{"metadata": {"vulnerability": "CVE-2022-39986", "count": 44, "kinds": {"milestone": 4, "sighting": 17, "kev": 11, "other": 12}}, "data": [{"timestamp": "2022-09-06T00:00:00Z", "date_only": false, "value": "2022-09-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-39986", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-01T00:00:00Z", "date_only": false, "value": "2023-08-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-39986", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-01T14:15:00Z", "date_only": false, "value": "2023-08-01T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-39986", "record": "GSD-2022-39986", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-01T14:15:09Z", "date_only": false, "value": "2023-08-01T14:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7C28-WG7R-PG6F", "record": "GHSA-7C28-WG7R-PG6F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-01T14:15:09.877Z", "date_only": false, "value": "2023-08-01T14:15:09.877", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39986", "record": "FKIE_CVE-2022-39986", "field": "published"}, {"timestamp": "2023-08-01T15:30:30Z", "date_only": false, "value": "2023-08-01T15:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7C28-WG7R-PG6F", "record": "GHSA-7C28-WG7R-PG6F", "field": "published"}, {"timestamp": "2023-08-01T18:38:44Z", "date_only": false, "value": "2023-08-01T18:38:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/67513", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "d61ae6ea-fba8-4c8a-968d-b4ad032fe324", "content": "\u203c CVE-2022-39986 \u203c\n\nA Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/67513"}, {"timestamp": "2023-08-04T13:31:46Z", "date_only": false, "value": "2023-08-04T13:31:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7C28-WG7R-PG6F", "record": "GHSA-7C28-WG7R-PG6F", "field": "modified"}, {"timestamp": "2023-08-15T00:00:00Z", "date_only": false, "value": "2023-08-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-39986", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-15T03:51:23Z", "date_only": false, "value": "2023-08-15T03:51:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/raspap_rce.rb", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "d8349a5d-30ec-4fa5-93c7-c1ff8095ce5f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/raspap_rce.rb"}, {"timestamp": "2023-08-15T17:15:00Z", "date_only": false, "value": "2023-08-15T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-39986", "record": "GSD-2022-39986", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-27T17:49:56Z", "date_only": false, "value": "2023-08-27T17:49:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3169", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "428ffa78-5665-4708-aad2-6eee74adc92a", "content": "Hackers Factory \n\nlazy way to create CVE-2023-38831 winrar file for testing\n\nhttps://github.com/BoredHackerBlog/winrar_CVE-2023-38831_lazy_poc\n\nCVE-2022-39986 PoC\n\nhttps://github.com/WhiteOwl-Pub/RaspAP-CVE-2022-39986-PoC\n\nCommunity curated list of nuclei templates for finding \"unknown\" security vulnerabilities.\n\nhttps://github.com/projectdiscovery/fuzzing-templates\n\nHVCI-loldrivers-check\nChecks to see which drivers from loldrivers.io are not blocked by the current HVCI blocklist on the system.\n\nhttps://github.com/trailofbits/HVCI-loldrivers-check\n\nGolang Secure Coding Practices guide\n\nhttps://github.com/OWASP/Go-SCP\n\n#exploit\n1. CVE-2023-36844, CVE-2023-36845,\nCVE-2023-36846, CVE-2023-36847:\nRCE in Juniper JunOS within SRX/EX Series products\n\nhttps://github.com/watchtowrlabs/juniper-rce_cve-2023-36844\n\n2. CVE-2023-41080:\nApache Tomcat FORM Authentication redirect\n\nhttps://github.com/shiomiyan/CVE-2023-41080\n\nEvolutionary encryption framework based on scalable complexity over time.\n\nhttps://github.com/jofpin/temcrypt\n\nSome of my rough notes for Docker threat detection\n\nhttps://github.com/Antonlovesdnb/DockerDetectionNotes\n\nBash Script to extract GNU/Linux forensic artifacts for digital forensic analysis and incident response.\n\nhttps://github.com/ozpingux/BasicLinuxForensicScript\n\nyou want an #investigation on user accounts,  \n\nSnoop, a #cli #python #tool, scans various sites, forums, and social networks for the presence of the username.\n\ngithub.com/snooppr/snoop\n\n#infosec #cybersecurity #hackersfactory\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3169"}, {"timestamp": "2023-10-14T14:57:38Z", "date_only": false, "value": "2023-10-14T14:57:38+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-39986", "field": "timestamps.asserted_at", "uuid": "cc21926e-2250-4c20-9f6e-6cf1e393553e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:38Z", "date_only": false, "value": "2023-10-14T14:57:38+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-39986", "field": "timestamps.first_seen_at", "uuid": "cc21926e-2250-4c20-9f6e-6cf1e393553e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:19:20.932Z", "date_only": false, "value": "2023-12-13T01:19:20.932518Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-39986", "record": "GSD-2022-39986", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T12:07:42.949Z", "date_only": false, "value": "2024-08-03T12:07:42.949Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