[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuSyEK-WkAUj2cqxFmOczSadkBGpx9YmKykBhSxiBa0s":3},{"article":4,"iocs":39,"watch_terms":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"e5179e55-1526-467f-865c-ba2c4e27be99","‼️ CVE-2026-28286: ZimaOS Privilege Escalation Vulnerability\n\nPoC: https:\u002F\u002Ft.co\u002F9p04Qud3BT\n\nA pri...","cve-2026-28286-zimaos-privilege-escalation-vulnerability-poc-https-t-co-9p04qud3","‼️ CVE-2026-28286: ZimaOS Privilege Escalation Vulnerability\n\nPoC: https:\u002F\u002Ft.co\u002F9p04Qud3BT\n\nA privilege escalation vulnerability discovered in Zimaspace's ZimaOS. It enables attackers to circumvent API-level restrictions and gain unauthorized write access to sensitive system https:\u002F\u002Ft.co\u002FYXzT3ukgb1","A privilege escalation vulnerability (CVE-2026-28286) has been discovered in Zimaspace's ZimaOS that allows attackers to bypass API-level restrictions and gain unauthorized write access to sensitive system resources. A proof-of-concept exploit has been publicly disclosed, potentially increasing exploitation risk across deployed ZimaOS instances.","CVE-2026-28286 privilege escalation in ZimaOS allows API restriction bypass and unauthorized write access.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2041611758402728416","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHFVDEaRXEAATTFt.png","2026-04-07T20:19:09+00:00","2026-04-07T21:00:12.377428+00:00",8,[18,21],{"name":19,"type":20},"Zimaspace","vendor",{"name":22,"type":23},"ZimaOS","product","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":24,"icon":11,"name":26,"slug":27},"Vulnerabilities","vulnerabilities",[29,34],{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[40,44],{"type":41,"value":42,"context":43},"cve","CVE-2026-28286","Privilege escalation vulnerability in ZimaOS",{"type":45,"value":46,"context":47},"url","https:\u002F\u002Ft.co\u002F9p04Qud3BT","Public proof-of-concept exploit for CVE-2026-28286",[19,22]]