{"metadata": {"vulnerability": "CVE-2025-40536", "count": 73, "kinds": {"milestone": 7, "sighting": 31, "kev": 11, "other": 24}, "linked_omitted": 0}, "data": [{"timestamp": "2025-04-16T08:00:57.647Z", "date_only": false, "value": "2025-04-16T08:00:57.647Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-40536", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0042", "record": "NCSC-2026-0042", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-01-28T07:25:00Z", "date_only": false, "value": "2026-01-28T07:25:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / SolarWinds", "record": "CVE-2025-40536", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-28T07:30:09.503Z", "date_only": false, "value": "2026-01-28T07:30:09.503Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-40536", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-28T07:30:09.503Z", "date_only": false, "value": "2026-01-28T07:30:09.503Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SolarWinds", "record": "CVE-2025-40536", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-28T08:16:01Z", "date_only": false, "value": "2026-01-28T08:16:01Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M83H-48RR-JCRH", "record": "GHSA-M83H-48RR-JCRH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-01-28T08:16:01.893Z", "date_only": false, "value": "2026-01-28T08:16:01.893", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-40536", "record": "FKIE_CVE-2025-40536", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-28T09:30:30Z", "date_only": false, "value": "2026-01-28T09:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M83H-48RR-JCRH", "record": "GHSA-M83H-48RR-JCRH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-28T10:19:08.121Z", "date_only": false, "value": "2026-01-28T10:19:08.121247Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2czwies2c", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "4ab9a4af-60ba-4872-9d37-4f1be9af9e0a", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdi2czwies2c"}, {"timestamp": "2026-01-28T11:00:14.206Z", "date_only": false, "value": "2026-01-28T11:00:14.206642Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi4mjfhgg27", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "34ac5161-2b19-4f62-bfff-997be1bf47c5", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi4mjfhgg27"}, {"timestamp": "2026-01-28T13:21:55Z", "date_only": false, "value": "2026-01-28T13:21:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-solarwinds", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "3a9587f0-e31b-40f3-9049-d1802b048107", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-solarwinds"}, {"timestamp": "2026-01-28T16:37:21.114Z", "date_only": false, "value": "2026-01-28T16:37:21.114054Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0042", "record": "NCSC-2026-0042", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-01-28T16:37:21.114Z", "date_only": false, "value": "2026-01-28T16:37:21.114054Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0042", "record": "NCSC-2026-0042", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-28T23:00:00Z", "date_only": false, "value": "2026-01-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-01-28T23:00:00Z", "date_only": false, "value": "2026-01-28T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-28T23:00:00Z", "date_only": false, "value": "2026-01-28T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-29T00:00:00Z", "date_only": false, "value": "2026-01-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-01-29T00:00:00Z", "date_only": false, "value": "2026-01-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2026-01-29T08:00:00Z", "date_only": false, "value": "2026-01-29T08:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/01/solarwinds-fixes-four-critical-web-help.html", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "08e35371-3619-46df-9110-12444f65786a", "url": "https://thehackernews.com/2026/01/solarwinds-fixes-four-critical-web-help.html"}, {"timestamp": "2026-01-29T09:56:12.594Z", "date_only": false, "value": "2026-01-29T09:56:12.594870Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdkjix3ghr2a", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "653f80de-89d3-4891-8f11-47c732016ea8", "url": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdkjix3ghr2a"}, {"timestamp": "2026-01-30T03:45:30.073Z", "date_only": false, "value": "2026-01-30T03:45:30.073717Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdmfau7d5c2n", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "8ea359c7-4c1e-4392-92c3-2ed0fa92084d", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdmfau7d5c2n"}, {"timestamp": "2026-02-02T09:47:54.857Z", "date_only": false, "value": "2026-02-02T09:47:54.857445Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0042", "record": "NCSC-2026-0042", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-02-02T09:47:54.857Z", "date_only": false, "value": "2026-02-02T09:47:54.857445Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0042", "record": "NCSC-2026-0042", