{"vulnerability": "CVE-2025-68670", "sightings": [{"uuid": "fec3cd7f-5fb2-4104-ae50-921b5ba0a025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7ohcsix27", "content": "", "creation_timestamp": "2026-01-27T16:49:41.063504Z"}, {"uuid": "202b0b8b-6a81-4160-be1e-67879eade46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me5hbxnpzc2g", "content": "", "creation_timestamp": "2026-02-05T22:37:08.100840Z"}, {"uuid": "a729c84c-0de0-4b25-83d9-16ffe02d8bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mee67upruk2u", "content": "", "creation_timestamp": "2026-02-08T14:43:32.862620Z"}, {"uuid": "662e9a38-c99b-403b-95ad-54b28d145abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mee7bkfcy22u", "content": "", "creation_timestamp": "2026-02-08T15:02:22.728051Z"}, {"uuid": "885ae8e6-44f5-4a5c-a61a-91fd2ee422ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3megg6llv5k23", "content": "", "creation_timestamp": "2026-02-09T12:11:18.562463Z"}, {"uuid": "b4adc2ab-59b0-481a-a921-5509e99a019b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mldd464m5gh2", "content": "", "creation_timestamp": "2026-05-08T08:36:45.289948Z"}, {"uuid": "339d3a62-2d90-441d-a1aa-11ca8e163e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2025-68670", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-2a45b4b2-24f4ef6243449139", "content": "", "creation_timestamp": "2026-05-08T08:33:58.034297Z"}, {"uuid": "30bc6342-42b3-4adb-a043-d8c7f6a2a962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://t.me/ctinow/249943", "content": "", "creation_timestamp": "2026-05-08T08:04:27.000000Z"}, {"uuid": "205dd660-073c-48fc-bd87-d5eca8dec2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/Linux-Maintainers.activitypub.awakari.com.ap.brid.gy/post/3mldg7xzprqn2", "content": "", "creation_timestamp": "2026-05-08T09:30:36.764983Z"}, {"uuid": "57e14161-db2a-4f1e-a902-a36af8819e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mldqiwakf72p", "content": "", "creation_timestamp": "2026-05-08T12:34:22.326151Z"}, {"uuid": "b2958f72-d743-498a-852c-016597f9bf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2025-68670", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116539517367775169", "content": "", "creation_timestamp": "2026-05-08T14:51:53.951805Z"}, {"uuid": "78e8998e-12ad-4533-9b85-27c497d9f744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mlfxpmpiu32j", "content": "", "creation_timestamp": "2026-05-09T09:48:43.138343Z"}, {"uuid": "300178ab-fa29-40ce-9bce-d7f4fcdc784e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mmdhalywtc2s", "content": "", "creation_timestamp": "2026-05-21T03:13:51.278423Z"}, {"uuid": "3d6365ee-2dbb-4c49-ad7c-e6e6a13291ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "published-proof-of-concept", "source": "https://t.me/kasperskylab_ru/7441", "content": "", "creation_timestamp": "2026-09-09T03:00:07.553887Z"}, {"uuid": "a21e79f8-9473-452f-9cb0-d78b314b655e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "published-proof-of-concept", "source": "https://t.me/kasperskylab_ru/7439", "content": "", "creation_timestamp": "2026-09-09T03:00:07.245336Z"}, {"uuid": "e4a43b68-b8a2-4d7e-b8ea-87bf7fcca453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://t.me/kasperskylab_ru/7439", "content": "", "creation_timestamp": "2026-09-01T17:00:12.585366Z"}, {"uuid": "118fff66-53d9-451f-b4a9-6b6ad720ef46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://t.me/kasperskylab_ru/7441", "content": "", "creation_timestamp": "2026-09-01T17:00:12.276226Z"}, {"uuid": "38b2b615-17ed-47b4-bd20-585b528cb289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://t.me/CyberDispatch/1575", "content": "", "creation_timestamp": "2026-08-29T20:00:15.748035Z"}, {"uuid": "69a25fc0-f495-4884-bb25-1e56b8055b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "https://t.me/CyberSachok/3189", "content": "\ud83d\udd25 Kaspersky \u043d\u0430\u0448\u043b\u0430 pre-auth RCE \u0432 xrdp \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\n\nCVE-2025-68670 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0443\u0434\u0438\u0442\u043e\u043c xrdp, \u0430 \u043f\u043e\u0431\u043e\u0447\u043d\u043e \u2014 \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 Kaspersky USB Redirector. Pre-auth RCE \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 xrdp \u0432 \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nxrdp \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f RDP-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u2014 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 Microsoft RDP \u0434\u043b\u044f *nix-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439. \u0412 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u044d\u0442\u043e jump-\u0445\u043e\u0441\u0442\u044b \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u043d\u0430 Linux. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Securelist, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0451\u0442\u0430.\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e: `xrdp --version` \u0438\u043b\u0438 `dpkg -l | grep xrdp` \u043d\u0430 Debian/Ubuntu. \u0415\u0441\u043b\u0438 xrdp \u0441\u043b\u0443\u0448\u0430\u0435\u0442 \u043d\u0430 3389 \u0438\u0437\u0432\u043d\u0435 \u2014 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e RCE \u043d\u0430\u0448\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0441\u043e\u0432\u0441\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u042d\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u2014 \u043a\u043e\u043f\u0430\u044e\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u043e, \u0430 \u043d\u0435 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#CVE202568670 #xrdp #RCE #Kaspersky", "creation_timestamp": "2026-05-10T15:58:25.000000Z"}, {"uuid": "0b26d04e-77f8-4a6a-8e31-c5bf2d9d0b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-68670", "type": "seen", "source": "MISP/f8adec39-0b02-47ba-9542-6b9dafe336bd", "content": "", "creation_timestamp": "2026-10-13T10:19:23.000000Z"}]}