{"metadata": {"vulnerability": "CVE-2026-12384", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-16T10:44:20.111Z", "date_only": false, "value": "2026-06-16T10:44:20.111Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-12384", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-18T07:45:00Z", "date_only": false, "value": "2026-09-18T07:45:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-12384", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-18T07:48:32.996Z", "date_only": false, "value": "2026-09-18T07:48:32.996Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12384", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T07:48:32.996Z", "date_only": false, "value": "2026-09-18T07:48:32.996Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-12384", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T08:16:58Z", "date_only": false, "value": "2026-09-18T08:16:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2QX2-JCC3-GVWF", "record": "GHSA-2QX2-JCC3-GVWF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-18T08:16:58.813Z", "date_only": false, "value": "2026-09-18T08:16:58.813", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12384", "record": "FKIE_CVE-2026-12384", "field": "published"}, {"timestamp": "2026-09-18T09:31:07Z", "date_only": false, "value": "2026-09-18T09:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2QX2-JCC3-GVWF", "record": "GHSA-2QX2-JCC3-GVWF", "field": "published"}, {"timestamp": "2026-09-18T09:31:07Z", "date_only": false, "value": "2026-09-18T09:31:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2QX2-JCC3-GVWF", "record": "GHSA-2QX2-JCC3-GVWF", "field": "modified"}, {"timestamp": "2026-09-18T12:02:05.043Z", "date_only": false, "value": "2026-09-18T12:02:05.043346Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/19747df30b81712f748bb20d82e42524", "record": "CVE-2026-12384", "field": "creation_timestamp", "uuid": "f7ecbd7a-395e-4251-843f-fb95300d18b1", "content": "This daily cybersecurity roundup covers four key areas:\n\n* **Operational Lessons:** A new ESXi user\u2019s lab misconfiguration caused unintended production network access and DHCP conflicts, highlighting the critical need for strict environment isolation.\n* **Threat Intelligence:** The WeaselBiscuit JavaScript stealer is spreading via 13 npm packages (linked to North Korea\u2019s \u201cContagious Interview\u201d campaign), while another npm-based stealer, PhantomRaven, appears LLM-assisted. Conflicting reports also suggest AI models still struggle with CAPTCHAs.\n* **Vulnerability Disclosures:** Several high-severity flaws were published, including a broken access control in TECHIN2B (CVE-2026-12384, 8.8), an authorization bypass in WordPress\u2019s Filter Gallery plugin (CVE-2026-89413, 8.1), and a quartet of Linux local root privilege escalation vulnerabilities.\n* **Strategic Insights:** Industry analysis emphasizes that sustainable cybersecurity relies on mastering fundamentals\u2014asset/identity management, operational resilience, and business-aligned risk communication\u2014rather than chasing advanced or emerging technologies.", "url": "https://gist.github.com/ichintu/19747df30b81712f748bb20d82e42524"}, {"timestamp": "2026-09-18T19:15:48.813Z", "date_only": false, "value": "2026-09-18T19:15:48.813903Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12384", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T19:15:48.813Z", "date_only": false, "value": "2026-09-18T19:15:48.813903Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12384", "record": "FKIE_CVE-2026-12384", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T19:16:03.483Z", "date_only": false, "value": "2026-09-18T19:16:03.483Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-12384", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T19:16:03.483Z", "date_only": false, "value": "2026-09-18T19:16:03.483Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12384", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T20:17:04.707Z", "date_only": false, "value": "2026-09-18T20:17:04.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12384", "record": "FKIE_CVE-2026-12384", "field": "lastModified"}]}