \u0646\u0635\u0628 \u0641\u0648\u0631\u06cc \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-17T20:00:03.733690Z"}, {"uuid": "213c850c-a858-4b85-a267-c8ae277a8fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mpitx3prhs2d", "content": "PTC Windchill CVE-2026-12569 (CVSS 9.3): 2nd exploitation wave in 3 months. JSP web shells deployed in Windchill login directory. CISA KEV, federal deadline June 28. Patch all branches + hunt 16-char hex IOC pattern.\n\nzurl.co/XxpPK\n \n#CISAKEV #PatchNow", "creation_timestamp": "2026-06-30T11:00:04.779973Z"}, {"uuid": "676d5184-bea2-40e2-912f-ebfcc8cc14ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ptc-windchill-e-flexplm-sfruttamento-attivo-in-rete-della-cve-2026-12569", "content": "Rilevato sfruttamento attivo in rete della CVE-2026-12569 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in PTC Windchill PDMLink e PTC FlexPLM note soluzioni software di tipo PLM (Product Lifecycle Management). Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire a un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-06-30T16:01:05.259116Z"}, {"uuid": "e99e9953-9dd2-4520-94ac-be3bbd0643d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mpjloysa4k2a", "content": "JSP webshells being dropped on unpatched PTC Windchill instances\n\nThe US Cybersecurity and Infrastructure Security Agency (CISA) added a vulnerability (CVE-2026-12569) in Windchill and FlexPLM, two product lifecycle management software platforms developed by PTC, to its Known Expl\u2026\n#hackernews #news", "creation_timestamp": "2026-06-30T18:05:02.670238Z"}, {"uuid": "8bf9f526-6768-45a3-a61b-8eaa7ceafb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12560", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpjmeqasoq2c", "content": "CVE-2026-12560 editorial-rating (CVSS Score 4.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-30T18:17:11.565001Z"}, {"uuid": "18e12210-3ae8-4195-90e4-e9ec4b14936a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ptc-windchill-e-flexplm-sfruttamento-attivo-in-rete-della-cve-2026-12569", "content": "Rilevato sfruttamento attivo in rete della CVE-2026-12569 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in PTC Windchill PDMLink e PTC FlexPLM note soluzioni software di tipo PLM (Product Lifecycle Management). Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire a un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-07-01T01:00:45.493291Z"}, {"uuid": "e3f85a54-e281-4706-af67-f6252da03b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8516", "content": "\u0412 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0433\u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0430\u0432\u043d\u044b\u0445.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0435 \u043d\u0430\u043b\u043e\u0433\u043e\u0432\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e, \u0443\u043a\u0440\u0430\u0432 \u043d\u0430\u043b\u043e\u0433\u043e\u0432\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 678 000 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0412\u0437\u043b\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u0413\u0435\u043d\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0424\u0440\u0430\u043d\u0446\u0438\u0438 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0438\u044e\u043d\u044f \u043f\u043e \u0438\u044e\u043b\u044c.\n\n\u041e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0432\u0437\u044f\u043b \u043d\u0430 \u0441\u0435\u0431\u044f \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c ZeroBytes. \u041e\u043d \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 20 \u043c\u043b\u043d. \u0433\u0440\u0430\u0436\u0434\u0430\u043d, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0432\u0437\u043b\u043e\u043c \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u041f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440 \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043f\u0440\u043e\u0434\u0430\u0436\u0443, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435. \u041c\u0430\u0441\u0441\u0438\u0432\u044b \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 15 \u043c\u043b\u043d. \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u043a\u043e\u043b\u043e \u0442\u0440\u0435\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0435\u0439 \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0441\u0442\u0440\u0430\u043d\u044b \u043e\u0442\u0440\u0438\u0446\u0430\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u0441\u0430\u043c\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0443 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u0430.\n\n\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 CRPx0 \u0437\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0430\u0439\u0442\u0435 DLS \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 47 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432 - \u0438\u0437 \u0421\u0428\u0410 \u0438 \u0422\u0443\u0440\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0431\u0430\u043d\u043a\u0438, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0442\u0443\u0440\u0435\u0446\u043a\u043e\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 Hyundai. CRPx0 \u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0438, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0420\u0430\u043a\u0435\u0448 \u041a\u0440\u0438\u0448\u043d\u0430\u043d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u0443\u0441\u043b\u0443\u0433\u0438 \u0438 \u0441\u0430\u0439\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435.\n\n\u041d\u043e\u0432\u0430\u044f \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u0432\u0448\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043a\u0440\u0430\u0436\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 Microsoft Dynamics 365.\n\n\u0421\u0440\u0435\u0434\u0438 \u0436\u0435\u0440\u0442\u0432 \u0433\u0440\u0443\u043f\u043f\u044b ExfilSquad - Allstate, Frontier Airlines, \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0440\u043e\u0434\u0430 \u0410\u0442\u043b\u0430\u043d\u0442\u0430 \u0438 \u0425\u0430\u0443\u0441, \u0430 \u0442\u0430\u043a\u0436\u0435 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Fortra \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 Microsoft Power Pages, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0441\u0440\u0435\u0434\u0443 D365 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\nAvast \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0432\u0435\u0440\u0445\u043b\u0435\u0433\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f Windows \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0432\u0441\u0435\u0433\u043e 12 \u041a\u0411. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u043b\u0438\u0431\u043e \u0442\u0435\u0441\u0442\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f, \u043b\u0438\u0431\u043e \u043e\u0447\u0435\u043d\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 APT.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0441\u0430\u043c\u043e\u0439 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0435\u0433\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u044b\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f: \u0430\u0434\u0440\u0435\u0441 \u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u04212 \u0445\u0440\u0430\u043d\u0438\u043b\u0441\u044f \u043d\u0435 \u0432 \u0432\u0438\u0434\u0435 \u0447\u0438\u0442\u0430\u0435\u043c\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0438\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0432 \u0432\u0438\u0434\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u0432 \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0444\u0430\u0439\u043b\u0430 desktop.ini \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows.\n\n\u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0433\u0438\u0433\u0430\u043d\u0442\u044b General Electric (GE) \u0438 Philips \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 Shell \u0438 \u0432 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0431\u0430\u043d\u0434\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-12569)\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PTC Windchill \u0438 PTC FlexPLM.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0434\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Azure \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500.\n\n\u041d\u0435\u043a\u0442\u043e TheHatman \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0442\u0430\u043a\u0438\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0431\u0440\u0435\u043d\u0434\u043e\u0432, \u043a\u0430\u043a McDonald's Corporation, Tata Consultancy Services (TCS), Vodafone, HCL Technologies, InterContinental Hotels Group (IHG), Kyndryl, Gap Inc., Hexaware Technologies \u0438 Wyndham Hotels.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Hudson Rock, \u043c\u0430\u0441\u0441\u0438\u0432\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u0438\u043a\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0441\u0443\u0434\u044f \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0438\u043c\u0435\u043d\u0430\u043c \u043f\u043e\u043b\u0435\u0439, \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0449\u0438\u043c \u0441 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Azure, \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u044b\u043c\u0438.", "creation_timestamp": "2026-08-19T00:00:27.529458Z"}, {"uuid": "eef2a8d7-3a80-48db-944d-863f1a0f76a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-028", "content": "", "creation_timestamp": "2026-07-01T02:45:16.822973Z"}, {"uuid": "9ed96ef9-370c-41c4-8cdb-ab5ad615ce7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerability-ptc-windchill-and-flexplm-patch-immediately", "content": "", "creation_timestamp": "2026-07-01T02:49:55.210033Z"}, {"uuid": "500af50b-042d-49f9-8a9c-fa33dde652b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/pphm_HackerNews/2281", "content": "\ud83d\udd34 Clop ransomware targets Windchill, FlexPLM in data theft attacks\n\nThe Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.\n\nClop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances.\n\nAs cybersecurity company ReliaQuest reported on Thursday, Clop operators have been deploying JSP webshells that allow them to exfiltrate sensitive data from targeted companies' compromised PLM platforms.", "creation_timestamp": "2026-08-22T00:00:11.326809Z"}, {"uuid": "2e79d994-c40a-45ed-837d-337c89fff362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://www.jerrygamblin.com/2026/07/01/3528/", "content": "We are halfway through 2026, so it is time for the mid-year CVE check-in. The short version: the volume curve has gone vertical while exploitation has not. This review covers everything published in the first half of 2026 (Jan 1 – Jun 30, 2026), the volume, the severity, what is actually being exploited, and who is driving the numbers, all measured against the same elapsed window a year ago so a partial half is never compared to a full one.\n\n\n\n\nTL;DR\n\n\n\n\nThe first half of 2026 produced 35,364 CVEs, more in six months than any full year before 2024 (all of 2023 finished at 28,817). That works out to one new CVE every 7.4 minutes, an increase of 49.5% over the same window in 2025 (23,656). And yet only 85 of them (0.24%) have made CISA’s KEV list so far, a floor that will rise as the cohort ages and exploitation is confirmed. That gap is the story of 2026 so far: we are minting CVEs faster than ever while confirmed exploitation stays rare, so the hard problem is signal-to-noise, not patch volume.\n\n\n\n\nAt this pace the year projects to roughly 71,314 to 72,008, and the all-time catalog has now passed 344,258 CVEs since 1999.\n\n\n\n\n\n\nNote: All statistics in this report exclude rejected CVEs to provide an accurate count of active vulnerabilities.\n\n\n\n\n\nKey Statistics at a Glance\n\n\n\n\n\nMetricValueTotal CVEs (H1 2026)35,364CVEs per Day195.4Change vs same window 2025+49.5%Projected Full Year71,314 – 72,008Critical Severity3,554High Severity13,821Average CVSS Score6.89CVSS Coverage94.3%CWE Coverage95.6%Active CNAs340Rejected CVEs (H1 2026)1,265Already Known-Exploited (KEV)85\n\n\n\n\n\n\n\n\n\nH1-over-H1: Three Years Side by Side\n\n\n\n\nTo keep the comparison honest while 2026 is still in progress, each year is measured over the identical window (January 1 through Jun 30).\n\n\n\n\n\nWindowCVEsPer DayAvg CVSSJan 1 – Jun 30, 202420,374112.66.65Jan 1 – Jun 30, 202523,656130.76.57Jan 1 – Jun 30, 202635,364195.46.89\n\n\n\n\n\n\n\n\n\nForecast Scorecard: Are We On Pace?\n\n\n\n\nAt 195.4 CVEs/day, two straight-line methods land close to each other (both are simple extrapolations of the same H1 run, so this is a sanity check, not two truly independent signals): the run-rate extrapolates to 71,314, and a seasonality-adjusted estimate (scaling the pace across the full half, then dividing by 2025’s 49% first-half share) to 72,008.\n\n\n\n\nCVEForecast, one of my own RogoLabs tools, projects\u00a090,831 CVEs\u00a0for full-year 2026 (LinearRegression, MAPE 17.9), so I am partly arguing with my own model here. That is\u00a018,823 above\u00a0the top of the straight-line range, and here is where I will plant a flag:\u00a0I think the model is high.\u00a0Both simple extrapolations land near 72,008, and the forecast’s entire gap to them rests on a heavy second-half surge that still has to show up.\u00a0My call is the year closes nearer 72,008 than 90,831.\u00a0I will happily eat those words in the December review if H2 accelerates the way the model expects, but the burden of proof is on the surge.\n\n\n\n\n\n\n\n\n\nWhat Changed in H1 2026\n\n\n\n\nGitHub Security Advisories is the busiest CNA at 6,801 assignments. New to the most-affected product list this year: Chrome, OpenClaw. Among weakness types, CWE-862 (Missing Authorization) climbed to #2 in the top five.\n\n\n\n\nSpotlight: OpenClaw. A project that barely existed a year ago, OpenClaw (Peter Steinberger’s viral local AI agent, the subject of Lex Fridman Podcast #491) is already one of the most-reported products of the half with 537 CVEs. The striking part is who is doing the reporting: VulnCheck alone assigned 500 of them (93%), disclosed steadily across the half rather than in a single dump. That concentration says more about researcher attention than code quality: VulnCheck, whose remit is emerging and exploited-in-the-wild threats, is exactly the kind of team that systematically covers a fast-growing new target, and concentrated third-party research on a hot AI agent is the coverage you would want. To its credit the project embraced the CVE lifecycle itself, issuing advisories through GitHub as reports came in. I track its CVEs at OpenClawCVEs.\n\n\n\n\n\n\n\n\n\nHistorical CVE Growth\n\n\n\n\nTo compare like with like, this chart counts only the first half of every year (January 1 through Jun 30). On that basis 2026 already stands taller than any prior first half: more CVEs in six months than the same window has ever produced.\n\n\n\n\n\n\n\n\n\nFirst-half growth has been relentless, and 2026 is +49.5% on the first half of 2025.\n\n\n\n\n\n\n\n\n\nCounting full years, the cumulative catalog has now passed 344,258 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMonthly Distribution (H1 2026)\n\n\n\n\nCVE publications varied across the first half of 2026, with Jun being the peak month at 7,454 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPublication Patterns by Day of Week\n\n\n\n\nPublishing clusters midweek. Wednesday is the busiest day at 7,943 CVEs, with Tuesday close behind at 7,216. Patch Tuesday is part of the story, but the midweek bulge owes as much to the high-volume CNAs (GitHub, Linux, the WordPress plugin crowd) that batch-publish midweek.\n\n\n\n\n\n\n\n\n\nWeekdays average 6,517 CVEs against just 1,389 on weekends.\n\n\n\n\n\n\n\n\n\nBusiest Days of H1 2026\n\n\n\n\nSome days saw massive spikes in CVE publications:\n\n\n\n\n\n\n\n\n\nTop 5 Busiest Days\n\n\n\n\n\nRankDateCVE Count12026-06-0974722026-06-1773232026-05-2771642026-03-2560652026-05-12554\n\n\n\n\n\n\n\n\n\nCVSS Score Analysis\n\n\n\n\nThe Common Vulnerability Scoring System (CVSS) helps standardize severity assessments. Here’s how H1 2026 CVEs were distributed across the scoring range.\n\n\n\n\n\n\n\n\n\nThe average CVSS score for H1 2026 was 6.89, with a median of 7.10.\n\n\n\n\nSeverity Breakdown\n\n\n\n\n\nSeverityCountPercentageCritical3,55410.0%High13,82139.1%Medium14,48541.0%Low3,0568.6%Unscored4481.3%\n\n\n\n\nPercentages are of all H1 2026 CVEs; “Unscored” are the 1.3% with no CVSS severity assigned.\n\n\n\n\n\n\n\n\n\nCVSS Trends Over Time\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nTop Weakness Types (CWE)\n\n\n\n\nThe Common Weakness Enumeration (CWE) categorizes the types of security weaknesses. Here are the most prevalent weakness types in H1 2026:\n\n\n\n\n\n\n\n\n\nTop 5 CWEs in H1 2026\n\n\n\n\n\nRankCWENameCount1CWE-79XSS3,7832CWE-862Missing Authorization1,7043CWE-89SQL Injection1,4454CWE-22Path Traversal1,2645CWE-416Use After Free1,037\n\n\n\n\n\n\n\n\n\nCVE Numbering Authorities (CNAs)\n\n\n\n\nThe leaderboard increasingly reflects where modern software and modern vulnerability research live: platform and ecosystem CNAs (GitHub, Patchstack) and dedicated research CNAs (VulnCheck, VulDB) alongside the traditional product vendors. High assignment counts are not inflation, a CNA covering the WordPress plugin ecosystem or issuing a CVE per kernel fix is doing exactly its job; the low KEV overlap below reflects how rare confirmed exploitation is across all sources, not the validity of any CNA’s records. The most active assigners this year:\n\n\n\n\n\n\n\n\n\nTop 5 CNAs in H1 2026\n\n\n\n\n\nRankCNACVEs Assigned1GitHub Security Advisories6,8012VulDB3,3193VulnCheck3,2734Patchstack2,7045Linux2,564\n\n\n\n\nIn total, 340 unique CNAs assigned CVEs in H1 2026.\n\n\n\n\n\n\n\n\n\nTop Vendors\n\n\n\n\nThe vendors with the most CVEs attributed to their products this year (each links to its NVD search):\n\n\n\n\n\n\n\n\n\nTop 5 Vendors in H1 2026\n\n\n\n\n\nRankVendorCVE Count1Linux2,5642Google1,8013Microsoft8644OpenClaw5375Oracle445\n\n\n\n\n\n\n\n\n\nMost Vulnerable Products\n\n\n\n\nDrilling past vendors to specific products, the H1 2026 leaders:\n\n\n\n\n\n\n\n\n\nTop 5 Products\n\n\n\n\n\nRankProductCVE Count1Linux Kernel1,9562Chrome1,2033OpenClaw5344Windows 103725Android303\n\n\n\n\nProduct-level counts can differ slightly from the vendor totals above: a vendor’s CVEs may span several products, and a single CVE can name more than one.\n\n\n\n\n\n\n\n\n\nKnown-Exploited Vulnerabilities (CISA KEV)\n\n\n\n\nVolume is the headline, but exploitation is what should actually drive patching. Of the 35,364 CVEs published in H1 2026, only 85 (0.24%) have shown up in the CISA KEV catalog so far. Treat that as a floor, not a verdict: KEV is a US-government catalog that lags disclosure by months and records only confirmed, observed exploitation, so this share will climb as the 2026 cohort ages. Even so, the signal holds, most CVEs are not known-exploited, so exploitability (KEV plus a forward-looking score like EPSS) beats chasing raw counts.\n\n\n\n\nNote these are two different populations: the 85 above are H1-2026-published CVEs already in KEV, while CISA added 146 entries to KEV during the half (more than the 132 added in the same window of 2025, many of them older CVEs newly exploited), and 17 of those additions are tied to known ransomware campaigns.