{"vulnerability": "cve-2026-5539", "sightings": [{"uuid": "1af4262f-3494-4300-b89a-159147d0135d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mipwodhauf2j", "content": "", "creation_timestamp": "2026-04-05T04:41:08.401102Z"}, {"uuid": "929db322-a4f1-4d93-89b3-da9f4f898095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55399", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptkgjxg2x", "content": "\ud83d\udea8 EUVD-2026-44805\n\ud83d\udcca 5.1/10\n\ud83c\udfe2 Absolute Security\n\n\ud83d\udcdd CVE-2026-55399 is a resource exhaustion\nvulnerability in the Secure Access publisher prior to 14.55. Attackers with\nvalid credentials to the Sec...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44805\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-15T22:00:20.142668Z"}, {"uuid": "e1abad96-6de5-4bf7-be75-01a0c9c6b4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55398", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptm4mdb2w", "content": "\ud83d\udea8 EUVD-2026-44803\n\ud83d\udcca 6.9/10\n\ud83c\udfe2 Absolute Security\n\n\ud83d\udcdd CVE-2026-55398\nis a memory management vulnerability in Secure Access clients and servers prior\nto 14.55. Attackers with intimate knowledge of an...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44803\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-15T22:00:21.819947Z"}, {"uuid": "5029707d-52e6-4966-8892-a596f36478ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55391", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-vx7x-vcc2-c44g", "content": "", "creation_timestamp": "2026-07-28T22:35:11.039527Z"}, {"uuid": "a8914a43-9829-46cd-8a4c-67f5257176a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55390", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g", "content": "", "creation_timestamp": "2026-07-28T22:35:32.178041Z"}, {"uuid": "da44d174-7b47-45dc-8ba7-0e780b1bafde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q", "content": "\ud83d\udfe0 CVE-2026-55390 - High (7.5)\n\ndatamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55390/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T23:01:03.976616Z"}, {"uuid": "7c31a1c9-8f97-4e64-82fb-fde7618a48f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55391", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjccj7di2u", "content": "\ud83d\udfe0 CVE-2026-55391 - High (7.5)\n\ndatamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55391/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T23:01:10.834681Z"}, {"uuid": "bf98a099-6c6f-46a1-8b4a-fba84777a9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlj43wks2q", "content": "CVE-2026-55390 - Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate\nCVE ID : CVE-2026-55390\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datamodel-code-generator generates Python d...", "creation_timestamp": "2026-07-28T23:40:45.962561Z"}, {"uuid": "fe1fd970-6d5c-401b-a854-9d02f5ca08bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqmdxhwl22q", "content": "CVE-2026-55391 - datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding\nCVE ID : CVE-2026-55391\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, an...", "creation_timestamp": "2026-07-28T23:55:46.995439Z"}, {"uuid": "1b11747b-d694-4d78-8d67-51d917b4376d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrqmtex4p224", "content": "A Python Model Bug Ships First; Czech Awareness Arrives After Lunch\nPANIC 52% | Lag 0.0h | datamodel-code-generator versions from 0.59.0 onward are affected by CVE-2026-55390, a high-severity\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-29T00:04:24.536581Z"}, {"uuid": "71f2c40d-6fea-4729-8293-0715dbb3e1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55391", "type": "seen", "source": "https://gist.github.com/alon710/73a1f99f69f48acfb8cc74440bebaced", "content": "# CVE-2026-55391: CVE-2026-55391: Server-Side Request Forgery Bypass via DNS Rebinding in datamodel-code-generator\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55391\n\n## Summary\nCVE-2026-55391 is a server-side request forgery (SSRF) bypass vulnerability in the datamodel-code-generator package. The vulnerability occurs due to a Time-of-Check to Time-of-Use (TOCTOU) race condition during DNS resolution, combined with a failure to inspect embedded IPv4-in-IPv6 address mappings. By deploying a malicious DNS server with a low Time-To-Live (TTL) configuration, an attacker can bypass private address blocklists and coerce the application to connect to internal services or local endpoints.