{"metadata": {"vulnerability": "CVE-2026-14440", "count": 52, "kinds": {"milestone": 6, "sighting": 32, "kev": 0, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-01T22:20:45.895Z", "date_only": false, "value": "2026-07-01T22:20:45.895Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-01T22:35:10.353Z", "date_only": false, "value": "2026-07-01T22:35:10.353Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T22:35:10.353Z", "date_only": false, "value": "2026-07-01T22:35:10.353Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cloudflare", "record": "CVE-2026-14440", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-01T23:16:52Z", "date_only": false, "value": "2026-07-01T23:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VRV9-RJP4-W93C", "record": "GHSA-VRV9-RJP4-W93C", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-07-01T23:16:52.007Z", "date_only": false, "value": "2026-07-01T23:16:52.007", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14440", "record": "FKIE_CVE-2026-14440", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-02T00:31:42Z", "date_only": false, "value": "2026-07-02T00:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VRV9-RJP4-W93C", "record": "GHSA-VRV9-RJP4-W93C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-02T00:31:42Z", "date_only": false, "value": "2026-07-02T00:31:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VRV9-RJP4-W93C", "record": "GHSA-VRV9-RJP4-W93C", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-02T00:41:20.402Z", "date_only": false, "value": "2026-07-02T00:41:20.402582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmsckanzm2k", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "9124c79f-4bb4-457a-8b3a-8fdd18e55ef1", "content": "CVE-2026-14440 - Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records\nCVE ID : CVE-2026-14440\n \n Published : July 1, 2026, 10:35 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Description:\n\n\n\n\nTo issue and renew TLS certificates o...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmsckanzm2k"}, {"timestamp": "2026-07-02T15:26:54.733Z", "date_only": false, "value": "2026-07-02T15:26:54.733662Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpods3piie27", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "c6ab9d80-6f47-43cd-bf4b-85121f1d4260", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14440 \u0432 Cloudflare: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/DB63B140-6706-4C6F-B5B0-4FECBBDB038B", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpods3piie27"}, {"timestamp": "2026-07-02T19:22:08.681Z", "date_only": false, "value": "2026-07-02T19:22:08.681269Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14440", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-07-02T19:22:08.681Z", "date_only": false, "value": "2026-07-02T19:22:08.681269Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14440", "record": "FKIE_CVE-2026-14440", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-02T19:22:18.404Z", "date_only": false, "value": "2026-07-02T19:22:18.404Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-02T19:22:18.404Z", "date_only": false, "value": "2026-07-02T19:22:18.404Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14440", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-03T09:20:47.226Z", "date_only": false, "value": "2026-07-03T09:20:47.226459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7sdapjc2j", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "6cf8c096-71fa-4d76-b6ba-eec62edbc6d3", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14440 \u0432 Cloudflare: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1084A1FA-DEB3-4B91-8E6F-C80B891A4855", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7sdapjc2j"}, {"timestamp": "2026-07-08T11:11:55.552Z", "date_only": false, "value": "2026-07-08T11:11:55.552397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydbfzrs2n", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "8964130d-7a2e-4e6e-ab77-4b1e9d832975", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "url": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydbfzrs2n"}, {"timestamp": "2026-07-08T11:11:56.012Z", "date_only": false, "value": "2026-07-08T11:11:56.012047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzqzk2n", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "452951b6-6c84-4808-824d-bd7df04a0810", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "url": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzqzk2n"}, {"timestamp": "2026-07-08T11:11:56.456Z", "date_only": false, "value": "2026-07-08T11:11:56.456773Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzrys2n", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "fbda6c45-ec3c-4ae6-8d5a-a7590c2e745e", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "url": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzrys2n"}, {"timestamp": "2026-07-09T10:06:54.661Z", "date_only": false, "value": "2026-07-09T10:06:54.661341Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq7f6d5kyc2p", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "4e3e60c4-8e29-491d-8a9b-47f2cf8d3210", "content": "\ud83d\udd12 CVE-2026-14440: Cloudflare Universal SSL CAA records supersede user CAA\n\nA vulnerability (CVE-2026-14440) in Cloudflare's Universal SSL feature causes its automatically managed CA...