{"metadata": {"vulnerability": "CVE-2026-0288", "count": 40, "kinds": {"milestone": 8, "sighting": 11, "kev": 0, "other": 21}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0227", "record": "NCSC-2026-0227", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-03T20:44:46.432Z", "date_only": false, "value": "2025-11-03T20:44:46.432Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-0288", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-08T00:00:00Z", "date_only": true, "value": "2026-07-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0853", "record": "CERTFR-2026-AVI-0853", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-07-08T16:00:00Z", "date_only": false, "value": "2026-07-08T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0288", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-08T16:00:00Z", "date_only": false, "value": "2026-07-08T16:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0288", "field": "containers.cna.timeline.0.time", "text": "Initial publication"}, {"timestamp": "2026-07-08T16:15:21.735Z", "date_only": false, "value": "2026-07-08T16:15:21.735635Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116885246523577101", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "c9a628ee-c0c2-4ea0-ba58-369e4ef50466", "content": "Broadcom has a long list of advisories today, addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory \nPalo Alto:\nCRITICAL: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288\nDell: Security Update for Dell Networking Products for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000362452/dsa-2025-250-security-update-for-dell-networking-products-for-multiple-vulnerabilities #Broascom #infosec #vulnerability #Dell #Intel", "url": "https://infosec.exchange/users/AAKL/statuses/116885246523577101"}, {"timestamp": "2026-07-08T19:03:31.921Z", "date_only": false, "value": "2026-07-08T19:03:31.921674Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mq5soxii4n22", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "5d6817ba-50d2-409b-9d2a-67f96b6c1945", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0288", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3mq5soxii4n22"}, {"timestamp": "2026-07-08T20:14:32.405Z", "date_only": false, "value": "2026-07-08T20:14:32.405Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-0288", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-08T20:15:02.784Z", "date_only": false, "value": "2026-07-08T20:15:02.784584Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-674", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "bcbc5f12-e7c7-4fa0-81d9-e4e5109c422f", "url": "https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-674"}, {"timestamp": "2026-07-08T21:16:45Z", "date_only": false, "value": "2026-07-08T21:16:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RGMM-652R-CRF4", "record": "GHSA-RGMM-652R-CRF4", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-07-08T21:16:45.590Z", "date_only": false, "value": "2026-07-08T21:16:45.590", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0288", "record": "FKIE_CVE-2026-0288", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-08T21:30:30Z", "date_only": false, "value": "2026-07-08T21:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RGMM-652R-CRF4", "record": "GHSA-RGMM-652R-CRF4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0853", "record": "CERTFR-2026-AVI-0853", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0853", "record": "CERTFR-2026-AVI-0853", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": false, "value": "2026-07-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0853", "record": "CERTFR-2026-AVI-0853", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-07-09T02:00:22.704Z", "date_only": false, "value": "2026-07-09T02:00:22.704228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq6jydcgxj23", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "cf498bd9-329d-4324-8439-6a0ccbf94392", "content": "A PAN-OS buffer overflow, CVE-2026-0288, enables arbitrary code execution on Palo Alto firewalls. Patch now.\n\n#PANOS #PaloAltoNetworks #BufferOverflow #ArbitraryCodeExecution #CVE #FirewallSecurity #PatchNow #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mq6jydcgxj23"}, {"timestamp": "2026-07-09T03:55:51.922Z", "date_only": false, "value": "2026-07-09T03:55:51.922548Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0288", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-09T03:55:51.922Z", "date_only": false, "value": "2026-07-09T03:55:51.922548Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0288", "record": "FKIE_CVE-2026-0288", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-09T04:31:06.196Z", "date_only": false, "value": "2026-07-09T04:31:06.196852Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mq6sfsibrq26", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "d4338f2d-3dec-4a11-8bf1-f2de39c874e4", "content": "Palo Alto Networks reveals CVE-2026-0288, a critical PAN-OS flaw enabling unauthenticated remote code execution. Immediate patching urged. #CyberSecurity #PANOS #Vulnerability #RemoteCodeExecution thedailytechfeed.com/critical-pan...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mq6sfsibrq26"}, {"timestamp": "2026-07-09T04:46:32.824Z", "date_only": false, "value": "2026-07-09T04:46:32.824160Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20260709", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "3a569919-f5b6-4fbd-a039-8dc4bf375368", "url": "https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20260709"}, {"timestamp": "2026-07-09T13:52:59.711Z", "date_only": false, "value": "2026-07-09T13:52:59.711430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq7rskzovm2u", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "87ee48b7-ccaa-483a-8d74-68b06cd1f9fc", "content": "Thirteen Palo Alto Networks product vulnerabilities were patched, including CVE-2026-0288 in PAN-OS enabling DoS and potential arbitrary code execution.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq7rskzovm2u"}, {"timestamp": "2026-07-09T13:54:42.864Z", "date_only": false, "value": "2026-07-09T13:54:42.