{"metadata": {"vulnerability": "CVE-2026-39987", "count": 255, "kinds": {"milestone": 5, "sighting": 228, "kev": 11, "other": 11}}, "data": [{"timestamp": "2026-04-08T00:01:47.629Z", "date_only": false, "value": "2026-04-08T00:01:47.629Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-39987", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-08T04:00:00Z", "date_only": false, "value": "2026-04-08T04:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d4baa146-b10f-4d0c-b1ed-b4436e495e06", "url": "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc"}, {"timestamp": "2026-04-08T21:50:58Z", "date_only": false, "value": "2026-04-08T21:50:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2679-6MX9-H9XC", "record": "GHSA-2679-6MX9-H9XC", "field": "published"}, {"timestamp": "2026-04-09T04:00:00Z", "date_only": false, "value": "2026-04-09T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.sysdig.com/blog/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a1ab9fb6-992e-4d63-99ca-bf0327552ab1", "url": "https://www.sysdig.com/blog/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours"}, {"timestamp": "2026-04-09T04:00:00Z", "date_only": false, "value": "2026-04-09T04:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.endorlabs.com/learn/root-in-one-request-marimos-critical-pre-auth-rce-cve-2026-39987", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d74d2403-f335-48ca-93ec-cd630e89511f", "url": "https://www.endorlabs.com/learn/root-in-one-request-marimos-critical-pre-auth-rce-cve-2026-39987"}, {"timestamp": "2026-04-09T06:51:35Z", "date_only": false, "value": "2026-04-09T06:51:35.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2026/CVE-2026-39987.yaml", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1c16af00-70c5-4a7a-ba94-a8c2cb065246", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2026/CVE-2026-39987.yaml"}, {"timestamp": "2026-04-09T17:16:55.639Z", "date_only": false, "value": "2026-04-09T17:16:55.639Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39987", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-04-09T17:16:55.639Z", "date_only": false, "value": "2026-04-09T17:16:55.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-39987", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-09T18:17:02Z", "date_only": false, "value": "2026-04-09T18:17:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2679-6MX9-H9XC", "record": "GHSA-2679-6MX9-H9XC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-09T18:17:02.807Z", "date_only": false, "value": "2026-04-09T18:17:02.807", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39987", "record": "FKIE_CVE-2026-39987", "field": "published"}, {"timestamp": "2026-04-09T18:23:51.110Z", "date_only": false, "value": "2026-04-09T18:23:51.110751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/endorlabs.bsky.social/post/3mj3giso5ac2k", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a6b57914-4e05-492a-91e3-f0a30dc6d86f", "url": "https://bsky.app/profile/endorlabs.bsky.social/post/3mj3giso5ac2k"}, {"timestamp": "2026-04-09T19:23:14Z", "date_only": false, "value": "2026-04-09T19:23:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Y2UpQC9zCL6PqNfAxsSoQJ7YUumR5oW0JI3RILB7SgtOVH4", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f942a910-3ca2-4b02-9296-57c2f0fbbecd"}, {"timestamp": "2026-04-09T20:41:58.118Z", "date_only": false, "value": "2026-04-09T20:41:58.118849Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3oa3y53u23", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d0df07c0-19d8-4077-945b-911efd2196e9", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3oa3y53u23"}, {"timestamp": "2026-04-09T21:02:34.687Z", "date_only": false, "value": "2026-04-09T21:02:34.687287Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pextgr42n", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0ec3e2fd-b2e2-4113-8dfb-d32deec94f9f", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pextgr42n"}, {"timestamp": "2026-04-10T05:37:00Z", "date_only": false, "value": "2026-04-10T05:37:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.html", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "54a91103-1595-4384-8a79-27f1594b0c29", "url": "https://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.html"}, {"timestamp": "2026-04-10T10:40:16Z", "date_only": false, "value": "2026-04-10T10:40:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/8778", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "901fb7f6-203e-4121-b6cc-5453ac7c116a", "content": "\u26a0\ufe0f Marimo CVE-2026-39987 gave attackers a full shell with no authentication.\n\nA missing check in /terminal/ws allowed remote code execution on exposed systems. Exploitation began within 9 hours of disclosure\u2014no PoC needed.\n\n\ud83d\udd17 Details here \u2192 https://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.html", "url": "https://t.me/thehackernews/8778"}, {"timestamp": "2026-04-10T10:45:25.658Z", "date_only": false, "value": "2026-04-10T10:45:25.658401Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj55edl6mx27", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "4b2e9990-ee8e-4c82-a227-c874423fd889", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj55edl6mx27"}, {"timestamp": "2026-04-10T10:51:24Z", "date_only": false, "value": "2026-04-10T10:51:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/04/10/critical-marimo-flaw-exploited-hours.html", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ac88a2d0-e7c6-4a77-9f55-5874de57aec4", "url": "https://threatintel.cc/2026/04/10/critical-marimo-flaw-exploited-hours.html"}, {"timestamp": "2026-04-10T10:55:52.654Z", "date_only": false, "value": "2026-04-10T10:55:52.654761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mj55wz7wzf2r", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ba3b15e4-340a-45af-8a0a-3a9034291453", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mj55wz7wzf2r"}, {"timestamp": "2026-04-10T11:24:50.042Z", "date_only": false, "value": "2026-04-10T11:24:50.042023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj57ks2ihj2l", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fff980b6-6c80-4d44-ad8d-637c57aa61e0", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj57ks2ihj2l"}, {"timestamp": "2026-04-10T12:02:34.806Z", "date_only": false, "value": "2026-04-10T12:02:34.806860Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mj5bobmwhj2w", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fb011dd1-8614-4c5d-b456-505cb82da16e", "url": "https://bsky.app/profile/solomonneas.dev/post/3mj5bobmwhj2w"}, {"timestamp": "2026-04-10T12:28:44.435Z", "date_only": false, "value": "2026-04-10T12:28:44.435370Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mj5d52kqdz2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "25d4f1ba-5c3c-4db0-9353-0d93f1997fe6", "url": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mj5d52kqdz2t"}, {"timestamp": "2026-04-10T12:47:45.057Z", "date_only": false, "value": "2026-04-10T12:47:45.057847Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mj5e72s2lw2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f11c1b03-0431-4890-aacf-3c9e65659b67", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mj5e72s2lw2t"}, {"timestamp": "2026-04-10T12:51:16.752Z", "date_only": false, "value": "2026-04-10T12:51:16.752432Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116380498383542979", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "de115174-f737-474f-a6ac-b89c7657c812", "url": "https://infosec.exchange/users/edwardk/statuses/116380498383542979"}, {"timestamp": "2026-04-10T12:51:51.819Z", "date_only": false, "value": "2026-04-10T12:51:51.819909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mj5eg7qads2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d61937fb-0a90-4e5a-93d9-612f8f6b4bac", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mj5eg7qads2q"}, {"timestamp": "2026-04-10T15:15:26Z", "date_only": false, "value": "2026-04-10T15:15:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/88990", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d24645fc-4c25-4737-9fed-de85ec3092bc", "content": "\ud83d\udd8b\ufe0f Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \ud83d\udd8b\ufe0f\n\nA critical security vulnerability\u00a0in Marimo, an opensource Python notebook for data science and analysis, has been exploited within 10 hours of public disclosure, according\u00a0to findings from\u00a0Sysdig. The vulnerability in question\u00a0is CVE202639987 CVSS score 9.3, a preauthenticated remote code execution vulnerability impacting all versions of Marimo prior to and including.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/88990"}, {"timestamp": "2026-04-10T15:15:48Z", "date_only": false, "value": "2026-04-10T15:15:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/88998", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "62cbbcd0-d8ae-4a3e-8aa1-6c8ff1d17191", "content": "\ud83d\udd8b\ufe0f Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \ud83d\udd8b\ufe0f\n\nA critical security vulnerability\u00a0in Marimo, an opensource Python notebook for data science and analysis, has been exploited within 10 hours of public disclosure, according\u00a0to findings from\u00a0Sysdig. The vulnerability in question\u00a0is CVE202639987 CVSS score 9.3, a preauthenticated remote code execution vulnerability impacting all versions of Marimo prior to and including.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/88998"}, {"timestamp": "2026-04-10T15:54:13.776Z", "date_only": false, "value": "2026-04-10T15:54:13.776381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiseos2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "67e83ba5-b3ba-4d79-9609-648c425b5a51", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiseos2q"}, {"timestamp": "2026-04-10T15:54:14.314Z", "date_only": false, "value": "2026-04-10T15:54:14.314785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omistdk2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "09d2955a-4d4f-4bef-bbe8-dd9299bff36e", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omistdk2q"}, {"timestamp": "2026-04-10T15:54:14.810Z", "date_only": false, "value": "2026-04-10T15:54:14.810138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisucs2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "bae6f2ee-c64d-4548-aaab-13abcdb59ed8", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisucs2q"}, {"timestamp": "2026-04-10T15:54:15.330Z", "date_only": false, "value": "2026-04-10T15:54:15.330593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiswbc2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "789ab58b-5d36-404e-b9e3-85c5f3eb60b0", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiswbc2q"}, {"timestamp": "2026-04-10T15:54:15.815Z", "date_only": false, "value": "2026-04-10T15:54:15.815184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiswbd2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "de3a2ef8-280f-494f-a33f-f00c87f59192", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omiswbd2q"}, {"timestamp": "2026-04-10T15:54:17.500Z", "date_only": false, "value": "2026-04-10T15:54:17.500200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisxal2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8b77767a-7944-463d-98ce-a0ae5bf9d0ac", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisxal2q"}, {"timestamp": "2026-04-10T15:54:18.030Z", "date_only": false, "value": "2026-04-10T15:54:18.030878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisy7t2q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "17f386f3-6787-48d4-ad38-b2e281d380bb", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisy7t2q"}, {"timestamp": "2026-04-10T15:54:18.541Z", "date_only": false, "value": "2026-04-10T15:54:18.541823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisz732q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "c90a1270-f196-4aea-893f-addf60ce4bf4", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mj5omisz732q"}, {"timestamp": "2026-04-10T17:30:40.183Z", "date_only": false, "value": "2026-04-10T17:30:40.183991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3mj5tyxrqfp22", "record": "cve-2026-39987", "field": "creation_timestamp", "uuid": "10a5e898-228a-4975-9550-a06056add516", "url": "https://bsky.app/profile/hexonbot.bsky.social/post/3mj5tyxrqfp22"}, {"timestamp": "2026-04-10T21:03:17.589Z", "date_only": false, "value": "2026-04-10T21:03:17.589542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67usxjjr2x", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "dcb06176-ce74-493f-96f1-62dd7398e50c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67usxjjr2x"}, {"timestamp": "2026-04-11T02:28:42.274Z", "date_only": false, "value": "2026-04-11T02:28:42.274699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mj6s2zxoat2b", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "63b5a8d7-c828-4e43-a525-776a4ad01c7d", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mj6s2zxoat2b"}, {"timestamp": "2026-04-11T03:27:15.192Z", "date_only": false, "value": "2026-04-11T03:27:15.192017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mj6vdq5dy22q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "df7f38ae-a3ad-4123-8127-c2f940e9f077", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mj6vdq5dy22q"}, {"timestamp": "2026-04-11T04:03:13Z", "date_only": false, "value": "2026-04-11T04:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/39525", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "46a7f341-7806-479d-b056-63cb5744e55e", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \u2013 thehackernews.com\n\nFri, 10 Apr 2026 15:37:00", "url": "https://t.me/TengkorakCyberCrewzz/39525"}, {"timestamp": "2026-04-11T04:03:13Z", "date_only": false, "value": "2026-04-11T04:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/9629", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "7d7c4e43-a160-49ba-ae3a-0af4e3ed65e2", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure \u2013 thehackernews.com\n\nFri, 10 Apr 2026 15:37:00", "url": "https://t.me/TengkorakCyberCrewzz/9629"}, {"timestamp": "2026-04-11T06:04:30Z", "date_only": false, "value": "2026-04-11T06:04:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/248640", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0acd3f03-8536-496d-8d4f-f4aec0cdf2c3", "content": "Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure\nhttps://ift.tt/S5dmcDa", "url": "https://t.me/ctinow/248640"}, {"timestamp": "2026-04-11T09:54:21Z", "date_only": false, "value": "2026-04-11T09:54:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/248642", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "4e4eb86b-ca83-4461-9d19-c81afa2675c0", "content": "CVE-2026-39987: Marimo RCE exploited in hours after disclosure\nhttps://ift.tt/4jQKviN", "url": "https://t.me/ctinow/248642"}, {"timestamp": "2026-04-11T10:05:05Z", "date_only": false, "value": "2026-04-11T10:05:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/42vnnuN2H09Y8bowfU5L4vP0cA5-_XeLOUULsX7cOScNO7jc", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "20a9fbec-3a08-47f9-bc2a-2d514cc29406"}, {"timestamp": "2026-04-11T10:09:54.033Z", "date_only": false, "value": "2026-04-11T10:09:54.033639Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj7ltpzzwf2j", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "56b043ab-262c-41de-8ccd-9076de731028", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj7ltpzzwf2j"}, {"timestamp": "2026-04-11T20:46:56.168Z", "date_only": false, "value": "2026-04-11T20:46:56.168622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacksgr.bsky.social/post/3mjapghgigf2z", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "c5ef3189-0e53-465e-9f6e-d308c2d26f31", "url": "https://bsky.app/profile/hacksgr.bsky.social/post/3mjapghgigf2z"}, {"timestamp": "2026-04-12T02:29:37.450Z", "date_only": false, "value": "2026-04-12T02:29:37.450503Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjbcllv3sm2e", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f2fe83dc-2224-4aa8-b5f0-a876cb50cee8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjbcllv3sm2e"}, {"timestamp": "2026-04-12T06:46:36.803Z", "date_only": false, "value": "2026-04-12T06:46:36.803071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjbqx3g6o22h", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "91cf257d-91a6-48ce-aed4-a0db4e3d2a46", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjbqx3g6o22h"}, {"timestamp": "2026-04-12T17:00:00.563Z", "date_only": false, "value": "2026-04-12T17:00:00.563498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjct7xk2422q", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fd0c1fb5-20ec-4aa7-8edb-f5f035e00f51", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjct7xk2422q"}, {"timestamp": "2026-04-12T17:53:09.561Z", "date_only": false, "value": "2026-04-12T17:53:09.561346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3mjcw6yotxm2y", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8b2eb923-9a0e-49a5-b7d0-214a8c11b295", "url": "https://bsky.app/profile/rxerium.com/post/3mjcw6yotxm2y"}, {"timestamp": "2026-04-12T18:15:24.334Z", "date_only": false, "value": "2026-04-12T18:15:24.334757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjcxgrwonj2p", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "43cce470-ae06-419f-81ae-aa6fad84ee9a", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjcxgrwonj2p"}, {"timestamp": "2026-04-12T20:40:43.264Z", "date_only": false, "value": "2026-04-12T20:40:43.264462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mjd7knei2725", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f6c8541d-4547-4fe1-a826-334a5f6ff9fe", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mjd7knei2725"}, {"timestamp": "2026-04-12T20:52:20.450Z", "date_only": false, "value": "2026-04-12T20:52:20.450726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mjda7g45ts2f", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "89cdc9e3-0bf1-40e8-be6f-25970226fd8c", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mjda7g45ts2f"}, {"timestamp": "2026-04-12T20:55:08.277Z", "date_only": false, "value": "2026-04-12T20:55:08.277105Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mjdaefqvdk2f", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fc9c2591-c986-42a2-8f3b-26ea554d6496", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mjdaefqvdk2f"}, {"timestamp": "2026-04-12T20:55:58.830Z", "date_only": false, "value": "2026-04-12T20:55:58.830024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mjdafw7ii22f", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6f3718f0-a504-4bf9-ad4b-2fb2b55ac429", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mjdafw7ii22f"}, {"timestamp": "2026-04-12T22:00:05Z", "date_only": false, "value": "2026-04-12T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/80034", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fc027406-aa87-4e4e-ae26-8d43e2c0cebf", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-12 21:52:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39987\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/80034"}, {"timestamp": "2026-04-13T01:42:10.838Z", "date_only": false, "value": "2026-04-13T01:42:10.838471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mjdqfgjl5r2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "004589a1-d05e-41ce-b496-82d9f7efbbe4", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mjdqfgjl5r2t"}, {"timestamp": "2026-04-13T02:29:38.131Z", "date_only": false, "value": "2026-04-13T02:29:38.131344Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjdt2jxnih2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8646d6c9-83d2-4e94-9f09-b43021001ead", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjdt2jxnih2t"}, {"timestamp": "2026-04-13T03:12:01.111Z", "date_only": false, "value": "2026-04-13T03:12:01.111325Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116395207586097637", "record": "cve-2026-39987", "field": "creation_timestamp", "uuid": "79949c11-0ed9-4377-aa66-e14ad064ce13", "url": "https://infosec.exchange/users/patrickcmiller/statuses/116395207586097637"}, {"timestamp": "2026-04-13T04:42:02.145Z", "date_only": false, "value": "2026-04-13T04:42:02.145943Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mje2hc5qcm2u", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "903852da-4f81-4f3c-aedc-6914fdc4e124", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mje2hc5qcm2u"}, {"timestamp": "2026-04-13T06:45:31.972Z", "date_only": false, "value": "2026-04-13T06:45:31.972188Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjebe4mmwg2l", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a17af7ff-c13a-4dd4-a8e9-456f845ed7f3", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mjebe4mmwg2l"}, {"timestamp": "2026-04-13T08:28:29Z", "date_only": false, "value": "2026-04-13T08:28:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-pre-authentication-remote-code-execution-marimo-exploited-wild-patch", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8fda74e7-9e32-493a-a855-f57b332f8045", "url": "https://ccb.belgium.be/advisories/warning-critical-pre-authentication-remote-code-execution-marimo-exploited-wild-patch"}, {"timestamp": "2026-04-13T11:59:36Z", "date_only": false, "value": "2026-04-13T11:59:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8095", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8a889f06-6c28-4ecb-a959-ee57e014d2f0", "content": "\u0412\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Marimo \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Marimo 0.20.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-39987 \u0438 GitHub \u043e\u0446\u0435\u043d\u0438\u043b \u0435\u0451 \u0432 9,3 \u0438\u0437 10.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Sysdig, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u00a0\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438   \u0435\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f.\n\nMarimo - \u044d\u0442\u043e \u0441\u0440\u0435\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u043b\u043e\u043a\u043d\u043e\u0442\u043e\u0432 \u043d\u0430 Python \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u0430\u0442\u0430\u0441\u0430\u0439\u043d\u0442\u0438\u0441\u0442\u0430\u043c\u0438, \u0418\u0418-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c, \u044d\u0442\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 20 000 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub \u0438 1000 \u0444\u043e\u0440\u043a\u043e\u0432.\n\nCVE-2026-39987 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 WebSocket /terminal/ws \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0443 \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u042d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 Marimo.