\n\nhttps://tinyurl.com/28eoa32e #CyberSecurity #InfoSec #CrustyTLDR", "url": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq7f6d5kyc2p"}, {"timestamp": "2026-07-10T09:17:50.140Z", "date_only": false, "value": "2026-07-10T09:17:50.140494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbsvbppz72k", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "0fccc108-d6c0-472b-a78b-2aea08e24271", "content": "CVE-2026-14440: Cloudflare Universal SSL y los registros CAA\n\n\u00bfTu dominio en Cloudflare Universal SSL est\u00e1 expuesto? Verific\u00e1 tus registros CAA en 5 minutos y fren\u00e1 la emisi\u00f3n de certificados fraudulentos por CVE-2...\n\n#cve202614440 #cloudflare #universalssl #registroscaa #rfc8657", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbsvbppz72k"}, {"timestamp": "2026-07-13T13:10:43Z", "date_only": false, "value": "2026-07-13T13:10:43Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0339 / VULNARCHIVE", "record": "GCVE-1988-2026-0339", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-07-16T07:55:12Z", "date_only": false, "value": "2026-07-16T07:55:12Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0354 / VULNARCHIVE", "record": "GCVE-1988-2026-0354", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-07-16T22:33:37.118Z", "date_only": false, "value": "2026-07-16T22:33:37.118655Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqsc5xnqsk2a", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "663a2cdd-0517-486a-bea6-2837fe740269", "content": "[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding \u2014 CVE-2026-14440 assigned 163 days after public no-CVE disclosure\n\nPosted by NotCVE Advisories on Jul 15---------------------------------------------------------------------------- \nNotCV\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqsc5xnqsk2a"}, {"timestamp": "2026-07-17T20:23:22.433Z", "date_only": false, "value": "2026-07-17T20:23:22.433117Z", "kind": "sighting", "label": "Confirmed", "source": "https://david-osipov.vision/en/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "a7cdd494-0db6-4395-8a0f-210b5c6b4a0c", "url": "https://david-osipov.vision/en/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/"}, {"timestamp": "2026-07-17T20:29:56.261Z", "date_only": false, "value": "2026-07-17T20:29:56.261584Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/8df693d3-38e3-4ee0-b4a5-e8d95d54dac9", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "f204a7e4-2bf2-41b7-8605-1d0c749db0e6", "url": "https://vulnerability.circl.lu/comment/8df693d3-38e3-4ee0-b4a5-e8d95d54dac9"}, {"timestamp": "2026-07-18T10:02:42.319Z", "date_only": false, "value": "2026-07-18T10:02:42.319820Z", "kind": "sighting", "label": "Confirmed", "source": "https://david-osipov.vision/ru/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "80f27bf9-6d34-4a88-b8bc-6f9fe182aefb", "url": "https://david-osipov.vision/ru/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/"}, {"timestamp": "2026-07-18T10:03:35.591Z", "date_only": false, "value": "2026-07-18T10:03:35.591662Z", "kind": "sighting", "label": "Confirmed", "source": "https://community.cloudflare.com/t/critical-security-gap-cloudflare-must-fully-support-rfc-8657-caa/", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "d4ff7b65-76dd-41db-b538-9a6c449a010c", "url": "https://community.cloudflare.com/t/critical-security-gap-cloudflare-must-fully-support-rfc-8657-caa/"}, {"timestamp": "2026-07-18T10:03:51.109Z", "date_only": false, "value": "2026-07-18T10:03:51.109804Z", "kind": "sighting", "label": "Confirmed", "source": "https://community.cloudflare.com/t/universal-ssl-exposes-domains-to-bgp-leaks-re-venezuela-analysis/879930", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "da4f4bb4-83ed-4144-90f0-fd3578664994", "url": "https://community.cloudflare.com/t/universal-ssl-exposes-domains-to-bgp-leaks-re-venezuela-analysis/879930"}, {"timestamp": "2026-07-18T10:04:01.301Z", "date_only": false, "value": "2026-07-18T10:04:01.301175Z", "kind": "sighting", "label": "Confirmed", "source": "https://zenodo.org/records/18330221", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "1d3d3111-20a9-43ad-91fd-046dcba1c70b", "url": "https://zenodo.org/records/18330221"}, {"timestamp": "2026-07-18T10:04:24.564Z", "date_only": false, "value": "2026-07-18T10:04:24.564152Z", "kind": "sighting", "label": "Confirmed", "source": "https://zenodo.org/records/21261469", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "100cc962-9f9a-48c8-983d-45d63b0c30a3", "url": "https://zenodo.org/records/21261469"}, {"timestamp": "2026-07-18T10:04:39.622Z", "date_only": false, "value": "2026-07-18T10:04:39.622458Z", "kind": "sighting", "label": "Confirmed", "source": "https://doi.org/10.5281/zenodo.18201411", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "21fbc417-97fb-409c-904b-e3cca81b7721", "url": "https://doi.org/10.5281/zenodo.18201411"}, {"timestamp": "2026-07-18T10:05:38.532Z", "date_only": false, "value": "2026-07-18T10:05:38.532697Z", "kind": "sighting", "label": "Seen", "source": "https://www.instagram.com/reel/DaX5IpqRGHG/", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "434e7d0a-b2a8-45b2-a83b-bf2c0c68ecf0", "url": "https://www.instagram.com/reel/DaX5IpqRGHG/"}, {"timestamp": "2026-07-18T10:06:04.700Z", "date_only": false, "value": "2026-07-18T10:06:04.700433Z", "kind": "sighting", "label": "Seen", "source": "https://www.linkedin.com/posts/david-osipov_cve-cybersecurity-tls-share-7480577048147738624-8_KV", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "7521208c-2024-48df-8894-ee1668cd7f7c", "url": "https://www.linkedin.com/posts/david-osipov_cve-cybersecurity-tls-share-7480577048147