\n\n\n\n\nH1 2026 CVEs Already in KEV\n\n\n\n\nA sample (5 most recent of 85):\n\n\n\n\n\nCVEVendorProductAddedRansomwareCVE-2026-48558SimplehelpSimpleHelp2026-06-29NoCVE-2026-20230CiscoUnified Communications Manager2026-06-25NoCVE-2026-12569PtcWindchill and FlexPLM2026-06-25NoCVE-2025-67038LantronixEDS50002026-06-23NoCVE-2026-34910UbiquitiUniFi OS2026-06-23No\n\n\n\n\n\n\n\n\n\nData Quality\n\n\n\n\nNot all CVEs have complete metadata. Here’s how data quality has evolved over the years:\n\n\n\n\n\n\n\n\n\nH1 2026 Data Quality Metrics\n\n\n\n\n\nMetricCoverageCVSS Score94.3%CWE Classification95.6%CPE Identifiers59.0%\n\n\n\n\nThis is where two ideas from the CVE Decaf work I did with Jay Jacobs get practical: actionable data quality (judge a record by whether it is complete enough to act on, not by abstract completeness) and data provenance (knowing which source asserted each field). The CPE gap is the clearest case. At 59.0% CPE coverage, nearly half of H1 2026 CVEs cannot be automatically matched to a product the day they publish, so for those records the answer to “can I act on this today?” is no, no matter how complete the rest of the entry looks. Scoring each record on its provenance (who supplied it) and on the fields that actually drive action (CPE for asset matching, KEV and EPSS for exploitability) is how you turn the raw feed into a measurable signal-to-noise ratio instead of a flat backlog.\n\n\n\n\n\n\n\n\n\nRejected CVEs\n\n\n\n\nNot all CVE IDs stay active. Some are rejected for duplicates, disputes, or invalid submissions, and the rejection rate is a useful read on the ecosystem’s quality control.\n\n\n\n\n\n\n\n\n\nH1 2026 Rejection Statistics\n\n\n\n\n\nMetricValueRejected CVEs in H1 20261,265H1 2026 Rejection Rate3.45%Total Rejected (All Time)17,648\n\n\n\n\nCVE rejections occur for several reasons:\n\n\n\n\n\n\nDuplicates: The same vulnerability assigned multiple CVE IDs\n\n\n\n\nDisputes: Vendor disagreement that the issue is a vulnerability\n\n\n\n\nInvalid: Not a security vulnerability or insufficient information\n\n\n\n\nWithdrawn: CVE withdrawn by the assigning CNA\n\n\n\n\n\n\n\n\n\n\nConclusions\n\n\n\n\nKey Takeaways from the First Half of 2026\n\n\n\n\n\n\nVolume keeps climbing: 35,364 CVEs in roughly six months, up 49.5% on the same window last year, with the full year projecting to 71,314-72,008.\n\n\n\n\nSeverity stays heavy: 17,375 CVEs (49.1%) are Critical or High.\n\n\n\n\nWeb and access-control flaws lead: XSS, Missing Authorization, SQL Injection, Path Traversal headline the CWE list. Memory-safety issues barely register in the top tier this half.\n\n\n\n\nThe CNA mix is shifting: platform teams and aggregators, not the original vendors, now top the assigner list, and the lineup reshuffled from a year ago.\n\n\n\n\nCoverage gaps persist: CVSS and CWE are well covered, but CPE sits at 59.0%, which still hampers automated matching.\n\n\n\n\nConfirmed exploitation stays rare (so far): just 85 of 35,364 H1 CVEs (0.24%) are in CISA KEV today, a floor that rises as the cohort ages. Volume is a triage problem, not a patch-everything problem.\n\n\n\n\n\nWhat this means for you\n\n\n\n\n\n\nIf you defend a network: do not let the raw count set your pace. Only 0.24% of H1 CVEs are confirmed-exploited in KEV today, but KEV lags and is a floor, not the full risk picture. Lead with exploitability (KEV as a hard floor, EPSS with a threshold you pick), then weight by your own context: internet-facing and sensitive systems jump the queue regardless of score, and compliance SLAs (PCI, FedRAMP, and the like) still set hard clocks. Lower priority is not never, so park the rest in a managed cycle rather than ignoring it.\n\n\n\n\nIf you run a CNA: the leaderboard now runs through platforms, ecosystems, and research CNAs. Volume reflects scope, not padding; the differentiator that is still genuinely uneven is data quality, and the biggest gap, CPE coverage, is largely an NVD-side enrichment problem rather than a function of who assigned the CVE.\n\n\n\n\nIf you consume NVD data: enrichment is the bottleneck. CPE at 59.0% means nearly half of new CVEs lack a formal CPE, which complicates NVD-style automated matching (many CNAs still carry vendor/product strings), and volume only widens that gap.\n\n\n\n\n\nWhat I’m watching in H2\n\n\n\n\nMy call from the scorecard stands: 2026 closes nearer 72,008 than the 90,831 forecast. Two things would change my mind: a December disclosure surge bigger than 2025’s, or another OpenClaw-style project flooding the catalog. The year-end review settles it.\n\n\n\n\n\n\n\n\n\nMethodology and Reproducibility\n\n\n\n\nTwo primary data sources, plus two enrichment feeds:\n\n\n\n\n\n\nNVD JSON – National Vulnerability Database export from nvd.handsonhacking.org\n\n\n\n\nCVE List V5 – Official CVE records from CVEProject/cvelistV5\n\n\n\n\nForecast\u00a0–\u00a0CVEForecast\u00a0full-year projection\n\n\n\n\nExploitation – CISA KEV catalog\n\n\n\n\n\nEverything here is reproducible. The full pipeline (Python, pandas, matplotlib) is on GitHub at\u00a0jgamblin/H12026CVEBlog, and it leans on the free CVE tooling I build at\u00a0RogoLabs:\u00a0cve.icu,\u00a0cnascorecard.org, and\u00a0cveforecast.org.\n\n\n\n\nData collected and analyzed on July 01, 2026.", "creation_timestamp": "2026-07-01T19:00:55.848373Z"}, {"uuid": "88e15ea0-d19e-45dd-8f91-7e8c614d4c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://www.jerrygamblin.com/2026/07/01/3528/", "content": "We are halfway through 2026, so it is time for the mid-year CVE check-in. The short version: the volume curve has gone vertical while exploitation has not. This review covers everything published in the first half of 2026 (Jan 1 – Jun 30, 2026), the volume, the severity, what is actually being exploited, and who is driving the numbers, all measured against the same elapsed window a year ago so a partial half is never compared to a full one.\n\n\n\n\nTL;DR\n\n\n\n\nThe first half of 2026 produced 35,364 CVEs, more in six months than any full year before 2024 (all of 2023 finished at 28,817). That works out to one new CVE every 7.4 minutes, an increase of 49.5% over the same window in 2025 (23,656). And yet only 85 of them (0.24%) have made CISA’s KEV list so far, a floor that will rise as the cohort ages and exploitation is confirmed. That gap is the story of 2026 so far: we are minting CVEs faster than ever while confirmed exploitation stays rare, so the hard problem is signal-to-noise, not patch volume.\n\n\n\n\nAt this pace the year projects to roughly 71,314 to 72,008, and the all-time catalog has now passed 344,258 CVEs since 1999.\n\n\n\n\n\n\nNote: All statistics in this report exclude rejected CVEs to provide an accurate count of active vulnerabilities.\n\n\n\n\n\nKey Statistics at a Glance\n\n\n\n\n\nMetricValueTotal CVEs (H1 2026)35,364CVEs per Day195.4Change vs same window 2025+49.5%Projected Full Year71,314 – 72,008Critical Severity3,554High Severity13,821Average CVSS Score6.89CVSS Coverage94.3%CWE Coverage95.6%Active CNAs340Rejected CVEs (H1 2026)1,265Already Known-Exploited (KEV)85\n\n\n\n\n\n\n\n\n\nH1-over-H1: Three Years Side by Side\n\n\n\n\nTo keep the comparison honest while 2026 is still in progress, each year is measured over the identical window (January 1 through Jun 30).\n\n\n\n\n\nWindowCVEsPer DayAvg CVSSJan 1 – Jun 30, 202420,374112.66.65Jan 1 – Jun 30, 202523,656130.76.57Jan 1 – Jun 30, 202635,364195.46.89\n\n\n\n\n\n\n\n\n\nForecast Scorecard: Are We On Pace?\n\n\n\n\nAt 195.4 CVEs/day, two straight-line methods land close to each other (both are simple extrapolations of the same H1 run, so this is a sanity check, not two truly independent signals): the run-rate extrapolates to 71,314, and a seasonality-adjusted estimate (scaling the pace across the full half, then dividing by 2025’s 49% first-half share) to 72,008.\n\n\n\n\nCVEForecast, one of my own RogoLabs tools, projects\u00a090,831 CVEs\u00a0for full-year 2026 (LinearRegression, MAPE 17.9), so I am partly arguing with my own model here. That is\u00a018,823 above\u00a0the top of the straight-line range, and here is where I will plant a flag:\u00a0I think the model is high.\u00a0Both simple extrapolations land near 72,008, and the forecast’s entire gap to them rests on a heavy second-half surge that still has to show up.\u00a0My call is the year closes nearer 72,008 than 90,831.\u00a0I will happily eat those words in the December review if H2 accelerates the way the model expects, but the burden of proof is on the surge.\n\n\n\n\n\n\n\n\n\nWhat Changed in H1 2026\n\n\n\n\nGitHub Security Advisories is the busiest CNA at 6,801 assignments. New to the most-affected product list this year: Chrome, OpenClaw. Among weakness types, CWE-862 (Missing Authorization) climbed to #2 in the top five.\n\n\n\n\nSpotlight: OpenClaw. A project that barely existed a year ago, OpenClaw (Peter Steinberger’s viral local AI agent, the subject of Lex Fridman Podcast #491) is already one of the most-reported products of the half with 537 CVEs. The striking part is who is doing the reporting: VulnCheck alone assigned 500 of them (93%), disclosed steadily across the half rather than in a single dump. That concentration says more about researcher attention than code quality: VulnCheck, whose remit is emerging and exploited-in-the-wild threats, is exactly the kind of team that systematically covers a fast-growing new target, and concentrated third-party research on a hot AI agent is the coverage you would want. To its credit the project embraced the CVE lifecycle itself, issuing advisories through GitHub as reports came in. I track its CVEs at OpenClawCVEs.\n\n\n\n\n\n\n\n\n\nHistorical CVE Growth\n\n\n\n\nTo compare like with like, this chart counts only the first half of every year (January 1 through Jun 30). On that basis 2026 already stands taller than any prior first half: more CVEs in six months than the same window has ever produced.\n\n\n\n\n\n\n\n\n\nFirst-half growth has been relentless, and 2026 is +49.5% on the first half of 2025.\n\n\n\n\n\n\n\n\n\nCounting full years, the cumulative catalog has now passed 344,258 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMonthly Distribution (H1 2026)\n\n\n\n\nCVE publications varied across the first half of 2026, with Jun being the peak month at 7,454 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPublication Patterns by Day of Week\n\n\n\n\nPublishing clusters midweek. Wednesday is the busiest day at 7,943 CVEs, with Tuesday close behind at 7,216. Patch Tuesday is part of the story, but the midweek bulge owes as much to the high-volume CNAs (GitHub, Linux, the WordPress plugin crowd) that batch-publish midweek.\n\n\n\n\n\n\n\n\n\nWeekdays average 6,517 CVEs against just 1,389 on weekends.\n\n\n\n\n\n\n\n\n\nBusiest Days of H1 2026\n\n\n\n\nSome days saw massive spikes in CVE publications:\n\n\n\n\n\n\n\n\n\nTop 5 Busiest Days\n\n\n\n\n\nRankDateCVE Count12026-06-0974722026-06-1773232026-05-2771642026-03-2560652026-05-12554\n\n\n\n\n\n\n\n\n\nCVSS Score Analysis\n\n\n\n\nThe Common Vulnerability Scoring System (CVSS) helps standardize severity assessments. Here’s how H1 2026 CVEs were distributed across the scoring range.\n\n\n\n\n\n\n\n\n\nThe average CVSS score for H1 2026 was 6.89, with a median of 7.10.\n\n\n\n\nSeverity Breakdown\n\n\n\n\n\nSeverityCountPercentageCritical3,55410.0%High13,82139.1%Medium14,48541.0%Low3,0568.6%Unscored4481.3%\n\n\n\n\nPercentages are of all H1 2026 CVEs; “Unscored” are the 1.3% with no CVSS severity assigned.\n\n\n\n\n\n\n\n\n\nCVSS Trends Over Time\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nTop Weakness Types (CWE)\n\n\n\n\nThe Common Weakness Enumeration (CWE) categorizes the types of security weaknesses. Here are the most prevalent weakness types in H1 2026:\n\n\n\n\n\n\n\n\n\nTop 5 CWEs in H1 2026\n\n\n\n\n\nRankCWENameCount1CWE-79XSS3,7832CWE-862Missing Authorization1,7043CWE-89SQL Injection1,4454CWE-22Path Traversal1,2645CWE-416Use After Free1,037\n\n\n\n\n\n\n\n\n\nCVE Numbering Authorities (CNAs)\n\n\n\n\nThe leaderboard increasingly reflects where modern software and modern vulnerability research live: platform and ecosystem CNAs (GitHub, Patchstack) and dedicated research CNAs (VulnCheck, VulDB) alongside the traditional product vendors. High assignment counts are not inflation, a CNA covering the WordPress plugin ecosystem or issuing a CVE per kernel fix is doing exactly its job; the low KEV overlap below reflects how rare confirmed exploitation is across all sources, not the validity of any CNA’s records. The most active assigners this year:\n\n\n\n\n\n\n\n\n\nTop 5 CNAs in H1 2026\n\n\n\n\n\nRankCNACVEs Assigned1GitHub Security Advisories6,8012VulDB3,3193VulnCheck3,2734Patchstack2,7045Linux2,564\n\n\n\n\nIn total, 340 unique CNAs assigned CVEs in H1 2026.\n\n\n\n\n\n\n\n\n\nTop Vendors\n\n\n\n\nThe vendors with the most CVEs attributed to their products this year (each links to its NVD search):\n\n\n\n\n\n\n\n\n\nTop 5 Vendors in H1 2026\n\n\n\n\n\nRankVendorCVE Count1Linux2,5642Google1,8013Microsoft8644OpenClaw5375Oracle445\n\n\n\n\n\n\n\n\n\nMost Vulnerable Products\n\n\n\n\nDrilling past vendors to specific products, the H1 2026 leaders:\n\n\n\n\n\n\n\n\n\nTop 5 Products\n\n\n\n\n\nRankProductCVE Count1Linux Kernel1,9562Chrome1,2033OpenClaw5344Windows 103725Android303\n\n\n\n\nProduct-level counts can differ slightly from the vendor totals above: a vendor’s CVEs may span several products, and a single CVE can name more than one.\n\n\n\n\n\n\n\n\n\nKnown-Exploited Vulnerabilities (CISA KEV)\n\n\n\n\nVolume is the headline, but exploitation is what should actually drive patching. Of the 35,364 CVEs published in H1 2026, only 85 (0.24%) have shown up in the CISA KEV catalog so far. Treat that as a floor, not a verdict: KEV is a US-government catalog that lags disclosure by months and records only confirmed, observed exploitation, so this share will climb as the 2026 cohort ages. Even so, the signal holds, most CVEs are not known-exploited, so exploitability (KEV plus a forward-looking score like EPSS) beats chasing raw counts.\n\n\n\n\nNote these are two different populations: the 85 above are H1-2026-published CVEs already in KEV, while CISA added 146 entries to KEV during the half (more than the 132 added in the same window of 2025, many of them older CVEs newly exploited), and 17 of those additions are tied to known ransomware campaigns.\n\n\n\n\nH1 2026 CVEs Already in KEV\n\n\n\n\nA sample (5 most recent of 85):\n\n\n\n\n\nCVEVendorProductAddedRansomwareCVE-2026-48558SimplehelpSimpleHelp2026-06-29NoCVE-2026-20230CiscoUnified Communications Manager2026-06-25NoCVE-2026-12569PtcWindchill and FlexPLM2026-06-25NoCVE-2025-67038LantronixEDS50002026-06-23NoCVE-2026-34910UbiquitiUniFi OS2026-06-23No\n\n\n\n\n\n\n\n\n\nData Quality\n\n\n\n\nNot all CVEs have complete metadata. Here’s how data quality has evolved over the years:\n\n\n\n\n\n\n\n\n\nH1 2026 Data Quality Metrics\n\n\n\n\n\nMetricCoverageCVSS Score94.3%CWE Classification95.6%CPE Identifiers59.0%\n\n\n\n\nThis is where two ideas from the CVE Decaf work I did with Jay Jacobs get practical: actionable data quality (judge a record by whether it is complete enough to act on, not by abstract completeness) and data provenance (knowing which source asserted each field). The CPE gap is the clearest case. At 59.0% CPE coverage, nearly half of H1 2026 CVEs cannot be automatically matched to a product the day they publish, so for those records the answer to “can I act on this today?” is no, no matter how complete the rest of the entry looks. Scoring each record on its provenance (who supplied it) and on the fields that actually drive action (CPE for asset matching, KEV and EPSS for exploitability) is how you turn the raw feed into a measurable signal-to-noise ratio instead of a flat backlog.\n\n\n\n\n\n\n\n\n\nRejected CVEs\n\n\n\n\nNot all CVE IDs stay active. Some are rejected for duplicates, disputes, or invalid submissions, and the rejection rate is a useful read on the ecosystem’s quality control.\n\n\n\n\n\n\n\n\n\nH1 2026 Rejection Statistics\n\n\n\n\n\nMetricValueRejected CVEs in H1 20261,265H1 2026 Rejection Rate3.45%Total Rejected (All Time)17,648\n\n\n\n\nCVE rejections occur for several reasons:\n\n\n\n\n\n\nDuplicates: The same vulnerability assigned multiple CVE IDs\n\n\n\n\nDisputes: Vendor disagreement that the issue is a vulnerability\n\n\n\n\nInvalid: Not a security vulnerability or insufficient information\n\n\n\n\nWithdrawn: CVE withdrawn by the assigning CNA\n\n\n\n\n\n\n\n\n\n\nConclusions\n\n\n\n\nKey Takeaways from the First Half of 2026\n\n\n\n\n\n\nVolume keeps climbing: 35,364 CVEs in roughly six months, up 49.5% on the same window last year, with the full year projecting to 71,314-72,008.\n\n\n\n\nSeverity stays heavy: 17,375 CVEs (49.1%) are Critical or High.\n\n\n\n\nWeb and access-control flaws lead: XSS, Missing Authorization, SQL Injection, Path Traversal headline the CWE list. Memory-safety issues barely register in the top tier this half.\n\n\n\n\nThe CNA mix is shifting: platform teams and aggregators, not the original vendors, now top the assigner list, and the lineup reshuffled from a year ago.\n\n\n\n\nCoverage gaps persist: CVSS and CWE are well covered, but CPE sits at 59.0%, which still hampers automated matching.\n\n\n\n\nConfirmed exploitation stays rare (so far): just 85 of 35,364 H1 CVEs (0.24%) are in CISA KEV today, a floor that rises as the cohort ages. Volume is a triage problem, not a patch-everything problem.\n\n\n\n\n\nWhat this means for you\n\n\n\n\n\n\nIf you defend a network: do not let the raw count set your pace. Only 0.24% of H1 CVEs are confirmed-exploited in KEV today, but KEV lags and is a floor, not the full risk picture. Lead with exploitability (KEV as a hard floor, EPSS with a threshold you pick), then weight by your own context: internet-facing and sensitive systems jump the queue regardless of score, and compliance SLAs (PCI, FedRAMP, and the like) still set hard clocks. Lower priority is not never, so park the rest in a managed cycle rather than ignoring it.\n\n\n\n\nIf you run a CNA: the leaderboard now runs through platforms, ecosystems, and research CNAs. Volume reflects scope, not padding; the differentiator that is still genuinely uneven is data quality, and the biggest gap, CPE coverage, is largely an NVD-side enrichment problem rather than a function of who assigned the CVE.\n\n\n\n\nIf you consume NVD data: enrichment is the bottleneck. CPE at 59.0% means nearly half of new CVEs lack a formal CPE, which complicates NVD-style automated matching (many CNAs still carry vendor/product strings), and volume only widens that gap.\n\n\n\n\n\nWhat I’m watching in H2\n\n\n\n\nMy call from the scorecard stands: 2026 closes nearer 72,008 than the 90,831 forecast. Two things would change my mind: a December disclosure surge bigger than 2025’s, or another OpenClaw-style project flooding the catalog. The year-end review settles it.\n\n\n\n\n\n\n\n\n\nMethodology and Reproducibility\n\n\n\n\nTwo primary data sources, plus two enrichment feeds:\n\n\n\n\n\n\nNVD JSON – National Vulnerability Database export from nvd.handsonhacking.org\n\n\n\n\nCVE List V5 – Official CVE records from CVEProject/cvelistV5\n\n\n\n\nForecast\u00a0–\u00a0CVEForecast\u00a0full-year projection\n\n\n\n\nExploitation – CISA KEV catalog\n\n\n\n\n\nEverything here is reproducible. The full pipeline (Python, pandas, matplotlib) is on GitHub at\u00a0jgamblin/H12026CVEBlog, and it leans on the free CVE tooling I build at\u00a0RogoLabs:\u00a0cve.icu,\u00a0cnascorecard.org, and\u00a0cveforecast.org.\n\n\n\n\nData collected and analyzed on July 01, 2026.", "creation_timestamp": "2026-07-02T01:00:45.368729Z"}, {"uuid": "d2368cf6-ec78-4554-a102-03a58b522f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7x7cmjle23", "content": "~Checkpoint~\nCritical flaws, AI-assisted attacks and Cl0p exploitation drive this week\u2019s threats.\n-\nIOCs: CVE-2026-19478, CVE-2026-12569\n-\n#AIThreats #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:10:22.689906Z"}, {"uuid": "042b8b31-9a2b-4cc4-bb63-e1b06b8e3c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8516", "content": "\u0412 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0433\u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0430\u0432\u043d\u044b\u0445.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0435 \u043d\u0430\u043b\u043e\u0433\u043e\u0432\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e, \u0443\u043a\u0440\u0430\u0432 \u043d\u0430\u043b\u043e\u0433\u043e\u0432\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 678 000 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0412\u0437\u043b\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u0413\u0435\u043d\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0424\u0440\u0430\u043d\u0446\u0438\u0438 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0438\u044e\u043d\u044f \u043f\u043e \u0438\u044e\u043b\u044c.