\n\n## TL;DR\nA Time-of-Check to Time-of-Use (TOCTOU) DNS vulnerability in datamodel-code-generator allows remote attackers to bypass SSRF protections using DNS rebinding or IPv6-mapped IPv4 addresses, exposing internal networks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918 (SSRF), CWE-367 (TOCTOU)\n- **Attack Vector**: Network\n- **Attack Complexity**: High\n- **CVSS v3.1 Score**: 7.5\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- datamodel-code-generator python package\n- **datamodel-code-generator**: >= 0.50.0, < 0.63.0 (Fixed in: `0.63.0`)\n\n## Mitigation\n\n- Implement DNS pinning at the socket or transport layer to prevent independent DNS resolution passes.\n- Unwrap IPv6-encapsulated IPv4 configurations to detect hidden private addresses.\n- Use isolated container networks with egress rules to block private IP space connections.\n\n**Remediation Steps:**\n1. Update the datamodel-code-generator dependency to version 0.63.0 or greater.\n2. Ensure validation protocols explicitly block legacy IP notations and IPv6 mapping formats.\n3. Configure cloud host firewalls to restrict local loopback and metadata access from worker environments.\n\n## References\n\n- [Fix Commit](https://github.com/koxudaxi/datamodel-code-generator/commit/25c8b7e497419eb20b230fa3318c04f9bebc5a6f)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55391) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T12:32:38.548212Z"}, {"uuid": "625d0675-93ff-4506-944c-d65c44b8d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55390", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrsfpsthfv27", "content": "CVE-2026-55390 - High severity path traversal in datamodel-code-generator 0.59.0-0.62.0. Arbitrary local file read via XML schema imports. CVSS 7.5. Update to 0.62.0 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55390/", "creation_timestamp": "2026-07-29T17:02:28.295338Z"}, {"uuid": "5c916b01-9111-4e55-8295-23eff970fbb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55393", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwtuokpcfh2c", "content": "\ud83d\udea8 CVE-2026-55393 \u2014 CVSS 10 CRITICAL\n\nUnvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55393\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-01T22:08:49.957970Z"}, {"uuid": "136d92f1-d55b-4436-a558-846358fe2781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55395", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwtuosvahp2f", "content": "\ud83d\udea8 CVE-2026-55395 \u2014 CVSS 9.4 CRITICAL\n\nHardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55395\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-01T22:08:58.575401Z"}, {"uuid": "76c5d166-7c27-43df-80f4-a253c9cdd7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55395", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1455", "content": "\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc Teledyne FLIR PackBot \u0648 FirstLook: \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u06a9\u0646\u062a\u0631\u0644 \u0631\u0628\u0627\u062a\u200c\u0647\u0627 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u062e\u0637\u0631 \u0645\u06cc\u200c\u0627\u0646\u062f\u0627\u0632\u0646\u062f.\n\n\u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631:\nTeledyne FLIR Aware2: PackBot - \u062a\u0627 \u0646\u0633\u062e\u0647 6.9.0.2\u060c FirstLook - \u062a\u0627 \u0646\u0633\u062e\u0647 1.7.9\u060c \u0628\u0633\u062a\u0647 \u0628\u0647 CVE.\n\n\u0634\u0631\u06a9\u062a Mandiant \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc \u0631\u0628\u0627\u062a\u06cc\u06a9 PackBot \u0648 FirstLook \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u062e\u0637\u0627\u0647\u0627 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628\u060c \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP/UDP\u060c Wi-Fi \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0633\u062a\u0646\u062f. \u0639\u0648\u0627\u0642\u0628 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0633\u062a: \u0627\u0632 \u0631\u0647\u06af\u06cc\u0631\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062a\u0644\u0647\u200c\u0645\u062a\u0631\u06cc \u0648 \u0627\u06cc\u062c\u0627\u062f \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u06af\u0631\u0641\u062a\u0647 \u062a\u0627 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062d\u0631\u06a9\u062a\u06cc \u0631\u0628\u0627\u062a.\n\n\nCVE-2026-55393 \u2014 CVSS 4.0: 10.0 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-22\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0631\u0627 \u0628\u062e\u0648\u0627\u0646\u062f. \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0647 \u062f\u0633\u062a \u0622\u0645\u062f\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0634\u0648\u062f.