\n\nMarimo \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 8 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 0.23.0 \u0434\u043b\u044f \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 Marimo \u043a\u0430\u043a \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0431\u043b\u043e\u043a\u043d\u043e\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0435\u0445, \u043a\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Marimo \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0449\u0443\u044e \u0441\u0435\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 --host 0.0.0.0 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0432\u044b\u0445 12 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c 125 IP, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f  \u0440\u0430\u0437\u0432\u0435\u0434\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u041c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u043d\u044b\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432\u0448\u0438\u0441\u044c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /terminal/ws \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043a\u043e\u0440\u043e\u0442\u043a\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043a\u0443\u043d\u0434.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0443\u0447\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a pwd, whoami \u0438 ls, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 SSH.\n\n\u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043b\u0441\u044f \u043d\u0430 \u0441\u0431\u043e\u0440\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432 .env \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b \u043f\u043e\u0438\u0441\u043a SSH-\u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Sysdig, \u0432\u0435\u0441\u044c \u044d\u0442\u0430\u043f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u044b\u043b \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 \u0442\u0440\u0438 \u043c\u0438\u043d\u0443\u0442\u044b. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0447\u0430\u0441 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u0443 \u0436\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u043e\u0438\u0442 \u00ab\u043c\u0435\u0442\u043e\u0434\u0438\u0447\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0434\u0445\u043e\u0434, \u0430 \u043d\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0432\u0430\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445, \u043a\u0430\u043a \u043a\u0440\u0430\u0436\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 .env \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 SSH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u044b, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Marimo \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.23.0, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket \u0441 /terminal/ws, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.", "url": "https://t.me/true_secator/8095"}, {"timestamp": "2026-04-13T14:34:13.552Z", "date_only": false, "value": "2026-04-13T14:34:13.552179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mjf3k7nv6t2g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5db21aae-b540-4eed-b8c2-47c226f08a2f", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mjf3k7nv6t2g"}, {"timestamp": "2026-04-13T15:16:42Z", "date_only": false, "value": "2026-04-13T15:16:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/04/13/marimo-rce-vulnerability-exploited-in.html", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d376ac24-95ee-4881-8512-a8e345ea6c3e", "url": "https://threatintel.cc/2026/04/13/marimo-rce-vulnerability-exploited-in.html"}, {"timestamp": "2026-04-13T15:42:01.620Z", "date_only": false, "value": "2026-04-13T15:42:01.620132Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116398156738057915", "record": "cve-2026-39987", "field": "creation_timestamp", "uuid": "d85c1031-f006-452e-9908-1b5d6070c554", "url": "https://infosec.exchange/users/patrickcmiller/statuses/116398156738057915"}, {"timestamp": "2026-04-13T16:22:04Z", "date_only": false, "value": "2026-04-13T16:22:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6305", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0159b037-085a-4a55-b169-f553ff3e4b2c", "content": "\u0412\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Marimo \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Marimo 0.20.4 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-39987 \u0438 GitHub \u043e\u0446\u0435\u043d\u0438\u043b \u0435\u0451 \u0432 9,3 \u0438\u0437 10.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Sysdig, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u00a0\u0438 \u0431\u0435\u0437 \u043f\u0440\u043e\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438   \u0435\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f.\n\nMarimo - \u044d\u0442\u043e \u0441\u0440\u0435\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u043b\u043e\u043a\u043d\u043e\u0442\u043e\u0432 \u043d\u0430 Python \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u0430\u0442\u0430\u0441\u0430\u0439\u043d\u0442\u0438\u0441\u0442\u0430\u043c\u0438, \u0418\u0418-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c, \u044d\u0442\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 20 000 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub \u0438 1000 \u0444\u043e\u0440\u043a\u043e\u0432.\n\nCVE-2026-39987 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 WebSocket /terminal/ws \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0443 \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u042d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 Marimo.\n\nMarimo \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 8 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 0.23.0 \u0434\u043b\u044f \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 Marimo \u043a\u0430\u043a \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0431\u043b\u043e\u043a\u043d\u043e\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0435\u0445, \u043a\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Marimo \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0449\u0443\u044e \u0441\u0435\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 --host 0.0.0.0 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0432\u044b\u0445 12 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c 125 IP, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f  \u0440\u0430\u0437\u0432\u0435\u0434\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u041c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 10 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u043d\u044b\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432\u0448\u0438\u0441\u044c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /terminal/ws \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043a\u043e\u0440\u043e\u0442\u043a\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043a\u0443\u043d\u0434.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0443\u0447\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a pwd, whoami \u0438 ls, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 SSH.\n\n\u0414\u0430\u043b\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043b\u0441\u044f \u043d\u0430 \u0441\u0431\u043e\u0440\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0432 .env \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b \u043f\u043e\u0438\u0441\u043a SSH-\u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Sysdig, \u0432\u0435\u0441\u044c \u044d\u0442\u0430\u043f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0431\u044b\u043b \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 \u0442\u0440\u0438 \u043c\u0438\u043d\u0443\u0442\u044b. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0447\u0430\u0441 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0435\u0440\u043d\u0443\u043b\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0442\u0443 \u0436\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u043e\u0438\u0442 \u00ab\u043c\u0435\u0442\u043e\u0434\u0438\u0447\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u00bb, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u043e\u0434\u0445\u043e\u0434, \u0430 \u043d\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0432\u0430\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445, \u043a\u0430\u043a \u043a\u0440\u0430\u0436\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 .env \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 SSH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u044b, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Marimo \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.23.0, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket \u0441 /terminal/ws, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.", "url": "https://t.me/S_E_Reborn/6305"}, {"timestamp": "2026-04-13T17:08:08.598Z", "date_only": false, "value": "2026-04-13T17:08:08.598455Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjfe54dwya2w", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "513a3d8d-79a2-44c8-a98f-b900239568bc", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjfe54dwya2w"}, {"timestamp": "2026-04-13T17:16:37.119Z", "date_only": false, "value": "2026-04-13T17:16:37.119055Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116398528617948925", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0acab391-e583-4afa-8976-1094e2154416", "url": "https://infosec.exchange/users/edwardk/statuses/116398528617948925"}, {"timestamp": "2026-04-13T17:17:07.091Z", "date_only": false, "value": "2026-04-13T17:17:07.091145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mjfenercoc2c", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6bcd9e99-7165-4f9a-837e-931de7606293", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mjfenercoc2c"}, {"timestamp": "2026-04-13T19:00:13Z", "date_only": false, "value": "2026-04-13T19:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Jeul2EvprL3_hH1xvWkayHz4l2vevKD0W-_dzxiA_dwei0o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d9e6b68f-f36a-4573-9a14-1018b3e7bcd1"}, {"timestamp": "2026-04-14T00:00:04Z", "date_only": false, "value": "2026-04-14T00:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/80178", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1e49ca29-db9c-4e33-aee3-b7218d577dd6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mki9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-13 23:58:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/80178"}, {"timestamp": "2026-04-14T02:29:32.625Z", "date_only": false, "value": "2026-04-14T02:29:32.625562Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjgdjcg6pl25", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6434ab8f-aeef-4288-a0fe-66fdfe8d8a85", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjgdjcg6pl25"}, {"timestamp": "2026-04-14T03:00:10Z", "date_only": false, "value": "2026-04-14T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nbHcaeDNI4B0FTn-7eArxrArCHluMti4gPmSsvmEVLUktVg", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fa4255f7-29e7-410d-819a-c8605f28b2aa"}, {"timestamp": "2026-04-14T10:00:26.049Z", "date_only": false, "value": "2026-04-14T10:00:26.049623Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mjh4pko6ea2b", "record": "cve-2026-39987", "field": "creation_timestamp", "uuid": "1ca5fc2f-a6b1-4b08-a369-8f617592ef79", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mjh4pko6ea2b"}, {"timestamp": "2026-04-14T15:00:07Z", "date_only": false, "value": "2026-04-14T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jqsHB6FIdeMNMlYJLaE-SWbBIQ7X4SKPFQvaPULFC7d8_bM", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6da6c7f2-1a00-47b4-8112-e638917323c9"}, {"timestamp": "2026-04-14T17:44:03.493Z", "date_only": false, "value": "2026-04-14T17:44:03.493021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjhwmkncza2h", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "99e98ac0-4062-4135-9441-76763d383ebc", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mjhwmkncza2h"}, {"timestamp": "2026-04-15T02:29:21.344Z", "date_only": false, "value": "2026-04-15T02:29:21.344157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjitxvbi6n2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "3df1525d-8d07-47ba-9db2-4223d3b2972f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjitxvbi6n2t"}, {"timestamp": "2026-04-15T09:00:05Z", "date_only": false, "value": "2026-04-15T09:00:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/80379", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "11f23650-5e05-4d4d-83d2-d4cc1bd70438", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a keraattin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-15 08:17:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-39987: Marimo Python Notebook Pre-Auth RCE (CVSS 9.3). Python & Nmap NSE detection scripts. Missing authentication on /terminal/ws WebSocket endpoint gives attackers a full PTY shell without any credentials. Exploited in the wild within 10 hours of disclosure. Fixed in Marimo 0.23.