\n\n\u041e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0432\u0437\u044f\u043b \u043d\u0430 \u0441\u0435\u0431\u044f \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c ZeroBytes. \u041e\u043d \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 20 \u043c\u043b\u043d. \u0433\u0440\u0430\u0436\u0434\u0430\u043d, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0432\u0437\u043b\u043e\u043c \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u041f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440 \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0430 \u043f\u0440\u043e\u0434\u0430\u0436\u0443, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435. \u041c\u0430\u0441\u0441\u0438\u0432\u044b \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 15 \u043c\u043b\u043d. \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u043a\u043e\u043b\u043e \u0442\u0440\u0435\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0435\u0439 \u043d\u0430\u0441\u0435\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0441\u0442\u0440\u0430\u043d\u044b \u043e\u0442\u0440\u0438\u0446\u0430\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u0441\u0430\u043c\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0443 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u0430.\n\n\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 CRPx0 \u0437\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0430\u0439\u0442\u0435 DLS \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 47 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432 - \u0438\u0437 \u0421\u0428\u0410 \u0438 \u0422\u0443\u0440\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0431\u0430\u043d\u043a\u0438, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0442\u0443\u0440\u0435\u0446\u043a\u043e\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 Hyundai. CRPx0 \u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0438, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0420\u0430\u043a\u0435\u0448 \u041a\u0440\u0438\u0448\u043d\u0430\u043d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u0443\u0441\u043b\u0443\u0433\u0438 \u0438 \u0441\u0430\u0439\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435.\n\n\u041d\u043e\u0432\u0430\u044f \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u0432\u0448\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043a\u0440\u0430\u0436\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 Microsoft Dynamics 365.\n\n\u0421\u0440\u0435\u0434\u0438 \u0436\u0435\u0440\u0442\u0432 \u0433\u0440\u0443\u043f\u043f\u044b ExfilSquad - Allstate, Frontier Airlines, \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0440\u043e\u0434\u0430 \u0410\u0442\u043b\u0430\u043d\u0442\u0430 \u0438 \u0425\u0430\u0443\u0441, \u0430 \u0442\u0430\u043a\u0436\u0435 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Fortra \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 Microsoft Power Pages, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0441\u0440\u0435\u0434\u0443 D365 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\nAvast \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0432\u0435\u0440\u0445\u043b\u0435\u0433\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f Windows \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0432\u0441\u0435\u0433\u043e 12 \u041a\u0411. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u043b\u0438\u0431\u043e \u0442\u0435\u0441\u0442\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f, \u043b\u0438\u0431\u043e \u043e\u0447\u0435\u043d\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 APT.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0441\u0430\u043c\u043e\u0439 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0435\u0433\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u044b\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f: \u0430\u0434\u0440\u0435\u0441 \u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u04212 \u0445\u0440\u0430\u043d\u0438\u043b\u0441\u044f \u043d\u0435 \u0432 \u0432\u0438\u0434\u0435 \u0447\u0438\u0442\u0430\u0435\u043c\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0438\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0432 \u0432\u0438\u0434\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u0432 \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0444\u0430\u0439\u043b\u0430 desktop.ini \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows.\n\n\u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0433\u0438\u0433\u0430\u043d\u0442\u044b General Electric (GE) \u0438 Philips \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 Shell \u0438 \u0432 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0431\u0430\u043d\u0434\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-12569)\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PTC Windchill \u0438 PTC FlexPLM.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0434\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Azure \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500.\n\n\u041d\u0435\u043a\u0442\u043e TheHatman \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0442\u0430\u043a\u0438\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0431\u0440\u0435\u043d\u0434\u043e\u0432, \u043a\u0430\u043a McDonald's Corporation, Tata Consultancy Services (TCS), Vodafone, HCL Technologies, InterContinental Hotels Group (IHG), Kyndryl, Gap Inc., Hexaware Technologies \u0438 Wyndham Hotels.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Hudson Rock, \u043c\u0430\u0441\u0441\u0438\u0432\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u043f\u0440\u0430\u0432\u043e\u0447\u043d\u0438\u043a\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0441\u0443\u0434\u044f \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0438\u043c\u0435\u043d\u0430\u043c \u043f\u043e\u043b\u0435\u0439, \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0449\u0438\u043c \u0441 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Azure, \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u044b\u043c\u0438.", "creation_timestamp": "2026-08-18T00:00:07.717307Z"}, {"uuid": "6617f727-a890-4a14-9d4c-eb8738ad63c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/HackerNewscyber/3337", "content": "\u2708\ufe0f\u062d\u0645\u0644\u0647 \u06a9\u0644\u0627\u067e \u0628\u0647 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af\n\n\ud83c\udfa4\u06af\u0631\u0648\u0647 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u06a9\u0644\u0627\u067e (Clop) \u0645\u062f\u0639\u06cc \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0632 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af\u06cc \u0645\u0627\u0646\u0646\u062f \u062c\u0646\u0631\u0627\u0644 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u060c \u0641\u06cc\u0644\u06cc\u067e\u0633 \u0648 \u0634\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-12569 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u00ab\u067e\u06cc\u200c\u062a\u06cc\u200c\u0633\u06cc \u0648\u06cc\u0646\u062f\u0686\u06cc\u0644\u00bb \u0648 \u00ab\u0641\u0644\u06a9\u0633\u200c\u067e\u06cc\u200c\u0627\u0644\u200c\u0627\u0645\u00bb \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\ud83c\udfa5 \u06a9\u0644\u0627\u067e \u0645\u062f\u0639\u06cc \u0634\u062f\u0647 \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633\u06cc \u0645\u0627\u0646\u0646\u062f \u0646\u0642\u0634\u0647\u200c\u0647\u0627\u060c \u0627\u0633\u0646\u0627\u062f \u0641\u0646\u06cc\u060c \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u067e\u0631\u0648\u0698\u0647 \u0648 \u062a\u0635\u0627\u0648\u06cc\u0631 \u062a\u0623\u0633\u06cc\u0633\u0627\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0641\u06cc\u0644\u06cc\u067e\u0633 \u0648\u0642\u0648\u0639 \u06cc\u06a9 \u0646\u0641\u0648\u0630 \u0645\u062d\u062f\u0648\u062f \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u0646 \u062d\u0627\u062f\u062b\u0647 \u0628\u0631 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u062a\u0623\u062b\u06cc\u0631\u06cc \u0646\u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u067e\u06cc\u0634\u200c\u062a\u0631 \u0627\u0632 \u0633\u0648\u06cc \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0648 \u0622\u0644\u0645\u0627\u0646 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0646\u0642\u0635 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f \u0648 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062f\u0631\u0628\u0627\u0631\u0647 \u0646\u0635\u0628 \u0641\u0648\u0631\u06cc \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-18T00:00:11.160105Z"}, {"uuid": "aa40a246-2a46-459a-8334-ed9385751b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mtjuurhls72i", "content": "\ud83d\udce2 Clop exploite CVE-2026-12569 dans PTC Windchill avec un web shell personnalis\u00e9 pour extorsion massive\n\n\ud83d\udcc5 Source : ReliaQuest Threat Research Team, publi\u00e9 le 18 ao\u00fbt 2026. Cette analyse technique d\u00e9crit une campagne d'extorsion de\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#Clop #PTCWindchill #Cyberveille", "creation_timestamp": "2026-08-20T18:30:07.379803Z"}, {"uuid": "ed0f9f6c-e66c-46ee-9556-b9858de0796e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/kdm.ac/post/3mtm2ntmwck2o", "content": "> (\u629c\u7c8b / \u8a33: \u3051\u3060\u307e\ud83e\uddf6) PTC \u306f Windchill \u3068 FlexPLM \u306b\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\u306a\u81f4\u547d\u7684\u306a\u8106\u5f31\u6027 (CVE-2026-12569) \u3092\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u306e\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u4efb\u610f\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCustomer & Partner Updates: Remote Code Execution Vulnerability in PTC\u2019s Windchill and FlexPLM Solutions\nwww.ptc.com/en/about/tru...", "creation_timestamp": "2026-08-21T15:18:55.708023Z"}, {"uuid": "a7bf5551-bf74-4be7-85ae-b0d1a84c3883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/pphm_HackerNews/1665", "content": "\ud83d\udd34 First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\n\nThe vulnerability is tracked as CVE-2026-12569 and it affects PTC\u2019s Windchill and FlexPLM products. The improper input validation flaw can be exploited by a remote, unauthenticated attacker to execute arbitrary code via specially crafted requests.\n\nThe cybersecurity agency CISA added the security hole to its Known Exploited Vulnerabilities (KEV) catalog, instructing federal agencies to address it by June 28.\n\nThis is the first-ever PTC product vulnerability added to CISA\u2019s KEV catalog, and there do not appear to be any public reports describing the exploitation of other flaws.", "creation_timestamp": "2026-08-22T00:00:27.363221Z"}, {"uuid": "960b0dde-6ac2-4106-af80-ff96f387127f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mpvx3fqjx627", "content": "Surprise: CVE-2026-12569 is a serious remote code execution flaw in Windchill and FlexPLM. HookProbe's AI-native engines\u2014NAPSE, HYDRA, AEGIS, and Qsecbit\u2014can detect and block it. #EdgeSecurity #IDS", "creation_timestamp": "2026-07-05T16:00:51.732508Z"}, {"uuid": "3868b83d-6439-4b2c-87d7-7582f69545d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "MISP/059f8d17-291f-459b-ba36-dd20644ed7e0", "content": "", "creation_timestamp": "2026-08-13T12:15:06.004623Z"}, {"uuid": "d14b2015-d2f4-4ec4-ad19-dc64598fda85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/true_secator/8522", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Cl0p \u043d\u0430\u0437\u0432\u0430\u043b\u0430 \u0438\u043c\u0435\u043d\u0430 \u0431\u043e\u043b\u0435\u0435 40 \u0436\u0435\u0440\u0442\u0432 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0439 \u043d\u043e\u0432\u043e\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 PTC Windchill \u0438 FlexPLM, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0430\u043a\u0438\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Shell, Philips, Fiserv, Zebra, Mindray \u0438 Largan Precision.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 CVE-2026-12569, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043d\u0435, \u043a\u043e\u0433\u0434\u0430 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0435\u0451 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0451.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u043c, \u0438, \u043f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c, \u043f\u043e\u043b\u0438\u0446\u0438\u044f \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u0445. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2026-12569 - \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windchill, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\u00a0\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043b\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0418\u0411-\u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 PLM\u00a0\u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Cl0p. \n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Cl0p \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Windchill.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ReliaQuest \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, \u0447\u0442\u043e Cl0p \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u00ab\u043f\u043e\u043b\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u0412\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430, \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 Windchill \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043a\u043b\u0430\u0441\u0441\u043e\u0432 Java, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 Clop \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043e \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e Cl0p\u00a0\u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0430\u0439\u0442\u0435 \u043b\u0438\u0448\u044c \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043d\u043e 12 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u0438\u043c\u0435\u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u0436\u0435\u0440\u0442\u0432.\n\n\u041d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 40 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Windchill. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0436\u0435\u0440\u0442\u0432\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u0442\u0438\u043f \u0438 \u043e\u0431\u044a\u0435\u043c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\u00a0\n\n\u041a \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0444\u0430\u0439\u043b\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b, \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u0430\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f, \u0447\u0435\u0440\u0442\u0435\u0436\u0438, \u0441\u0445\u0435\u043c\u044b, \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043e\u0431\u044a\u0435\u043c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0434\u043d\u0443 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u0442 1 \u0413\u0411 \u0434\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0442\u0435\u0440\u0430\u0431\u0430\u0439\u0442.\n\n\u0412\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c, \u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0438\u0445 \u0447\u0430\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043b\u0430\u0442\u0438\u0442\u044c \u0432\u044b\u043a\u0443\u043f.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u0436\u0435\u0440\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u043d\u0435\u0444\u0442\u0435\u0433\u0430\u0437\u043e\u0432\u044b\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Shell, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 Philips, \u0444\u0438\u043d\u0442\u0435\u0445-\u0433\u0438\u0433\u0430\u043d\u0442 Fiserv, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 Zebra Technologies, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f Ingersoll Rand, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u0442\u043e\u0447\u0435\u043a \u043f\u0440\u043e\u0434\u0430\u0436 Toast, \u043c\u0438\u0440\u043e\u0432\u043e\u0439 \u043b\u0438\u0434\u0435\u0440 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Mindray \u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u044a\u0435\u043a\u0442\u0438\u0432\u043e\u0432 \u0434\u043b\u044f \u043a\u0430\u043c\u0435\u0440 Apple, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Largan Precision.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GE \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435, \u043d\u043e \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0431\u044b\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0441 \u0441\u0430\u0439\u0442\u0430 Cl0p, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u0432\u044b\u043a\u0443\u043f \u0438\u043b\u0438 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u044b \u0441 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0422\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Shell, Philips, Fiserv \u0438 GE, \u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u0432\u0448\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u0438 \u043e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0444\u0430\u043a\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0443\u0436\u043d\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a Cl0p, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 Oracle E-Business Suite, MOVEit, Cleo \u0438 GoAnywhere, \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u043f\u043e\u0437\u0438\u0446\u0438\u0435\u0439. \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-08-20T00:00:28.406366Z"}, {"uuid": "4a4bd980-c7b3-4f76-9dc6-2a6f106226c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtg2jhzw562i", "content": "Groep Cl0p misbruikt kwetsbaarheid in PTC Windchill voor grootschalige aanvallen\n\nDe cybersecuritygroep Cl0p voert een gerichte campagne uit tegen PTC Windchill servers, waarbij zij misbruik maken van een kritieke kwetsbaarheid, genaamd CVE-2026-12569 met een CVSS-score van 9,3. Deze tactiek...", "creation_timestamp": "2026-08-19T06:00:31.724890Z"}, {"uuid": "497f7c47-80b9-42bf-8e58-6334dfc24bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtg3zxdgy62b", "content": "Cl0p exploits PTC Windchill flaw to steal sensitive engineering data. Immediate patching of CVE-2026-12569 is crucial. #CyberSecurity #Cl0p #Ransomware #PTC #Windchill #DataBreach https://thedailytechfeed.com/cl0p-exploits-ptc-windchill-flaw-to-steal-sensitive-data/", "creation_timestamp": "2026-08-19T06:27:37.909852Z"}, {"uuid": "3b9135ba-6d3f-4093-b05d-5389fb32eecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpy24kq7yo2w", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-46817, CVE-2026-48558, CVE-2026-8451, CVE-2026-45659, CVE-2026-12569\nActors: Ransomware, Apt, Scattered Spider\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-06T12:00:26.172279Z"}, {"uuid": "af710637-590f-433a-bb9c-c34ec843cace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mpyhqzyuwg2n", "content": "Stay ahead of CVE-2026-12569 with HookProbe\u2014effortlessly detect threats in Windchill and FlexPLM. Protect your edge systems with affordable, AI-powered security. #EdgeSecurity #IDS\n\nHookProbe helps small teams safeguard critical environments. #RaspberryPi #eBPF", "creation_timestamp": "2026-07-06T16:04:32.221057Z"}, {"uuid": "8ccbb200-96cb-4cb4-a4e8-914207f114d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mpyqmrxivx25", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-12569: PTC Windchill and FlexPLM Improper Input Validation Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-12569", "creation_timestamp": "2026-07-06T18:43:13.464378Z"}, {"uuid": "519a785b-f0a7-4d53-b7c5-568d382e8d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mqcjnwzgcg2v", "content": "The user wants a Bluesky post for a cybersecurity blog article about CVE-2026-12569 affecting PTC Windchill and FlexPLM, and how HookProbe detects it.