{"metadata": {"vulnerability": "CVE-2025-4008", "count": 82, "kinds": {"milestone": 4, "sighting": 43, "kev": 17, "other": 18}}, "data": [{"timestamp": "2025-02-25T08:00:00Z", "date_only": false, "value": "2025-02-25T08:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-03-18T08:00:00Z", "date_only": false, "value": "2025-03-18T08:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-04-10T07:00:00Z", "date_only": false, "value": "2025-04-10T07:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2025-04-11T07:00:00Z", "date_only": false, "value": "2025-04-11T07:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.5.time"}, {"timestamp": "2025-04-15T07:00:00Z", "date_only": false, "value": "2025-04-15T07:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2025-04-27T08:21:52.184Z", "date_only": false, "value": "2025-04-27T08:21:52.184Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-4008", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-27T08:30:00Z", "date_only": false, "value": "2025-04-27T08:30:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.6.time"}, {"timestamp": "2025-05-14T07:00:00Z", "date_only": false, "value": "2025-05-14T07:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.7.time"}, {"timestamp": "2025-05-21T15:30:00Z", "date_only": false, "value": "2025-05-21T15:30:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.timeline.8.time"}, {"timestamp": "2025-05-21T15:31:23.118Z", "date_only": false, "value": "2025-05-21T15:31:23.118Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4008", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-21T15:42:12Z", "date_only": false, "value": "2025-05-21T15:42:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17135", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "ba7cd47d-dfe6-4c52-b958-179009c62625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4008\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.\n\nThis web interface exposes an endpoint that is vulnerable to command injection.\n\nRemote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n\ud83d\udccf Published: 2025-05-21T15:31:23.118Z\n\ud83d\udccf Modified: 2025-05-21T15:31:23.118Z\n\ud83d\udd17 References:\n1. https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008\n2. https://forum.meteohub.de/viewtopic.php?t=18687", "url": "https://t.me/DarkWebInformer_CVEAlerts/17135"}, {"timestamp": "2025-05-21T15:57:50.635Z", "date_only": false, "value": "2025-05-21T15:57:50.635210Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114546643422662237", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "50728a6f-5aa1-4b7d-b2a3-dd30a2fbd617", "url": "https://infosec.exchange/users/cR0w/statuses/114546643422662237"}, {"timestamp": "2025-05-21T16:15:33Z", "date_only": false, "value": "2025-05-21T16:15:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G7H8-28JJ-QXMF", "record": "GHSA-G7H8-28JJ-QXMF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-21T16:15:33.987Z", "date_only": false, "value": "2025-05-21T16:15:33.987", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4008", "record": "FKIE_CVE-2025-4008", "field": "published"}, {"timestamp": "2025-05-21T17:18:31.425Z", "date_only": false, "value": "2025-05-21T17:18:31.425873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4aoqesb2s", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "df3cc815-dbb7-4ba3-9436-cf7646b69d3c", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4aoqesb2s"}, {"timestamp": "2025-05-21T18:33:30Z", "date_only": false, "value": "2025-05-21T18:33:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G7H8-28JJ-QXMF", "record": "GHSA-G7H8-28JJ-QXMF", "field": "published"}, {"timestamp": "2025-05-23T08:04:48.828Z", "date_only": false, "value": "2025-05-23T08:04:48.828Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ONEKEY", "record": "CVE-2025-4008", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-27T04:21:44Z", "date_only": false, "value": "2025-05-27T04:21:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3347", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "5a956fe8-f777-43fd-b9d9-11c670690957", "content": "\u26a1\ufe0fSecurity Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3347"}, {"timestamp": "2025-05-27T09:30:18Z", "date_only": false, "value": "2025-05-27T09:30:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/496", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "06581ae6-774d-46db-97db-168774dcec25", "content": "Top Security News for Today\n\nThreat of TCC Bypasses on macOS  \nhttps://www.reddit.com/r/netsec/comments/1kvr057/threat_of_tcc_bypasses_on_macos/\n\n26th May \u2013 Threat Intelligence Report  \nhttps://research.checkpoint.com/2025/26th-may-threat-intelligence-report/\n\nUnauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)  \nhttps://www.reddit.com/r/netsec/comments/1kvtr2i/unauthenticated_rce_on_smartbedded_meteobridge/\n\nWindows namespace traversal  \nhttps://www.reddit.com/r/lowlevel/comments/1kvtv22/windows_namespace_traversal/\n\nPreparing for the Post Quantum Era: Quantum Ready Architecture for Security and Risk Management (QUASAR) -- A Strategic Framework for Cybersecurity  \nhttps://arxiv.org/abs/2505.17084\n\nImproving LLM Outputs Against Jailbreak Attacks with Expert Model Integration  \nhttps://arxiv.org/abs/2505.17066\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/496"}, {"timestamp": "2025-05-27T14:05:48Z", "date_only": false, "value": "2025-05-27T14:05:48.