\n\nCVE-2026-14984 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-319\n\u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 PackBot \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062d\u0644\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0634\u0646\u0627\u0633\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f\u060c \u062f\u0631 \u062c\u0644\u0633\u0647 \u0627\u067e\u0631\u0627\u062a\u0648\u0631 \u062f\u062e\u0627\u0644\u062a \u06a9\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0631\u0628\u0627\u062a \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-55395 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-798\n\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc PackBot \u0648 FirstLook \u0627\u0632 \u0631\u0645\u0632\u0647\u0627\u06cc \u0639\u0628\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0648 \u062b\u0627\u0628\u062a \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0645\u0632\u0647\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root\u060c \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\nCVE-2026-55396 \u2014 CVSS 4.0: 8.5 (\u0628\u0627\u0644\u0627)\u060c CWE-319\n\u062f\u0633\u062a\u0648\u0631\u0627\u062a UDP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u0632 \u06a9\u0646\u062a\u0631\u0644 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062c\u0627\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644\u06cc \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u062f\u060c \u062d\u0631\u06a9\u0627\u062a \u0631\u0628\u0627\u062a \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u06a9\u0646\u062a\u0631\u0644 \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-14983 \u2014 CVSS 4.0: 7.1 (\u0628\u0627\u0644\u0627)\u060c CWE-306\n\u06cc\u06a9 \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f (reboot) \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u060c \u0631\u0628\u0627\u062a PackBot \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u062d\u0644\u0642\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0642\u0631\u0627\u0631 \u062f\u0647\u062f \u0648 \u062f\u0631 \u0639\u0645\u0644 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u06a9\u0627\u0631 \u0628\u06cc\u0627\u0646\u062f\u0627\u0632\u062f.\n\nCVE-2026-55394 \u2014 CVSS 4.0: 5.3 (\u0645\u062a\u0648\u0633\u0637)\u060c CWE-319\n\u062f\u0631 \u0628\u0631\u062e\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627\u060c \u0631\u0628\u0627\u062a PackBot \u0627\u0632 \u06cc\u06a9 \u0634\u0628\u06a9\u0647 Wi-Fi \u0628\u0627\u0632 \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0648 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0631\u0628\u0627\u062a\u060c \u0631\u0647\u06af\u06cc\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648 \u0627\u0646\u062c\u0627\u0645 \u062d\u0645\u0644\u0627\u062a Man-in-the-Middle (MitM) \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0634\u0631\u0627\u06cc\u0637\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0648\u06cc\u0698\u06af\u06cc \u0628\u0631\u062c\u0633\u062a\u0647 \u0627\u06cc\u0646 \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u0632 CVE\u0647\u0627\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645 \u0622\u0646 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0633\u0627\u06cc\u0628\u0631-\u0641\u06cc\u0632\u06cc\u06a9\u06cc \u0627\u0633\u062a: \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u060c \u0628\u0644\u06a9\u0647 \u062d\u0631\u06a9\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0628\u0627\u062a \u0645\u062a\u062d\u0631\u06a9 \u0631\u0627 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u0646\u062a\u0634\u0627\u0631\u060c Mandiant \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u06af\u0632\u0627\u0631\u0634 \u0646\u06a9\u0631\u062f\u0647 \u0628\u0648\u062f.\n\n\n\u0645\u0646\u0628\u0639: Mandiant\u060c \u0645\u062c\u0645\u0648\u0639\u0647 MNDT-2026-0027 \u2014 MNDT-2026-0032\nhttps://github.com/mandiant/Vulnerability-Disclosures/tree/master/2026\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-10-06T16:46:00.000000Z"}, {"uuid": "46373f28-71cb-4119-b22a-16e2df5f25ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55396", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1455", "content": "\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc Teledyne FLIR PackBot \u0648 FirstLook: \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u06a9\u0646\u062a\u0631\u0644 \u0631\u0628\u0627\u062a\u200c\u0647\u0627 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u062e\u0637\u0631 \u0645\u06cc\u200c\u0627\u0646\u062f\u0627\u0632\u0646\u062f.