\n\nKey constraints:\n- Max 270 characters\n- Start with hook/surprising insight\n- 1-2 relevant hashtags max from: #EdgeSecurity #IDS", "creation_timestamp": "2026-07-10T16:05:13.529828Z"}, {"uuid": "1cac308d-62a4-40cd-af48-7238038d71f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8352", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PTC Windchill, \u0447\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\nCVE-2026-12569 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Windchill \u0438 FlexPLM \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PTC. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 PTC, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA, \u0438, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f\u00a0\u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\u00a0\u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e PTC Windchill, CVE-2026-4681.\n\n\u0414\u043b\u044f CVE-2026-12569 PTC \u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e 17 \u0438\u044e\u043d\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b (IoC, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0435\u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u043f\u043e\u0432\u0435\u0449\u0430\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PTC \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u0445.\u00a0\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 Ethernet \u043e\u0442 Lantronix. \u042d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 ICS \u043f\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044e.\n\n3. \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 GitLab CE/EE \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 13 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2026-10086, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 XSS \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 GitLab EE, \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f CVE-2026-10712 - XSS \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0440\u0435\u0434\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Web IDE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u044f\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2026-12053 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Duo Workflows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 UniFi. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\nUniFi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445, \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u0435\u043b\u044f\u0445 Wi-Fi, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS) \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti. \u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 UniFi OS, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 KEV CISA.\n\n5. Microsoft \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Windows 10 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0433\u043e\u0434 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Windows 10 ESU \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0430 \u0434\u043e 12 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2027 \u0433\u043e\u0434\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0418\u0442\u043e\u043d \u0417\u0432\u0435\u0430\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 Johnson&Johnson, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u0445 \u0438 \u0441\u0442\u0430\u0436\u0435\u0440\u0430\u0445.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a:\u00a0Aikido Security, Microsoft, SafeDep, Socket Security, Step Security, Step Security.\n\n8. Trend Micro \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Langflow AI \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n9. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b Ghost CMS \u0432 \u043c\u0430\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-26980, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 ClickFix \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n10. Breached[.]hn, \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u043e\u043d\u043e\u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e BreachForums, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u00abShinyHunters, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u0431\u044c\u044e\u0442 \u043d\u0430\u0441 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e\u00bb.", "creation_timestamp": "2026-07-13T13:00:07.048704Z"}, {"uuid": "18089ce0-406d-4038-a2bf-de080a62c0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8352", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PTC Windchill, \u0447\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\nCVE-2026-12569 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Windchill \u0438 FlexPLM \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PTC. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 PTC, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA, \u0438, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f\u00a0\u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\u00a0\u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e PTC Windchill, CVE-2026-4681.\n\n\u0414\u043b\u044f CVE-2026-12569 PTC \u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e 17 \u0438\u044e\u043d\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b (IoC, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0435\u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u043f\u043e\u0432\u0435\u0449\u0430\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PTC \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u0445.\u00a0\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 Ethernet \u043e\u0442 Lantronix. \u042d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 ICS \u043f\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044e.\n\n3. \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 GitLab CE/EE \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 13 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2026-10086, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 XSS \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 GitLab EE, \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f CVE-2026-10712 - XSS \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0440\u0435\u0434\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Web IDE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u044f\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2026-12053 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Duo Workflows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 UniFi. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\nUniFi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445, \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u0435\u043b\u044f\u0445 Wi-Fi, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS) \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti. \u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 UniFi OS, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 KEV CISA.\n\n5. Microsoft \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Windows 10 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0433\u043e\u0434 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Windows 10 ESU \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0430 \u0434\u043e 12 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2027 \u0433\u043e\u0434\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0418\u0442\u043e\u043d \u0417\u0432\u0435\u0430\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 Johnson&Johnson, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u0445 \u0438 \u0441\u0442\u0430\u0436\u0435\u0440\u0430\u0445.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a:\u00a0Aikido Security, Microsoft, SafeDep, Socket Security, Step Security, Step Security.\n\n8. Trend Micro \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Langflow AI \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n9. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b Ghost CMS \u0432 \u043c\u0430\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-26980, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 ClickFix \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n10. Breached[.]hn, \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u043e\u043d\u043e\u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e BreachForums, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u00abShinyHunters, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u0431\u044c\u044e\u0442 \u043d\u0430\u0441 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e\u00bb.", "creation_timestamp": "2026-07-14T00:00:45.959517Z"}, {"uuid": "28386532-943d-4e12-9cd1-e7b4bb7d42ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtgh32ujtg2a", "content": "A bespoke JSP web shell targeting PTC Windchill and FlexPLM enables credential theft, data exfiltration, and remote backdoor activity after exploiting CVE-2026-12569.\n", "creation_timestamp": "2026-08-19T09:45:07.057401Z"}, {"uuid": "e5a6ba5c-360a-472a-ba85-d2b97e2eadb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msysutb34s2k", "content": "\ud83e\udd16 CVE-2026-12569 (critique) : RCE non authentifi\u00e9e dans PTC Windchill et FlexPLM, exploit\u00e9e par Cl0p. Pr\u00e8s de 50 organisations revendiqu\u00e9es, dont Philips, Shell, Fiserv et GE.\nhttps://www.zataz.com/cl0p-industrialise-ses-attaques-via-ptc-windchill/", "creation_timestamp": "2026-08-13T23:39:05.424944Z"}, {"uuid": "8d122bf6-54e4-4f8f-a9a0-11fc7bf39e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mt6jh6l46k22", "content": "Cl0p Ransomware Hits PTC Windchill: CVE-2026-12569 tech-insider.org/clop-ransomw...", "creation_timestamp": "2026-08-16T06:06:25.324851Z"}, {"uuid": "92cfc67d-77c4-4a6e-b5ec-63d827278507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtgm5gbfmw2a", "content": "Cl0p exploited CVE-2026-12569 in Windchill and FlexPLM to gain unauthenticated remote code execution, deploy web shells, and steal data from 40+ organizations.\n", "creation_timestamp": "2026-08-19T11:15:54.900550Z"}, {"uuid": "05ef8657-14cb-4fa8-affc-7fd893045644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117122061485086861", "content": "PTC Windchill/FlexPLM (CVE-2026-12569) exploited by Cl0p ransomware: CRITICAL severity, remote code execution, 40+ orgs hit. Patch ASAP to block active data theft & extortion. Full details: https://radar.offseq.com/threat/cl0p-ransomware-group-names-over-40-victims-of-ptc-windchill-campaign-1b708410d1eaf87f #OffSeq #Ransomware #CVE202612569 #Infosec", "creation_timestamp": "2026-08-19T12:00:31.534837Z"}, {"uuid": "b5d39b3e-037d-4d6c-8af4-b291d5c9b878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtgonbjstl2n", "content": "CRITICAL: Cl0p ransomware abused PTC Windchill (CVE-2026-12569) for remote code exec & major data theft. 40+ orgs impacted. Patch now to mitigate. \ud83d\udd12 https://radar.offseq.com/threat/cl0p-ransomware-group-names-over-40-victims-of-ptc-windchill-campaign-1b708410d1eaf87f #OffSeq #Ransomware #Vulnerab...", "creation_timestamp": "2026-08-19T12:00:33.868363Z"}, {"uuid": "a6f83d0a-aa10-40ac-8ee1-90797e4147f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/thehackernews/9338", "content": "\ud83d\udea8 Attackers are exploiting a critical PTC flaw to drop JSP web shells.\n\nCISA added CVE-2026-12569 to its KEV catalog after active exploitation was confirmed.\n\n\u2014 Affected: PTC Windchill PDMlink and FlexPLM.\n\u2014 Patch now. Hunt for IoCs.\n\nRead more: https://thehackernews.com/2026/06/cisa-adds-exploited-ptc-windchill-rce.html", "creation_timestamp": "2026-07-15T12:00:03.106852Z"}, {"uuid": "ad332df8-a4d0-4cbb-bf55-0f0271ff6d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/information_security_channel/55478", "content": "First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\nhttps://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/\n\nCISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.\nThe post First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild (https://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:05.905379Z"}, {"uuid": "0d13657d-99c5-47da-b00f-2675adbb2daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/information_security_channel/55478", "content": "First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\nhttps://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/\n\nCISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.\nThe post First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild (https://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.681595Z"}, {"uuid": "28b40eab-82ff-4082-ba60-a4f0b224f5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/thehackernews/9338", "content": "\ud83d\udea8 Attackers are exploiting a critical PTC flaw to drop JSP web shells.\n\nCISA added CVE-2026-12569 to its KEV catalog after active exploitation was confirmed.\n\n\u2014 Affected: PTC Windchill PDMlink and FlexPLM.\n\u2014 Patch now. Hunt for IoCs.\n\nRead more: https://thehackernews.com/2026/06/cisa-adds-exploited-ptc-windchill-rce.html", "creation_timestamp": "2026-07-16T00:00:11.558131Z"}, {"uuid": "14d95555-ef6b-4ba0-a822-2dd49d9ef30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2281", "content": "\ud83d\udd34 Clop ransomware targets Windchill, FlexPLM in data theft attacks\n\nThe Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign.\n\nClop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances.\n\nAs cybersecurity company ReliaQuest reported on Thursday, Clop operators have been deploying JSP webshells that allow them to exfiltrate sensitive data from targeted companies' compromised PLM platforms.", "creation_timestamp": "2026-08-23T00:00:45.266491Z"}, {"uuid": "1e184b05-d091-4e57-aecf-18fadc9bce4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr3dyrym4s2d", "content": "\u300cCisco Unified CM\u300d\u306a\u3069\u8106\u5f31\u60272\u4ef6\u306e\u60aa\u7528\u306b\u6ce8\u610f\u559a\u8d77 - \u7c73\u5f53\u5c40\n\n\u7c73\u5f53\u5c40\u306f\u3001Cisco\u306e\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3\u57fa\u76e4\u30bd\u30d5\u30c8\u3068PTC\u306e\u696d\u52d9\u30bd\u30d5\u30c8\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u65e9\u6025\u306a\u5bfe\u7b56\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670825\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-20230\u300d\u300cCVE-2026-12569\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\u7c73\u884c\u653f\u6a5f\u95a2\u306b\u5bfe\u3057\u3001\u540c\u670828\u65e5\u307e\u3067\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u6c42\u3081\u305f\u3002\n\n\u300cCVE-2026-20230\u300d\u306f\u3001IP\u96fb\u8a71\u3084\u30d3\u30c7\u30aa\u901a\u8a71\u306a\u3069\u3092\u7ba1\u7406\u3059\u308b\u4f01\u696d...", "creation_timestamp": "2026-07-20T13:00:30.540073Z"}, {"uuid": "f568d972-b554-4534-9d44-d113570b1afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr43lchom22e", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Cisco\u3068PTC\u306eWindchill\u304a\u3088\u3073FlexPLM\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001  Cisco\u3068PTC\u306eWindchill\u304a\u3088\u3073FlexPLM\u306e\u8106\u5f31\u6027\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f2\u3064\u306e\u6b20\u9665\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-12569  \uff08CVSS\u30b9\u30b3\u30a29.3\uff09PTC Windchill\u304a\u3088\u3073FlexPLM\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u306e\u8106\u5f31\u6027\nCVE...", "creation_timestamp": "2026-07-20T20:02:27.337480Z"}, {"uuid": "0549546c-7c0b-487f-8ef6-496183a41f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1665", "content": "\ud83d\udd34 First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\n\nThe vulnerability is tracked as CVE-2026-12569 and it affects PTC\u2019s Windchill and FlexPLM products. The improper input validation flaw can be exploited by a remote, unauthenticated attacker to execute arbitrary code via specially crafted requests.\n\nThe cybersecurity agency CISA added the security hole to its Known Exploited Vulnerabilities (KEV) catalog, instructing federal agencies to address it by June 28.\n\nThis is the first-ever PTC product vulnerability added to CISA\u2019s KEV catalog, and there do not appear to be any public reports describing the exploitation of other flaws.", "creation_timestamp": "2026-08-23T00:00:41.966094Z"}, {"uuid": "12d5196e-bcb2-4ba5-8f18-e9c493edb467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-28T13:00:05.453295Z"}, {"uuid": "69830504-70a9-41d2-9945-ae83c1c4d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/ecrime.ch/post/3mrc6wc4bgk2q", "content": "Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569) | Ransom-ISAC Blog - Ransom-ISAC\n\nA coordinated Unified Threat Advisory covering active Cl0p ransomware affiliate exploitation of internet-expose\n\nRead more: https://ransom-isac.com/blog/clop-windchill-flexplm-exploitation/", "creation_timestamp": "2026-07-23T06:18:13.425077Z"}, {"uuid": "27da36a1-f6a9-4b38-9351-eaec219e1907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtqbrr4cin2f", "content": "\u26a0\ufe0f Cl0p names 40 Windchill victims\n\nCl0p exploited CVE-2026-12569 to deploy web shells and steal blueprints and project data.\n\n\ud83d\udd17 read more: securityaffairs.com/...\n\n#ransomNews #cyberthreats #Cl0p\n", "creation_timestamp": "2026-08-23T07:37:03.404635Z"}, {"uuid": "012bcd9c-fc75-4d9a-96c7-ea20240db74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-286a-625e-769c-da2020791550", "content": "Cl0p sfrutta una falla critica in PTC Windchill e FlexPLM: webshell ed estorsioni nella supply chain del manufacturing\n@informaticaLa gang Cl0p, nota per gli attacchi di massa a MOVEit e GoAnywhere, sta ora sfruttando CVE-2026-12569 in PTC Windchill e FlexPLM per compromettere aziende manifatturiere,RE: insicurezzadigitale.com/?p=126\u2026", "creation_timestamp": "2026-07-23T18:33:56.342464Z"}, {"uuid": "a92f430b-d51f-45c8-9ff0-5c0d7bcb96e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mrdi3ydcwnn2", "content": "# **Cl0p sfrutta una falla critica in PTC Windchill e FlexPLM: webshell ed estorsioni nella supply chain del manufacturing**\n\n\n@informatica\nLa gang Cl0p, nota per gli attacchi di massa a MOVEit e GoAnywhere, sta ora sfruttando CVE-2026-12569 in PTC Windchill e FlexPLM per compromettere aziende [\u2026]", "creation_timestamp": "2026-07-23T18:35:23.407042Z"}, {"uuid": "52374e6b-2eef-42b5-b73b-631f6d478f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrekllz3lr24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 72 interactions\nCVE-2026-60137: 58 interactions\nCVE-2026-58532: 47 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50522: 9 interactions\nCVE-2026-64600: 9 interactions\nCVE-2026-12569: 8 interactions\n", "creation_timestamp": "2026-07-24T04:52:19.841532Z"}, {"uuid": "6abcdc4b-c120-4822-9374-5f1ee1dc1f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrew47jh7523", "content": "CVE-2026-12569: Clop Ransomware Exploits PTC Windchill and FlexPLM #CVE202612569 #ClopRansomware #PTCWindchill", "creation_timestamp": "2026-07-24T08:18:27.953784Z"}, {"uuid": "ebcd45b4-15a3-4e71-ae33-71cc148671fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrew4g2ldn2l", "content": "Clop Ransomware's Active Exploitation of CVE-2026-12569 Requires Urgent Action #CyberSecurity #Ransomware #ClopRansomware", "creation_timestamp": "2026-07-24T08:18:34.723471Z"}, {"uuid": "2484b723-a6c0-4c20-a8b6-882c86b5d511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrewayq2w32v", "content": "Clop Ransomware Targets Windchill, FlexPLM: Unpacking the Hype Around CVE-2026-12569 #ClopRansomware #CVE202612569 #Windchill", "creation_timestamp": "2026-07-24T08:21:08.692069Z"}, {"uuid": "6552c9ff-e467-4df5-aa07-6d6783735804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrewb3r5lu2j", "content": "CVE-2026-12569: Clop Ransomware's Targeting of PTC Windchill and FlexPLM #CVEResearch #ClopRansomware #Cybersecurity", "creation_timestamp": "2026-07-24T08:21:11.808770Z"}, {"uuid": "9cffb076-bd4d-4d0f-a063-255c9e87eaa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrf2xrjx6z2j", "content": "Clop is exploiting CVE-2026-12569 to hit exposed PTC Windchill and FlexPLM systems, using JSP web shells to steal product data in a new extortion campaign. #Clop #PTCWindchill #Germany", "creation_timestamp": "2026-07-24T09:45:27.384644Z"}, {"uuid": "2594eacd-12e8-4ad3-b1a9-4a5404845641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-29T00:00:09.694143Z"}, {"uuid": "55188e21-8fc3-421e-83b7-d8f9f2f89339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8439", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop (\u0438\u043b\u0438 Cl0p) \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PTC Windchill \u0438 FlexPLM.