DKDKCISSP
Vulnerabilities

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

Arrests has a disclosed vulnerability (CVE-2026-35273).

DKCISSP News DeskKrebsOnSecurity7 Oct 2026, 7:24 pm1 min read
DKCISSP REPORT

Arrests has a disclosed vulnerability (CVE-2026-35273).

This requires local or already-authenticated access to reach.

Anyone running Arrests of the Pokemon character Umbreon can be seen in the bottom left is exposed, specifically wherever Arrests is actually deployed rather than just licensed or installed somewhere unused.

What an attacker actually gains: the advisory describes a real security impact once the vulnerable path is reached.

This is tracked as CVE-2026-35273 -- use that identifier when checking vendor guidance or scanner results.

The affected versions are of the Pokemon character Umbreon can be seen in the bottom left, so that's the range to check against your own deployment.

Confirm whether Arrests of the Pokemon character Umbreon can be seen in the bottom left is present anywhere in your asset and software inventory.

No exploitation has been reported yet, but that status can change, so keep watching vendor guidance while you remediate.

What happened

Arrests has a disclosed vulnerability (CVE-2026-35273).

This requires local or already-authenticated access to reach.

Who is affected

Anyone running Arrests of the Pokemon character Umbreon can be seen in the bottom left is exposed, specifically wherever Arrests is actually deployed rather than just licensed or installed somewhere unused.

Why it matters

What an attacker actually gains: the advisory describes a real security impact once the vulnerable path is reached.

Technical details

This is tracked as CVE-2026-35273 -- use that identifier when checking vendor guidance or scanner results.

The affected versions are of the Pokemon character Umbreon can be seen in the bottom left, so that's the range to check against your own deployment.

What security teams should do

Confirm whether Arrests of the Pokemon character Umbreon can be seen in the bottom left is present anywhere in your asset and software inventory.

No exploitation has been reported yet, but that status can change, so keep watching vendor guidance while you remediate.

MORE IN VULNERABILITIES

More cybersecurity reporting

Alpine Linux rebuilds GitLab after attempted RCE attackBleepingComputer · 1 Nov 2026, 8:41 pmWeek in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerabilityHelp Net Security · 1 Nov 2026, 2:30 pmCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyThe Hacker News · 1 Nov 2026, 2:29 pmNew Android of Death exploit can remotely crash unpatched phonesBleepingComputer · 31 Oct 2026, 9:05 pm