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-02-03T23:00:00Z", "date_only": false, "value": "2026-02-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-02-08T20:29:18Z", "date_only": false, "value": "2026-02-08T20:29:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gleeda/9da2c7389bbd2afefc72018834a2010a", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "0db3a2d4-ac05-4fa3-bd97-d1a705eb5259", "url": "https://gist.github.com/gleeda/9da2c7389bbd2afefc72018834a2010a"}, {"timestamp": "2026-02-09T18:06:13.529Z", "date_only": false, "value": "2026-02-09T18:06:13.529830Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3megzzcefpy2w", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "fb83e7bb-42f1-4607-b3dd-388f97b6c772", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3megzzcefpy2w"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": true, "value": "2026-02-12", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-40536", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": true, "value": "2026-02-12", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "evidence.0.details.date_added", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "status.status_updated_at", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-40536", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2025-40536 added to CISA KEV"}, {"timestamp": "2026-02-12T03:27:19.824Z", "date_only": false, "value": "2026-02-12T03:27:19.824071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3men2cbbqc22w", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "39b8ba63-9d67-4e3b-8566-11b10c3129ce", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3men2cbbqc22w"}, {"timestamp": "2026-02-12T16:00:47Z", "date_only": false, "value": "2026-02-12T16:00:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/solarwinds-web-help-desk-sfruttamento-attivo-di-vulnerabilita", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "ea978f90-88ea-453c-b203-6c885ae07fc0", "url": "https://www.acn.gov.it/portale/w/solarwinds-web-help-desk-sfruttamento-attivo-di-vulnerabilita"}, {"timestamp": "2026-02-12T20:40:50.650Z", "date_only": false, "value": "2026-02-12T20:40:50.650490Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116059592601932056", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "f0546132-9bdb-4e56-aa3b-d51071b1cfc5", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/116059592601932056"}, {"timestamp": "2026-02-12T21:02:13.724Z", "date_only": false, "value": "2026-02-12T21:02:13.724441Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116059677137301631", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "09098d8a-726f-4aab-9df3-b69b8e6cb2cb", "url": "https://infosec.exchange/users/AAKL/statuses/116059677137301631"}, {"timestamp": "2026-02-12T21:31:24Z", "date_only": false, "value": "2026-02-12T21:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M83H-48RR-JCRH", "record": "GHSA-M83H-48RR-JCRH", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-13T02:12:53.319Z", "date_only": false, "value": "2026-02-13T02:12:53.319543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mepglvcxd22x", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "25fb5916-8fab-4d23-823c-2c1cfe4176d5", "url": "https://bsky.app/profile/shiojiri.com/post/3mepglvcxd22x"}, {"timestamp": "2026-02-13T04:01:08.088Z", "date_only": false, "value": "2026-02-13T04:01:08.088351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mepmntbmpq2r", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "0acccbd7-e642-42f9-a89b-edbd69f4fcce", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mepmntbmpq2r"}, {"timestamp": "2026-02-13T04:56:26.454Z", "date_only": false, "value": "2026-02-13T04:56:26.454872Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-40536", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-02-13T04:56:26.454Z", "date_only": false, "value": "2026-02-13T04:56:26.454872Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-40536", "record": "FKIE_CVE-2025-40536", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-02-13T07:17:08.982Z", "date_only": false, "value": "2026-02-13T07:17:08.982250Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/68077e92-2c8b-4c98-8710-d42de3281ef7", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "19bfe07e-e264-4555-b229-e0b6922ce54e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/68077e92-2c8b-4c98-8710-d42de3281ef7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-13T12:01:15Z", "date_only": false, "value": "2026-02-13T12:01:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solarwinds_webhelpdesk_rce.rb", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "4eb3f137-7a97-4bd6-8b9e-c644fc219514", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solarwinds_webhelpdesk_rce.rb"}, {"timestamp": "2026-02-13T21:03:07.779Z", "date_only": false, "value": "2026-02-13T21:03:07.779318Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3merfr6dh6o2k", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "1fce0787-f815-48c3-b8a8-7009a0e7ea77", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3merfr6dh6o2k"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": true, "value": "2026-02-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "evidence.0.details.due_date", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-15T07:02:11.006Z", "date_only": false, "value": "2026-02-15T07:02:11.006264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuxpez6hs2w", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "111d1f26-c887-46cd-b31a-cf5ba5d2656e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuxpez6hs2w"}, {"timestamp": "2026-02-15T08:21:35.327Z", "date_only": false, "value": "2026-02-15T08:21:35.327230Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mev45bqof22w", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "c13650b0-9dd5-4147-98a8-7269004dd596", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mev45bqof22w"}, {"timestamp": "2026-02-16T02:28:48.424Z", "date_only": false, "value": "2026-02-16T02:28:48.424810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mewyvinek723", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "24b1a430-ea27-45b6-836c-3b9f86640f8a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mewyvinek723"}, {"timestamp": "2026-02-16T21:41:49Z", "date_only": false, "value": "2026-02-16T21:41:49.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-40536.yaml", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "2e669b99-c5b1-49b6-8bc3-215df4ac8c27", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-40536.yaml"}, {"timestamp": "2026-02-19T21:03:03.900Z", "date_only": false, "value": "2026-02-19T21:03:03.900253Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikmkubo27", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "aaaa0d6c-3372-4a3f-b850-ba2f9f9e2164", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikmkubo27"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-02-26T11:27:11.706Z", "date_only": false, "value": "2026-02-26T11:27:11.706+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0247", "record": "WID-SEC-W-2026-0247", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-02-26T15:04:49.700Z", "date_only": false, "value": "2026-02-26T15:04:49.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-40536", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T15:04:49.700Z", "date_only": false, "value": "2026-02-26T15:04:49.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-40536", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-04T01:43:55.369Z", "date_only": false, "value": "2026-03-04T01:43:55.369735Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5923007", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "45701bbf-b1a5-4c05-a28c-31d54edd5b38", "url": "https://feedsin.space/feed/CISAKevBot/items/5923007"}, {"timestamp": "2026-06-01T10:50:56Z", "date_only": false, "value": "2026-06-01T10:50:56+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-40536", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "c47a160b-db8b-45dd-8841-1b7ad032b605", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:50:56Z", "date_only": false, "value": "2026-06-01T10:50:56+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-40536", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "c47a160b-db8b-45dd-8841-1b7ad032b605", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:50:56Z", "date_only": false, "value": "2026-06-01T10:50:56+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-40536", "field": "status.status_updated_at", "uuid": "c47a160b-db8b-45dd-8841-1b7ad032b605", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:50:56.244Z", "date_only": false, "value": "2026-06-01T10:50:56.244Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-40536", "field": "evidence.0.details.added_date", "uuid": "c47a160b-db8b-45dd-8841-1b7ad032b605", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-02T03:00:06Z", "date_only": false, "value": "2026-06-02T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/o-1RdHDTTDzpR1d_7lEZ0NK_EmI3GWtJPujLHz_j4X2p5To", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "49da0015-19a3-42b5-89c4-4da825f73c7c"}, {"timestamp": "2026-06-03T21:06:28Z", "date_only": false, "value": "2026-06-03T21:06:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/87197", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "d3c95db8-1099-4207-adde-3b9d8a4531aa", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-40536-Analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a victoriaalicex\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Jupyter Notebook\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-03 20:54:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE analysis of CVE-2025-40536, SolarWinds Web Help Desk security control bypass (CVSS 8.1). Covers vulnerability mechanics, attack chain with companion RCE CVEs, Storm-2603 threat actor attribution, MITRE ATT&CK mapping, and detection/remediation guidance for DoD and government environments.