\n\nPTC Windchill \u0438 PTC FlexPLM - \u044d\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0434\u0435\u0438 \u0434\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430.\n\n\u041e\u0431\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b PLM \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0440\u0435\u0434\u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e-\u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0439, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439, \u043c\u0430\u0448\u0438\u043d\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u0445. \n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 30 000 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u043e\u043b\u0435\u0435 1500 \u0431\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 FlexPLM.\n\n\u041f\u043e \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c, Clop \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CVE-2026-12569), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Windchill \u0438 FlexPLM.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 ReliaQuest, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Clop \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 PLM-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0414\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438\u043c\u0435\u044e\u0442 \u043e\u0431\u0449\u0438\u0435 \u0447\u0435\u0440\u0442\u044b \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Cl0p, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0446\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. Ransom-ISAC \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 Windchill \u0438 FlexPLM \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c Clop.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441 support@cryptohox.com, \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Clop.\n\nPTC\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f CVE-2026-12569 17 \u0438\u044e\u043d\u044f, \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0444\u0430\u043a\u0442 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438\u00a0\u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u044b \u043d\u0430 IOCs.\n \n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 26 \u0438\u044e\u043d\u044f PTC \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u00ab\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0437\u00bb, CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e\u00a0\u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u00a0\u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Heise, CVE-2026-12569 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0431\u0443\u0434\u0438\u043b\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b: \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (BSI) \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u0437\u0432\u043e\u043d\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c PTC \u043f\u043e\u0441\u0440\u0435\u0434\u0438 \u043d\u043e\u0447\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u0438\u0445 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438\u00a0\u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u00a0\u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windchill \u0438 FlexPLM (CVE-2026-4681) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u043b\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 ReliaQuest \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c PTC \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windchill \u0438 FlexPLM \u0438, \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0445 \u0437\u0430 VPN-\u0441\u0435\u0442\u044f\u043c\u0438 \u0438\u043b\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u0430.", "creation_timestamp": "2026-07-24T13:00:04.184385Z"}, {"uuid": "31bcc131-208a-44b8-a798-25a3125f2db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrffugnz762s", "content": "Cl0p\u3001PTC Windchill\u306e\u30bc\u30ed\u30c7\u30a4\u3092Web\u30b7\u30a7\u30eb\u5c55\u958b\u3068\u30c7\u30fc\u30bf\u7a83\u53d6\u306b\u60aa\u7528\n\nCl0p\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u30a2\u30d5\u30a3\u30ea\u30a8\u30a4\u30c8\u304c\u3001PTC Windchill\u304a\u3088\u3073FlexPLM\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-12569)\u3092\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u3092\u7d4c\u305a\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u884c\u3063\u305f\u4e0a\u3067JSP\u88fd\u306eWeb\u30b7\u30a7\u30eb\u3092\u8a2d\u7f6e\u3057\u3001\u4e8c\u91cd\u6050\u559d\u3092\u76ee\u7684\u3068\u3057\u3066\u6a5f\u5bc6\u6027\u306e\u9ad8\u3044\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u30c7\u30fc\u30bf\u3092\u7a83\u53d6\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a...", "creation_timestamp": "2026-07-24T13:00:26.738499Z"}, {"uuid": "fea3db24-a315-4710-baac-d8b0cba28deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/9266", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 Clop \u05de\u05e0\u05e6\u05dc\u05ea \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05e2\u05e8\u05db\u05d5\u05ea Windchill \u05d5-FlexPLM \u05d5\u05d3\u05d5\u05e8\u05e9\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea, CVE-2026-12569, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\n\u05d4\u05d5\u05d3\u05e2\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 \u05de\u05e6\"\u05d1. \n\n\u05de\u05d9\u05d3\u05e2 \u05e0\u05d5\u05e1\u05e3 \u05d1-BleepingComputer\n\nhttps://t.me/CyberSecurityIL/9266", "creation_timestamp": "2026-07-24T15:00:03.942062Z"}, {"uuid": "08e3208e-1825-4795-beab-adb5e10935a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/CyberSecurityIL/86238", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 Clop \u05de\u05e0\u05e6\u05dc\u05ea \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05e2\u05e8\u05db\u05d5\u05ea Windchill \u05d5-FlexPLM \u05d5\u05d3\u05d5\u05e8\u05e9\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea, CVE-2026-12569, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\n\u05d4\u05d5\u05d3\u05e2\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 \u05de\u05e6\"\u05d1. \n\n\u05de\u05d9\u05d3\u05e2 \u05e0\u05d5\u05e1\u05e3 \u05d1-BleepingComputer\n\nhttps://t.me/CyberSecurityIL/9266", "creation_timestamp": "2026-07-24T18:00:03.908791Z"}, {"uuid": "6ef65bb1-ceca-496c-977c-8507bd23c341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/86238", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 Clop \u05de\u05e0\u05e6\u05dc\u05ea \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05e2\u05e8\u05db\u05d5\u05ea Windchill \u05d5-FlexPLM \u05d5\u05d3\u05d5\u05e8\u05e9\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea, CVE-2026-12569, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\n\u05d4\u05d5\u05d3\u05e2\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 \u05de\u05e6\"\u05d1. \n\n\u05de\u05d9\u05d3\u05e2 \u05e0\u05d5\u05e1\u05e3 \u05d1-BleepingComputer\n\nhttps://t.me/CyberSecurityIL/9266", "creation_timestamp": "2026-07-25T00:00:09.610157Z"}, {"uuid": "d24f6f85-63e9-4364-bf5e-87f3f5055865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/9266", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 Clop \u05de\u05e0\u05e6\u05dc\u05ea \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05e2\u05e8\u05db\u05d5\u05ea Windchill \u05d5-FlexPLM \u05d5\u05d3\u05d5\u05e8\u05e9\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea, CVE-2026-12569, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\n\u05d4\u05d5\u05d3\u05e2\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 \u05de\u05e6\"\u05d1. \n\n\u05de\u05d9\u05d3\u05e2 \u05e0\u05d5\u05e1\u05e3 \u05d1-BleepingComputer\n\nhttps://t.me/CyberSecurityIL/9266", "creation_timestamp": "2026-07-25T00:00:10.257318Z"}, {"uuid": "e220458e-412a-4b78-981f-2acc28557fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/true_secator/8439", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop (\u0438\u043b\u0438 Cl0p) \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PTC Windchill \u0438 FlexPLM.\n\nPTC Windchill \u0438 PTC FlexPLM - \u044d\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0434\u0435\u0438 \u0434\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430.\n\n\u041e\u0431\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b PLM \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0440\u0435\u0434\u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e-\u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0439, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439, \u043c\u0430\u0448\u0438\u043d\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u0445. \n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 30 000 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u043e\u043b\u0435\u0435 1500 \u0431\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 FlexPLM.\n\n\u041f\u043e \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c, Clop \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CVE-2026-12569), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Windchill \u0438 FlexPLM.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 ReliaQuest, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Clop \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 PLM-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0414\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438\u043c\u0435\u044e\u0442 \u043e\u0431\u0449\u0438\u0435 \u0447\u0435\u0440\u0442\u044b \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Cl0p, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0446\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. Ransom-ISAC \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 Windchill \u0438 FlexPLM \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c Clop.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441 support@cryptohox.com, \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Clop.\n\nPTC\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f CVE-2026-12569 17 \u0438\u044e\u043d\u044f, \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0444\u0430\u043a\u0442 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438\u00a0\u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u044b \u043d\u0430 IOCs.\n \n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 26 \u0438\u044e\u043d\u044f PTC \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u00ab\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0437\u00bb, CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e\u00a0\u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u00a0\u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Heise, CVE-2026-12569 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0431\u0443\u0434\u0438\u043b\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b: \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (BSI) \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u0437\u0432\u043e\u043d\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c PTC \u043f\u043e\u0441\u0440\u0435\u0434\u0438 \u043d\u043e\u0447\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u0438\u0445 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438\u00a0\u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u00a0\u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windchill \u0438 FlexPLM (CVE-2026-4681) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u043b\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 ReliaQuest \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c PTC \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windchill \u0438 FlexPLM \u0438, \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0445 \u0437\u0430 VPN-\u0441\u0435\u0442\u044f\u043c\u0438 \u0438\u043b\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u0430.", "creation_timestamp": "2026-07-25T00:00:10.909579Z"}, {"uuid": "1513c21c-bbf6-4980-8efb-e11d7fdfb002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mrgvd2knea2n", "content": "Companies still running unpatched PTC $PTC Windchill or FlexPLM servers are being actively drained of data. The Clop ransomware gang is exploiting CVE-2026-12569, a critical remote-code-execution flaw, deploying webshells to steal files, per ReliaQuest. Patches have existed since June 17.", "creation_timestamp": "2026-07-25T03:09:43.565968Z"}, {"uuid": "d9dded7a-92fc-4b5c-b18b-5a766988a3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrhjktyet72n", "content": "Clop ransomware is back with a new target: PTC Windchill and FlexPLM. They're exploiting a critical vulnerability (CVE-2026-12569) to steal product blueprints and intellectual property. This directly threatens innovation for aerospace,\u2026\n\nhttps://www.tpp.blog/17wf2j3\n\n#cybersecurity #clop #windchill", "creation_timestamp": "2026-07-25T09:11:59.565027Z"}, {"uuid": "338f97ee-7eb9-402a-a55f-b0fcd7722e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrhnbuwvin2w", "content": "Cl0p exploits PTC Windchill flaw CVE-2026-12569, targeting manufacturing and retail sectors. Patch systems urgently to prevent breaches. #Cl0p #Ransomware #PTC #Windchill #CyberSecurity #DataBreach thedailytechfeed.com/cl0p-ransomw...", "creation_timestamp": "2026-07-25T10:18:34.550289Z"}, {"uuid": "96691612-167e-46c3-8eb6-1c35f68326b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mribqc63i72f", "content": "Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)", "creation_timestamp": "2026-07-25T16:24:32.100700Z"}, {"uuid": "d200b1f2-cfd6-43ad-bb66-2743eb91bced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116987720032118528", "content": "Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)#Cl0p #CVE_2026_12569 https://ransom-isac.org/blog/clop-windchill-flexplm-exploitation/", "creation_timestamp": "2026-07-26T18:35:43.217960Z"}, {"uuid": "8b97f7ac-a203-4e60-b408-71018d896078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 59 interactions\nCVE-2026-60137: 48 interactions\nCVE-2026-50522: 42 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-30623: 7 interactions\nCVE-2026-58662: 4 interactions\nCVE-2026-12569: 2 interactions\n", "creation_timestamp": "2026-07-26T05:02:38.098654Z"}, {"uuid": "75e65d23-84dd-4236-ba9c-f72a20480b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtve3spfdd26", "content": "The Clop web shell targets PTC Windchill via CVE-2026-12569, stealing credentials and engineering data in a mass-extortion campaign.\n\n#Clop #Windchill #WebShell #Ransomware #DataExfiltration", "creation_timestamp": "2026-08-25T08:02:16.302309Z"}, {"uuid": "0b252484-d757-4923-a607-1184403f97ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/thehackernews/9836", "content": "\u26a0\ufe0f Clop-linked Windchill web shell decrypts credentials and maps engineering data.\n\nDeployed after CVE-2026-12569 exploitation, the custom implant can extract LDAP and admin credentials and load Java payloads in memory.\n\nSee what the implant can do: https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html", "creation_timestamp": "2026-08-23T20:00:06.388286Z"}, {"uuid": "9893a50d-a8cb-4655-bb11-231684bb618d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrmcf6zg7seh", "content": "Cl0p\u306e\u30a2\u30d5\u30a3\u30ea\u30a8\u30a4\u30c8\u304c\u8a8d\u8a3c\u4e0d\u8981\u306eRCE\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001\u9732\u51fa\u3057\u305fPTC Windchill\u3068FlexPLM\u3092\u6a19\u7684\u306b\uff08CVE-2026-12569\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46859/", "creation_timestamp": "2026-07-27T06:46:59.146602Z"}, {"uuid": "37e3e073-197a-4af9-9b8a-16e7e7d14dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mrmjpaz47s2r", "content": "Cl0p sfrutta CVE-2026-12569 (CVSS 9.3) in PTC Windchill/FlexPLM: RCE non autenticata via WSDL info disclosure + login servlet, webshell JSP. Prima exploitation confermata su un prodotto PTC. Colpiti manufacturing, automotive, aerospace \u2014 rischio supply-chain IT/EU. In CISA KEV. #infosec", "creation_timestamp": "2026-07-27T08:57:46.291968Z"}, {"uuid": "aea96748-4e23-4ca6-97e1-7fad0f08f583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mrmz66hfqd2s", "content": "Cl0p affiliates exploit CVE-2026-12569 in PTC Windchill and FlexPLM for unauthenticated RCE, deploying JSP webshells and extorting victims with data theft.\n", "creation_timestamp": "2026-07-27T13:34:33.334411Z"}, {"uuid": "855aabf0-47dd-40b1-a2df-eed55026b457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrnfj4blwa2m", "content": "Cl0p affiliates are exploiting CVE-2026-12569 in PTC Windchill and FlexPLM, chaining flaws to gain RCE, drop JSP webshells, and steal data from aerospace, automotive, manufacturing, and retail firms. #Cl0p #PTC #Windchill", "creation_timestamp": "2026-07-27T17:15:26.008128Z"}, {"uuid": "2ad3b8a7-18f1-4e2e-963f-a3636bafa062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/thehackernews/9836", "content": "\u26a0\ufe0f Clop-linked Windchill web shell decrypts credentials and maps engineering data.\n\nDeployed after CVE-2026-12569 exploitation, the custom implant can extract LDAP and admin credentials and load Java payloads in memory.\n\nSee what the implant can do: https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html", "creation_timestamp": "2026-08-24T00:00:04.896745Z"}, {"uuid": "287c9f21-9765-4fa9-8bb6-619015f9cae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/seraphimnews.bsky.social/post/3mrob22uaj227", "content": "CVE-2026-12569: Kerentanan Kritis PTC Windchill Dieksploitasi Afiliasi Cl0p \u2014 CVSS 9.3, RCE Tanpa Autentikasi Ancam Sektor Aerospace, Otomotif, dan Manufaktur\n\nhttps://www.seraphimnews.my.id/blog/ptc-windchill-cve-2026-12569-cl0p-rce-juli-2026", "creation_timestamp": "2026-07-28T01:28:05.229548Z"}, {"uuid": "9d018bf0-f35a-45a9-be65-77075693920d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mrol5qyops2t", "content": "\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u30b0\u30eb\u30fc\u30d7 Clop\uff08Cl0p\uff09\u304cPTC Windchill\u30fbFlexPLM\u3092\u6a19\u7684\u306b\u30c7\u30fc\u30bf\u7a83\u53d6\u653b\u6483-CVE-2026-12569\uff08CVSS 9.3\uff09\u3092\u60aa\u7528\u3001\u88fd\u9020\u696d\u306e\u88fd\u54c1\u8a2d\u8a08\u30c7\u30fc\u30bf\u304c\u72d9\u308f\u308c\u308b\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack", "creation_timestamp": "2026-07-28T04:29:10.576643Z"}, {"uuid": "4cf034a6-eab6-4f87-851f-3fe0462282cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/HackerNewscyber/3288", "content": "\u2708\ufe0f\u0647\u06a9\u0631\u0647\u0627\u06cc Cl0p \u0627\u0632 \u062d\u0641\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 PTC \u0628\u0631\u0627\u06cc \u0628\u0627\u062c\u200c\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f\n\n\ud83c\udfa5\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc (CVE-2026-12569\u060c \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f9.\u06f3) \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc Windchill \u0648 FlexPLM \u0634\u0631\u06a9\u062a PTC \u062a\u0648\u0633\u0637 \u06cc\u06a9\u06cc \u0627\u0632 \u0648\u0627\u0628\u0633\u062a\u06af\u0627\u0646 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Cl0p \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631\u060c \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f\u060c \u062a\u0631\u06a9\u06cc\u0628\u06cc \u0627\u0632 \u062f\u0648 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0628\u062e\u0634 \u0648\u0631\u0648\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc FlexPLM \u0627\u0633\u062a.