{"metadata": {"vulnerability": "CVE-2025-2746", "count": 57, "kinds": {"milestone": 4, "sighting": 24, "kev": 17, "other": 12}, "linked_omitted": 0}, "data": [{"timestamp": "2025-03-24T16:39:11.689Z", "date_only": false, "value": "2025-03-24T16:39:11.689Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-24T18:16:04.022Z", "date_only": false, "value": "2025-03-24T18:16:04.022Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-24T19:15:51Z", "date_only": false, "value": "2025-03-24T19:15:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H4VH-MHXH-6RRR", "record": "GHSA-H4VH-MHXH-6RRR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-24T19:15:51.460Z", "date_only": false, "value": "2025-03-24T19:15:51.460", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2746", "record": "FKIE_CVE-2025-2746", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-24T19:40:26.483Z", "date_only": false, "value": "2025-03-24T19:40:26.483909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5db7mv2p", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "2f456972-70bc-42fe-b70e-54931e1dc7b2", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5db7mv2p"}, {"timestamp": "2025-03-24T20:39:45.704Z", "date_only": false, "value": "2025-03-24T20:39:45.704055Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfoa3a2w", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "0d0baead-1db7-4eb7-8e43-ee18df307a2d", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfoa3a2w"}, {"timestamp": "2025-03-24T20:48:54.663Z", "date_only": false, "value": "2025-03-24T20:48:54.663885Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114219373942955414", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "251adaef-d37e-4a77-9d75-c25cc3fce2b5", "url": "https://mastodon.social/users/CyberSignaler/statuses/114219373942955414"}, {"timestamp": "2025-03-24T21:30:33Z", "date_only": false, "value": "2025-03-24T21:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H4VH-MHXH-6RRR", "record": "GHSA-H4VH-MHXH-6RRR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-24T22:35:11Z", "date_only": false, "value": "2025-03-24T22:35:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20997", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "5649baf4-c29f-416d-8396-da3c4c006b3c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2746 - Kentico Xperience Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2746 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20997"}, {"timestamp": "2025-03-24T22:54:58.024Z", "date_only": false, "value": "2025-03-24T22:54:58.024197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5tz67vhj2c", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "0b74679b-e70f-454f-bae3-fda7dee7f432", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5tz67vhj2c"}, {"timestamp": "2025-03-26T20:47:34.574Z", "date_only": false, "value": "2025-03-26T20:47:34.574514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llcnt6dcbc2m", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "27b564a4-8337-47e5-9939-c82a021a2626", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llcnt6dcbc2m"}, {"timestamp": "2025-03-27T03:10:38.057Z", "date_only": false, "value": "2025-03-27T03:10:38.057600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lldda6gnu62u", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "89d5550f-d39a-4589-9219-3a9addfadcdd", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lldda6gnu62u"}, {"timestamp": "2025-03-27T16:16:23.223Z", "date_only": false, "value": "2025-03-27T16:16:23.223061Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llep57giec2x", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "0e055071-fb67-4260-b3d0-8f5075ad33d8", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3llep57giec2x"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": true, "value": "2025-03-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-05134", "record": "CNVD-2026-05134", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-04-01T23:39:21.270Z", "date_only": false, "value": "2025-04-01T23:39:21.270302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lls27vr5q22i", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "cfac16f1-0e1e-46ff-b2fb-2b4673767f70", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lls27vr5q22i"}, {"timestamp": "2025-05-07T15:48:27Z", "date_only": false, "value": "2025-05-07T15:48:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/299", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "c0d1a234-bf62-4dc0-97c2-f98285f9af22", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "url": "https://t.me/NinjaSec/299"}, {"timestamp": "2025-05-19T12:58:14Z", "date_only": false, "value": "2025-05-19T12:58:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/298", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "2c900cef-46ed-482f-a4ce-d23dc079afa5", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "url": "https://t.me/NinjaSec/298"}, {"timestamp": "2025-08-11T18:27:48Z", "date_only": false, "value": "2025-08-11T18:27:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "fc95e347-5421-48c2-94b9-8707e0927019"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": true, "value": "2025-10-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2746", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": true, "value": "2025-10-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "evidence.0.details.date_added", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "status.status_updated_at", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2746", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2025-2746 