{"metadata": {"vulnerability": "CVE-2026-100582", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100582", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-26T01:03:42.740Z", "date_only": false, "value": "2026-09-26T01:03:42.740Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-100582", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-26T02:19:07.452Z", "date_only": false, "value": "2026-09-26T02:19:07.452Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-100582", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-26T03:00:25.881Z", "date_only": false, "value": "2026-09-26T03:00:25.881344Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117335105540930772", "record": "cve-2026-100582", "field": "creation_timestamp", "uuid": "fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002", "content": "CVE-2026-100582 (HIGH): openclaw msteams <2026.8.1 has a missing authorization flaw \u2014 low-trust users can bypass channel read allowlists and access restricted data. Patch to 2026.8.1 ASAP. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vuln #OpenClaw #Security", "url": "https://infosec.exchange/users/offseq/statuses/117335105540930772"}, {"timestamp": "2026-09-26T03:00:27.992Z", "date_only": false, "value": "2026-09-26T03:00:27.992966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfc6ijy7j2v", "record": "cve-2026-100582", "field": "creation_timestamp", "uuid": "9f69aaf7-93b4-4c0e-a41d-e752b18bae7c", "content": "openclaw msteams <2026.8.1 has a HIGH severity bug (CVE-2026-100582) allowing unauthorized channel reads. Upgrade to 2026.8.1+ to block data exposure. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vulnerability #Cybersecurity", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwfc6ijy7j2v"}, {"timestamp": "2026-09-26T03:17:06Z", "date_only": false, "value": "2026-09-26T03:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X2GP-W9P4-CPWG", "record": "GHSA-X2GP-W9P4-CPWG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-26T03:17:06.080Z", "date_only": false, "value": "2026-09-26T03:17:06.080", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100582", "record": "FKIE_CVE-2026-100582", "field": "published"}, {"timestamp": "2026-09-26T03:30:27Z", "date_only": false, "value": "2026-09-26T03:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X2GP-W9P4-CPWG", "record": "GHSA-X2GP-W9P4-CPWG", "field": "published"}, {"timestamp": "2026-09-26T03:30:27Z", "date_only": false, "value": "2026-09-26T03:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X2GP-W9P4-CPWG", "record": "GHSA-X2GP-W9P4-CPWG", "field": "modified"}, {"timestamp": "2026-09-26T05:01:58.077Z", "date_only": false, "value": "2026-09-26T05:01:58.077780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrjsak2x", "record": "CVE-2026-100582", "field": "creation_timestamp", "uuid": "9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1", "content": "Daily IT Security Digest \u2014 2026-09-26\nmulti-person DMs), CVE-2026-100582 (HIGH, missing authorization in MS Teams channel read allowlist bypass), and CVE-2026-93952 variants affecting Discord integration, the Browser extension relay (DoS), diagnostics-prometheus, and third-party credential routing.", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrjsak2x"}, {"timestamp": "2026-09-28T19:31:40.726Z", "date_only": false, "value": "2026-09-28T19:31:40.726490Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100582", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-28T19:31:40.726Z", "date_only": false, "value": "2026-09-28T19:31:40.726490Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100582", "record": "FKIE_CVE-2026-100582", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-28T19:32:23.831Z", "date_only": false, "value": "2026-09-28T19:32:23.831Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100582", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:21:50.196Z", "date_only": false, "value": "2026-10-08T15:21:50.196Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-100582", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T15:21:50.196Z", "date_only": false, "value": "2026-10-08T15:21:50.196Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100582", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T16:16:57.110Z", "date_only": false, "value": "2026-10-08T16:16:57.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100582", "record": "FKIE_CVE-2026-100582", "field": "lastModified"}]}