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/80379"}, {"timestamp": "2026-04-15T11:00:10Z", "date_only": false, "value": "2026-04-15T11:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qEqQyvlGNEhSwKVNxnh63UUFIX9U3tMkX70uQezLxi6YNVI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "849ddad7-716d-4626-9bdf-52aa93e816f1"}, {"timestamp": "2026-04-15T15:02:28.596Z", "date_only": false, "value": "2026-04-15T15:02:28.596107Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mjk62jnvvr2w", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "311d767c-f375-4be4-80d9-538d1b21df6a", "url": "https://bsky.app/profile/lordman1982.bsky.social/post/3mjk62jnvvr2w"}, {"timestamp": "2026-04-16T17:07:06.645Z", "date_only": false, "value": "2026-04-16T17:07:06.645650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjmviav6ma2y", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ffbf4e7e-56ea-4299-ab10-df962d38b36f", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjmviav6ma2y"}, {"timestamp": "2026-04-17T05:45:44.789Z", "date_only": false, "value": "2026-04-17T05:45:44.789011Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjo7uvniot25", "record": "cve-2026-39987", "field": "creation_timestamp", "uuid": "e74eac33-4a93-48b4-a174-a9dbd457ae21", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjo7uvniot25"}, {"timestamp": "2026-04-17T08:30:58.643Z", "date_only": false, "value": "2026-04-17T08:30:58.643895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjoj4djr3n32", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2694dd8c-e53f-4150-a377-e8ccba1ceab8", "url": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjoj4djr3n32"}, {"timestamp": "2026-04-17T10:48:46.582Z", "date_only": false, "value": "2026-04-17T10:48:46.582704Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/canartuc.com/post/3mjoqsqzo2f2o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ac72ef13-6624-4604-a26a-15cf7c0f7ee6", "url": "https://bsky.app/profile/canartuc.com/post/3mjoqsqzo2f2o"}, {"timestamp": "2026-04-17T12:03:03Z", "date_only": false, "value": "2026-04-17T12:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/39700", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "23619e86-c94f-4e30-a212-7b3a323ae4e4", "content": "Weaponized CVE-2026-39987 Pushes Blockchain Backdoor Through Hugging Face \u2013 gbhackers.com\n\nFri, 17 Apr 2026 16:10:46", "url": "https://t.me/TengkorakCyberCrewzz/39700"}, {"timestamp": "2026-04-17T12:03:03Z", "date_only": false, "value": "2026-04-17T12:03:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TengkorakCyberCrewzz/9796", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "00ec6700-6d4d-4f13-8864-af4a7797396d", "content": "Weaponized CVE-2026-39987 Pushes Blockchain Backdoor Through Hugging Face \u2013 gbhackers.com\n\nFri, 17 Apr 2026 16:10:46", "url": "https://t.me/TengkorakCyberCrewzz/9796"}, {"timestamp": "2026-04-17T14:28:27.724Z", "date_only": false, "value": "2026-04-17T14:28:27.724251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjp53klabf2p", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "36d357b3-1dea-4ff0-b2f6-0d53b5d5de01", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjp53klabf2p"}, {"timestamp": "2026-04-18T09:03:05.677Z", "date_only": false, "value": "2026-04-18T09:03:05.677573Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/elhacker.net/post/3mjr3eot2nd2a", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2103cb2b-09c2-4c74-9fb3-60aa7caf9066", "url": "https://bsky.app/profile/elhacker.net/post/3mjr3eot2nd2a"}, {"timestamp": "2026-04-18T11:00:12Z", "date_only": false, "value": "2026-04-18T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "e02dd76f-89a1-489e-a3f2-ae1a6c23f126"}, {"timestamp": "2026-04-19T18:31:39.789Z", "date_only": false, "value": "2026-04-19T18:31:39.789442Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjullzwgsxk2", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "19aed64b-2d28-4fda-ae40-443af1c89b5e", "url": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjullzwgsxk2"}, {"timestamp": "2026-04-20T06:37:55.432Z", "date_only": false, "value": "2026-04-20T06:37:55.432594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjvu6xzkzc2v", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9fc02dbd-4114-4760-a0b3-16f1a702546d", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjvu6xzkzc2v"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-39987", "field": "timestamps.asserted_at", "uuid": "f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": true, "value": "2026-04-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39987", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": true, "value": "2026-04-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-39987", "field": "evidence.0.details.date_added", "uuid": "f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-39987", "field": "timestamps.first_seen_at", "uuid": "f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39987", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39987", "record": "FKIE_CVE-2026-39987", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-39987", "field": "status.status_updated_at", "uuid": "f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39987", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-04-23T11:23:05Z", "date_only": false, "value": "2026-04-23T11:23:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/poxek/6047", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a17c4ed7-aa25-488b-a575-b5c32ef56ed3", "content": "Pre-auth RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 marimo (Python notebook framework) \u2014 CVE-2026-39987\n#RCE #CVE #Marimo #Python #WebSocket #AppSec\n\n\u0412 Marimo \u0435\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430. \u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /terminal/ws \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438: WebSocket-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u043e\u0441\u044c \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u0441\u0435\u0441\u0441\u0438\u0439, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 pty.fork() \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 shell. \u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2014 AuthenticationMiddleware \u0438\u0437 Starlette \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043d\u043e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 WebSocket-\u0430\u043f\u0433\u0440\u0435\u0439\u0434, \u0430 \u0441\u0430\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 validate_auth() \u043f\u0435\u0440\u0435\u0434 websocket.accept().\n\n\u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Marimo \u2264 0.22.x. \u0424\u0438\u043a\u0441 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0432 0.23.0.\n\n\u267e\ufe0f\u0418\u043c\u043f\u0430\u043a\u0442\u267e\ufe0f\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u041e\u0421, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a .env, API-\u043a\u043b\u044e\u0447\u0430\u043c \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u267e\ufe0f\u0410\u0442\u0430\u043a\u0430\u267e\ufe0f\n\n\u25aa\ufe0f\u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043f\u043e \u0441\u0435\u0442\u0438 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 Marimo \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u043c WebSocket-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a ws://TARGET:/terminal/ws \u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 wss://-URL\n\u25aa\ufe0f\u042d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 websocket.accept() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 (PTY)\n\u25aa\ufe0f\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u0440\u044f\u043c\u043e \u0447\u0435\u0440\u0435\u0437 WebSocket, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 id, whoami, ls -la, cat /etc/passwd. \u041c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043a\u0430\u043a \u043f\u043b\u0430\u0446\u0434\u0430\u0440\u043c \u0434\u043b\u044f lateral movement.\n\n\u267e\ufe0f\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f in wild\u267e\ufe0f\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig TRT, \u0447\u0435\u0440\u0435\u0437 9 \u0447\u0430\u0441\u043e\u0432 41 \u043c\u0438\u043d\u0443\u0442\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 advisory \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f. \u0417\u0430 3 \u0434\u043d\u044f (11\u201314 \u0430\u043f\u0440\u0435\u043b\u044f) \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 662 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 11 IP \u0438\u0437 10 \u0441\u0442\u0440\u0430\u043d. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 NKAbuse \u2014 Go-\u0431\u044d\u043a\u0434\u043e\u0440 \u0441 C2 \u0447\u0435\u0440\u0435\u0437 NKN blockchain, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 Kubernetes-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 kagent \u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 typosquatted Hugging Face Space vsccode-modetx.