{"vulnerability": "cve-2026-2791", "sightings": [{"uuid": "4abd45c9-0be5-47df-afad-6e00546ada9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2791", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yh74bv2y", "content": "", "creation_timestamp": "2026-02-28T02:01:58.119871Z"}, {"uuid": "90ca63f3-ee55-49e4-9c42-b3b7080e6250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2791", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevtu6ue22", "content": "", "creation_timestamp": "2026-02-25T00:02:23.141098Z"}, {"uuid": "3028aab8-253d-466a-b3be-a896e74df567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116404344289228337", "content": "", "creation_timestamp": "2026-04-14T17:55:35.898229Z"}, {"uuid": "018de1aa-10c6-46f8-88db-e8b7a2f531dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "cfbafbe4-0946-46f8-8e27-3cfec571442e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "83332907-e747-4fed-abf4-2e3172cdf4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "31abb6df-2550-4cbf-baf2-958eb984143f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "a01aeadb-b43e-4b71-aa12-f3a739c20e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "ec2ff4b9-5b93-4f53-ab64-02373dd4ecc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "9b1ced26-a124-4b53-81a3-182a4cdc2fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27915", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "5070afae-41b0-4235-a78d-b4c21bbe9841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "f0a4ae4b-77ca-45fa-b432-8de28d1fbc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27917", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "314249e0-3c6d-4a8d-9163-7c3fa48d1ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27911", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "803c52e6-1951-4b05-ae53-18ff90d7befc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjjlkzcdhm2p", "content": "", "creation_timestamp": "2026-04-15T09:31:39.156123Z"}, {"uuid": "9490699d-9b5a-4e47-b938-b28ed3ad9548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "9b3ea959-7755-4c02-826c-4a69162a0e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "98d73539-179e-41c0-841e-dbede0b94ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27911", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "04db74e8-c5c5-4387-82d5-48052d498540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "e4a22332-b3b1-4ec3-9614-fa78979e5087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "02ad5c4e-9ee2-4071-9ac0-6b1fd74cc53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27917", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "c813e804-0caa-4dd9-99b5-7188fe2d4385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "5da7d66b-3336-4311-99ee-5f059e07f04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "3dfdccce-60ea-48c9-b0b6-028f5537b9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27915", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "fe5c1958-92ca-4d0a-9806-55118aa5af5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "949a9b07-193d-4309-92d7-503491072bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mjqcm33lyd2d", "content": "", "creation_timestamp": "2026-04-18T01:39:48.783475Z"}, {"uuid": "9fb21a5f-ffb5-4f79-8765-4bf567d89b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjugujjnpt2n", "content": "", "creation_timestamp": "2026-04-19T17:06:50.890665Z"}, {"uuid": "9c760df8-6fec-4fc4-865f-48999feb0f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "14383995-88e1-4099-b7c3-f267dd646be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "Telegram/uvxP8osbBomFSKz12-gaRhxNJBd9Ezl7B0cHI5wK70_vdaI", "content": "", "creation_timestamp": "2026-04-14T20:08:56.000000Z"}, {"uuid": "fe7d0ec9-0be8-414e-ba30-5ddcd4390862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "25a6847a-9123-4b50-b58d-18596ca31557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "f61f66a7-c505-4dd2-b20d-ee302f13ae41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "Telegram/uvxP8osbBomFSKz12-gaRhxNJBd9Ezl7B0cHI5wK70_vdaI", "content": "", "creation_timestamp": "2026-04-14T20:08:56.000000Z"}, {"uuid": "beae7b6b-ab62-4a24-bc7d-1890021c70ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27915", "type": "seen", "source": "Telegram/uvxP8osbBomFSKz12-gaRhxNJBd9Ezl7B0cHI5wK70_vdaI", "content": "", "creation_timestamp": "2026-04-14T20:08:56.000000Z"}, {"uuid": "9b898740-f1c9-4c2c-b348-4f8867853d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "Telegram/7zJJ23YqvK9A7cqzhPUaNPKoQYoLnb6nRcCIqg-Xhk0edIM", "content": "", "creation_timestamp": "2026-04-14T20:09:15.000000Z"}, {"uuid": "6c2d1073-0266-4a69-84ea-1ca22bae5787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "Telegram/7zJJ23YqvK9A7cqzhPUaNPKoQYoLnb6nRcCIqg-Xhk0edIM", "content": "", "creation_timestamp": "2026-04-14T20:09:15.000000Z"}, {"uuid": "1f5b8071-14a8-41e3-af75-bd10343e6c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "Telegram/lZLvhzABWQ2EwMRxj_NwRMSXcRfi95gcismHT-d__n4iRXY", "content": "", "creation_timestamp": "2026-04-14T20:09:00.000000Z"}, {"uuid": "ab99989c-1860-45c7-b390-71545524308f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "Telegram/lZLvhzABWQ2EwMRxj_NwRMSXcRfi95gcismHT-d__n4iRXY", "content": "", "creation_timestamp": "2026-04-14T20:09:00.000000Z"}, {"uuid": "9a8a7fe9-e329-4f76-b7c1-f81d16872f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27917", "type": "seen", "source": "Telegram/lZLvhzABWQ2EwMRxj_NwRMSXcRfi95gcismHT-d__n4iRXY", "content": "", "creation_timestamp": "2026-04-14T20:09:00.000000Z"}, {"uuid": "26bed0da-266b-479b-ad84-e98a1ecf843b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "a53a1dca-a6eb-46a0-8cfb-cb8aada74f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27911", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "8f9cf80f-0fae-4644-a546-74cdd691c762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "Telegram/hpPA_XpvJp0--5gr6w3PxZOGaLZZU0iAv9EV7UrRN2AoW4g", "content": "", "creation_timestamp": "2026-04-14T20:08:06.000000Z"}, {"uuid": "555288a2-ed6e-4dc8-9d25-7fdae250d4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "86d5a3c3-37b1-4bbc-80d3-e7bf39bd92ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms2d4esh4s2n", "content": "\ud83d\udccc