\n\n\u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631:\nTeledyne FLIR Aware2: PackBot - \u062a\u0627 \u0646\u0633\u062e\u0647 6.9.0.2\u060c FirstLook - \u062a\u0627 \u0646\u0633\u062e\u0647 1.7.9\u060c \u0628\u0633\u062a\u0647 \u0628\u0647 CVE.\n\n\u0634\u0631\u06a9\u062a Mandiant \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc \u0631\u0628\u0627\u062a\u06cc\u06a9 PackBot \u0648 FirstLook \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u062e\u0637\u0627\u0647\u0627 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628\u060c \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP/UDP\u060c Wi-Fi \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0633\u062a\u0646\u062f. \u0639\u0648\u0627\u0642\u0628 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0633\u062a: \u0627\u0632 \u0631\u0647\u06af\u06cc\u0631\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062a\u0644\u0647\u200c\u0645\u062a\u0631\u06cc \u0648 \u0627\u06cc\u062c\u0627\u062f \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u06af\u0631\u0641\u062a\u0647 \u062a\u0627 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062d\u0631\u06a9\u062a\u06cc \u0631\u0628\u0627\u062a.\n\n\nCVE-2026-55393 \u2014 CVSS 4.0: 10.0 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-22\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0631\u0627 \u0628\u062e\u0648\u0627\u0646\u062f. \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0647 \u062f\u0633\u062a \u0622\u0645\u062f\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0634\u0648\u062f.\n\nCVE-2026-14984 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-319\n\u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 PackBot \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062d\u0644\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0634\u0646\u0627\u0633\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f\u060c \u062f\u0631 \u062c\u0644\u0633\u0647 \u0627\u067e\u0631\u0627\u062a\u0648\u0631 \u062f\u062e\u0627\u0644\u062a \u06a9\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0631\u0628\u0627\u062a \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-55395 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-798\n\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc PackBot \u0648 FirstLook \u0627\u0632 \u0631\u0645\u0632\u0647\u0627\u06cc \u0639\u0628\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0648 \u062b\u0627\u0628\u062a \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0645\u0632\u0647\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root\u060c \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\nCVE-2026-55396 \u2014 CVSS 4.0: 8.5 (\u0628\u0627\u0644\u0627)\u060c CWE-319\n\u062f\u0633\u062a\u0648\u0631\u0627\u062a UDP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u0632 \u06a9\u0646\u062a\u0631\u0644 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062c\u0627\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644\u06cc \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u062f\u060c \u062d\u0631\u06a9\u0627\u062a \u0631\u0628\u0627\u062a \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u06a9\u0646\u062a\u0631\u0644 \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-14983 \u2014 CVSS 4.0: 7.1 (\u0628\u0627\u0644\u0627)\u060c CWE-306\n\u06cc\u06a9 \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f (reboot) \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u060c \u0631\u0628\u0627\u062a PackBot \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u062d\u0644\u0642\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0642\u0631\u0627\u0631 \u062f\u0647\u062f \u0648 \u062f\u0631 \u0639\u0645\u0644 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u06a9\u0627\u0631 \u0628\u06cc\u0627\u0646\u062f\u0627\u0632\u062f.