\n\n\u267e\ufe0f\u0417\u0430\u0449\u0438\u0442\u0430\u267e\ufe0f\n\n\u25aa\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Marimo \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.23.0 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435\n\u25aa\ufe0f\u041d\u0435 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0439\u0442\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Marimo \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f VPN, \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438\u043b\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\n\u25aa\ufe0f\u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0439\u0442\u0435 Marimo \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 non-root user\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "url": "https://t.me/poxek/6047"}, {"timestamp": "2026-04-23T18:00:02Z", "date_only": false, "value": "2026-04-23T18:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-39987", "field": "timestamps.recorded_at", "uuid": "f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-23T18:00:03.141Z", "date_only": false, "value": "2026-04-23T18:00:03.141086Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1725a539-cdc7-4357-9251-18c4a138f5f4", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f913a5b3-647b-46ea-8ec0-dd04c0efe51e"}, {"timestamp": "2026-04-23T18:00:03.144Z", "date_only": false, "value": "2026-04-23T18:00:03.144663Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/030c6599-9b67-4757-b86c-13364df1fb4e", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "76654ae4-9197-4ec7-9efb-7ae0d18e6a2a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/030c6599-9b67-4757-b86c-13364df1fb4e"}, {"timestamp": "2026-04-23T18:33:55.910Z", "date_only": false, "value": "2026-04-23T18:33:55.910340Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6325871", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "b8b15bcd-48e6-4512-aea6-679396b0b01d", "url": "https://feedsin.space/feed/CISAKevBot/items/6325871"}, {"timestamp": "2026-04-23T20:01:22.500Z", "date_only": false, "value": "2026-04-23T20:01:22.500490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk6sifuz6a2h", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "c8f02d21-0ed7-466a-84b9-fe07bfd46335", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk6sifuz6a2h"}, {"timestamp": "2026-04-24T03:55:20.777Z", "date_only": false, "value": "2026-04-24T03:55:20.777Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-39987", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-24T03:55:20.777Z", "date_only": false, "value": "2026-04-24T03:55:20.777Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39987", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-24T04:17:05.839Z", "date_only": false, "value": "2026-04-24T04:17:05.839320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mk7o6tcynj2p", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "710dc11e-b2d6-4390-af67-89fa40327df1", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mk7o6tcynj2p"}, {"timestamp": "2026-04-24T21:02:39.943Z", "date_only": false, "value": "2026-04-24T21:02:39.943524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeoy6zw2g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8fbba0c8-ad91-4e92-bb2c-2be6e3306f4a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeoy6zw2g"}, {"timestamp": "2026-04-25T17:00:04Z", "date_only": false, "value": "2026-04-25T17:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/81648", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "88656cfb-66d4-478b-9bc3-6fe1035931b6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h3raklez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-25 16:53:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMarimo Pre-Auth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/81648"}, {"timestamp": "2026-04-26T03:00:05Z", "date_only": false, "value": "2026-04-26T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2d5e3ccd-e878-49b6-8ac6-c51bcaa7821f"}, {"timestamp": "2026-04-27T16:30:09Z", "date_only": false, "value": "2026-04-27T16:30:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2679-6MX9-H9XC", "record": "GHSA-2679-6MX9-H9XC", "field": "modified"}, {"timestamp": "2026-04-27T22:11:46.199Z", "date_only": false, "value": "2026-04-27T22:11:46.199524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkj3najads23", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "15622cb9-b0a0-4d92-bf8d-fc5bb8137f31", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkj3najads23"}, {"timestamp": "2026-04-28T12:02:49.289Z", "date_only": false, "value": "2026-04-28T12:02:49.289033Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mkkk3by56p2k", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ea2380fd-dc11-4744-a186-79533553e87e", "url": "https://bsky.app/profile/solomonneas.dev/post/3mkkk3by56p2k"}, {"timestamp": "2026-05-04T11:00:04Z", "date_only": false, "value": "2026-05-04T11:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/82751", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "29fe0202-15cc-4720-8615-9da1068c804b", "url": "https://t.me/GithubRedTeam/82751"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": true, "value": "2026-05-07", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-39987", "field": "evidence.0.details.due_date", "uuid": "f913a5b3-647b-46ea-8ec0-dd04c0efe51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-16T02:00:04Z", "date_only": false, "value": "2026-05-16T02:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/84393", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1b5d66c8-52aa-44b3-83f3-a7d16215f982", "url": "https://t.me/GithubRedTeam/84393"}, {"timestamp": "2026-05-17T02:07:47Z", "date_only": false, "value": "2026-05-17T02:07:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qFnncewX_FdOxDivGoEqJX19AvA6N2dSwzORt9UZIQWFUQU", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "471db963-69b7-4eac-b779-17af13ebfaa2"}, {"timestamp": "2026-05-18T12:10:51.970Z", "date_only": false, "value": "2026-05-18T12:10:51.970354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mm4tu3s5o22t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6231a775-98b8-4285-a64b-64ef26fddd46", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mm4tu3s5o22t"}, {"timestamp": "2026-05-24T18:01:08Z", "date_only": false, "value": "2026-05-24T18:01:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/85729", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f18a1fa6-5eff-4185-8802-3635755766a1", "url": "https://t.me/GithubRedTeam/85729"}, {"timestamp": "2026-05-24T21:00:04Z", "date_only": false, "value": "2026-05-24T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ob2oA_mupoVDMqE6Q_QCizAK8aYtg6z11DPx_SkAfocJmb0", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9de36cf0-c2c9-4123-afec-88cfbee82d7b"}, {"timestamp": "2026-05-29T12:39:56Z", "date_only": false, "value": "2026-05-29T12:39:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.html", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "74d6d473-5ca9-4a85-b778-4a5c46038219", "url": "https://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.html"}, {"timestamp": "2026-05-29T14:53:34Z", "date_only": false, "value": "2026-05-29T14:53:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/9113", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "21c7e8dd-2eee-4793-b39c-423ebcbab187", "content": "\u26a0\ufe0f Attackers used an LLM agent for post-exploitation after breaching a public Marimo notebook via CVE-2026-39987, a pre-auth RCE flaw affecting versions \u22640.20.4.\n\nThe intrusion stole cloud credentials, retrieved an SSH key from AWS Secrets Manager, and exfiltrated a PostgreSQL database via eight SSH sessions in under two minutes.\n\nFull report: https://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.html", "url": "https://t.me/thehackernews/9113"}, {"timestamp": "2026-05-29T16:09:34Z", "date_only": false, "value": "2026-05-29T16:09:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/251030", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "37258f82-61b6-4ff7-a76d-ed22471d64bb", "url": "https://t.me/ctinow/251030"}, {"timestamp": "2026-05-29T16:13:21.633Z", "date_only": false, "value": "2026-05-29T16:13:21.633198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mmywjpd4vqd2", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "caef5d42-e755-4eaa-a8e7-b2aacd06ccf2", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mmywjpd4vqd2"}, {"timestamp": "2026-05-29T16:28:14.263Z", "date_only": false, "value": "2026-05-29T16:28:14.263765Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmyxegnly52g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2c8d3135-b7ac-479c-80e2-4454e58d6fa5", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmyxegnly52g"}, {"timestamp": "2026-05-29T16:33:24.125Z", "date_only": false, "value": "2026-05-29T16:33:24.125349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mmyxnnxlv722", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "c45e8187-01b3-4f27-b147-4c7b7c222a20", "url": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mmyxnnxlv722"}, {"timestamp": "2026-05-29T16:47:37.994Z", "date_only": false, "value": "2026-05-29T16:47:37.994221Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mmyyh3btmz2n", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5b36093a-ea61-4b38-8bc3-19be2fb7e643", "url": "https://bsky.app/profile/it4intserver.bsky.social/post/3mmyyh3btmz2n"}, {"timestamp": "2026-05-29T17:03:37.788Z", "date_only": false, "value": "2026-05-29T17:03:37.788492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmyzdopiznp2", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "405273e2-b228-4884-acb8-f73627366b69", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmyzdopiznp2"}, {"timestamp": "2026-05-29T17:14:15.682Z", "date_only": false, "value": "2026-05-29T17:14:15.682083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lumetanews.bsky.social/post/3mmyzwqgjj22p", "record": "cve-2026-39987", "field": "creation_timestamp", "uuid": "f0ed531c-993d-438e-8df6-e522da50278f", "url": "https://bsky.app/profile/lumetanews.bsky.social/post/3mmyzwqgjj22p"}, {"timestamp": "2026-05-29T18:04:35.285Z", "date_only": false, "value": "2026-05-29T18:04:35.285581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmz4qq6gvn2a", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "749f07d7-d2b5-4b80-80eb-9c76afa024d9", "url": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmz4qq6gvn2a"}, {"timestamp": "2026-05-29T18:12:18Z", "date_only": false, "value": "2026-05-29T18:12:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/89532", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "b3657a3c-ae33-40d8-b88f-338745c0fceb", "url": "https://t.me/cibsecurity/89532"}, {"timestamp": "2026-05-29T20:03:01Z", "date_only": false, "value": "2026-05-29T20:03:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/10712", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9a7b03a7-82ee-4989-9a96-357514f24f62", "url": "https://t.me/TengkorakCyberCrewzz/10712"}, {"timestamp": "2026-05-29T21:24:58Z", "date_only": false, "value": "2026-05-29T21:24:58.