added to CISA KEV"}, {"timestamp": "2025-10-20T16:19:14.670Z", "date_only": false, "value": "2025-10-20T16:19:14.670098Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4950883", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "a859f599-e1c9-4cae-8d6c-e609ca2fe0ca", "url": "https://feedsin.space/feed/CISAKevBot/items/4950883"}, {"timestamp": "2025-10-21T03:55:13.097Z", "date_only": false, "value": "2025-10-21T03:55:13.097447Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2746", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-21T03:55:13.097Z", "date_only": false, "value": "2025-10-21T03:55:13.097447Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2746", "record": "FKIE_CVE-2025-2746", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-10-21T21:02:34.847Z", "date_only": false, "value": "2025-10-21T21:02:34.847567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bhbx526", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "3aef552c-3541-4be5-b6f7-b939f4d52d22", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bhbx526"}, {"timestamp": "2025-10-22T12:02:06Z", "date_only": false, "value": "2025-10-22T12:02:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "8d667b81-32f7-4fdd-99d5-7ce86c51de3d"}, {"timestamp": "2025-10-24T21:02:37.594Z", "date_only": false, "value": "2025-10-24T21:02:37.594635Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj4i24r2a", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "d4fac36f-9621-4a8e-a660-dd61815536d5", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj4i24r2a"}, {"timestamp": "2025-11-05T00:31:17Z", "date_only": false, "value": "2025-11-05T00:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H4VH-MHXH-6RRR", "record": "GHSA-H4VH-MHXH-6RRR", "field": "modified", "linked_record": true}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": true, "value": "2025-11-10", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "evidence.0.details.due_date", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-17T14:16:20.151Z", "date_only": false, "value": "2025-11-17T14:16:20.151656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5tfyspy7k2b", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "31998f65-9e41-482b-9193-3a563d4f35a0", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5tfyspy7k2b"}, {"timestamp": "2025-12-17T19:32:37.733Z", "date_only": false, "value": "2025-12-17T19:32:37.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2025-2746", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": true, "value": "2026-01-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-05134", "record": "CNVD-2026-05134", "field": "openTime", "linked_record": true}, {"timestamp": "2026-02-02T12:25:48.637Z", "date_only": false, "value": "2026-02-02T12:25:48.637244Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/237aa89d-a7f6-4c3d-8d70-c72952d464d4", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "87a0d3c5-203e-4612-b0cb-ec1d11790d84", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/237aa89d-a7f6-4c3d-8d70-c72952d464d4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T19:09:16.392Z", "date_only": false, "value": "2026-02-26T19:09:16.392Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:16.392Z", "date_only": false, "value": "2026-02-26T19:09:16.392Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2746", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-21T05:21:24Z", "date_only": false, "value": "2026-04-21T05:21:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "92df6272-4ca5-42a4-93a1-d71ef45a3f20", "url": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code"}, {"timestamp": "2026-06-01T10:42:30Z", "date_only": false, "value": "2026-06-01T10:42:30+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e44015da-8f57-4c15-aedb-9068bdfe376a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:30Z", "date_only": false, "value": "2026-06-01T10:42:30+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-2746", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e44015da-8f57-4c15-aedb-9068bdfe376a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:30Z", "date_only": false, "value": "2026-06-01T10:42:30+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-2746", "field": "status.status_updated_at", "uuid": "e44015da-8f57-4c15-aedb-9068bdfe376a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:30.527Z", "date_only": false, "value": "2026-06-01T10:42:30.527Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-2746", "field": "evidence.0.details.added_date", "uuid": "e44015da-8f57-4c15-aedb-9068bdfe376a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:07:33.103Z", "date_only": false, "value": "2026-06-17T09:07:33.103", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2746", "record": "FKIE_CVE-2025-2746", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:45:23.621Z", "date_only": false, "value": "2026-06-19T12:45:23.621721Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b395fcb-8213-462b-9e51-d69d364d2329", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "6886cd9f-eafa-48e1-a9cc-38c590fa2611", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b395fcb-8213-462b-9e51-d69d364d2329", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-2746", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e44015da-8f57-4c15-aedb-9068bdfe376a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:49.053Z", "date_only": false, "value": "2026-06-23T14:03:49.053499Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e44015da-8f57-4c15-aedb-9068bdfe376a", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "86105b8f-3b35-4743-9968-616d0e5b8c36", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e44015da-8f57-4c15-aedb-9068bdfe376a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-17T19:58:49Z", "date_only": false, "value": "2026-09-17T19:58:49+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "eb3e8ee3-601a-454c-89e0-2639271ff6af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-17T19:58:49Z", "date_only": false, "value": "2026-09-17T19:58:49+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-2746", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "eb3e8ee3-601a-454c-89e0-2639271ff6af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T05:00:04.736Z", "date_only": false, "value": "2026-09-22T05:00:04.736633Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Noheartz1337/138", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "d818662e-3203-490f-9ba4-90d4807ff781", "content": "MOXA COMPANY IN TAIWAN \ud83c\uddf9\ud83c\uddfc \n\nTARGET : https://www.moxa.com/\n\n[ CRITICAL > CVE-2025-2746 ]\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-2746\n\n[ CRITICAL > CVE-2025-2747 ]\nhttps://www.cve.org/CVERecord?id=CVE-2025-2747\n\n[ MEDIUM > CVE-2025-2748 ]\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-2748\n\nDatabase = Failed, WAF Updated...\n\n#NoHeartz #CVE", "url": "https://t.me/Noheartz1337/138"}, {"timestamp": "2026-09-22T05:00:05.118Z", "date_only": false, "value": "2026-09-22T05:00:05.118607Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Noheartz1337/129", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "bde71897-e63a-4373-86e0-88b957c88e9f", "content": "Hmmm \ud83e\udd14\n\n[ CVE-2025-2746 ]\n[ CVE-2025-2747 ]\n[ CVE-2025-2748 ]\n\n#NoHeartz", "url": "https://t.me/Noheartz1337/129"}, {"timestamp": "2026-10-21T09:02:04.243Z", "date_only": false, "value": "2026-10-21T09:02:04.243907Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb3e8ee3-601a-454c-89e0-2639271ff6af", "record": "CVE-2025-2746", "field": "creation_timestamp", "uuid": "f422f032-44fd-4ec8-b354-d2c56a6cf067", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb3e8ee3-601a-454c-89e0-2639271ff6af", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-2746", "field": "timestamps.last_seen_at", "uuid": "eb3e8ee3-601a-454c-89e0-2639271ff6af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-2746", "field": "evidence.0.details.observation_date", "uuid": "eb3e8ee3-601a-454c-89e0-2639271ff6af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-2746", "field": "status.status_updated_at", "uuid": "eb3e8ee3-601a-454c-89e0-2639271ff6af", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-2746", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "eb3e8ee3-601a-454c-89e0-2639271ff6af", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-13T17:09:54.784Z", "anchors": {"origin": {"timestamp": "2025-03-24T18:16:04.022Z", "date_only": false, "value": "2025-03-24T18:16:04.022Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-24T18:16:04.022Z", "date_only": false, "value": "2025-03-24T18:16:04.022Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 18078235.978, "hours": 5021.7322161111115, "days": 209.23884233796298, "min_seconds": 18078235.978, "max_seconds": 18164635.978, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:16:04.022Z", "date_only": false, "value": "2025-03-24T18:16:04.022Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 18078235.978, "hours": 5021.7322161111115, "days": 209.23884233796298, "min_seconds": 18078235.978, "max_seconds": 18164635.978, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:16:04.022Z", "date_only": false, "value": "2025-03-24T18:16:04.022Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51749630.762219, "hours": 14374.897433949722, "days": 598.954059747905, "min_seconds": 51749630.762219, "max_seconds": 51749630.762219, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:16:04.022Z", "date_only": false, "value": "2025-03-24T18:16:04.022Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2746", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T17:09:54.784Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 33671394.784219, "hours": 9353.16521783861, "days": 389.7152174099421, "min_seconds": 33584994.784219, "max_seconds": 33671394.784219, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2746", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "237aa89d-a7f6-4c3d-8d70-c72952d464d4", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-13T17:09:54.784Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}