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4008.yaml", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "258e03bb-f21c-4e95-ac1e-683817c80754", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4008.yaml"}, {"timestamp": "2025-05-27T15:24:15.824Z", "date_only": false, "value": "2025-05-27T15:24:15.824714Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lq5yo7aumc2c", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "4a6f5d8c-034f-49f5-9b2b-4fed20214e29", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3lq5yo7aumc2c"}, {"timestamp": "2025-05-28T02:19:19.021Z", "date_only": false, "value": "2025-05-28T02:19:19.021695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lq75bi67uf2w", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "6cc48127-9eb7-4447-84fc-9422a8ad8a29", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lq75bi67uf2w"}, {"timestamp": "2025-05-29T01:05:54Z", "date_only": false, "value": "2025-05-29T01:05:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/liwaamohammad/2328", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "b2f16b1b-12e3-40fd-91f4-a1a675566094", "content": "CVE-2025-4008\n\nGET  /public/template.cgi?templatefile=$(id)\n\nid\n\n#exploit #poc", "url": "https://t.me/liwaamohammad/2328"}, {"timestamp": "2025-05-31T21:02:27.752Z", "date_only": false, "value": "2025-05-31T21:02:27.752630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingd3vu62v", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "ecc50294-ea32-49fc-830d-1629f769ccf3", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingd3vu62v"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-4008", "field": "timestamps.asserted_at", "uuid": "e8854478-5ed3-4e71-9f1a-f7819314f092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": true, "value": "2025-10-02", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4008", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": true, "value": "2025-10-02", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-4008", "field": "evidence.0.details.date_added", "uuid": "e8854478-5ed3-4e71-9f1a-f7819314f092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-4008", "field": "timestamps.first_seen_at", "uuid": "e8854478-5ed3-4e71-9f1a-f7819314f092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-4008", "field": "status.status_updated_at", "uuid": "e8854478-5ed3-4e71-9f1a-f7819314f092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4008", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-10-02T03:55:47.221Z", "date_only": false, "value": "2025-10-02T03:55:47.221471Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4008", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-02T03:55:47.221Z", "date_only": false, "value": "2025-10-02T03:55:47.221471Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4008", "record": "FKIE_CVE-2025-4008", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-02T16:02:21.404Z", "date_only": false, "value": "2025-10-02T16:02:21.404583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m27wi4ryjr2u", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "933cf576-41de-4763-a8c0-909e68b3b8fb", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m27wi4ryjr2u"}, {"timestamp": "2025-10-02T16:07:24.575Z", "date_only": false, "value": "2025-10-02T16:07:24.575518Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/115305430602725579", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "95efc546-2ace-43e0-8442-f6746c802f11", "url": "https://infosec.exchange/users/cR0w/statuses/115305430602725579"}, {"timestamp": "2025-10-02T16:29:08.312Z", "date_only": false, "value": "2025-10-02T16:29:08.312981Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4846803", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "71269042-a0a9-4d83-8a98-a49c970ff6dc", "url": "https://feedsin.space/feed/CISAKevBot/items/4846803"}, {"timestamp": "2025-10-02T18:10:02Z", "date_only": false, "value": "2025-10-02T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "bbbaa80d-d909-4c2f-ac3e-139f6f32070d"}, {"timestamp": "2025-10-02T19:49:19.382Z", "date_only": false, "value": "2025-10-02T19:49:19.382413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2ad5y2iv22m", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "82a2a966-ecc1-424b-af52-99710714daba", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2ad5y2iv22m"}, {"timestamp": "2025-10-03T04:32:32Z", "date_only": false, "value": "2025-10-03T04:32:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "ef76f1a5-db14-4dc2-bfd2-7dac90edeb79"}, {"timestamp": "2025-10-03T08:28:35Z", "date_only": false, "value": "2025-10-03T08:28:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7652", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "70f64a51-e5a7-4de3-9066-1e34732566ea", "content": "\ud83d\udea8 CISA just flagged a live zero-day in Smartbedded Meteobridge.