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Kk-m2_khIa60Wvwo8g3pOLHS6GDv7-l9qnmCdN4oCRRdTA", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2017e6bb-5e48-46df-a022-27c2b71bc4a1"}, {"timestamp": "2026-05-30T02:30:18.241Z", "date_only": false, "value": "2026-05-30T02:30:18.241130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmzyyyywj42g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1749e040-483b-41ac-8be0-1ca3ddb0c695", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mmzyyyywj42g"}, {"timestamp": "2026-05-30T03:01:07.039Z", "date_only": false, "value": "2026-05-30T03:01:07.039946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mn22q47ezp2a", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "133a0373-aaed-487d-b211-f784234abc59", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mn22q47ezp2a"}, {"timestamp": "2026-05-30T03:45:26.639Z", "date_only": false, "value": "2026-05-30T03:45:26.639799Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mn257cocvc2x", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "72432a84-3beb-4e1c-bde7-16ebb58f889f", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mn257cocvc2x"}, {"timestamp": "2026-05-30T15:00:07Z", "date_only": false, "value": "2026-05-30T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/J8DlVyKG2Ha8_8-DPAHAkyXqdyfexf_y2s10iFJfB3MNT4g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "123ab30d-4cfa-4f47-9478-21f11cd05aeb"}, {"timestamp": "2026-05-30T16:35:12.795Z", "date_only": false, "value": "2026-05-30T16:35:12.795382Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mn3i7t3fdk25", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f2663482-b8cd-422e-b527-2a3b6a5cded3", "url": "https://bsky.app/profile/ninjaowl.ai/post/3mn3i7t3fdk25"}, {"timestamp": "2026-05-30T23:27:02.393Z", "date_only": false, "value": "2026-05-30T23:27:02.393101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mn47aa4gx22g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "aef6f5f2-5b11-4661-904f-cd5a733edb9a", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mn47aa4gx22g"}, {"timestamp": "2026-05-31T00:40:16.251Z", "date_only": false, "value": "2026-05-31T00:40:16.251295Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mn4dd6qbxs2k", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d520587b-90d4-4380-828e-854f6cd7a805", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mn4dd6qbxs2k"}, {"timestamp": "2026-05-31T02:30:48.180Z", "date_only": false, "value": "2026-05-31T02:30:48.180899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mn4jisrb4f2i", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "065e3764-bdd4-4a21-b80a-73703ede0db8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mn4jisrb4f2i"}, {"timestamp": "2026-05-31T03:29:59.263Z", "date_only": false, "value": "2026-05-31T03:29:59.263644Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mn4msnddw72h", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6c0643b6-7349-49c2-9ab7-f01c89bd9002", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mn4msnddw72h"}, {"timestamp": "2026-05-31T08:01:12.803Z", "date_only": false, "value": "2026-05-31T08:01:12.803701Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/116668135516466708", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "df01ccd4-48d1-4863-9d63-957b8a1dc9f1", "url": "https://infosec.exchange/users/tomcat/statuses/116668135516466708"}, {"timestamp": "2026-06-01T02:27:16.202Z", "date_only": false, "value": "2026-06-01T02:27:16.202643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mwyr.es/post/3mn6zrgdceq2x", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "7ad8657d-baa2-4b40-800c-a176add0188a", "url": "https://bsky.app/profile/mwyr.es/post/3mn6zrgdceq2x"}, {"timestamp": "2026-06-01T06:44:56.421Z", "date_only": false, "value": "2026-06-01T06:44:56.421678Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mn7i63i47k2k", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "668714f0-0108-465e-9553-ac356ed8969d", "url": "https://bsky.app/profile/reconbee.bsky.social/post/3mn7i63i47k2k"}, {"timestamp": "2026-06-01T13:23:39Z", "date_only": false, "value": "2026-06-01T13:23:39+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-39987", "field": "timestamps.asserted_at", "uuid": "6ad76ae1-b2e4-4544-902b-d98e43641092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:39Z", "date_only": false, "value": "2026-06-01T13:23:39+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-39987", "field": "timestamps.first_seen_at", "uuid": "6ad76ae1-b2e4-4544-902b-d98e43641092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:39Z", "date_only": false, "value": "2026-06-01T13:23:39+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-39987", "field": "status.status_updated_at", "uuid": "6ad76ae1-b2e4-4544-902b-d98e43641092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:39.702Z", "date_only": false, "value": "2026-06-01T13:23:39.702Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-39987", "field": "evidence.0.details.added_date", "uuid": "6ad76ae1-b2e4-4544-902b-d98e43641092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T16:14:39.064Z", "date_only": false, "value": "2026-06-04T16:14:39.064408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnhzfo6tsr2e", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0bffe034-6838-414e-a968-71977667c88b", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnhzfo6tsr2e"}, {"timestamp": "2026-06-08T06:03:36.227Z", "date_only": false, "value": "2026-06-08T06:03:36.227462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mnqz4prndu2x", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "824889c9-10fa-49ed-bff2-0b92fd7c2071", "url": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mnqz4prndu2x"}, {"timestamp": "2026-06-11T21:12:07.020Z", "date_only": false, "value": "2026-06-11T21:12:07.020519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mo25bvjog62m", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9b44c696-c47c-4704-8c34-7aaacca63883", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mo25bvjog62m"}, {"timestamp": "2026-06-15T11:24:53.343Z", "date_only": false, "value": "2026-06-15T11:24:53.343602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmp6ss2o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5c969a50-bbd2-4fcf-91e4-19e1771cdbb1", "url": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmp6ss2o"}, {"timestamp": "2026-06-15T11:24:54.067Z", "date_only": false, "value": "2026-06-15T11:24:54.067890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmplj22o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a656fde0-11e6-493f-8c72-0365c8e20b3f", "url": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmplj22o"}, {"timestamp": "2026-06-15T11:24:56.568Z", "date_only": false, "value": "2026-06-15T11:24:56.568514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpnhk2o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ad2a6ea1-6d8e-49a0-b1ee-88691b0e2e86", "url": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpnhk2o"}, {"timestamp": "2026-06-15T11:24:57.156Z", "date_only": false, "value": "2026-06-15T11:24:57.156557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpogs2o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6305930c-af6d-4540-883e-b39d3f81232a", "url": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpogs2o"}, {"timestamp": "2026-06-15T11:24:57.686Z", "date_only": false, "value": "2026-06-15T11:24:57.686380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmppg22o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "377a4e18-1f1e-40d8-b495-6abca8b0b464", "url": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmppg22o"}, {"timestamp": "2026-06-15T11:24:58.214Z", "date_only": false, "value": "2026-06-15T11:24:58.214687Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmprek2o", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ca8e3e4e-c578-4c86-8405-ac7c98893a61", "url": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmprek2o"}, {"timestamp": "2026-06-15T17:02:31Z", "date_only": false, "value": "2026-06-15T17:02:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "b07422a5-6959-4e6b-b3fe-c998babbc18b"}, {"timestamp": "2026-06-16T02:31:16.680Z", "date_only": false, "value": "2026-06-16T02:31:16.680831Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moeqyf377y2r", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "832ed5fe-97bd-4562-a190-004597a0818a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3moeqyf377y2r"}, {"timestamp": "2026-06-17T10:42:51.460Z", "date_only": false, "value": "2026-06-17T10:42:51.460", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39987", "record": "FKIE_CVE-2026-39987", "field": "lastModified"}, {"timestamp": "2026-06-18T02:31:23.422Z", "date_only": false, "value": "2026-06-18T02:31:23.422090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "040b7757-9c90-4e25-b8d9-7e324271b4ce", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-39987", "field": "timestamps.recorded_at", "uuid": "6ad76ae1-b2e4-4544-902b-d98e43641092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:05.895Z", "date_only": false, "value": "2026-06-19T12:42:05.895825Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6ad76ae1-b2e4-4544-902b-d98e43641092", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "62b8ff07-b812-4b37-8f2d-d842b837b06f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6ad76ae1-b2e4-4544-902b-d98e43641092"}, {"timestamp": "2026-06-19T12:45:12.912Z", "date_only": false, "value": "2026-06-19T12:45:12.912113Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6071b494-1bc1-4f4b-9970-f8301d6086e7", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "31a48689-35bf-49d4-bf2f-ed5c22023069", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6071b494-1bc1-4f4b-9970-f8301d6086e7"}, {"timestamp": "2026-06-23T14:03:39.201Z", "date_only": false, "value": "2026-06-23T14:03:39.201522Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/411209ae-3423-40c6-9af7-4d45b2c1e371", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d7fe7a09-1239-4816-9bb0-5eb4772e941a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/411209ae-3423-40c6-9af7-4d45b2c1e371"}, {"timestamp": "2026-06-29T11:50:47.157Z", "date_only": false, "value": "2026-06-29T11:50:47.157871Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-407", "record": "PYSEC-2026-407", "field": "published"}, {"timestamp": "2026-07-01T20:22:56.993Z", "date_only": false, "value": "2026-07-01T20:22:56.993062Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-407", "record": "PYSEC-2026-407", "field": "modified"}, {"timestamp": "2026-07-12T06:00:05.785Z", "date_only": false, "value": "2026-07-12T06:00:05.785436Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bhhub/1196", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "138f4a71-b8e7-4323-9ab0-ff749fd7ff47", "url": "https://t.me/bhhub/1196"}, {"timestamp": "2026-07-13T00:00:51.134Z", "date_only": false, "value": "2026-07-13T00:00:51.134959Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bhhub/1196", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "686268e3-7ecf-47c6-9ee0-406cccb7a921", "url": "https://t.me/bhhub/1196"}, {"timestamp": "2026-07-19T16:00:04.874Z", "date_only": false, "value": "2026-07-19T16:00:04.874636Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/21893", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6b2a9dd5-855e-48fe-a95d-19e52aecafba", "url": "https://t.me/MalaysiaHacktivistz/21893"}, {"timestamp": "2026-07-19T16:00:05.512Z", "date_only": false, "value": "2026-07-19T16:00:05.512157Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/20960", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a1659e15-d08d-4325-a59f-dbf0bd8d37a3", "url": "https://t.me/MalaysiaHacktivistz/20960"}, {"timestamp": "2026-07-19T16:00:06.057Z", "date_only": false, "value": "2026-07-19T16:00:06.057570Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/20787", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "356e7e17-f10f-4e3f-bea9-8473d4651523", "url": "https://t.me/MalaysiaHacktivistz/20787"}, {"timestamp": "2026-07-19T16:00:10.387Z", "date_only": false, "value": "2026-07-19T16:00:10.387436Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1722", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2047b933-589d-4266-a007-cfa31bddd16d", "url": "https://t.me/