{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "A project is",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "zz lin"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "I came across a project, \"0day Rubbish\", that states it will continuously\ndisclose 0-day vulnerabilities discovered by an AI-driven research process\n(a multi-LLM ensemble of Claude, OpenAI, DeepSeek and GLM). For each\nvulnerability the project publishes a full technical analysis together with\na working exploit script and step-by-step reproduction instructions. The\nproject\u0027s content is hosted at:\n\n    https://0day-rubbish.com/blog\n\nThe first batch already covers ten previously undisclosed vulnerabilities\nacross eight enterprise products, ranging from CVSS 7.3 to 9.8. The list\nbelow summarises them for the community\u0027s awareness.\n\nThe vulnerabilities, in descending CVSS order:\n\n1. InterSystems IRIS - FolderManager Property Injection RCE\n   - Product: InterSystems IRIS\n   - Version: 2026.1.0.234.1 (Community Edition); versions sharing the\n     FolderManager / broker surface\n   - CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n   - Class: Unauthenticated remote code execution\n   - Link: https://0day-rubbish.com/blog/intersystems-iris-foldermanager-rce\n\n2. AdRem NetCrunch - Cross-Session Hijack RCE\n   - Product: AdRem NetCrunch (Windows network monitoring)\n   - Version: 16.0.0.8397 RC; versions sharing the Node.js session-reuse path\n   - CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n   - Class: Unauthenticated remote code execution (SYSTEM)\n   - Link: https://0day-rubbish.com/blog/adrem-netcrunch-session-hijack-rce\n\n3. Altus BluePlant - Hardcoded Credentials RCE\n   - Product: Altus BluePlant (SCADA HMI / ICS software)\n   - Version: 9.1.40; versions sharing the T.InfoService.Service /\n     FileServer.RunProcess path\n   - CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n   - Class: Unauthenticated remote code execution\n   - Link: https://0day-rubbish.com/blog/altus-blueplant-hardcoded-creds-rce\n\n4. Brekeke SIP Server - Unauthenticated Nashorn JS Engine RCE\n   - Product: Brekeke SIP Server (SIP Proxy / Registrar)\n   - Version: v3.19.1.8p1 (Evaluation Edition); versions sharing the\n     ProvisioningTest bean\n   - CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n   - Class: Unauthenticated remote code execution\n   - Link: https://0day-rubbish.com/blog/brekeke-sip-server-nashorn-rce\n\n5. Brekeke SIP Server - Unauthenticated Zip Slip Webshell RCE\n   - Product: Brekeke SIP Server\n   - Version: v3.19.1.8p1 (Evaluation Edition); versions sharing the\n     ProvisioningModelImport / Zip.extractAll code\n   - CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n   - Class: Unauthenticated remote code execution (Zip Slip)\n   - Link: https://0day-rubbish.com/blog/brekeke-sip-server-zipslip-rce\n\n6. DataSunrise Suite - Email Verification Code Brute Force RCE\n   - Product: DataSunrise Suite\n   - Version: 11.2.17.12820; versions sharing the forgotten-password flow\n   - CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n   - Class: Unauthenticated remote code execution\n   - Link: https://0day-rubbish.com/blog/datasunrise-email-bruteforce-rce\n\n7. Brekeke SIP Server - Authentication Fail-Open Primitive\n   - Product: Brekeke SIP Server\n   - Version: v3.19.1.8p1 (Evaluation Edition); versions sharing the\n     ScopeBean.checkScope() framework\n   - CVSS: 9.1 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n   - Class: Authentication bypass exposing 23 unauthenticated beans\n   - Link: https://0day-rubbish.com/blog/brekeke-sip-server-auth-failopen\n\n8. Acumatica ERP - Customization Publish Webshell RCE\n   - Product: Acumatica ERP (.NET ERP platform)\n   - Version: 2026 R1 (build 26.101.0225); versions sharing the\n     CstRollbackList.WriteFile / CstFileWriter.UpdateFile publish path\n   - CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n   - Class: Authenticated remote code execution (webshell via path traversal\n     in customization publish)\n   - Link: https://0day-rubbish.com/blog/acumatica-customization-webshell-rce\n\n9. AdRem NetCrunch - Startup Script RCE\n   - Product: AdRem NetCrunch\n   - Version: 16.0.0.8397 RC; versions exposing the\n     INcStartupScript.SetScriptOptions / INetCrunchServer.RestartNCServer RPC\n   - CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n   - Class: Authenticated remote code execution (SYSTEM)\n   - Link: https://0day-rubbish.com/blog/adrem-netcrunch-startup-script-rce\n\n10. Altus iX Developer - XAML Deserialization RCE\n    - Product: Altus iX Developer (SCADA HMI engineering IDE)\n    - Version: 2.53.65422; versions sharing the ScreenXamlSerializer /\n      XamlReader.Load path\n    - CVSS: 7.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n    - Class: Local / user-interaction remote code execution via malicious\n      screen file\n    - Link: https://0day-rubbish.com/blog/altus-ix-developer-xaml-rce\n\nObservations on the project\u0027s disclosure posture\n\nThe project presents its work as defensive security research and, according\nto its own pages, operates a risk-driven disclosure model: it publishes full\nroot-cause details, exploit code and reproduction steps so that vendors can\nverify and patch and defenders can detect and mitigate. Each advisory page\nincludes a self-contained exploit script (Python or shell, pure standard\nlibrary where possible) against a default or evaluation deployment of the\naffected product; the unauthenticated entries require no credentials beyond\nproduct defaults. The project attributes discovery to its automated AI\nresearch process. I am noting this only to characterise what the project\nsays about itself; I make no claim about its disclosure ethics.\n\nReference\n\n    https://0day-rubbish.com/blog\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-07T13:20:22Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/29"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Jul/29"
        },
        {
          "url": "https://0day-rubbish.com/blog"
        },
        {
          "url": "https://0day-rubbish.com/blog/acumatica-customization-webshell-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/adrem-netcrunch-session-hijack-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/adrem-netcrunch-startup-script-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/altus-blueplant-hardcoded-creds-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/altus-ix-developer-xaml-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/brekeke-sip-server-auth-failopen"
        },
        {
          "url": "https://0day-rubbish.com/blog/brekeke-sip-server-nashorn-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/brekeke-sip-server-zipslip-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/datasunrise-email-bruteforce-rce"
        },
        {
          "url": "https://0day-rubbish.com/blog/intersystems-iris-foldermanager-rce"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Jul/29"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [],
          "vulnId": "GCVE-1988-2026-0132",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/29",
            "automated": true,
            "contentSha256": "2a689626266cca1096e02bb03c064160976b85cb4dccd4192c36451b1ea5ea1f",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Jul/29",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-07-21T09:13:14Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-07T13:20:22Z",
    "dateUpdated": "2026-09-07T13:20:22Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0132"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}