{"metadata": {"vulnerability": "CVE-2026-13249", "count": 21, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-24T18:04:29.668Z", "date_only": false, "value": "2026-06-24T18:04:29.668Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-13249", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T18:24:36.005Z", "date_only": false, "value": "2026-09-24T18:24:36.005Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13249", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-24T18:24:36.005Z", "date_only": false, "value": "2026-09-24T18:24:36.005Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Honeywell", "record": "CVE-2026-13249", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T18:37:57.888Z", "date_only": false, "value": "2026-09-24T18:37:57.888525Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13249", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T18:37:57.888Z", "date_only": false, "value": "2026-09-24T18:37:57.888525Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13249", "record": "FKIE_CVE-2026-13249", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-24T18:38:06.812Z", "date_only": false, "value": "2026-09-24T18:38:06.812Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-13249", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T18:38:06.812Z", "date_only": false, "value": "2026-09-24T18:38:06.812Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13249", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T19:17:13Z", "date_only": false, "value": "2026-09-24T19:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HF7G-JR9V-JPC5", "record": "GHSA-HF7G-JR9V-JPC5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-24T19:17:13.080Z", "date_only": false, "value": "2026-09-24T19:17:13.080", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13249", "record": "FKIE_CVE-2026-13249", "field": "published"}, {"timestamp": "2026-09-24T19:30:05.606Z", "date_only": false, "value": "2026-09-24T19:30:05.606004Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbykazcqy2y", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "c100f055-f077-4056-8d35-f5ec7e479d7b", "content": "CVE-2026-13249 - pd45 industrial printer\nThe web management screen of the Honeywell PD45 industrial printer (firmware version F10.19.010040) lets anyone upload files without logging in. An attacker could place a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#honeywell #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbykazcqy2y"}, {"timestamp": "2026-09-24T20:08:27.478Z", "date_only": false, "value": "2026-09-24T20:08:27.478723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2oubdmq2k", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "5bb84022-6aaa-462b-a56d-325747ad77f3", "content": "\ud83d\udea8 CVE-2026-13249 \u2014 CVSS 9.8 CRITICAL\n\nAn unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management inte...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-13249\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2oubdmq2k"}, {"timestamp": "2026-09-24T20:43:32.537Z", "date_only": false, "value": "2026-09-24T20:43:32.537", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13249", "record": "FKIE_CVE-2026-13249", "field": "lastModified"}, {"timestamp": "2026-09-24T21:32:48Z", "date_only": false, "value": "2026-09-24T21:32:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HF7G-JR9V-JPC5", "record": "GHSA-HF7G-JR9V-JPC5", "field": "published"}, {"timestamp": "2026-09-24T21:32:48Z", "date_only": false, "value": "2026-09-24T21:32:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HF7G-JR9V-JPC5", "record": "GHSA-HF7G-JR9V-JPC5", "field": "modified"}, {"timestamp": "2026-09-25T06:17:33.147Z", "date_only": false, "value": "2026-09-25T06:17:33.147879Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwd4pyg2nm2y", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "3625288b-fff8-412c-9cb8-a636f8802a65", "content": "\ud83d\udd34 CVE-2026-13249 - Critical (9.8)\n\nAn unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web manag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13249/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwd4pyg2nm2y"}, {"timestamp": "2026-09-26T12:00:08Z", "date_only": false, "value": "2026-09-26T12:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103427", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "738c09df-d56c-4e3c-9c48-8775853e8130", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13249\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040\u2013before F10.22.030745) leading to RCE. Python check/exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103427"}, {"timestamp": "2026-09-26T12:00:08Z", "date_only": false, "value": "2026-09-26T12:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103427", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "72c57232-c5d5-4564-b26e-45af5e51a7fc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13249\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040\u2013before F10.22.030745) leading to RCE. Python check/exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103427"}, {"timestamp": "2026-09-26T15:00:22Z", "date_only": false, "value": "2026-09-26T15:00:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1icfDYPfcqBNy4oZYvRCCHditTCoxypxb2kpqptiMANqlNw", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "72ee2f1f-b3b7-418a-a9eb-727ecb06ba83"}, {"timestamp": "2026-09-26T15:00:22Z", "date_only": false, "value": "2026-09-26T15:00:22.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1icfDYPfcqBNy4oZYvRCCHditTCoxypxb2kpqptiMANqlNw", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "09a38b54-3b4a-4e5d-aaeb-8e4de93daa2a"}, {"timestamp": "2026-09-26T21:00:05Z", "date_only": false, "value": "2026-09-26T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aouElhUq9Ye3BGvbzz59jTMPBnYDztZUvud3qnXOw9ieT70", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "252631bb-79fa-4096-931e-1ffc13b238e4"}, {"timestamp": "2026-09-26T21:00:05Z", "date_only": false, "value": "2026-09-26T21:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/aouElhUq9Ye3BGvbzz59jTMPBnYDztZUvud3qnXOw9ieT70", "record": "CVE-2026-13249", "field": "creation_timestamp", "uuid": "d06e15f6-5d5a-4c95-aae6-f6b53029459a"}]}