critical_bug/1722"}, {"timestamp": "2026-07-19T16:00:10.426Z", "date_only": false, "value": "2026-07-19T16:00:10.426687Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1723", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "e0a7ab82-2d49-46f9-8ba5-afedc4876291", "url": "https://t.me/critical_bug/1723"}, {"timestamp": "2026-07-20T00:00:07.130Z", "date_only": false, "value": "2026-07-20T00:00:07.130733Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1723", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8337cb48-39a6-4454-a9b6-352a1d1067d2", "url": "https://t.me/critical_bug/1723"}, {"timestamp": "2026-07-20T00:00:07.161Z", "date_only": false, "value": "2026-07-20T00:00:07.161711Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1722", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "cfee7e27-45c3-40ad-a9a1-c07718abfae2", "url": "https://t.me/critical_bug/1722"}, {"timestamp": "2026-07-20T00:00:21.255Z", "date_only": false, "value": "2026-07-20T00:00:21.255786Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/20787", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "e929d559-e7bf-472c-85f0-1d7038ba59ad", "url": "https://t.me/MalaysiaHacktivistz/20787"}, {"timestamp": "2026-07-20T00:00:21.776Z", "date_only": false, "value": "2026-07-20T00:00:21.776960Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/20960", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "926476e4-dfa4-4f12-8e03-a8ae31d1b14f", "url": "https://t.me/MalaysiaHacktivistz/20960"}, {"timestamp": "2026-07-20T00:00:22.434Z", "date_only": false, "value": "2026-07-20T00:00:22.434410Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/21893", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9c86fc78-294a-4ea7-b193-ea29af2171cb", "url": "https://t.me/MalaysiaHacktivistz/21893"}, {"timestamp": "2026-08-02T05:24:34.189Z", "date_only": false, "value": "2026-08-02T05:24:34.189466Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/byt3n33dl3/19eb1e71f4387d6411f8279c199e7d1a", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f39d4b3c-e568-482e-a53f-5188ebcfe1b2", "url": "https://gist.github.com/byt3n33dl3/19eb1e71f4387d6411f8279c199e7d1a"}, {"timestamp": "2026-08-02T12:04:24.858Z", "date_only": false, "value": "2026-08-02T12:04:24.858994Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96281", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ae93da95-8f61-4ea7-986b-f7dc67d86ec6", "url": "https://t.me/GithubRedTeam/96281"}, {"timestamp": "2026-08-02T16:02:14.461Z", "date_only": false, "value": "2026-08-02T16:02:14.461656Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96303", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8e2c9530-aeac-4af6-8ad1-89a3ed904e96", "url": "https://t.me/GithubRedTeam/96303"}, {"timestamp": "2026-08-02T18:00:05.811Z", "date_only": false, "value": "2026-08-02T18:00:05.811616Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SHCtA7dY1mItB2gbm66yqWXF69tJGblulI8ccELNE-1shwc", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "10562364-55db-46cb-8325-4fb9e392d2c2"}, {"timestamp": "2026-08-02T23:18:17.309Z", "date_only": false, "value": "2026-08-02T23:18:17.309533Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "7ebfd13b-ebe9-48d4-a489-949b5a1d809b"}, {"timestamp": "2026-08-03T00:26:59.101Z", "date_only": false, "value": "2026-08-03T00:26:59.101358Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5b715dd5-56f8-4509-8d2c-ec0f954e6aeb"}, {"timestamp": "2026-08-03T01:44:58.077Z", "date_only": false, "value": "2026-08-03T01:44:58.077352Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SHCtA7dY1mItB2gbm66yqWXF69tJGblulI8ccELNE-1shwc", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "769d0f13-db57-4b11-9351-3a25d31f6900"}, {"timestamp": "2026-08-03T02:01:31.701Z", "date_only": false, "value": "2026-08-03T02:01:31.701927Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96303", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1d4f3781-35e7-4444-9a6b-f83087c16a0a", "url": "https://t.me/GithubRedTeam/96303"}, {"timestamp": "2026-08-03T02:07:11.969Z", "date_only": false, "value": "2026-08-03T02:07:11.969799Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96281", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "32f53116-4b75-449d-952b-d68523a9c0b5", "url": "https://t.me/GithubRedTeam/96281"}, {"timestamp": "2026-08-03T08:00:02.829Z", "date_only": false, "value": "2026-08-03T08:00:02.829358Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96391", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "474faa68-b2f8-4608-9a34-3c7d09b247cb", "url": "https://t.me/GithubRedTeam/96391"}, {"timestamp": "2026-08-03T10:00:04.718Z", "date_only": false, "value": "2026-08-03T10:00:04.718712Z", "kind": "sighting", "label": "Seen", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "55994c23-a004-448f-bc73-0e2a12a8104f"}, {"timestamp": "2026-08-04T00:00:41.957Z", "date_only": false, "value": "2026-08-04T00:00:41.957846Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "12a706a8-c0af-4b1b-b59c-4262089b4fea"}, {"timestamp": "2026-08-04T00:00:45.283Z", "date_only": false, "value": "2026-08-04T00:00:45.283391Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96391", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "925af430-9313-47ee-b6fe-e4a22c577411", "url": "https://t.me/GithubRedTeam/96391"}, {"timestamp": "2026-08-07T09:00:03.637Z", "date_only": false, "value": "2026-08-07T09:00:03.637002Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96999", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a13ae278-c1cc-46c7-b105-169c4639c8b9", "url": "https://t.me/GithubRedTeam/96999"}, {"timestamp": "2026-08-08T00:19:25.916Z", "date_only": false, "value": "2026-08-08T00:19:25.916331Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96999", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "3769917f-cae4-450c-9298-bad01855ec24", "url": "https://t.me/GithubRedTeam/96999"}, {"timestamp": "2026-08-08T23:32:42.364Z", "date_only": false, "value": "2026-08-08T23:32:42.364257Z", "kind": "sighting", "label": "Seen", "source": "Telegram/C3q2vOTdkXA6iF-h_zMGQrZVnDCfVSala-72eNVn5iLBkyI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "ebc7db27-7a1d-4cc2-8ef0-2d78d18f541b"}, {"timestamp": "2026-08-09T00:05:53.564Z", "date_only": false, "value": "2026-08-09T00:05:53.564385Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C3q2vOTdkXA6iF-h_zMGQrZVnDCfVSala-72eNVn5iLBkyI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "77d6c12a-fc31-483b-aa02-3738aa12039c"}, {"timestamp": "2026-08-10T04:00:03.420Z", "date_only": false, "value": "2026-08-10T04:00:03.420037Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/97370", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9b47a323-d74e-4229-931e-d514e0a71d02", "url": "https://t.me/GithubRedTeam/97370"}, {"timestamp": "2026-08-11T00:00:08.687Z", "date_only": false, "value": "2026-08-11T00:00:08.687354Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97370", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "cd16e9cf-07b9-46df-84c5-dd486e9b9324", "url": "https://t.me/GithubRedTeam/97370"}, {"timestamp": "2026-08-12T08:00:06.147Z", "date_only": false, "value": "2026-08-12T08:00:06.147063Z", "kind": "sighting", "label": "Seen", "source": "Telegram/D4W16OC9HE0yNzEjroADs3fCEIh4w_lQ7jHL3IEL801HfzI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "3a1519f7-f45a-4466-8fbb-6e433f6fb452"}, {"timestamp": "2026-08-12T21:00:03.412Z", "date_only": false, "value": "2026-08-12T21:00:03.412988Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97777", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1fed6a3e-32d9-4c51-92bf-eb17ef21f337", "url": "https://t.me/GithubRedTeam/97777"}, {"timestamp": "2026-08-13T00:00:11.041Z", "date_only": false, "value": "2026-08-13T00:00:11.041637Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/D4W16OC9HE0yNzEjroADs3fCEIh4w_lQ7jHL3IEL801HfzI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1014a1f4-72c1-42ff-8e4d-d7bbbf5d507b"}, {"timestamp": "2026-08-15T08:00:06.703Z", "date_only": false, "value": "2026-08-15T08:00:06.703484Z", "kind": "sighting", "label": "Seen", "source": "Telegram/LmlXMJPccu58VvGU5aOjYbYbwZMsUyLpZXlM2w2Wis0P_HI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "8e4493ba-0301-4bd9-8cfd-6507d7cc9207"}, {"timestamp": "2026-08-16T00:00:22.865Z", "date_only": false, "value": "2026-08-16T00:00:22.865888Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LmlXMJPccu58VvGU5aOjYbYbwZMsUyLpZXlM2w2Wis0P_HI", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d781477f-49fb-4ac4-9ab7-465c601c959d"}, {"timestamp": "2026-08-16T16:15:11.679Z", "date_only": false, "value": "2026-08-16T16:15:11.679641Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mt7lhtwby72t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "388b114c-bfe5-4da8-88e6-4714df1cf143", "url": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mt7lhtwby72t"}, {"timestamp": "2026-08-18T19:00:03.918Z", "date_only": false, "value": "2026-08-18T19:00:03.918155Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42142", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "82f29933-cf47-45eb-b74c-6bd17637c546", "url": "https://t.me/VulnerabilityNews/42142"}, {"timestamp": "2026-08-18T19:00:05.333Z", "date_only": false, "value": "2026-08-18T19:00:05.333307Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/41847", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "26902e61-fc1f-4574-b6f7-aa1e9040960e", "url": "https://t.me/VulnerabilityNews/41847"}, {"timestamp": "2026-08-19T00:00:08.547Z", "date_only": false, "value": "2026-08-19T00:00:08.547722Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/41847", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "6f6b9388-a176-4c43-9ba5-b717a24e3e4a", "url": "https://t.me/VulnerabilityNews/41847"}, {"timestamp": "2026-08-19T00:00:10.091Z", "date_only": false, "value": "2026-08-19T00:00:10.091191Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42142", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a2a37e13-e30a-4f7d-bdf7-1960cfb252b1", "url": "https://t.me/VulnerabilityNews/42142"}, {"timestamp": "2026-08-22T19:00:05.007Z", "date_only": false, "value": "2026-08-22T19:00:05.007575Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98972", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "386e618f-8465-4755-b506-b994f34857a8", "url": "https://t.me/GithubRedTeam/98972"}, {"timestamp": "2026-08-22T19:00:05.962Z", "date_only": false, "value": "2026-08-22T19:00:05.962123Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98816", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f4bf4e6c-b10f-4b83-ad70-b9f28b3783fd", "url": "https://t.me/GithubRedTeam/98816"}, {"timestamp": "2026-08-23T00:00:30.360Z", "date_only": false, "value": "2026-08-23T00:00:30.360283Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98816", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "a8c704af-e70a-46a2-9657-e3c70ead3136", "url": "https://t.me/GithubRedTeam/98816"}, {"timestamp": "2026-08-23T00:00:31.376Z", "date_only": false, "value": "2026-08-23T00:00:31.376482Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98972", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "229697a1-9ae4-46bd-8b87-a54e05775e17", "url": "https://t.me/GithubRedTeam/98972"}, {"timestamp": "2026-08-27T14:00:12.001Z", "date_only": false, "value": "2026-08-27T14:00:12.001790Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BMLRzi6GxNLh9Y-kste7qnOEyxUjpKwyZDAyz25BJw9R9vo", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "060fa552-e675-4fe0-ac80-3fcd64881810"}, {"timestamp": "2026-08-29T20:00:13.812Z", "date_only": false, "value": "2026-08-29T20:00:13.812811Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1767", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "74205f2c-8f0c-4ecf-9c11-a22cb91306d0", "url": "https://t.me/CyberDispatch/1767"}, {"timestamp": "2026-08-29T20:00:17.966Z", "date_only": false, "value": "2026-08-29T20:00:17.966475Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1253", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "57113ef6-cd65-4505-87ea-5909f483c39f", "url": "https://t.me/CyberDispatch/1253"}, {"timestamp": "2026-08-31T00:00:26.488Z", "date_only": false, "value": "2026-08-31T00:00:26.488351Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/1253", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5a57cd50-1627-44b4-9f53-5ef0c3ea4efb", "url": "https://t.me/CyberDispatch/1253"}, {"timestamp": "2026-09-02T03:00:06.856Z", "date_only": false, "value": "2026-09-02T03:00:06.856318Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100725", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "29e2bbe6-655a-42c2-aef3-b504410cb8c5", "url": "https://t.me/GithubRedTeam/100725"}, {"timestamp": "2026-09-06T14:00:04.870Z", "date_only": false, "value": "2026-09-06T14:00:04.870854Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/192737", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "49caf6cd-c95e-411d-bf99-eb81a98ad6e0", "url": "https://t.me/hacking_Attack/192737"}, {"timestamp": "2026-09-08T10:00:06.190Z", "date_only": false, "value": "2026-09-08T10:00:06.190600Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AcUEPe8LX7ijLf5mjlUTXq8NmBuGi1YXQWjg2aEhc601QhY", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "2a05b593-d15a-4851-a26e-182dfb81a9a5"}, {"timestamp": "2026-09-09T00:00:32.862Z", "date_only": false, "value": "2026-09-09T00:00:32.862074Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AcUEPe8LX7ijLf5mjlUTXq8NmBuGi1YXQWjg2aEhc601QhY", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "33e7b07d-3857-4611-9f2f-c9261e16d016"}, {"timestamp": "2026-09-09T04:00:31.448Z", "date_only": false, "value": "2026-09-09T04:00:31.448265Z", "kind": "sighting", "label": "Seen", "source": "Telegram/H9pq_-_u-I5XxEZfq-Ia_chOLgi5ZnpVozN0XcBs3PyYc-g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "3c388a0b-6e6f-46d3-8584-18d6beeaab36"}, {"timestamp": "2026-09-09T05:00:05.161Z", "date_only": false, "value": "2026-09-09T05:00:05.161599Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101712", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "76be2e9c-90f4-4b67-a096-2adebb027b85", "url": "https://t.me/GithubRedTeam/101712"}, {"timestamp": "2026-09-09T05:00:06.102Z", "date_only": false, "value": "2026-09-09T05:00:06.102459Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101585", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "61bce74e-30f9-4254-8b2d-26f398a23c85", "url": "https://t.me/GithubRedTeam/101585"}, {"timestamp": "2026-09-09T16:07:45.152Z", "date_only": false, "value": "2026-09-09T16:07:45.152422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv3wan55p62n", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "65f029b7-e303-4fdd-8941-2695604e9b64", "url": "https://bsky.app/profile/cyfar.ca/post/3mv3wan55p62n"}, {"timestamp": "2026-09-10T00:00:50.152Z", "date_only": false, "value": "2026-09-10T00:00:50.152253Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101585", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "e874e830-1a05-45c8-ab3a-5409daa3b14a", "url": "https://t.me/GithubRedTeam/101585"}, {"timestamp": "2026-09-10T00:00:50.932Z", "date_only": false, "value": "2026-09-10T00:00:50.932078Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101712", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "829e10d3-9f38-46be-952f-5652016f74ef", "url": "https://t.me/GithubRedTeam/101712"}, {"timestamp": "2026-09-10T00:00:53.263Z", "date_only": false, "value": "2026-09-10T00:00:53.263108Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H9pq_-_u-I5XxEZfq-Ia_chOLgi5ZnpVozN0XcBs3PyYc-g", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "4d551b6c-a9bc-438d-be0a-9aeb12543076"}, {"timestamp": "2026-09-11T21:00:03.736Z", "date_only": false, "value": "2026-09-11T21:00:03.736047Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102072", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0924c802-6bfc-436e-82e1-d950dc212863", "url": "https://t.me/GithubRedTeam/102072"}, {"timestamp": "2026-09-12T00:00:09.627Z", "date_only": false, "value": "2026-09-12T00:00:09.627983Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/193875", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "515edd7e-2672-43ae-9650-1bd785b9bdd7", "url": "https://t.me/hacking_Attack/193875"}, {"timestamp": "2026-09-12T00:00:09.682Z", "date_only": false, "value": "2026-09-12T00:00:09.682822Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/193877", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "acedb41c-54bf-4c98-99c8-749b7f5e550a", "url": "https://t.me/hacking_Attack/193877"}, {"timestamp": "2026-09-12T00:00:12.557Z", "date_only": false, "value": "2026-09-12T00:00:12.557035Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102072", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "fdd161e8-15d2-4798-9a36-06f7b1afe962", "url": "https://t.me/GithubRedTeam/102072"}, {"timestamp": "2026-09-12T00:45:26.668Z", "date_only": false, "value": "2026-09-12T00:45:26.668056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbu45xm4a2l", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "d0ceccb1-4fed-4130-afa7-b56b8a41e5b7", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbu45xm4a2l"}, {"timestamp": "2026-09-13T07:39:31.852Z", "date_only": false, "value": "2026-09-13T07:39:31.852236Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvf3pk2l2g2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "c90833ad-9d14-4d00-b603-ce904c2a02f4", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvf3pk2l2g2t"}, {"timestamp": "2026-09-13T15:00:05.474Z", "date_only": false, "value": "2026-09-13T15:00:05.474559Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5e14deb5-da6f-4fdc-ac19-0a226305e4e9"}, {"timestamp": "2026-09-13T19:26:03.810Z", "date_only": false, "value": "2026-09-13T19:26:03.810200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvgd6wjk4y24", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9bb5a064-d282-49c6-8551-5e264299eb85", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvgd6wjk4y24"}, {"timestamp": "2026-09-14T00:00:12.932Z", "date_only": false, "value": "2026-09-14T00:00:12.932809Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "36a8a15c-160f-4996-9379-d0d05cfdd102"}, {"timestamp": "2026-09-14T03:00:13.529Z", "date_only": false, "value": "2026-09-14T03:00:13.529181Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "25ca0d3e-8eef-47bd-9a28-b34b0184d68c"}, {"timestamp": "2026-09-15T00:00:22.391Z", "date_only": false, "value": "2026-09-15T00:00:22.391193Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "196fc4c6-d356-4574-90f4-48eb3083367a"}, {"timestamp": "2026-09-15T12:21:59.087Z", "date_only": false, "value": "2026-09-15T12:21:59.087781Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvkmggq2xi27", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0312cb1b-3721-4e47-a440-56eec0414a58", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mvkmggq2xi27"}, {"timestamp": "2026-09-15T12:22:32.691Z", "date_only": false, "value": "2026-09-15T12:22:32.691082Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvkmhh543u25", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "e2bf7cfe-5f42-4997-b290-fdde9d544d3a", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvkmhh543u25"}, {"timestamp": "2026-09-15T12:23:30.999Z", "date_only": false, "value": "2026-09-15T12:23:30.999775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvkmj6gqoj2z", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f2dca1e2-e572-4182-a83a-527e3079dda1", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvkmj6gqoj2z"}, {"timestamp": "2026-09-15T15:35:15.916Z", "date_only": false, "value": "2026-09-15T15:35:15.916788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mvkxa24kuz2t", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "5e0643ae-0301-42a5-aba1-b1fab371dd0d", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mvkxa24kuz2t"}, {"timestamp": "2026-09-17T13:02:42.501Z", "date_only": false, "value": "2026-09-17T13:02:42.501789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppn4ej4724", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "33faad85-6b29-43bc-a780-b95a103345e2", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppn4ej4724"}, {"timestamp": "2026-09-18T05:00:06.016Z", "date_only": false, "value": "2026-09-18T05:00:06.016474Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42750", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "0e3aa0b9-5be7-4001-b8a8-3e232e9f9a13", "url": "https://t.me/VulnerabilityNews/42750"}, {"timestamp": "2026-09-19T00:00:46.739Z", "date_only": false, "value": "2026-09-19T00:00:46.739459Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/VulnerabilityNews/42750", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "9a208151-2dcd-426e-ba88-69b14443a1bc", "url": "https://t.me/VulnerabilityNews/42750"}, {"timestamp": "2026-09-20T15:00:03.483Z", "date_only": false, "value": "2026-09-20T15:00:03.483629Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102857", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "1c2c787c-d71d-40d8-8cab-6e3a4419828e", "url": "https://t.me/GithubRedTeam/102857"}, {"timestamp": "2026-09-28T10:08:02Z", "date_only": false, "value": "2026-09-28T10:08:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103637", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "df82b365-8bba-4d8e-ab8d-affc0f43bbb6", "url": "https://t.me/GithubRedTeam/103637"}, {"timestamp": "2026-10-02T03:00:14Z", "date_only": false, "value": "2026-10-02T03:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/j-aKC2ml7EomAxhquF7REKiO_kjGtNOipYIZuG_ATMxWiqo", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "786435ae-84fb-4c63-955d-984a16abae20"}, {"timestamp": "2026-10-05T16:00:06Z", "date_only": false, "value": "2026-10-05T16:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104378", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "4d7791c0-5698-4aa8-b9a3-5b3e676829c9", "url": "https://t.me/GithubRedTeam/104378"}, {"timestamp": "2026-10-05T16:00:06Z", "date_only": false, "value": "2026-10-05T16:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104378", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "bdc0fd85-bc9a-4a9b-aed5-957425841566", "url": "https://t.me/GithubRedTeam/104378"}, {"timestamp": "2026-10-06T03:00:06Z", "date_only": false, "value": "2026-10-06T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HHFBOwnUkdC9FFpBPQ9GSZWa-aKdXtVNya_rfbWKKoOFTR0", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "03e90f6c-0f8d-40b2-b791-c7a19669f1e1"}, {"timestamp": "2026-10-06T03:00:06Z", "date_only": false, "value": "2026-10-06T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/HHFBOwnUkdC9FFpBPQ9GSZWa-aKdXtVNya_rfbWKKoOFTR0", "record": "CVE-2026-39987", "field": "creation_timestamp", "uuid": "f3ef4469-aebc-4a05-8187-757c4d701576"}]}