\n\nRemote attackers can hijack weather stations \u2192 full root access.\n\nNo login needed\u2014just click a link. CGI script + eval = instant code execution.\n\nPatches only dropped in May \u2193 https://thehackernews.com/2025/10/cisa-flags-meteobridge-cve-2025-4008.html", "url": "https://t.me/thehackernews/7652"}, {"timestamp": "2025-10-03T09:20:16Z", "date_only": false, "value": "2025-10-03T09:20:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/9110", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "bf5ceb2a-4087-4cf8-b2eb-d129c3ac8c09", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild\nLink: https://thehackernews.com/2025/10/cisa-flags-meteobridge-cve-2025-4008.html", "url": "https://t.me/DarkWebInformer_News/9110"}, {"timestamp": "2025-10-03T09:30:06.389Z", "date_only": false, "value": "2025-10-03T09:30:06.389748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3m2bqzlubfv2i", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "ca7a0cc6-5ecd-4772-b617-f16fbe2ac7e5", "url": "https://bsky.app/profile/techit.bsky.social/post/3m2bqzlubfv2i"}, {"timestamp": "2025-10-03T09:31:16.455Z", "date_only": false, "value": "2025-10-03T09:31:16.455583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2br3q5kh42m", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "1250ef1b-fa01-472a-b086-e1dd8089a7c9", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3m2br3q5kh42m"}, {"timestamp": "2025-10-03T10:01:11Z", "date_only": false, "value": "2025-10-03T10:01:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Fvx_wf7fQwJ7fUt7eOu_8d0TQri_ALCcwWm9jOKrwQgU0w", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "319dabec-bce7-429c-a327-95f806a40f8f"}, {"timestamp": "2025-10-03T10:04:33.342Z", "date_only": false, "value": "2025-10-03T10:04:33.342716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2bsxafqfy23", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "74acd7b8-e109-4b72-925f-21e6a70507a1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2bsxafqfy23"}, {"timestamp": "2025-10-03T11:38:30.643Z", "date_only": false, "value": "2025-10-03T11:38:30.643430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3m2by7amuig2e", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "ff12d2bf-ab66-49bf-b2b5-1ca08e6002ba", "url": "https://bsky.app/profile/ninjaowl.ai/post/3m2by7amuig2e"}, {"timestamp": "2025-10-03T12:03:53Z", "date_only": false, "value": "2025-10-03T12:03:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/16580", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "b83a47e6-e4cb-460e-932f-0036d078b36f", "content": "CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild \u2013 thehackernews.com\n\nFri, 03 Oct 2025 16:23:00", "url": "https://t.me/MalaysiaHacktivistz/16580"}, {"timestamp": "2025-10-03T16:09:15.491Z", "date_only": false, "value": "2025-10-03T16:09:15.491057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m2chcwwcik24", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "795b1201-fcd5-4855-a755-6ca1fb5afff1", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m2chcwwcik24"}, {"timestamp": "2025-10-03T21:02:32.499Z", "date_only": false, "value": "2025-10-03T21:02:32.499980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2cxppyl2f2w", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "c4eadebd-976e-42a4-a9bb-b2d6a1eea11a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2cxppyl2f2w"}, {"timestamp": "2025-10-04T05:20:10.272Z", "date_only": false, "value": "2025-10-04T05:20:10.272691Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m2dtjmt5c52k", "record": "cve-2025-4008", "field": "creation_timestamp", "uuid": "2ab7d2d8-0dc4-4f43-a379-55aba41fb762", "url": "https://bsky.app/profile/cyberhub.blog/post/3m2dtjmt5c52k"}, {"timestamp": "2025-10-04T05:29:57.369Z", "date_only": false, "value": "2025-10-04T05:29:57.369028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m2du34l6x22a", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "47322935-abec-4757-85ff-364f263aaca0", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m2du34l6x22a"}, {"timestamp": "2025-10-05T15:30:15.890Z", "date_only": false, "value": "2025-10-05T15:30:15.890998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3m2hg3dqdzc2b", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "f2b68ed8-cd5d-472f-9860-b85e3455e7ec", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3m2hg3dqdzc2b"}, {"timestamp": "2025-10-05T18:45:06.786Z", "date_only": false, "value": "2025-10-05T18:45:06.786256Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3m2hqxveolr2l", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "5899830d-3a26-46ab-8fdb-60ab52d0ac63", "url": "https://bsky.app/profile/newsnexttech.bsky.social/post/3m2hqxveolr2l"}, {"timestamp": "2025-10-05T18:45:34.978Z", "date_only": false, "value": "2025-10-05T18:45:34.978018Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3m2hqyr6l2e2f", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "d06f7bf6-b86c-48f2-a4d0-b5197efbbcd6", "url": "https://bsky.app/profile/monikawalker.bsky.social/post/3m2hqyr6l2e2f"}, {"timestamp": "2025-10-11T06:19:00.980Z", "date_only": false, "value": "2025-10-11T06:19:00.980671Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "c894031d-7032-4064-8c3d-e4f77444d11b", "url": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2"}, {"timestamp": "2025-10-14T10:31:59Z", "date_only": false, "value": "2025-10-14T10:31:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "b828d475-1728-4b6b-b086-750a6f2726d9"}, {"timestamp": "2025-10-22T00:33:18Z", "date_only": false, "value": "2025-10-22T00:33:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G7H8-28JJ-QXMF", "record": "GHSA-G7H8-28JJ-QXMF", "field": "modified"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": true, "value": "2025-10-23", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-4008", "field": "evidence.0.details.due_date", "uuid": "e8854478-5ed3-4e71-9f1a-f7819314f092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-4008", "field": "timestamps.recorded_at", "uuid": "e8854478-5ed3-4e71-9f1a-f7819314f092", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:52.059Z", "date_only": false, "value": "2026-02-02T12:25:52.059134Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8854478-5ed3-4e71-9f1a-f7819314f092", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "29bd4515-e25f-4783-9616-98207c79d6d6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8854478-5ed3-4e71-9f1a-f7819314f092"}, {"timestamp": "2026-02-26T18:28:04.093Z", "date_only": false, "value": "2026-02-26T18:28:04.093Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-4008", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:04.093Z", "date_only": false, "value": "2026-02-26T18:28:04.093Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4008", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-01T10:41:37Z", "date_only": false, "value": "2026-06-01T10:41:37+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-4008", "field": "timestamps.asserted_at", "uuid": "901a5219-4253-4399-b131-848f8af0950d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:41:37Z", "date_only": false, "value": "2026-06-01T10:41:37+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-4008", "field": "timestamps.first_seen_at", "uuid": "901a5219-4253-4399-b131-848f8af0950d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:41:37Z", "date_only": false, "value": "2026-06-01T10:41:37+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-4008", "field": "status.status_updated_at", "uuid": "901a5219-4253-4399-b131-848f8af0950d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:41:37.811Z", "date_only": false, "value": "2026-06-01T10:41:37.811Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-4008", "field": "evidence.0.details.added_date", "uuid": "901a5219-4253-4399-b131-848f8af0950d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:32:18.077Z", "date_only": false, "value": "2026-06-17T09:32:18.077", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4008", "record": "FKIE_CVE-2025-4008", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:24.800Z", "date_only": false, "value": "2026-06-19T12:45:24.800186Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09a380a4-4225-4fa0-9021-b9079697dfb7", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "7a2d9f33-1d31-48d7-9263-ced7223d9f98", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09a380a4-4225-4fa0-9021-b9079697dfb7"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-4008", "field": "timestamps.recorded_at", "uuid": "901a5219-4253-4399-b131-848f8af0950d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:50.046Z", "date_only": false, "value": "2026-06-23T14:03:50.046720Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/901a5219-4253-4399-b131-848f8af0950d", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "807698da-050b-4d85-83b7-05c8aecb9953", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/901a5219-4253-4399-b131-848f8af0950d"}, {"timestamp": "2026-07-20T19:00:05.870Z", "date_only": false, "value": "2026-07-20T19:00:05.870527Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/7515", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "5fac3852-918f-4315-9fb6-0a0054d20394", "content": "CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild \u2013 thehackernews.com\n\nFri, 03 Oct 2025 