\n\n\ud83c\udfa4\u0628\u0627 \u0648\u062c\u0648\u062f \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u06f1\u06f7 \u0698\u0648\u0626\u0646\u060c \u0627\u0632 \u06f2\u06f0 \u0698\u0648\u0626\u06cc\u0647 \u062d\u0645\u0644\u0627\u062a \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0639\u0644\u06cc\u0647 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u062d\u0648\u0632\u0647 \u0647\u0648\u0627\u0641\u0636\u0627\u060c \u062e\u0648\u062f\u0631\u0648\u0633\u0627\u0632\u06cc\u060c \u062a\u0648\u0644\u06cc\u062f \u0635\u0646\u0639\u062a\u06cc \u0648 \u067e\u0648\u0634\u0627\u06a9 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc \u062a\u0647\u062f\u06cc\u062f\u0622\u0645\u06cc\u0632 \u0628\u0647 \u06a9\u0627\u0631\u06a9\u0646\u0627\u0646 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646\u060c \u062e\u0648\u0627\u0633\u062a\u0627\u0631 \u0628\u0627\u062c \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0647\u0631\u0686\u0646\u062f Cl0p \u0647\u0646\u0648\u0632 \u0631\u0633\u0645\u0627\u064b \u0645\u0633\u0626\u0648\u0644\u06cc\u062a \u0627\u06cc\u0646 \u06a9\u0645\u067e\u06cc\u0646 \u0631\u0627 \u0646\u067e\u0630\u06cc\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-28T11:00:06.717103Z"}, {"uuid": "5a3d79ec-9df0-4e08-9510-ec5f1f8d549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/HackerNewscyber/3288", "content": "\u2708\ufe0f\u0647\u06a9\u0631\u0647\u0627\u06cc Cl0p \u0627\u0632 \u062d\u0641\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 PTC \u0628\u0631\u0627\u06cc \u0628\u0627\u062c\u200c\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f\n\n\ud83c\udfa5\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc (CVE-2026-12569\u060c \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f9.\u06f3) \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc Windchill \u0648 FlexPLM \u0634\u0631\u06a9\u062a PTC \u062a\u0648\u0633\u0637 \u06cc\u06a9\u06cc \u0627\u0632 \u0648\u0627\u0628\u0633\u062a\u06af\u0627\u0646 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Cl0p \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631\u060c \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f\u060c \u062a\u0631\u06a9\u06cc\u0628\u06cc \u0627\u0632 \u062f\u0648 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0628\u062e\u0634 \u0648\u0631\u0648\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc FlexPLM \u0627\u0633\u062a.\n\n\ud83c\udfa4\u0628\u0627 \u0648\u062c\u0648\u062f \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u06f1\u06f7 \u0698\u0648\u0626\u0646\u060c \u0627\u0632 \u06f2\u06f0 \u0698\u0648\u0626\u06cc\u0647 \u062d\u0645\u0644\u0627\u062a \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0639\u0644\u06cc\u0647 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u062d\u0648\u0632\u0647 \u0647\u0648\u0627\u0641\u0636\u0627\u060c \u062e\u0648\u062f\u0631\u0648\u0633\u0627\u0632\u06cc\u060c \u062a\u0648\u0644\u06cc\u062f \u0635\u0646\u0639\u062a\u06cc \u0648 \u067e\u0648\u0634\u0627\u06a9 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc \u062a\u0647\u062f\u06cc\u062f\u0622\u0645\u06cc\u0632 \u0628\u0647 \u06a9\u0627\u0631\u06a9\u0646\u0627\u0646 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646\u060c \u062e\u0648\u0627\u0633\u062a\u0627\u0631 \u0628\u0627\u062c \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0647\u0631\u0686\u0646\u062f Cl0p \u0647\u0646\u0648\u0632 \u0631\u0633\u0645\u0627\u064b \u0645\u0633\u0626\u0648\u0644\u06cc\u062a \u0627\u06cc\u0646 \u06a9\u0645\u067e\u06cc\u0646 \u0631\u0627 \u0646\u067e\u0630\u06cc\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-29T00:00:38.364700Z"}, {"uuid": "62c92931-b840-43c2-a5d9-7e13ec263596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mtt6tjmtda2v", "content": "Energy titan Shell is now having a quiet panic after Cl0p claimed eighty-nine gigabytes of corporate data via CVE-2026-12569, a lovely deserialization bug in PTC Windchill and FlexPLM. While Shell insists day-to-day operations remain miraculously untouched, the rest of us get to ...\n\nRead full story", "creation_timestamp": "2026-08-24T11:22:19.494431Z"}, {"uuid": "cba56c44-7fa2-4bc5-a94e-ba415c656084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/HackerNewsAR/2539", "content": "\u0648\u0635\u0648\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0625\u0644\u0649 \u0623\u0646\u0638\u0645\u0629 PTC Windchill \u0627\u0644\u0645\u0635\u0627\u0628\u0629 \u0628\u062b\u063a\u0631\u0629 CVE-2026-12569 \u064a\u064f\u0645\u062b\u0651\u0644 \u0643\u0627\u0631\u062b\u0629 \u0623\u0645\u0646\u064a\u0629 \u0648\u062a\u0634\u063a\u064a\u0644\u064a\u0629 \u0642\u0635\u0648\u0649 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0635\u0646\u0627\u0639\u064a\u0629\u060c \u062d\u064a\u062b \u0644\u0627 \u064a\u0642\u062a\u0635\u0631 \u0627\u0644\u0636\u0631\u0631 \u0639\u0644\u0649 \u0627\u0644\u062c\u0627\u0646\u0628 \u0627\u0644\u0631\u0642\u0645\u064a \u0641\u062d\u0633\u0628\u060c \u0628\u0644 \u064a\u0645\u062a\u062f \u0644\u0636\u0631\u0628 \u0635\u0645\u064a\u0645 \u0627\u0644\u0642\u062f\u0631\u0629 \u0627\u0644\u062a\u0646\u0627\u0641\u0633\u064a\u0629 \u0648\u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0642\u0648\u0645\u064a \u0644\u0644\u0634\u0631\u0643\u0627\u062a \u0648\u0627\u0644\u062f\u0648\u0644\u060c \u0648\u0647\u0630\u0647 \u0623\u0628\u0631\u0632 \u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0645\u062a\u0631\u062a\u0628\u0629 \u0639\u0644\u0649 \u0646\u062c\u0627\u062d \u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642:\n\n1. \u0633\u0631\u0642\u0629 \u0627\u0644\u0645\u0644\u0643\u064a\u0629 \u0627\u0644\u0641\u0643\u0631\u064a\u0629 \u0648\u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0627\u0644\u062a\u062c\u0627\u0631\u064a\u0629 (Cyber Espionage) \u0646\u0647\u0628 \u0627\u0644\u062a\u0635\u0627\u0645\u064a\u0645 \u0627\u0644\u0647\u0646\u062f\u0633\u064a\u0629: \u064a\u0633\u062a\u0637\u064a\u0639 \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u062a\u062d\u0645\u064a\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u0635\u0645\u064a\u0645 \u062b\u0644\u0627\u062b\u064a\u0629 \u0627\u0644\u0623\u0628\u0639\u0627\u062f (CAD) \u0648\u0627\u0644\u0645\u062e\u0637\u0637\u0627\u062a \u0627\u0644\u0641\u0646\u064a\u0629 \u0644\u0644\u0645\u0646\u062a\u062c\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629 \u0645\u062b\u0644 \u0623\u062d\u062f\u062b \u0627\u0644\u0637\u0627\u0626\u0631\u0627\u062a\u060c \u0623\u0648 \u0645\u0639\u0627\u0644\u062c\u0627\u062a \u0627\u0644\u0631\u0642\u0627\u0626\u0642 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629\u060c \u0623\u0648 \u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u062f\u0641\u0627\u0639. \u064a\u0645\u0643\u0646 \u0628\u064a\u0639 \u0647\u0630\u0647 \u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0644\u0644\u0645\u0646\u0627\u0641\u0633\u064a\u0646 \u0623\u0648 \u0644\u062d\u0643\u0648\u0645\u0627\u062a \u0623\u062c\u0646\u0628\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0641\u0642\u062f \u0627\u0644\u0634\u0631\u0643\u0629 \u0645\u064a\u0632\u062a\u0647\u0627 \u0627\u0644\u062a\u0646\u0627\u0641\u0633\u064a\u0629 \u0627\u0644\u062a\u064a \u0623\u0646\u0641\u0642\u062a \u0639\u0644\u064a\u0647\u0627 \u0645\u0644\u064a\u0627\u0631\u0627\u062a \u0627\u0644\u062f\u0648\u0644\u0627\u0631\u0627\u062a \u0641\u064a \u0642\u0637\u0627\u0639 \u0627\u0644\u0628\u062d\u062b \u0648\u0627\u0644\u062a\u0637\u0648\u064a\u0631.\n\n2. \u0647\u062c\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0641\u062f\u064a\u0629 \u0627\u0644\u0645\u0632\u062f\u0648\u062c\u0629 : \u0646\u0638\u0631\u0627\u064b \u0644\u0623\u0646 \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u062f\u064a\u0631 \u0623\u0635\u0648\u0644\u0627\u064b \u0628\u0627\u0644\u063a\u0629 \u0627\u0644\u0623\u0647\u0645\u064a\u0629\u060c \u062a\u0642\u0648\u0645 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0641\u062f\u064a\u0629 \u0628\u062a\u0634\u0641\u064a\u0631 \u062e\u0648\u0627\u062f\u0645 Windchill \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0644\u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u0625\u0646\u062a\u0627\u062c. \u064a\u0647\u062f\u062f \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u0646\u0634\u0631 \u0627\u0644\u0645\u062e\u0637\u0637\u0627\u062a \u0627\u0644\u0647\u0646\u062f\u0633\u064a\u0629 \u0627\u0644\u0645\u0633\u0631\u0648\u0642\u0629 \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0625\u0630\u0627 \u0644\u0645 \u062a\u062f\u0641\u0639 \u0627\u0644\u0634\u0631\u0643\u0629 \u0641\u062f\u064a\u0629 \u0645\u0627\u0644\u064a\u0629 \u0636\u062e\u0645\u0629 \u062a\u0635\u0644 \u0625\u0644\u0649 \u0639\u0634\u0631\u0627\u062a \u0627\u0644\u0645\u0644\u0627\u064a\u064a\u0646 \u0645\u0646 \u0627\u0644\u062f\u0648\u0644\u0627\u0631\u0627\u062a.\n\n3. \u0634\u0644\u0644 \u062a\u0627\u0645 \u0641\u064a \u062e\u0637\u0648\u0637 \u0627\u0644\u0625\u0646\u062a\u0627\u062c \u0648\u0633\u0644\u0627\u0633\u0644 \u0627\u0644\u0625\u0645\u062f\u0627\u062f (Operational Disruption) \u0648\u0625\u064a\u0642\u0627\u0641 \u0627\u0644\u062a\u0635\u0646\u064a\u0639: \u064a\u0639\u062a\u0645\u062f \u0627\u0644\u0639\u0645\u0627\u0644 \u0648\u0627\u0644\u0645\u0647\u0646\u062f\u0633\u0648\u0646 \u0641\u064a \u0627\u0644\u0645\u0635\u0627\u0646\u0639 \u0639\u0644\u0649 Windchill \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0642\u0648\u0627\u0626\u0645 \u0627\u0644\u0645\u0648\u0627\u062f (BOM) \u0648\u0623\u062d\u062f\u062b \u0627\u0644\u062a\u0639\u062f\u064a\u0644\u0627\u062a \u0627\u0644\u0645\u0639\u062a\u0645\u062f\u0629 \u0644\u0644\u0645\u0646\u062a\u062c\u0627\u062a. \u062a\u062c\u0645\u064a\u062f \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u0639\u0646\u064a \u0639\u062c\u0632 \u0627\u0644\u0645\u0635\u0627\u0646\u0639 \u0639\u0646 \u0645\u0639\u0631\u0641\u0629 \u0643\u064a\u0641\u064a\u0629 \u062a\u062c\u0645\u064a\u0639 \u0627\u0644\u0642\u0637\u0639\u060c \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u062a\u0648\u0642\u0641 \u062e\u0637\u0648\u0637 \u0627\u0644\u0625\u0646\u062a\u0627\u062c \u0628\u0627\u0644\u0643\u0627\u0645\u0644\u060c \u0643\u0630\u0644\u0643 \u062a\u0645\u0646\u0639 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0634\u0631\u0643\u0627\u0621 \u0648\u0627\u0644\u0645\u0648\u0631\u062f\u064a\u0646 \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u064a\u0646 \u0645\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0622\u0645\u0646 \u0644\u0644\u0628\u064a\u0627\u0646\u0627\u062a\u060c \u0645\u0645\u0627 \u064a\u0639\u0637\u0644 \u0633\u0644\u0627\u0633\u0644 \u0627\u0644\u0625\u0645\u062f\u0627\u062f \u0627\u0644\u0644\u0648\u062c\u0633\u062a\u064a\u0629 \u0644\u0644\u0634\u0631\u0643\u0629.\n\n4. \u0627\u0644\u062a\u062e\u0631\u064a\u0628 \u0627\u0644\u0635\u0646\u0627\u0639\u064a \u0648\u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0645\u0646\u062a\u062c\u0627\u062a (Product Sabotage)\u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u062a\u0635\u0627\u0645\u064a\u0645 \u0633\u0631\u0627\u064b: \u0628\u0645\u062c\u0631\u062f \u0627\u0645\u062a\u0644\u0627\u0643 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0625\u062f\u0627\u0631\u0629\u060c \u064a\u0645\u0643\u0646 \u062a\u0639\u062f\u064a\u0644 \u0642\u064a\u0627\u0633\u0627\u062a \u0623\u0648 \u0645\u0643\u0648\u0646\u0627\u062a \u0647\u0646\u062f\u0633\u064a\u0629 \u062f\u0627\u062e\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u0635\u0645\u064a\u0645 \u062f\u0648\u0646 \u0639\u0644\u0645 \u0627\u0644\u0645\u0647\u0646\u062f\u0633\u064a\u0646\u060c \u064a\u0624\u062f\u064a \u0647\u0630\u0627 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0625\u0644\u0649 \u0635\u0646\u0627\u0639\u0629 \u0623\u062c\u0632\u0627\u0621 \u0628\u0647\u0627 \u0639\u064a\u0648\u0628 \u0645\u0635\u0646\u0639\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 (\u0645\u062b\u0644 \u0625\u0636\u0639\u0627\u0641 \u0647\u064a\u0643\u0644 \u0637\u0627\u0626\u0631\u0629 \u0623\u0648 \u0633\u064a\u0627\u0631\u0629)\u060c \u0645\u0645\u0627 \u064a\u062a\u0633\u0628\u0628 \u0641\u064a \u0643\u0648\u0627\u0631\u062b \u0645\u064a\u062f\u0627\u0646\u064a\u0629 \u0644\u0627\u062d\u0642\u0627\u064b\u060c \u062a\u062a\u0628\u0639\u0647\u0627 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u062f\u0639\u0627\u0621 \u0645\u0643\u0644\u0641\u0629 \u0644\u0644\u0645\u0646\u062a\u062c\u0627\u062a \u0648\u0636\u0631\u0631 \u0647\u0627\u0626\u0644 \u0644\u0633\u0645\u0639\u0629 \u0627\u0644\u0639\u0644\u0627\u0645\u0629 \u0627\u0644\u062a\u062c\u0627\u0631\u064a\u0629.5. \u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 (Lateral Movement)\u060c \u064a\u0645\u0643\u0646 \u0643\u0630\u0644\u0643 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u0627\u062f\u0645 Windchill \u0643\u062c\u0633\u0631 \u0639\u0628\u0648\u0631\u060c \u0644\u0627 \u064a\u062a\u0648\u0642\u0641 \u0627\u0644\u0645\u0647\u0627\u062c\u0631 \u0639\u0646\u062f \u062e\u0627\u062f\u0645 \u0627\u0644\u0648\u064a\u0628\u060c \u0628\u0644 \u064a\u0633\u062a\u063a\u0644\u0647 \u0643\u0646\u0642\u0637\u0629 \u0627\u0646\u0637\u0644\u0627\u0642 (Pivot) \u0644\u0644\u062a\u063a\u0644\u063a\u0644 \u062f\u0627\u062e\u0644 \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0644\u0644\u0645\u0624\u0633\u0633\u0629.\n\n5. \u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062d\u064a\u0648\u064a\u0629: \u064a\u0633\u0639\u0649 \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u0645\u0646 \u062e\u0644\u0627\u0644\u0647 \u0644\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0645\u062d\u0627\u0633\u0628\u0629 \u0648\u0627\u0644\u0640 Active Directory\u060c \u0623\u0648 \u062d\u062a\u0649 \u0627\u0644\u0627\u0646\u062a\u0642\u0627\u0644 \u0625\u0644\u0649 \u0634\u0628\u0643\u0629 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0635\u0646\u0627\u0639\u064a (OT) \u0627\u0644\u062a\u064a \u062a\u062f\u064a\u0631 \u0627\u0644\u0631\u0648\u0628\u0648\u062a\u0627\u062a \u0648\u0627\u0644\u0622\u0644\u0627\u062a \u0627\u0644\u0641\u064a\u0643\u0644\u064a\u0629 \u0641\u064a \u0627\u0644\u0645\u0635\u0627\u0646\u0639.\n#CVE_2026_12569 #Windchill #HackerNews", "creation_timestamp": "2026-09-01T20:00:05.127287Z"}, {"uuid": "65817c69-ef24-47f0-8766-1155af80d21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/HackerNewsAR/2537", "content": "\u0641\u064a 17 \u064a\u0648\u0646\u064a\u0648 2026 \ud83d\uddd3\ufe0f\u060c \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u062b\u063a\u0631\u0629 CVE-2026-12569 \u0644\u0623\u0648\u0644 \u0645\u0631\u0629 \u0641\u064a \u0623\u0646\u0638\u0645\u0629 Windchill. \u0647\u0630\u0647 \u062b\u063a\u0631\u0629 \u0634\u062f\u064a\u062f\u0629 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 \ud83d\udea8 \u0645\u0646 \u0646\u0648\u0639 \"\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u064f\u0639\u062f\"\u060c \u0645\u0635\u0646\u0641\u0629 \u0628\u0623\u0639\u0644\u0649 \u062f\u0631\u062c\u0629 \u062e\u0637\u0648\u0631\u0629 (10/10 \u0639\u0644\u0649 \u0645\u0642\u064a\u0627\u0633 CVSS).\n\n\u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0635\u0646\u0627\u0639\u064a\u0629 \u0648\u062f\u0648\u0631\u0629 \u062d\u064a\u0627\u0629 \u0627\u0644\u0645\u0646\u062a\u062c \u0645\u0646 \u0634\u0631\u0643\u0629 PTC\u060c \u0648\u062a\u062d\u062f\u064a\u062f\u0627\u064b \u0646\u0638\u0627\u0645\u064a PTC Windchill PDMlink \u0648 PTC FlexPLM.\n\n\u062a\u0631\u062a\u0628\u0637 \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u0627\u0644\u062e\u0644\u0644 \u0627\u0644\u062a\u0642\u0646\u064a CWE-502 (\u0625\u0644\u063a\u0627\u0621 \u062a\u0633\u0644\u0633\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629) \u0648 CWE-20 (\u0627\u0644\u062a\u062d\u0642\u0642 \u063a\u064a\u0631 \u0627\u0644\u0633\u0644\u064a\u0645 \u0645\u0646 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a) \ud83d\udd0d. \u062d\u064a\u062b \u062a\u0639\u062a\u0645\u062f \u0623\u0646\u0638\u0645\u0629 Windchill \u0639\u0644\u0649 \u0644\u063a\u0629 \u062c\u0627\u0641\u0627 (Java)\u060c \u0648\u0639\u0646\u062f \u062a\u0628\u0627\u062f\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0628\u0631 \u0627\u0644\u0634\u0628\u0643\u0629\u060c \u064a\u062a\u0645 \u062a\u062d\u0648\u064a\u0644 \u0627\u0644\u0643\u0627\u0626\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0625\u0644\u0649 \u062a\u062f\u0641\u0642 \u0628\u064a\u0627\u0646\u0627\u062a (Serialization).\n\n\u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0643\u0645\u0646 \u0641\u064a \u0623\u0646 \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u0642\u0648\u0645 \u0628\u0625\u0639\u0627\u062f\u0629 \u0628\u0646\u0627\u0621 \u0647\u0630\u0647 \u0627\u0644\u0643\u0627\u0626\u0646\u0627\u062a (Deserialization) \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u0634\u0628\u0643\u064a\u0629 \u062f\u0648\u0646 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0647\u0648\u064a\u062a\u0647\u0627 \u0623\u0648 \u0633\u0644\u0627\u0645\u062a\u0647\u0627 \u26a0\ufe0f.\n\n\u062a\u062a\u064a\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 (\u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644) \u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645 \u0628\u064a\u0627\u0646\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0628\u0631\u0645\u062c\u064a\u0629 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0648\u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645 \u0627\u0644\u0645\u0633\u062a\u0636\u064a\u0641 \ud83d\udd75\ufe0f\u200d\u2642\ufe0f\ud83d\udcbb.\n\n\u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u062e\u062a\u0631\u0642 \u0628\u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0645\u062c\u0647\u0632\u0629 \u062e\u0635\u064a\u0635\u0627\u064b (Malformed Network Request) \u0639\u0628\u0631 \u0645\u0646\u0627\u0641\u0630 \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629. \u0628\u0645\u062c\u0631\u062f \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u062e\u0627\u062f\u0645 \u0644\u0647\u0630\u0647 \u0627\u0644\u062d\u0632\u0645\u0629\u060c \u062a\u064f\u0646\u0641\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0627\u0644\u0645\u062f\u0645\u062c\u0629 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645.\n\n#CVE_2026_12569 #Windchill #HackerNews", "creation_timestamp": "2026-09-01T20:00:04.785089Z"}, {"uuid": "ee8e5257-7377-4cf6-b72c-e936b306303a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/HackerNewsAR/2537", "content": "\u0641\u064a 17 \u064a\u0648\u0646\u064a\u0648 2026 \ud83d\uddd3\ufe0f\u060c \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u062b\u063a\u0631\u0629 CVE-2026-12569 \u0644\u0623\u0648\u0644 \u0645\u0631\u0629 \u0641\u064a \u0623\u0646\u0638\u0645\u0629 Windchill. \u0647\u0630\u0647 \u062b\u063a\u0631\u0629 \u0634\u062f\u064a\u062f\u0629 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 \ud83d\udea8 \u0645\u0646 \u0646\u0648\u0639 \"\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u064f\u0639\u062f\"\u060c \u0645\u0635\u0646\u0641\u0629 \u0628\u0623\u0639\u0644\u0649 \u062f\u0631\u062c\u0629 \u062e\u0637\u0648\u0631\u0629 (10/10 \u0639\u0644\u0649 \u0645\u0642\u064a\u0627\u0633 CVSS).\n\n\u062a\u0624\u062b\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0635\u0646\u0627\u0639\u064a\u0629 \u0648\u062f\u0648\u0631\u0629 \u062d\u064a\u0627\u0629 \u0627\u0644\u0645\u0646\u062a\u062c \u0645\u0646 \u0634\u0631\u0643\u0629 PTC\u060c \u0648\u062a\u062d\u062f\u064a\u062f\u0627\u064b \u0646\u0638\u0627\u0645\u064a PTC Windchill PDMlink \u0648 PTC FlexPLM.\n\n\u062a\u0631\u062a\u0628\u0637 \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u0627\u0644\u062e\u0644\u0644 \u0627\u0644\u062a\u0642\u0646\u064a CWE-502 (\u0625\u0644\u063a\u0627\u0621 \u062a\u0633\u0644\u0633\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629) \u0648 CWE-20 (\u0627\u0644\u062a\u062d\u0642\u0642 \u063a\u064a\u0631 \u0627\u0644\u0633\u0644\u064a\u0645 \u0645\u0646 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a) \ud83d\udd0d. \u062d\u064a\u062b \u062a\u0639\u062a\u0645\u062f \u0623\u0646\u0638\u0645\u0629 Windchill \u0639\u0644\u0649 \u0644\u063a\u0629 \u062c\u0627\u0641\u0627 (Java)\u060c \u0648\u0639\u0646\u062f \u062a\u0628\u0627\u062f\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0628\u0631 \u0627\u0644\u0634\u0628\u0643\u0629\u060c \u064a\u062a\u0645 \u062a\u062d\u0648\u064a\u0644 \u0627\u0644\u0643\u0627\u0626\u0646\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0625\u0644\u0649 \u062a\u062f\u0641\u0642 \u0628\u064a\u0627\u0646\u0627\u062a (Serialization).