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/87197"}, {"timestamp": "2026-06-17T09:21:43.410Z", "date_only": false, "value": "2026-06-17T09:21:43.410", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-40536", "record": "FKIE_CVE-2025-40536", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:45:16.823Z", "date_only": false, "value": "2026-06-19T12:45:16.823627Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d61070a2-caf6-4621-9845-12f45c483b1d", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "512593f0-8cba-4ddb-ac2c-f868b71475d9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d61070a2-caf6-4621-9845-12f45c483b1d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-40536", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "c47a160b-db8b-45dd-8841-1b7ad032b605", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:43.385Z", "date_only": false, "value": "2026-06-23T14:03:43.385544Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c47a160b-db8b-45dd-8841-1b7ad032b605", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "105873e4-d64e-42ac-8ee9-bcff44ac8659", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c47a160b-db8b-45dd-8841-1b7ad032b605", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T20:00:22.114Z", "date_only": false, "value": "2026-08-29T20:00:22.114278Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/691", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "d95c09a4-ca97-49ff-88b4-bacd35961e19", "content": "The Microsoft Defender Security Research Team said it's not clear whether the activity weaponized recently disclosed flaws (CVE-2025-40551, CVSS score: 9.8, and CVE-2025-40536, CVSS score: 8.1), or a previously patched vulnerability (CVE-2025-26399, CVSS score: 9.8).", "url": "https://t.me/CyberDispatch/691"}, {"timestamp": "2026-10-13T22:25:38Z", "date_only": false, "value": "2026-10-13T22:25:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qAU79Jr31MGB8BvaHxFWDKJf8qJZGn8IuQFp2dEG6YuEEHw", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "4f7aa2a8-d877-43f0-b9de-e8ee65b99297", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-28T23:00:25Z", "date_only": false, "value": "2026-10-28T23:00:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/I2S26f82DqbA2qqxXn2oJIZcJkLSFISg_xBLSd1Y_NFPCk8", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "8ff5b12c-7e1a-4886-9a06-e542d7ea9a9e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-28T23:00:25Z", "date_only": false, "value": "2026-10-28T23:00:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/I2S26f82DqbA2qqxXn2oJIZcJkLSFISg_xBLSd1Y_NFPCk8", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "06fc36c8-41c7-4f51-9f5b-28fe5ed004ad"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T01:17:01.167Z", "anchors": {"origin": {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-13T22:25:38Z", "date_only": false, "value": "2026-10-13T22:25:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qAU79Jr31MGB8BvaHxFWDKJf8qJZGn8IuQFp2dEG6YuEEHw", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "4f7aa2a8-d877-43f0-b9de-e8ee65b99297", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 1296000.0, "hours": 360.0, "days": 15.0, "min_seconds": 1209600.0, "max_seconds": 1382400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 1296000.0, "hours": 360.0, "days": 15.0, "min_seconds": 1209600.0, "max_seconds": 1382400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 22371938.0, "hours": 6214.427222222223, "days": 258.93446759259257, "min_seconds": 22285538.0, "max_seconds": 22371938.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-13T22:25:38Z", "date_only": false, "value": "2026-10-13T22:25:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qAU79Jr31MGB8BvaHxFWDKJf8qJZGn8IuQFp2dEG6YuEEHw", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "4f7aa2a8-d877-43f0-b9de-e8ee65b99297", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 25060621.167951, "hours": 6961.2836577641665, "days": 290.0534857401736, "min_seconds": 24974221.167951, "max_seconds": 25060621.167951, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0099", "record": "CERTFR-2026-AVI-0099", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T01:17:01.167Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 23764621.167951, "hours": 6601.2836577641665, "days": 275.0534857401736, "min_seconds": 23678221.167951, "max_seconds": 23764621.167951, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-40536", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "68077e92-2c8b-4c98-8710-d42de3281ef7", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T01:17:01.167Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 2688683.167951, "hours": 746.8564355419444, "days": 31.119018147581016, "min_seconds": 2688683.167951, "max_seconds": 2688683.167951, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-13T22:25:38Z", "date_only": false, "value": "2026-10-13T22:25:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qAU79Jr31MGB8BvaHxFWDKJf8qJZGn8IuQFp2dEG6YuEEHw", "record": "CVE-2025-40536", "field": "creation_timestamp", "uuid": "4f7aa2a8-d877-43f0-b9de-e8ee65b99297", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T01:17:01.167Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}