\n\nCVE-2026-55394 \u2014 CVSS 4.0: 5.3 (\u0645\u062a\u0648\u0633\u0637)\u060c CWE-319\n\u062f\u0631 \u0628\u0631\u062e\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627\u060c \u0631\u0628\u0627\u062a PackBot \u0627\u0632 \u06cc\u06a9 \u0634\u0628\u06a9\u0647 Wi-Fi \u0628\u0627\u0632 \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0648 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0631\u0628\u0627\u062a\u060c \u0631\u0647\u06af\u06cc\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648 \u0627\u0646\u062c\u0627\u0645 \u062d\u0645\u0644\u0627\u062a Man-in-the-Middle (MitM) \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0634\u0631\u0627\u06cc\u0637\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0648\u06cc\u0698\u06af\u06cc \u0628\u0631\u062c\u0633\u062a\u0647 \u0627\u06cc\u0646 \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u0632 CVE\u0647\u0627\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645 \u0622\u0646 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0633\u0627\u06cc\u0628\u0631-\u0641\u06cc\u0632\u06cc\u06a9\u06cc \u0627\u0633\u062a: \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u060c \u0628\u0644\u06a9\u0647 \u062d\u0631\u06a9\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0628\u0627\u062a \u0645\u062a\u062d\u0631\u06a9 \u0631\u0627 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u0646\u062a\u0634\u0627\u0631\u060c Mandiant \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u06af\u0632\u0627\u0631\u0634 \u0646\u06a9\u0631\u062f\u0647 \u0628\u0648\u062f.\n\n\n\u0645\u0646\u0628\u0639: Mandiant\u060c \u0645\u062c\u0645\u0648\u0639\u0647 MNDT-2026-0027 \u2014 MNDT-2026-0032\nhttps://github.com/mandiant/Vulnerability-Disclosures/tree/master/2026\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-10-06T16:46:00.000000Z"}, {"uuid": "98602b82-a343-4ef7-a8ba-c5e1f8d84101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55393", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1455", "content": "\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc Teledyne FLIR PackBot \u0648 FirstLook: \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u06a9\u0646\u062a\u0631\u0644 \u0631\u0628\u0627\u062a\u200c\u0647\u0627 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u062e\u0637\u0631 \u0645\u06cc\u200c\u0627\u0646\u062f\u0627\u0632\u0646\u062f.\n\n\u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631:\nTeledyne FLIR Aware2: PackBot - \u062a\u0627 \u0646\u0633\u062e\u0647 6.9.0.2\u060c FirstLook - \u062a\u0627 \u0646\u0633\u062e\u0647 1.7.9\u060c \u0628\u0633\u062a\u0647 \u0628\u0647 CVE.\n\n\u0634\u0631\u06a9\u062a Mandiant \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc \u0631\u0628\u0627\u062a\u06cc\u06a9 PackBot \u0648 FirstLook \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u062e\u0637\u0627\u0647\u0627 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628\u060c \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP/UDP\u060c Wi-Fi \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0633\u062a\u0646\u062f. \u0639\u0648\u0627\u0642\u0628 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0633\u062a: \u0627\u0632 \u0631\u0647\u06af\u06cc\u0631\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062a\u0644\u0647\u200c\u0645\u062a\u0631\u06cc \u0648 \u0627\u06cc\u062c\u0627\u062f \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u06af\u0631\u0641\u062a\u0647 \u062a\u0627 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062d\u0631\u06a9\u062a\u06cc \u0631\u0628\u0627\u062a.\n\n\nCVE-2026-55393 \u2014 CVSS 4.0: 10.0 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-22\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0631\u0627 \u0628\u062e\u0648\u0627\u0646\u062f. \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0647 \u062f\u0633\u062a \u0622\u0645\u062f\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0634\u0648\u062f.\n\nCVE-2026-14984 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-319\n\u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 PackBot \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062d\u0644\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0634\u0646\u0627\u0633\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f\u060c \u062f\u0631 \u062c\u0644\u0633\u0647 \u0627\u067e\u0631\u0627\u062a\u0648\u0631 \u062f\u062e\u0627\u0644\u062a \u06a9\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0631\u0628\u0627\u062a \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-55395 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-798\n\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc PackBot \u0648 FirstLook \u0627\u0632 \u0631\u0645\u0632\u0647\u0627\u06cc \u0639\u0628\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0648 \u062b\u0627\u0628\u062a \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0645\u0632\u0647\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root\u060c \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\nCVE-2026-55396 \u2014 CVSS 4.0: 8.5 (\u0628\u0627\u0644\u0627)\u060c CWE-319\n\u062f\u0633\u062a\u0648\u0631\u0627\u062a UDP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u0632 \u06a9\u0646\u062a\u0631\u0644 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062c\u0627\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644\u06cc \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u062f\u060c \u062d\u0631\u06a9\u0627\u062a \u0631\u0628\u0627\u062a \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u06a9\u0646\u062a\u0631\u0644 \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-14983 \u2014 CVSS 4.0: 7.1 (\u0628\u0627\u0644\u0627)\u060c CWE-306\n\u06cc\u06a9 \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f (reboot) \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u060c \u0631\u0628\u0627\u062a PackBot \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u062d\u0644\u0642\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0642\u0631\u0627\u0631 \u062f\u0647\u062f \u0648 \u062f\u0631 \u0639\u0645\u0644 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u06a9\u0627\u0631 \u0628\u06cc\u0627\u0646\u062f\u0627\u0632\u062f.\n\nCVE-2026-55394 \u2014 CVSS 4.0: 5.3 (\u0645\u062a\u0648\u0633\u0637)\u060c CWE-319\n\u062f\u0631 \u0628\u0631\u062e\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627\u060c \u0631\u0628\u0627\u062a PackBot \u0627\u0632 \u06cc\u06a9 \u0634\u0628\u06a9\u0647 Wi-Fi \u0628\u0627\u0632 \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0648 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0631\u0628\u0627\u062a\u060c \u0631\u0647\u06af\u06cc\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648 \u0627\u0646\u062c\u0627\u0645 \u062d\u0645\u0644\u0627\u062a Man-in-the-Middle (MitM) \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0634\u0631\u0627\u06cc\u0637\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0648\u06cc\u0698\u06af\u06cc \u0628\u0631\u062c\u0633\u062a\u0647 \u0627\u06cc\u0646 \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u0632 CVE\u0647\u0627\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645 \u0622\u0646 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0633\u0627\u06cc\u0628\u0631-\u0641\u06cc\u0632\u06cc\u06a9\u06cc \u0627\u0633\u062a: \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u060c \u0628\u0644\u06a9\u0647 \u062d\u0631\u06a9\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0628\u0627\u062a \u0645\u062a\u062d\u0631\u06a9 \u0631\u0627 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u0646\u062a\u0634\u0627\u0631\u060c Mandiant \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u06af\u0632\u0627\u0631\u0634 \u0646\u06a9\u0631\u062f\u0647 \u0628\u0648\u062f.\n\n\n\u0645\u0646\u0628\u0639: Mandiant\u060c \u0645\u062c\u0645\u0648\u0639\u0647 MNDT-2026-0027 \u2014 MNDT-2026-0032\nhttps://github.com/mandiant/Vulnerability-Disclosures/tree/master/2026\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-10-06T16:46:00.000000Z"}, {"uuid": "cabeba92-935e-4e90-aabc-bc8cef798283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55394", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1455", "content": "\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc Teledyne FLIR PackBot \u0648 FirstLook: \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u06a9\u0646\u062a\u0631\u0644 \u0631\u0628\u0627\u062a\u200c\u0647\u0627 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u062e\u0637\u0631 \u0645\u06cc\u200c\u0627\u0646\u062f\u0627\u0632\u0646\u062f.\n\n\u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631:\nTeledyne FLIR Aware2: PackBot - \u062a\u0627 \u0646\u0633\u062e\u0647 6.9.0.2\u060c FirstLook - \u062a\u0627 \u0646\u0633\u062e\u0647 1.7.9\u060c \u0628\u0633\u062a\u0647 \u0628\u0647 CVE.\n\n\u0634\u0631\u06a9\u062a Mandiant \u0634\u0634 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc \u0631\u0628\u0627\u062a\u06cc\u06a9 PackBot \u0648 FirstLook \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u062e\u0637\u0627\u0647\u0627 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628\u060c \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP/UDP\u060c Wi-Fi \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0633\u062a\u0646\u062f. \u0639\u0648\u0627\u0642\u0628 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0633\u062a: \u0627\u0632 \u0631\u0647\u06af\u06cc\u0631\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062a\u0644\u0647\u200c\u0645\u062a\u0631\u06cc \u0648 \u0627\u06cc\u062c\u0627\u062f \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0633\u0631\u0648\u06cc\u0633 \u06af\u0631\u0641\u062a\u0647 \u062a\u0627 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062d\u0631\u06a9\u062a\u06cc \u0631\u0628\u0627\u062a.