\n\n\u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0643\u0645\u0646 \u0641\u064a \u0623\u0646 \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u0642\u0648\u0645 \u0628\u0625\u0639\u0627\u062f\u0629 \u0628\u0646\u0627\u0621 \u0647\u0630\u0647 \u0627\u0644\u0643\u0627\u0626\u0646\u0627\u062a (Deserialization) \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u0634\u0628\u0643\u064a\u0629 \u062f\u0648\u0646 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0647\u0648\u064a\u062a\u0647\u0627 \u0623\u0648 \u0633\u0644\u0627\u0645\u062a\u0647\u0627 \u26a0\ufe0f.\n\n\u062a\u062a\u064a\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 (\u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644) \u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645 \u0628\u064a\u0627\u0646\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0628\u0631\u0645\u062c\u064a\u0629 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0648\u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645 \u0627\u0644\u0645\u0633\u062a\u0636\u064a\u0641 \ud83d\udd75\ufe0f\u200d\u2642\ufe0f\ud83d\udcbb.\n\n\u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u062e\u062a\u0631\u0642 \u0628\u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0645\u062c\u0647\u0632\u0629 \u062e\u0635\u064a\u0635\u0627\u064b (Malformed Network Request) \u0639\u0628\u0631 \u0645\u0646\u0627\u0641\u0630 \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629. \u0628\u0645\u062c\u0631\u062f \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u062e\u0627\u062f\u0645 \u0644\u0647\u0630\u0647 \u0627\u0644\u062d\u0632\u0645\u0629\u060c \u062a\u064f\u0646\u0641\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0627\u0644\u0645\u062f\u0645\u062c\u0629 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645.\n\n#CVE_2026_12569 #Windchill #HackerNews", "creation_timestamp": "2026-09-02T01:00:27.242154Z"}, {"uuid": "f4931f37-ccb8-4900-b5c7-9e97a2c78c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/HackerNewsAR/2539", "content": "\u0648\u0635\u0648\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0625\u0644\u0649 \u0623\u0646\u0638\u0645\u0629 PTC Windchill \u0627\u0644\u0645\u0635\u0627\u0628\u0629 \u0628\u062b\u063a\u0631\u0629 CVE-2026-12569 \u064a\u064f\u0645\u062b\u0651\u0644 \u0643\u0627\u0631\u062b\u0629 \u0623\u0645\u0646\u064a\u0629 \u0648\u062a\u0634\u063a\u064a\u0644\u064a\u0629 \u0642\u0635\u0648\u0649 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u0635\u0646\u0627\u0639\u064a\u0629\u060c \u062d\u064a\u062b \u0644\u0627 \u064a\u0642\u062a\u0635\u0631 \u0627\u0644\u0636\u0631\u0631 \u0639\u0644\u0649 \u0627\u0644\u062c\u0627\u0646\u0628 \u0627\u0644\u0631\u0642\u0645\u064a \u0641\u062d\u0633\u0628\u060c \u0628\u0644 \u064a\u0645\u062a\u062f \u0644\u0636\u0631\u0628 \u0635\u0645\u064a\u0645 \u0627\u0644\u0642\u062f\u0631\u0629 \u0627\u0644\u062a\u0646\u0627\u0641\u0633\u064a\u0629 \u0648\u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0642\u0648\u0645\u064a \u0644\u0644\u0634\u0631\u0643\u0627\u062a \u0648\u0627\u0644\u062f\u0648\u0644\u060c \u0648\u0647\u0630\u0647 \u0623\u0628\u0631\u0632 \u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0645\u062a\u0631\u062a\u0628\u0629 \u0639\u0644\u0649 \u0646\u062c\u0627\u062d \u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642:\n\n1. \u0633\u0631\u0642\u0629 \u0627\u0644\u0645\u0644\u0643\u064a\u0629 \u0627\u0644\u0641\u0643\u0631\u064a\u0629 \u0648\u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0627\u0644\u062a\u062c\u0627\u0631\u064a\u0629 (Cyber Espionage) \u0646\u0647\u0628 \u0627\u0644\u062a\u0635\u0627\u0645\u064a\u0645 \u0627\u0644\u0647\u0646\u062f\u0633\u064a\u0629: \u064a\u0633\u062a\u0637\u064a\u0639 \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u062a\u062d\u0645\u064a\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u0635\u0645\u064a\u0645 \u062b\u0644\u0627\u062b\u064a\u0629 \u0627\u0644\u0623\u0628\u0639\u0627\u062f (CAD) \u0648\u0627\u0644\u0645\u062e\u0637\u0637\u0627\u062a \u0627\u0644\u0641\u0646\u064a\u0629 \u0644\u0644\u0645\u0646\u062a\u062c\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629 \u0645\u062b\u0644 \u0623\u062d\u062f\u062b \u0627\u0644\u0637\u0627\u0626\u0631\u0627\u062a\u060c \u0623\u0648 \u0645\u0639\u0627\u0644\u062c\u0627\u062a \u0627\u0644\u0631\u0642\u0627\u0626\u0642 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629\u060c \u0623\u0648 \u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u062f\u0641\u0627\u0639. \u064a\u0645\u0643\u0646 \u0628\u064a\u0639 \u0647\u0630\u0647 \u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0644\u0644\u0645\u0646\u0627\u0641\u0633\u064a\u0646 \u0623\u0648 \u0644\u062d\u0643\u0648\u0645\u0627\u062a \u0623\u062c\u0646\u0628\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0641\u0642\u062f \u0627\u0644\u0634\u0631\u0643\u0629 \u0645\u064a\u0632\u062a\u0647\u0627 \u0627\u0644\u062a\u0646\u0627\u0641\u0633\u064a\u0629 \u0627\u0644\u062a\u064a \u0623\u0646\u0641\u0642\u062a \u0639\u0644\u064a\u0647\u0627 \u0645\u0644\u064a\u0627\u0631\u0627\u062a \u0627\u0644\u062f\u0648\u0644\u0627\u0631\u0627\u062a \u0641\u064a \u0642\u0637\u0627\u0639 \u0627\u0644\u0628\u062d\u062b \u0648\u0627\u0644\u062a\u0637\u0648\u064a\u0631.\n\n2. \u0647\u062c\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0641\u062f\u064a\u0629 \u0627\u0644\u0645\u0632\u062f\u0648\u062c\u0629 : \u0646\u0638\u0631\u0627\u064b \u0644\u0623\u0646 \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u062f\u064a\u0631 \u0623\u0635\u0648\u0644\u0627\u064b \u0628\u0627\u0644\u063a\u0629 \u0627\u0644\u0623\u0647\u0645\u064a\u0629\u060c \u062a\u0642\u0648\u0645 \u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u0641\u062f\u064a\u0629 \u0628\u062a\u0634\u0641\u064a\u0631 \u062e\u0648\u0627\u062f\u0645 Windchill \u0628\u0627\u0644\u0643\u0627\u0645\u0644 \u0644\u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u0625\u0646\u062a\u0627\u062c. \u064a\u0647\u062f\u062f \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u0646\u0634\u0631 \u0627\u0644\u0645\u062e\u0637\u0637\u0627\u062a \u0627\u0644\u0647\u0646\u062f\u0633\u064a\u0629 \u0627\u0644\u0645\u0633\u0631\u0648\u0642\u0629 \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0625\u0630\u0627 \u0644\u0645 \u062a\u062f\u0641\u0639 \u0627\u0644\u0634\u0631\u0643\u0629 \u0641\u062f\u064a\u0629 \u0645\u0627\u0644\u064a\u0629 \u0636\u062e\u0645\u0629 \u062a\u0635\u0644 \u0625\u0644\u0649 \u0639\u0634\u0631\u0627\u062a \u0627\u0644\u0645\u0644\u0627\u064a\u064a\u0646 \u0645\u0646 \u0627\u0644\u062f\u0648\u0644\u0627\u0631\u0627\u062a.\n\n3. \u0634\u0644\u0644 \u062a\u0627\u0645 \u0641\u064a \u062e\u0637\u0648\u0637 \u0627\u0644\u0625\u0646\u062a\u0627\u062c \u0648\u0633\u0644\u0627\u0633\u0644 \u0627\u0644\u0625\u0645\u062f\u0627\u062f (Operational Disruption) \u0648\u0625\u064a\u0642\u0627\u0641 \u0627\u0644\u062a\u0635\u0646\u064a\u0639: \u064a\u0639\u062a\u0645\u062f \u0627\u0644\u0639\u0645\u0627\u0644 \u0648\u0627\u0644\u0645\u0647\u0646\u062f\u0633\u0648\u0646 \u0641\u064a \u0627\u0644\u0645\u0635\u0627\u0646\u0639 \u0639\u0644\u0649 Windchill \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0642\u0648\u0627\u0626\u0645 \u0627\u0644\u0645\u0648\u0627\u062f (BOM) \u0648\u0623\u062d\u062f\u062b \u0627\u0644\u062a\u0639\u062f\u064a\u0644\u0627\u062a \u0627\u0644\u0645\u0639\u062a\u0645\u062f\u0629 \u0644\u0644\u0645\u0646\u062a\u062c\u0627\u062a. \u062a\u062c\u0645\u064a\u062f \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u0639\u0646\u064a \u0639\u062c\u0632 \u0627\u0644\u0645\u0635\u0627\u0646\u0639 \u0639\u0646 \u0645\u0639\u0631\u0641\u0629 \u0643\u064a\u0641\u064a\u0629 \u062a\u062c\u0645\u064a\u0639 \u0627\u0644\u0642\u0637\u0639\u060c \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u062a\u0648\u0642\u0641 \u062e\u0637\u0648\u0637 \u0627\u0644\u0625\u0646\u062a\u0627\u062c \u0628\u0627\u0644\u0643\u0627\u0645\u0644\u060c \u0643\u0630\u0644\u0643 \u062a\u0645\u0646\u0639 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0634\u0631\u0643\u0627\u0621 \u0648\u0627\u0644\u0645\u0648\u0631\u062f\u064a\u0646 \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u064a\u0646 \u0645\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0622\u0645\u0646 \u0644\u0644\u0628\u064a\u0627\u0646\u0627\u062a\u060c \u0645\u0645\u0627 \u064a\u0639\u0637\u0644 \u0633\u0644\u0627\u0633\u0644 \u0627\u0644\u0625\u0645\u062f\u0627\u062f \u0627\u0644\u0644\u0648\u062c\u0633\u062a\u064a\u0629 \u0644\u0644\u0634\u0631\u0643\u0629.\n\n4. \u0627\u0644\u062a\u062e\u0631\u064a\u0628 \u0627\u0644\u0635\u0646\u0627\u0639\u064a \u0648\u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0645\u0646\u062a\u062c\u0627\u062a (Product Sabotage)\u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u062a\u0635\u0627\u0645\u064a\u0645 \u0633\u0631\u0627\u064b: \u0628\u0645\u062c\u0631\u062f \u0627\u0645\u062a\u0644\u0627\u0643 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0625\u062f\u0627\u0631\u0629\u060c \u064a\u0645\u0643\u0646 \u062a\u0639\u062f\u064a\u0644 \u0642\u064a\u0627\u0633\u0627\u062a \u0623\u0648 \u0645\u0643\u0648\u0646\u0627\u062a \u0647\u0646\u062f\u0633\u064a\u0629 \u062f\u0627\u062e\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u0635\u0645\u064a\u0645 \u062f\u0648\u0646 \u0639\u0644\u0645 \u0627\u0644\u0645\u0647\u0646\u062f\u0633\u064a\u0646\u060c \u064a\u0624\u062f\u064a \u0647\u0630\u0627 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0625\u0644\u0649 \u0635\u0646\u0627\u0639\u0629 \u0623\u062c\u0632\u0627\u0621 \u0628\u0647\u0627 \u0639\u064a\u0648\u0628 \u0645\u0635\u0646\u0639\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 (\u0645\u062b\u0644 \u0625\u0636\u0639\u0627\u0641 \u0647\u064a\u0643\u0644 \u0637\u0627\u0626\u0631\u0629 \u0623\u0648 \u0633\u064a\u0627\u0631\u0629)\u060c \u0645\u0645\u0627 \u064a\u062a\u0633\u0628\u0628 \u0641\u064a \u0643\u0648\u0627\u0631\u062b \u0645\u064a\u062f\u0627\u0646\u064a\u0629 \u0644\u0627\u062d\u0642\u0627\u064b\u060c \u062a\u062a\u0628\u0639\u0647\u0627 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u062f\u0639\u0627\u0621 \u0645\u0643\u0644\u0641\u0629 \u0644\u0644\u0645\u0646\u062a\u062c\u0627\u062a \u0648\u0636\u0631\u0631 \u0647\u0627\u0626\u0644 \u0644\u0633\u0645\u0639\u0629 \u0627\u0644\u0639\u0644\u0627\u0645\u0629 \u0627\u0644\u062a\u062c\u0627\u0631\u064a\u0629.5. \u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0628\u0627\u0644\u0643\u0627\u0645\u0644 (Lateral Movement)\u060c \u064a\u0645\u0643\u0646 \u0643\u0630\u0644\u0643 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u0627\u062f\u0645 Windchill \u0643\u062c\u0633\u0631 \u0639\u0628\u0648\u0631\u060c \u0644\u0627 \u064a\u062a\u0648\u0642\u0641 \u0627\u0644\u0645\u0647\u0627\u062c\u0631 \u0639\u0646\u062f \u062e\u0627\u062f\u0645 \u0627\u0644\u0648\u064a\u0628\u060c \u0628\u0644 \u064a\u0633\u062a\u063a\u0644\u0647 \u0643\u0646\u0642\u0637\u0629 \u0627\u0646\u0637\u0644\u0627\u0642 (Pivot) \u0644\u0644\u062a\u063a\u0644\u063a\u0644 \u062f\u0627\u062e\u0644 \u0627\u0644\u0634\u0628\u0643\u0629 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0644\u0644\u0645\u0624\u0633\u0633\u0629.\n\n5. \u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062d\u064a\u0648\u064a\u0629: \u064a\u0633\u0639\u0649 \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u0645\u0646 \u062e\u0644\u0627\u0644\u0647 \u0644\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0645\u062d\u0627\u0633\u0628\u0629 \u0648\u0627\u0644\u0640 Active Directory\u060c \u0623\u0648 \u062d\u062a\u0649 \u0627\u0644\u0627\u0646\u062a\u0642\u0627\u0644 \u0625\u0644\u0649 \u0634\u0628\u0643\u0629 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0635\u0646\u0627\u0639\u064a (OT) \u0627\u0644\u062a\u064a \u062a\u062f\u064a\u0631 \u0627\u0644\u0631\u0648\u0628\u0648\u062a\u0627\u062a \u0648\u0627\u0644\u0622\u0644\u0627\u062a \u0627\u0644\u0641\u064a\u0643\u0644\u064a\u0629 \u0641\u064a \u0627\u0644\u0645\u0635\u0627\u0646\u0639.\n#CVE_2026_12569 #Windchill #HackerNews", "creation_timestamp": "2026-09-02T01:00:27.574930Z"}, {"uuid": "ace733e4-1352-4681-9fcd-d621fedd4c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117241572822988739", "content": "\ud83d\udcf0 Clop Group Claims Massive Data Heist from Shell, Philips, GE via PTC Flaw\nClop ransomware group claims massive data theft from Shell, Philips, GE, and 40+ others by exploiting a critical PTC Windchill vulnerability (CVE-2026-12569). #Clop #Ransomware #SupplyChainAttack\n\ud83d\udd17 https://cyber.netsecops.io/articles/clop-ransomware-exploits-ptc-vulnerability-hits-shell-philips-ge/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-09T14:33:50.951636Z"}, {"uuid": "0d305347-3fa4-4fb1-830f-f27379e6da6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mv3qzjh5wj2u", "content": "Clop ransomware group claims massive data theft from Shell, Philips, GE, and 40+ others by exploiting a critical PTC Windchill vulnerability (CVE-2026-12569). #Clop #Ransomware #SupplyChainAttack\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-09T14:34:17.372031Z"}, {"uuid": "c5c8b4a3-b2e4-4ff1-95ac-bfb2a012b8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/baseleeak/392", "content": "\ud83d\udd10 INCIDENT: SUUNTO.CN (SUUNTO.COM)\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: SUUNTO.CN (SUUNTO.COM)\n\n\ud83c\udfe2 About the company: Suunto Oy is a Finnish manufacturer of sports watches, dive computers, and precision instruments. The company was founded in 1936, and its headquarters is located in Vantaa, Finland. In 2022, Suunto was acquired from Amer Sports by Chinese company Liesheng Technology . The brand's products are sold in more than 100 countries worldwide . The estimated annual revenue is approximately $108\u2013111 million .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 1470 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 1\n\u2022 Compromised users: 3139\n\u2022 Third-party employee credentials: 4\n\u2022 External attack surface: 101\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. The attack is part of a large-scale Clop campaign in August 2026 linked to the exploitation of critical vulnerability CVE-2026-12569 (CVSS 9.3) in PTC Windchill and FlexPLM . The attackers deployed a custom JSP web shell capable of decrypting credentials, exfiltrating files, and enabling remote code execution . According to Clop's statement, \"The full leak will be published soon, unless a company representative contacts us\" . At this time, there is no independent confirmation of the leak and no official statement from Suunto.\n\n\ud83d\udcab Note: Suunto is a Finnish brand with a 90-year history and global recognition. The detected infostealer traces (3139 compromised users, 4 third-party employee credentials) indicate that access to the environment may have been obtained not only through the Windchill vulnerability but also through previously compromised credentials, which significantly expands the attack surface.\n\n---", "creation_timestamp": "2026-09-17T07:00:03.763316Z"}, {"uuid": "b4e3d2e0-f62d-487c-a447-f00a09b3138d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/392", "content": "\ud83d\udd10 INCIDENT: SUUNTO.CN (SUUNTO.COM)\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: SUUNTO.CN (SUUNTO.COM)\n\n\ud83c\udfe2 About the company: Suunto Oy is a Finnish manufacturer of sports watches, dive computers, and precision instruments. The company was founded in 1936, and its headquarters is located in Vantaa, Finland. In 2022, Suunto was acquired from Amer Sports by Chinese company Liesheng Technology . The brand's products are sold in more than 100 countries worldwide . The estimated annual revenue is approximately $108\u2013111 million .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 1470 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 1\n\u2022 Compromised users: 3139\n\u2022 Third-party employee credentials: 4\n\u2022 External attack surface: 101\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. The attack is part of a large-scale Clop campaign in August 2026 linked to the exploitation of critical vulnerability CVE-2026-12569 (CVSS 9.3) in PTC Windchill and FlexPLM . The attackers deployed a custom JSP web shell capable of decrypting credentials, exfiltrating files, and enabling remote code execution . According to Clop's statement, \"The full leak will be published soon, unless a company representative contacts us\" . At this time, there is no independent confirmation of the leak and no official statement from Suunto.\n\n\ud83d\udcab Note: Suunto is a Finnish brand with a 90-year history and global recognition. The detected infostealer traces (3139 compromised users, 4 third-party employee credentials) indicate that access to the environment may have been obtained not only through the Windchill vulnerability but also through previously compromised credentials, which significantly expands the attack surface.\n\n---", "creation_timestamp": "2026-09-18T00:00:09.764031Z"}, {"uuid": "f2f4ba9c-d87c-4fda-a875-2bb540794c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43190", "content": "First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\n\nCISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.\nThe post First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/", "creation_timestamp": "2026-09-18T05:00:05.116433Z"}, {"uuid": "5981fd03-10d4-4737-99ab-46d8d006aec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43190", "content": "First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\n\nCISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.\nThe post First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/", "creation_timestamp": "2026-09-19T00:00:49.119540Z"}, {"uuid": "80e7a097-8a73-4604-82cd-bd05e95e9e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/397", "content": "\ud83d\udd10 INCIDENT: MAMMUT.COM\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: MAMMUT.COM\n\n\ud83c\udfe2 About the company: Mammut Sports Group AG is a Swiss manufacturer of high-quality outdoor equipment and apparel for mountaineering and climbing. The company was founded in 1862, with its headquarters in Seon, Switzerland. Mammut operates in around 40 countries and employs approximately 800 people . In 2026, the company was acquired by Chinese private equity firm CPE\u6e90\u5cf0 from Jacobs Capital . Revenue for 2025 was approximately 400 million Swiss francs (roughly $281 million at current exchange rates) .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 136 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 .png files\n\u2022 Windchill files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 1\n\u2022 Compromised users: 173\n\u2022 Third-party employee credentials: 1\n\u2022 External attack surface: 42\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: mx1.mammut.ch, mx2.mammut.ch \n\u2022 SaaS services: Apple, Atlassian, Microsoft 365, SendGrid \n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed MAMMUT.COM on its leak site, claiming the theft of 136 GB of data. According to Clop's standard statement: \"The full leak will be published soon unless a company representative contacts us via the channels provided\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM. Important: RedPacket Security notes that listings attributed to Clop \"have been reported as including unverified or fabricated victim claims\" . At the time of publication, there is no independent confirmation of the leak and no official statement from Mammut.\n\n\ud83d\udcab Note: This is not the first attack on Mammut. In May 2025, the company was already targeted by ransomware group DATACARRY, which, according to trackers, also operated through credential compromise (infostealer) . A repeat appearance on victim lists within a year may indicate either persistent credential security issues or reuse of previously stolen data.