CVE-2026-27912 - Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-27912", "creation_timestamp": "2026-08-01T20:37:06.677123Z"}, {"uuid": "57df292c-26c2-491a-b932-bf36f54bd758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/403", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-08T00:06:20.273604Z"}, {"uuid": "5399187f-e3ca-4877-b6d1-44e64b669c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mnhfiyywug2u", "content": "As someone who reported CVE-2026-27914 I can tell you its not related to MMC console at all. Maybe its new Microsoft tactic to confuse LLM's with incorrect advisories?\n\n\ud83d\udd01 RT @filip_dragovic | reposted by @HackingLZ\nhttps://x.com/filip_dragovic/status/2062420260565782959", "creation_timestamp": "2026-06-04T10:18:36.071470Z"}, {"uuid": "231ee5fd-b4c1-410d-91a4-f1f792881b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/97197", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare-impacket\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mihat2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 16:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27912 (ResetNightmare) \u2014 Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T18:00:03.273485Z"}, {"uuid": "91343331-87c5-4050-87fd-67fba8f10447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97197", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare-impacket\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mihat2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 16:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27912 (ResetNightmare) \u2014 Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:46:42.921845Z"}, {"uuid": "7c08866d-3721-4a14-863a-6d6c3eda4147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3msvc4lr5w323", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nResetNightmare: exploit p\u00fablico permite restablecer cualquier contrase\u00f1a de cuenta de AD (CVE-2026-27912)\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-08-12T14:01:14.859274Z"}, {"uuid": "96c17009-cfe3-4b13-b720-f6819e02e987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.731031Z"}, {"uuid": "fc32cadf-4329-4e83-bd33-86b94416ebba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3msnx32f4g72q", "content": "ResetNightmare: POC tool for ResetNightmare (CVE-2026-27912)", "creation_timestamp": "2026-08-09T15:54:51.668925Z"}, {"uuid": "42e43859-2026-4c84-9a4d-8e9cfa449fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msororpzes2t", "content": "CVE-2026-27912 is trending. Hype score 3, currently #6 on cvemon.\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-27912", "creation_timestamp": "2026-08-09T23:51:11.118835Z"}, {"uuid": "c616f97c-0808-43b9-922e-00a0d0521dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.573850Z"}, {"uuid": "3a2c1f98-3df6-4c0d-a64d-8d1dc19b8760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27912", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mspwfa7tec2r", "content": "Monday\u2019s fuck up - Now Windows - github.com/Semperis-Com... #cve-2026-27912 #exploit #windows #resetnightmare #redteam #tool #critical ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account.", "creation_timestamp": "2026-08-10T10:48:00.736702Z"}, {"uuid": "c752f9f3-ff97-4744-ae1d-820b32bc1b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msqhteu6xm2i", "content": "\ud83d\udce2 CVE-2026-27912 ResetNightmare : PoC de r\u00e9initialisation de mot de passe via Kerberos Change Password\n\nCet article pr\u00e9sente un outil Proof-of-Concept (PoC) pour la vuln\u00e9rabilit\u00e9 CVE-2026-27912, baptis\u00e9e ResetNightmare. ResetNightmare\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Kerberos #PoC #Cyberveille", "creation_timestamp": "2026-08-10T16:00:07.403113Z"}, {"uuid": "0dee1335-27fd-4f43-ab6e-5e6d7a7c0ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/", "content": "", "creation_timestamp": "2026-08-06T12:29:46.605176Z"}, {"uuid": "beb7a6e9-2ca3-4372-8e45-57347e17a0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://github.com/Semperis-Community/ResetNightmare", "content": "", "creation_timestamp": "2026-08-06T14:50:50.281624Z"}, {"uuid": "32c29f30-fecc-440c-8fe7-50a223974455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msqwsavgc22z", "content": "Exploit ResetNightmare with NetExec \n\nCVE-2026-27912: a logical flaw in the Kerberos Change Password protocol lets an attacker with Generic Write on one account reset the password of ANY user/computer, includin\u2026\n\n\ud83d\udd01 RT @azoxlpf | reposted by @cyb3rops\nhttps://x.com/azoxlpf/status/2086829938867376478", "creation_timestamp": "2026-08-10T20:27:56.114377Z"}, {"uuid": "f586f6a4-d788-4a38-9fb7-7045ef44bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msso2fpdxl2n", "content": "Details and PoC for CVE-2026-27912 (ResetNightmare) are public. This Kerberos flaw lets attackers reset AD passwords and gain SYSTEM.\n\n#CVE202627912 #ResetNightmare #Kerberos #ActiveDirectory #PrivilegeEscalation #InfoSec", "creation_timestamp": "2026-08-11T12:56:45.578824Z"}, {"uuid": "e9a38b86-d0d1-484f-8ad5-b40954726619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3msspa6jc4m2o", "content": "[RSS] Exploiting AD ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177) from Linux\n\n\n cravaterouge.com -> \n\n\nOriginal->", "creation_timestamp": "2026-08-11T13:17:52.643059Z"}, {"uuid": "44e093cc-b138-4685-b900-f73a62711caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/403", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-07T12:00:04.917469Z"}]}