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0288", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T18:48:32.880Z", "date_only": false, "value": "2026-07-09T18:48:32.880Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0288", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T20:45:22.307Z", "date_only": false, "value": "2026-07-09T20:45:22.307935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqaitybqdo2c", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "fff7d4c8-0594-4e5d-971b-e353d1f47980", "content": "Palo Alto Networks disclosed 13 product vulnerabilities, including CVE-2026-0288 in PAN-OS, which could cause denial of service and possible code execution. Issues also affect Prisma Access Agent. #PANOS #PrismaAccess #PaloAltoNetworks", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqaitybqdo2c"}, {"timestamp": "2026-07-13T08:27:56.212Z", "date_only": false, "value": "2026-07-13T08:27:56.212302Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0227", "record": "NCSC-2026-0227", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-07-13T08:27:56.212Z", "date_only": false, "value": "2026-07-13T08:27:56.212302Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0227", "record": "NCSC-2026-0227", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-13T08:27:56.212Z", "date_only": false, "value": "2026-07-13T08:27:56.212302Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0227", "record": "NCSC-2026-0227", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-07-13T12:30:29.322Z", "date_only": false, "value": "2026-07-13T12:30:29.322797Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqjp2qc7wh2b", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "4d3df913-a32a-4dc7-b0a4-16c1f88aa98f", "content": "CVE-2026-0288: PAN-OS TSA Buffer Overflows Score CVSS 9.2", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqjp2qc7wh2b"}, {"timestamp": "2026-07-13T12:35:49.612Z", "date_only": false, "value": "2026-07-13T12:35:49.612971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqjpebvyuf2w", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "02070994-2834-47aa-a7bc-0cafb79dc4d9", "content": "CVE-2026-0288:PAN-OS TSA\u306b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u3001CVSS\u30b9\u30b3\u30a29.2\n\n\u7d30\u5de5\u3055\u308c\u305f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30ea\u30af\u30a8\u30b9\u30c81\u4ef6\u3067\u3001\u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5883\u754c\u304b\u3089\u4fb5\u5165\u53e3\u3078\u3068\u59ff\u3092\u5909\u3048\u3066\u3057\u307e\u3044\u307e\u3059\u3002PAN-OS\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u306e\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u30c7\u30d0\u30a4\u30b9\u306e\u52d5\u4f5c\u3092\u59a8\u5bb3\u3057\u3001\u3055\u3089\u306b\u306f\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306f...", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqjpebvyuf2w"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-104023", "record": "SSA-104023", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-104023", "record": "SSA-104023", "field": "document.tracking.initial_release_date", "linked_record": true}, {"timestamp": "2026-08-07T17:50:55.228Z", "date_only": false, "value": "2026-08-07T17:50:55.228495Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055491493877536", "record": "CVE-2026-0288", "field": "creation_timestamp", "uuid": "5e5ad3bf-a2b7-4be4-aa4c-bd799bbf4e78", "content": "CISA has added one vulnerability to the KEV catalogue:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA \nCisco:\nNEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco \nPalo Alto:\nCRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288 \nMicrosoft:\nSeveral updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft \nGoogle:\nNew: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome \nBroadcom:\nOne new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory\nPosted yesterday:\nApple security updates https://support.apple.com/en-us/100100 #Apple \nAMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD \nDell:\nCRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL", "url": "https://infosec.exchange/users/AAKL/statuses/117055491493877536"}, {"timestamp": "2026-08-11T00:00:00Z", "date_only": false, "value": "2026-08-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-104023", "record": "SSA-104023", "field": "document.tracking.revision_history.1.date", "metric_role": "disclosure", "metric_basis": "recorded_event", "added_in_revision": true, "linked_record": true}, {"timestamp": "2026-08-11T13:17:56.003Z", "date_only": false, "value": "2026-08-11T13:17:56.003", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0288", "record": "FKIE_CVE-2026-0288", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-11T15:31:56Z", "date_only": false, "value": "2026-08-11T15:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RGMM-652R-CRF4", "record": "GHSA-RGMM-652R-CRF4", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-104023", "record": "SSA-104023", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-15T01:11:53.783Z", "date_only": false, "value": "2026-10-15T01:11:53.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-0288", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T01:11:53.783Z", "date_only": false, "value": "2026-10-15T01:11:53.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2026-0288", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-104023", "record": "SSA-104023", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-104023", "record": "SSA-104023", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-10T12:44:32.369Z", "anchors": {"origin": {"timestamp": "2026-07-08T16:00:00Z", "date_only": false, "value": "2026-07-08T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0288", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-08T16:00:00Z", "date_only": false, "value": "2026-07-08T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0288", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 10788272.369939, "hours": 2996.7423249830554, "days": 124.86426354096064, "min_seconds": 10788272.369939, "max_seconds": 10788272.369939, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-08T16:00:00Z", "date_only": false, "value": "2026-07-08T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0288", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T12:44:32.369Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}