\n\n\u2014\u2014", "creation_timestamp": "2026-09-19T01:00:03.538606Z"}, {"uuid": "9b9fa9c8-4f1c-4742-9711-51d4b85a3d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/396", "content": "\ud83d\udd10 INCIDENT: CORNELIUS.COM\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: CORNELIUS.COM\n\n\ud83c\udfe2 About the company: Cornelius Inc. is an American manufacturer of beverage dispensing equipment, founded in 1931. The company specialises in fountain, frozen, and juice dispensers, as well as commercial ice machines. Cornelius is part of Marmon Foodservice Technologies, which in turn is owned by Marmon Holdings and Berkshire Hathaway. Its headquarters is located in Osseo, Minnesota, USA. Products are supplied to more than 100 countries, and its workforce numbers between 1,000 and 5,000 employees . The claimed annual revenue is $269.8 million .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 3684 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\u2022 PDF documents\n\u2022 TXT files\n\u2022 DOC documents\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 0\n\u2022 Compromised users: 12\n\u2022 Third-party employee credentials: 16\n\u2022 External attack surface: 3\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: cornelius-com.mail.protection.outlook.com (Microsoft 365)\n\u2022 SaaS services: Microsoft 365, Smartsheet\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed Cornelius Inc. on its leak site, claiming the theft of 3684 GB of data and demanding that the company contact the group for negotiations. According to Clop's standard statement: \"The full leak will be published soon unless a company representative contacts us via the channels provided\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM. However, on August 13, 2026, it emerged that law firm Bryson, Harris, Suciu, DeMay PLLC had launched an investigation into the potential data breach, inviting current and former employees as well as commercial distributors to participate in a preliminary investigation for a potential class action lawsuit . At the time of publication, Cornelius Inc. had made no official statement confirming or denying the leak.\n\n\ud83d\udcab Note: The absence of compromised employees (0) alongside 12 compromised users and 16 third-party employee credentials may indicate that access to the environment was obtained primarily through external accounts or contractors rather than through direct company employee credentials.\n\n---", "creation_timestamp": "2026-09-19T01:00:03.590470Z"}, {"uuid": "b45b42ae-b21f-4461-a12d-dbc2a392d134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/393", "content": "\ud83d\udd10 INCIDENT: SMAPCENTER.UAH.EDU\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: SMAPCENTER.UAH.EDU\n\n\ud83c\udfe2 About the organization: SMAP Center (Systems Management and Production Center) is a research center at the University of Alabama in Huntsville (UAH). The center participates in U.S. Department of Defense research, particularly on diminishing manufacturing sources and material shortages (DMSMS) in weapon systems, and also runs STEM education and medical simulation projects (MEDNET). UAH's annual research expenditure is about $154.5 million, with 17 research centers at the university. The center's estimated revenue is $113 million.\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 6.08 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA:\n\n\u2022 Compromised employees: not disclosed\n\u2022 Compromised users: not disclosed\n\u2022 Third-party employee credentials: not disclosed\n\u2022 External attack surface: not disclosed\n\nNote: No HudsonRock data was found for SMAPCENTER.UAH.EDU. The attack vector was a server-side application vulnerability (PTC Windchill RCE), not endpoint infostealer malware, so no infostealer credential data is expected for this target. To verify manually, the domain can be checked via HudsonRock's free lookup tool.\n\n\ud83c\udf10 INFRASTRUCTURE:\n\n\u2022 IP address: 146.229.99.30, Huntsville, Alabama, USA\n\u2022 ASN: AS10364, University of Alabama in Huntsville (UAH)\n\u2022 Subdomain: apps.smapcenter.uah.edu (time-tracking system, protected by DUO MFA)\n\u2022 Owning entity: Systems Management and Production Center, UAH research center, network range 146.229.0.0/16\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. The attack is part of a large-scale Clop campaign in August 2026 linked to the exploitation of critical vulnerability CVE-2026-12569 (CVSS 9.3) in PTC Windchill and FlexPLM. The vulnerability is an insecure deserialization flaw enabling remote code execution via the wt.fv.uploadtocache.DoUploadToCache_Server upload path. In Windchill environments, Clop deployed a custom JSP web shell capable of decrypting credentials, enumerating file vaults, and exfiltrating engineering data, receiving commands via a custom X-windchill-req HTTP header. The same campaign wave included Shell, Philips, General Electric, and roughly 50 other organizations. According to Clop's statement, \"The full leak will be published soon, unless a university representative contacts us.\" At this time, there is no independent confirmation of the leak and no official statement from UAH or the SMAP Center.\n\n\ud83d\udcab Note: The SMAP Center is tied to defense research and management systems for the U.S. Department of Defense, which makes it a particularly sensitive target for extortionists.\n\n---", "creation_timestamp": "2026-09-19T01:00:03.629705Z"}, {"uuid": "3da947af-7391-411e-8b8b-d6123c7b5418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/397", "content": "\ud83d\udd10 INCIDENT: MAMMUT.COM\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: MAMMUT.COM\n\n\ud83c\udfe2 About the company: Mammut Sports Group AG is a Swiss manufacturer of high-quality outdoor equipment and apparel for mountaineering and climbing. The company was founded in 1862, with its headquarters in Seon, Switzerland. Mammut operates in around 40 countries and employs approximately 800 people . In 2026, the company was acquired by Chinese private equity firm CPE\u6e90\u5cf0 from Jacobs Capital . Revenue for 2025 was approximately 400 million Swiss francs (roughly $281 million at current exchange rates) .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 136 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 .png files\n\u2022 Windchill files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 1\n\u2022 Compromised users: 173\n\u2022 Third-party employee credentials: 1\n\u2022 External attack surface: 42\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: mx1.mammut.ch, mx2.mammut.ch \n\u2022 SaaS services: Apple, Atlassian, Microsoft 365, SendGrid \n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed MAMMUT.COM on its leak site, claiming the theft of 136 GB of data. According to Clop's standard statement: \"The full leak will be published soon unless a company representative contacts us via the channels provided\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM. Important: RedPacket Security notes that listings attributed to Clop \"have been reported as including unverified or fabricated victim claims\" . At the time of publication, there is no independent confirmation of the leak and no official statement from Mammut.\n\n\ud83d\udcab Note: This is not the first attack on Mammut. In May 2025, the company was already targeted by ransomware group DATACARRY, which, according to trackers, also operated through credential compromise (infostealer) . A repeat appearance on victim lists within a year may indicate either persistent credential security issues or reuse of previously stolen data.\n\n\u2014\u2014", "creation_timestamp": "2026-09-20T00:00:12.023366Z"}, {"uuid": "d747af6a-130d-40fb-9037-d1fba0227bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/396", "content": "\ud83d\udd10 INCIDENT: CORNELIUS.COM\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: CORNELIUS.COM\n\n\ud83c\udfe2 About the company: Cornelius Inc. is an American manufacturer of beverage dispensing equipment, founded in 1931. The company specialises in fountain, frozen, and juice dispensers, as well as commercial ice machines. Cornelius is part of Marmon Foodservice Technologies, which in turn is owned by Marmon Holdings and Berkshire Hathaway. Its headquarters is located in Osseo, Minnesota, USA. Products are supplied to more than 100 countries, and its workforce numbers between 1,000 and 5,000 employees . The claimed annual revenue is $269.8 million .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 3684 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\u2022 PDF documents\n\u2022 TXT files\n\u2022 DOC documents\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 0\n\u2022 Compromised users: 12\n\u2022 Third-party employee credentials: 16\n\u2022 External attack surface: 3\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: cornelius-com.mail.protection.outlook.com (Microsoft 365)\n\u2022 SaaS services: Microsoft 365, Smartsheet\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed Cornelius Inc. on its leak site, claiming the theft of 3684 GB of data and demanding that the company contact the group for negotiations. According to Clop's standard statement: \"The full leak will be published soon unless a company representative contacts us via the channels provided\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM. However, on August 13, 2026, it emerged that law firm Bryson, Harris, Suciu, DeMay PLLC had launched an investigation into the potential data breach, inviting current and former employees as well as commercial distributors to participate in a preliminary investigation for a potential class action lawsuit . At the time of publication, Cornelius Inc. had made no official statement confirming or denying the leak.\n\n\ud83d\udcab Note: The absence of compromised employees (0) alongside 12 compromised users and 16 third-party employee credentials may indicate that access to the environment was obtained primarily through external accounts or contractors rather than through direct company employee credentials.\n\n---", "creation_timestamp": "2026-09-20T00:00:12.076761Z"}, {"uuid": "38c57434-291c-4dd0-889e-fc0205f83ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/393", "content": "\ud83d\udd10 INCIDENT: SMAPCENTER.UAH.EDU\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: SMAPCENTER.UAH.EDU\n\n\ud83c\udfe2 About the organization: SMAP Center (Systems Management and Production Center) is a research center at the University of Alabama in Huntsville (UAH). The center participates in U.S. Department of Defense research, particularly on diminishing manufacturing sources and material shortages (DMSMS) in weapon systems, and also runs STEM education and medical simulation projects (MEDNET). UAH's annual research expenditure is about $154.5 million, with 17 research centers at the university. The center's estimated revenue is $113 million.\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 6.08 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA:\n\n\u2022 Compromised employees: not disclosed\n\u2022 Compromised users: not disclosed\n\u2022 Third-party employee credentials: not disclosed\n\u2022 External attack surface: not disclosed\n\nNote: No HudsonRock data was found for SMAPCENTER.UAH.EDU. The attack vector was a server-side application vulnerability (PTC Windchill RCE), not endpoint infostealer malware, so no infostealer credential data is expected for this target. To verify manually, the domain can be checked via HudsonRock's free lookup tool.\n\n\ud83c\udf10 INFRASTRUCTURE:\n\n\u2022 IP address: 146.229.99.30, Huntsville, Alabama, USA\n\u2022 ASN: AS10364, University of Alabama in Huntsville (UAH)\n\u2022 Subdomain: apps.smapcenter.uah.edu (time-tracking system, protected by DUO MFA)\n\u2022 Owning entity: Systems Management and Production Center, UAH research center, network range 146.229.0.0/16\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. The attack is part of a large-scale Clop campaign in August 2026 linked to the exploitation of critical vulnerability CVE-2026-12569 (CVSS 9.3) in PTC Windchill and FlexPLM. The vulnerability is an insecure deserialization flaw enabling remote code execution via the wt.fv.uploadtocache.DoUploadToCache_Server upload path. In Windchill environments, Clop deployed a custom JSP web shell capable of decrypting credentials, enumerating file vaults, and exfiltrating engineering data, receiving commands via a custom X-windchill-req HTTP header. The same campaign wave included Shell, Philips, General Electric, and roughly 50 other organizations. According to Clop's statement, \"The full leak will be published soon, unless a university representative contacts us.\" At this time, there is no independent confirmation of the leak and no official statement from UAH or the SMAP Center.\n\n\ud83d\udcab Note: The SMAP Center is tied to defense research and management systems for the U.S. Department of Defense, which makes it a particularly sensitive target for extortionists.\n\n---", "creation_timestamp": "2026-09-20T00:00:12.118046Z"}, {"uuid": "bca0dd7d-cd82-45cf-ac8e-027f692d7ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/399", "content": "\ud83d\udd10 INCIDENT: STARKEY.COM\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: STARKEY.COM\n\n\ud83c\udfe2 About the company: Starkey Hearing Technologies, Inc. is an American hearing aid manufacturer founded in 1967. Its headquarters is located in Hopkins, Minnesota, USA. The company is the largest American-owned hearing aid manufacturer and ranks among the global top five with a market share of around 15% . Starkey specialises in AI-integrated hearing aids with features such as step tracking, fall detection, and language translation . Its annual revenue is approximately $1 billion .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 3030 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 10\n\u2022 Compromised users: 11\n\u2022 Third-party employee credentials: 18\n\u2022 External attack surface: 38\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: starkey-com.mail.protection.outlook.com (Microsoft 365) \n\u2022 SaaS services (per TXT records): Dynatrace, Google, Apple, Cisco, Anthropic, Firebase, Zapier, Microsoft, OpenAI, KnowBe4 \n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed STARKEY.COM on its leak site, claiming the theft of 3030 GB of data and demanding that the company contact the group for negotiations. According to Clop's standard statement: \"The full leak will be published soon unless a company representative contacts us via the channels provided\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM. At the time of publication, there is no independent confirmation of the leak and no official statement from Starkey.\n\n\ud83d\udcab Note: Starkey is the only American-owned hearing aid manufacturer and an active player in AI-driven medical technology. The 3030 GB leak volume is one of the largest in the current Clop attack wave, which may indicate a significant volume of intellectual property, including project data and research databases.\n\n____", "creation_timestamp": "2026-09-22T00:00:08.948714Z"}, {"uuid": "d8addbcc-e0db-4448-bda5-41868f1c87ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/398", "content": "\ud83d\udd10 INCIDENT: PARTECH.COM\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: PARTECH.COM\n\n\ud83c\udfe2 About the company: According to Clop's claim, PARTECH.COM belongs to a company with annual revenue of $475,700,000. However, precise identification is complicated: the domain partech.com is associated with two distinct organizations \u2014 French venture capital firm Partech (offices in Paris, San Francisco, Berlin, Dakar; \u20ac1.5B under management)  and American PAR Technology Corporation (NYSE: PAR), whose fiscal year 2026 revenue guidance is $516\u2013523 million . The claimed revenue of $475.7 million is closer to PAR Technology's figures than to Partech's estimates ($39.2M) . Clop does not specify which entity is the actual victim.\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 24 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Databases\n\u2022 Project files\n\u2022 CAD files\n\u2022 Backups\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 2\n\u2022 Compromised users: 8\n\u2022 Third-party employee credentials: 16\n\u2022 External attack surface: 16\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: partech-com.mail.protection.outlook.com (Microsoft 365)\n\u2022 SaaS services (per TXT records): Atlassian, Wrike, Amazon, Shopify, Google, Cloudflare, Smartsheet, BrowserStack, Zoom, Anthropic, Miro, ConfigCat, Intacct, and others\n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed PARTECH.COM on its leak site, claiming the theft of 24 GB of data. According to Clop's standard statement: \"The full leak will be published soon unless a company representative contacts us via the channels provided\" . The attack is part of a large-scale Clop campaign in August 2026 linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM . At the time of publication, there is no independent confirmation of the leak and no official statement from the company.\n\n\ud83d\udcab Note: The most significant feature of this incident is the ambiguity in victim identification. The domain partech.com is used by at least two organizations with different profiles, which complicates assessing the credibility of the claim and the potential impact. If the victim is PAR Technology (a restaurant technology provider), the leak of CAD files and backups could affect intellectual property and client data; if Partech (a venture capital firm), it could involve confidential information of portfolio companies and investors.\n\n\u2014\u2014", "creation_timestamp": "2026-09-22T00:00:09.010789Z"}, {"uuid": "ff8024a1-2aa6-4cb2-92c6-a2754018dbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/baseleeak/400", "content": "\ud83d\udd10 INCIDENT: LARGAN.COM.TW\n\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop\n\n\ud83c\udfaf Compromised domain: LARGAN.COM.TW\n\n\ud83c\udfe2 About the company: Largan Precision Co., Ltd. is a Taiwanese optical lens manufacturer and a key supplier of camera modules for Apple. The company was founded in 1987, with its headquarters in Taichung, Taiwan. Largan is the world's largest manufacturer of smartphone lenses and holds a significant share of the high-end optics market. Its claimed annual revenue is $1.7 billion.\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 56 GB\n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n\u2022 Project files\n\u2022 Software (Soft)\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n\u2022 Compromised employees: 0\n\u2022 Compromised users: 43\n\u2022 Third-party employee credentials: 0\n\u2022 External attack surface: 6\n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n\u2022 MX records: mail.largan.com.tw, mailgw1.largan.com.tw, mailgw2.largan.com.tw \n\u2022 SPF record: v=spf1 ip4:219.87.176.11 ip4:219.87.176.7 ip4:60.248.234.226 ip4:123.51.154.9 -all \n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed LARGAN.COM.TW on its leak site as part of a large-scale campaign linked to the exploitation of critical vulnerability CVE-2026-12569 (CVSS 9.8) in PTC Windchill and FlexPLM . The vulnerability involves insecure deserialization and improper input validation, allowing an unauthenticated remote attacker to execute arbitrary code . Clop used a custom JSP web shell to access Windchill data, including credential decryption and file exfiltration . Largan Precision is listed among more than 40 alleged victims in the campaign alongside Shell, Philips, Fiserv, Zebra Technologies, Mindray, and others . According to Clop's statement: \"The full database will be leaked if Largan Precision Co., Ltd. does not contact us to negotiate\" . At the time of publication, there is no independent confirmation of the leak and no official statement from the company.\n\n\ud83d\udcab Note: Largan Precision is a critical Apple supplier in the camera module supply chain, which makes a potential leak of project data and software particularly sensitive. However, the absence of compromised employees (0) alongside 43 compromised users may indicate access through external accounts or contractors rather than direct employee credentials.", "creation_timestamp": "2026-09-22T00:00:08.885602Z"}]}