-39986", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-21T14:31:56.932Z", "date_only": false, "value": "2024-10-21T14:31:56.932403Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-39986", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-21T14:31:56.932Z", "date_only": false, "value": "2024-10-21T14:31:56.932403Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39986", "record": "FKIE_CVE-2022-39986", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-21T14:32:09.094Z", "date_only": false, "value": "2024-10-21T14:32:09.094Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-39986", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-21T14:32:09.094Z", "date_only": false, "value": "2024-10-21T14:32:09.094Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-39986", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "b25c25d9-1000-41e5-905b-b621e1f5ccb4"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "de0fa623-9088-41e6-b98a-1f9e8d7f3332"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "afdf7b7d-e376-44bc-8679-5c547a062ffd"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "b244a785-c7db-4795-95c1-67fada1d1e68"}, {"timestamp": "2025-02-23T04:10:48Z", "date_only": false, "value": "2025-02-23T04:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "405020b1-16c6-4a83-9f31-37db9af0a781"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-39986", "field": "timestamps.asserted_at", "uuid": "8cc134a5-8832-4eda-b60e-94d3455778d1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-39986", "field": "evidence.0.details.added_date", "uuid": "8cc134a5-8832-4eda-b60e-94d3455778d1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "552a954c-aea7-4f1d-a5f4-d89c9c5d26f9"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-39986", "field": "timestamps.first_seen_at", "uuid": "8cc134a5-8832-4eda-b60e-94d3455778d1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-39986", "field": "status.status_updated_at", "uuid": "8cc134a5-8832-4eda-b60e-94d3455778d1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "6837dae0-eff7-4eb0-852e-af7471c3d8b9"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "65af1123-1aad-4759-a8a5-b828d8dc4e77"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "761637c5-f33f-4038-9305-9395d82bb3d3"}, {"timestamp": "2026-06-17T04:58:36.590Z", "date_only": false, "value": "2026-06-17T04:58:36.590", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39986", "record": "FKIE_CVE-2022-39986", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:53.321Z", "date_only": false, "value": "2026-06-19T12:45:53.321934Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e097dc2-1442-4831-999e-36082a9e6dea", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "48c72d1a-58ef-4fb2-b159-3f9ce7f2c8ca", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e097dc2-1442-4831-999e-36082a9e6dea"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-39986", "field": "timestamps.recorded_at", "uuid": "8cc134a5-8832-4eda-b60e-94d3455778d1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:18.937Z", "date_only": false, "value": "2026-06-23T14:03:18.937597Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8cc134a5-8832-4eda-b60e-94d3455778d1", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "993786a7-d9bc-4ff1-bac2-e521093c0acf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8cc134a5-8832-4eda-b60e-94d3455778d1"}, {"timestamp": "2026-06-30T09:23:06.102Z", "date_only": false, "value": "2026-06-30T09:23:06.102714Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc21926e-2250-4c20-9f6e-6cf1e393553e", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "c8abc1a3-20ba-4b52-8abe-6bac9dc7d8b6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc21926e-2250-4c20-9f6e-6cf1e393553e"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-39986", "field": "timestamps.last_seen_at", "uuid": "cc21926e-2250-4c20-9f6e-6cf1e393553e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-39986", "field": "evidence.0.details.observation_date", "uuid": "cc21926e-2250-4c20-9f6e-6cf1e393553e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-39986", "field": "status.status_updated_at", "uuid": "cc21926e-2250-4c20-9f6e-6cf1e393553e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-39986", "field": "timestamps.recorded_at", "uuid": "cc21926e-2250-4c20-9f6e-6cf1e393553e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-29T12:00:06.631Z", "date_only": false, "value": "2026-07-29T12:00:06.631975Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/19176", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "7e9e7197-17d4-4d42-b879-bf1c9dc9b061", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *RaspAP-CVE-2022-39986-PoC*\nGithub: https://github.com/WhiteOwl-Pub/RaspAP-CVE-2022-39986-PoC", "url": "https://t.me/CVEhub/19176"}, {"timestamp": "2026-07-30T00:00:25.166Z", "date_only": false, "value": "2026-07-30T00:00:25.166387Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/19176", "record": "CVE-2022-39986", "field": "creation_timestamp", "uuid": "3f4c59d7-16a1-4aa6-80f7-53c6ac100ffa", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *RaspAP-CVE-2022-39986-PoC*\nGithub: https://github.com/WhiteOwl-Pub/RaspAP-CVE-2022-39986-PoC", "url": "https://t.me/CVEhub/19176"}]}