16:23:00", "url": "https://t.me/MalaysiaHacktivistz/7515"}, {"timestamp": "2026-07-22T00:00:30.564Z", "date_only": false, "value": "2026-07-22T00:00:30.564276Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/7515", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "f9f04d6b-01b9-4cad-960a-850db9d4cf1d", "content": "CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild \u2013 thehackernews.com\n\nFri, 03 Oct 2025 16:23:00", "url": "https://t.me/MalaysiaHacktivistz/7515"}, {"timestamp": "2026-07-26T02:00:11.913Z", "date_only": false, "value": "2026-07-26T02:00:11.913459Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/835", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "0710a3e3-db63-4a7d-9066-f4655cdbe0f0", "content": "Unauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)\nhttps://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008:\n\n1. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n2. The file contains the following entries: As we can see, cgi-bin, exports, charts, and backup are protected and require basic authentication with meteobridge credentials.\n3. \u00e2\u0080\u008d ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of PricewaterhouseCoopers Germany (PwC).\n\n@secharvester", "url": "https://t.me/cyberwarehouse/835"}, {"timestamp": "2026-07-27T00:00:30.232Z", "date_only": false, "value": "2026-07-27T00:00:30.232325Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/835", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "1da1c42b-4bc4-49b7-8399-6a4eb829c333", "content": "Unauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)\nhttps://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008:\n\n1. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n2. The file contains the following entries: As we can see, cgi-bin, exports, charts, and backup are protected and require basic authentication with meteobridge credentials.\n3. \u00e2\u0080\u008d ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of PricewaterhouseCoopers Germany (PwC).\n\n@secharvester", "url": "https://t.me/cyberwarehouse/835"}, {"timestamp": "2026-07-29T12:02:03.366Z", "date_only": false, "value": "2026-07-29T12:02:03.366571Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5180", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "a3069064-f4ad-451b-b54d-4885eae29107", "content": "Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008) #SecurityAdvisory #RemoteCommandExecution #CVE20254008 #ONEKEYResearch #EUcyberresilienceact https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "url": "https://t.me/reverseame/5180"}, {"timestamp": "2026-08-02T02:00:04.685Z", "date_only": false, "value": "2026-08-02T02:00:04.685445Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5180", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "cd51bce9-1d7e-46d8-b80f-01aac4b560f0", "content": "Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008) #SecurityAdvisory #RemoteCommandExecution #CVE20254008 #ONEKEYResearch #EUcyberresilienceact https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "url": "https://t.me/reverseame/5180"}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": true, "value": "2026-09-06", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-4008", "field": "evidence.0.details.observation_date", "uuid": "412de4b2-4657-43f2-bd7b-2596fc9174aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T09:51:52Z", "date_only": false, "value": "2026-09-06T09:51:52+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-4008", "field": "timestamps.asserted_at", "uuid": "412de4b2-4657-43f2-bd7b-2596fc9174aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T09:51:52Z", "date_only": false, "value": "2026-09-06T09:51:52+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-4008", "field": "timestamps.first_seen_at", "uuid": "412de4b2-4657-43f2-bd7b-2596fc9174aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T09:51:52Z", "date_only": false, "value": "2026-09-06T09:51:52+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-4008", "field": "timestamps.last_seen_at", "uuid": "412de4b2-4657-43f2-bd7b-2596fc9174aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T09:51:52Z", "date_only": false, "value": "2026-09-06T09:51:52+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-4008", "field": "status.status_updated_at", "uuid": "412de4b2-4657-43f2-bd7b-2596fc9174aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-08T01:00:01Z", "date_only": false, "value": "2026-09-08T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-4008", "field": "timestamps.recorded_at", "uuid": "412de4b2-4657-43f2-bd7b-2596fc9174aa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-08T01:01:02.184Z", "date_only": false, "value": "2026-09-08T01:01:02.184318Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/412de4b2-4657-43f2-bd7b-2596fc9174aa", "record": "CVE-2025-4008", "field": "creation_timestamp", "uuid": "eb2b8445-c363-4444-9cf4-2d12e8aecc75", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/412de4b2-4657-43f2-bd7b-2596fc9174aa"}]}