\n\n\nCVE-2026-55393 \u2014 CVSS 4.0: 10.0 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-22\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0631\u0627 \u0628\u062e\u0648\u0627\u0646\u062f. \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0647 \u062f\u0633\u062a \u0622\u0645\u062f\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0634\u0648\u062f.\n\nCVE-2026-14984 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-319\n\u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 PackBot \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062d\u0644\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0634\u0646\u0627\u0633\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f\u060c \u062f\u0631 \u062c\u0644\u0633\u0647 \u0627\u067e\u0631\u0627\u062a\u0648\u0631 \u062f\u062e\u0627\u0644\u062a \u06a9\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0631\u0628\u0627\u062a \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-55395 \u2014 CVSS 4.0: 9.4 (\u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc)\u060c CWE-798\n\u0631\u0628\u0627\u062a\u200c\u0647\u0627\u06cc PackBot \u0648 FirstLook \u0627\u0632 \u0631\u0645\u0632\u0647\u0627\u06cc \u0639\u0628\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0648 \u062b\u0627\u0628\u062a \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0631\u0645\u0632\u0647\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root\u060c \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\nCVE-2026-55396 \u2014 CVSS 4.0: 8.5 (\u0628\u0627\u0644\u0627)\u060c CWE-319\n\u062f\u0633\u062a\u0648\u0631\u0627\u062a UDP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u060c \u0627\u0632 \u06a9\u0646\u062a\u0631\u0644 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0645\u062c\u0627\u0648\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644\u06cc \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0646\u062f\u060c \u062d\u0631\u06a9\u0627\u062a \u0631\u0628\u0627\u062a \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u06a9\u0646\u062a\u0631\u0644 \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u06cc\u0631\u062f.\n\nCVE-2026-14983 \u2014 CVSS 4.0: 7.1 (\u0628\u0627\u0644\u0627)\u060c CWE-306\n\u06cc\u06a9 \u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f (reboot) \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u060c \u0631\u0628\u0627\u062a PackBot \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u062d\u0644\u0642\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0642\u0631\u0627\u0631 \u062f\u0647\u062f \u0648 \u062f\u0631 \u0639\u0645\u0644 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u06a9\u0627\u0631 \u0628\u06cc\u0627\u0646\u062f\u0627\u0632\u062f.\n\nCVE-2026-55394 \u2014 CVSS 4.0: 5.3 (\u0645\u062a\u0648\u0633\u0637)\u060c CWE-319\n\u062f\u0631 \u0628\u0631\u062e\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627\u060c \u0631\u0628\u0627\u062a PackBot \u0627\u0632 \u06cc\u06a9 \u0634\u0628\u06a9\u0647 Wi-Fi \u0628\u0627\u0632 \u0628\u062f\u0648\u0646 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0648 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0631\u0628\u0627\u062a\u060c \u0631\u0647\u06af\u06cc\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648 \u0627\u0646\u062c\u0627\u0645 \u062d\u0645\u0644\u0627\u062a Man-in-the-Middle (MitM) \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0634\u0631\u0627\u06cc\u0637\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0648\u06cc\u0698\u06af\u06cc \u0628\u0631\u062c\u0633\u062a\u0647 \u0627\u06cc\u0646 \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u0632 CVE\u0647\u0627\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645 \u0622\u0646 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0633\u0627\u06cc\u0628\u0631-\u0641\u06cc\u0632\u06cc\u06a9\u06cc \u0627\u0633\u062a: \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u060c \u0628\u0644\u06a9\u0647 \u062d\u0631\u06a9\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0628\u0627\u062a \u0645\u062a\u062d\u0631\u06a9 \u0631\u0627 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u0646\u062a\u0634\u0627\u0631\u060c Mandiant \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u06af\u0632\u0627\u0631\u0634 \u0646\u06a9\u0631\u062f\u0647 \u0628\u0648\u062f.\n\n\n\u0645\u0646\u0628\u0639: Mandiant\u060c \u0645\u062c\u0645\u0648\u0639\u0647 MNDT-2026-0027 \u2014 MNDT-2026-0032\nhttps://github.com/mandiant/Vulnerability-Disclosures/tree/master/2026\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-10-06T16:46:00.000000Z"}]}