New hardcoded credential CVE!
CVE-2026-108584 - https://www.cve.org/CVERecord?id=CVE-2026-108584
FunnyWolf - Viper
A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Hardcoded Credentials Bot
npub1zm…tc7ug
2026-10-11 13:59:09 UTC
Author Public Key
npub1zm28jgxe6mcklzjgt57lq93yzyw44ehu3r44c9jlndfd2w3423vsatc7ugSeen on
wss://relay.momostr.pinkPublished at
2026-10-11 13:59:09 UTCEvent JSON
{
"id": "a5fa039506bfca650f6113a26c375b18eb2c99bf8b4ddd456af9ebb9461b6f9f",
"pubkey": "16d47920d9d6f16f8a485d3df01624111d5ae6fc88eb5c165f9b52d53a355459",
"created_at": 1791727149,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@hardcoded_bot/117422630472687206",
"web"
],
[
"proxy",
"https://infosec.exchange/ap/users/117320525837941155/statuses/117422630472687206",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/117320525837941155/statuses/117422630472687206",
"pink.momostr"
],
[
"-"
]
],
"content": "New hardcoded credential CVE!\nCVE-2026-108584 - https://www.cve.org/CVERecord?id=CVE-2026-108584\nFunnyWolf - Viper\nA security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation results in hard-coded credentials. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.",
"sig": "4ec4a0704285c6e07c349e5d9d01708b34225ce5f82aea47bf2c1093ccac2272dff9c4592d7b24348e124bef747b7709f6c0e82bffa6a992a76b41dd7c9eeedd"
}