{"vulnerability": "cve-2026-25641", "sightings": [{"uuid": "802428a7-4324-469b-9af9-bf7ee83321bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7pxr74am22", "content": "", "creation_timestamp": "2026-02-06T20:17:46.957878Z"}, {"uuid": "4e365371-3877-45bb-bfd6-ecaa29409637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7pyww5ef2r", "content": "", "creation_timestamp": "2026-02-06T20:18:26.130972Z"}, {"uuid": "73bdff3a-0038-47d9-8a58-a2998aa14db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7q2ehgax2x", "content": "", "creation_timestamp": "2026-02-06T20:19:13.977614Z"}, {"uuid": "d0848d8a-5f5b-489e-b317-42f10aecb3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25641", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mfxqtn4ccl2f", "content": "", "creation_timestamp": "2026-03-01T03:02:28.369709Z"}, {"uuid": "ffd21395-61dd-4ff0-af0f-e614a338a292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25641", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mehfrjotc22i", "content": "", "creation_timestamp": "2026-02-09T21:36:38.378371Z"}, {"uuid": "86cc690e-f541-49ef-bfce-20356c405833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25641", "type": "published-proof-of-concept", "source": "https://github.com/nyariv/SandboxJS/security/advisories/GHSA-7x3h-rm86-3342", "content": "", "creation_timestamp": "2026-02-05T17:33:30.000000Z"}, {"uuid": "a4265bea-dba8-4911-afd8-cb614adb9d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25641", "type": "seen", "source": "https://t.me/CyberSecurityExploit/29329", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.829211Z"}]}