738624-8_KV"}, {"timestamp": "2026-07-18T10:06:31.750Z", "date_only": false, "value": "2026-07-18T10:06:31.750978Z", "kind": "sighting", "label": "Seen", "source": "https://www.facebook.com/share/r/188T1YsMFA/", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "3537991e-010b-47c3-ac9c-73b431529aa8", "url": "https://www.facebook.com/share/r/188T1YsMFA/"}, {"timestamp": "2026-07-18T10:06:49.017Z", "date_only": false, "value": "2026-07-18T10:06:49.017997Z", "kind": "sighting", "label": "Seen", "source": "https://www.wikidata.org/wiki/Q140402353", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "9f2c51f0-e4c4-4c34-a7d4-12f1e9d3a01f", "url": "https://www.wikidata.org/wiki/Q140402353"}, {"timestamp": "2026-07-18T10:07:01.117Z", "date_only": false, "value": "2026-07-18T10:07:01.117112Z", "kind": "sighting", "label": "Seen", "source": "http://www.wikidata.org/entity/Q140402353", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "f1fbacae-b55f-45c3-a98d-66822b83549e", "url": "http://www.wikidata.org/entity/Q140402353"}, {"timestamp": "2026-07-18T10:07:25.233Z", "date_only": false, "value": "2026-07-18T10:07:25.233140Z", "kind": "sighting", "label": "Seen", "source": "https://ru.wikipedia.org/wiki/\u041e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435:Cloudflare#\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435_\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435_\u043e_CVE-2026-14440", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "77ce7a7c-7bc4-48aa-ad35-87fbc6f97c05", "url": "https://ru.wikipedia.org/wiki/\u041e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435:Cloudflare#\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435_\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435_\u043e_CVE-2026-14440"}, {"timestamp": "2026-07-18T10:07:53.935Z", "date_only": false, "value": "2026-07-18T10:07:53.935453Z", "kind": "sighting", "label": "Seen", "source": "https://en.wikipedia.org/wiki/Talk:Cloudflare", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "8e2edad2-86dd-4fbc-adc2-e1a9b21ef44f", "url": "https://en.wikipedia.org/wiki/Talk:Cloudflare"}, {"timestamp": "2026-07-19T17:21:26.564Z", "date_only": false, "value": "2026-07-19T17:21:26.564819Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mqzc4jmp7q2l", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "9b09eb29-7e36-4e21-9f89-495d5213eae5", "content": "[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding \u2014 CVE-2026-14440 assigned 163 days after public no\n\nThis article correctly identifies the potential for weakened account binding, but it focuses heavily on a theoretical risk rather than demonstrating e\u2026", "url": "https://bsky.app/profile/arc-codex.com/post/3mqzc4jmp7q2l"}, {"timestamp": "2026-07-20T14:24:09.397Z", "date_only": false, "value": "2026-07-20T14:24:09.397077Z", "kind": "sighting", "label": "Seen", "source": "https://www.reddit.com/r/cybersecurity/comments/1v1i16a/cloudflares_caa_flaw_looks_impractical_for/", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "e8b9bf91-d003-4347-ab71-9e78780a8c6b", "url": "https://www.reddit.com/r/cybersecurity/comments/1v1i16a/cloudflares_caa_flaw_looks_impractical_for/"}, {"timestamp": "2026-09-11T07:55:56Z", "date_only": false, "value": "2026-09-11T07:55:56Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0339", "record": "GCVE-1988-2026-0339", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-09-11T07:55:56Z", "date_only": false, "value": "2026-09-11T07:55:56Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0339", "record": "GCVE-1988-2026-0339", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-09-11T07:55:56Z", "date_only": false, "value": "2026-09-11T07:55:56Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0339 / VULNARCHIVE", "record": "GCVE-1988-2026-0339", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-09-11T07:55:57Z", "date_only": false, "value": "2026-09-11T07:55:57Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0354", "record": "GCVE-1988-2026-0354", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-09-11T07:55:57Z", "date_only": false, "value": "2026-09-11T07:55:57Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0354", "record": "GCVE-1988-2026-0354", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-09-11T07:55:57Z", "date_only": false, "value": "2026-09-11T07:55:57Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0354 / VULNARCHIVE", "record": "GCVE-1988-2026-0354", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "a781498b-3891-4f44-8849-9022db036aac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "a118eca1-c74f-457a-beab-6b0625b22a6c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253"}, {"timestamp": "2026-10-25T21:10:00.770Z", "date_only": false, "value": "2026-10-25T21:10:00.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14440", "record": "FKIE_CVE-2026-14440", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-25T23:00:21Z", "date_only": false, "value": "2026-10-25T23:00:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YL6fUXNq3vuD7HgZQiye1p3YJ07YlUUcZP8GggpoplcAboc", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "eaa0785d-cb00-4456-ae73-87b97a62c711", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T23:00:21Z", "date_only": false, "value": "2026-10-25T23:00:21.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YL6fUXNq3vuD7HgZQiye1p3YJ07YlUUcZP8GggpoplcAboc", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "b1ffd9fc-9633-43c0-b057-ca1655c66dd4"}, {"timestamp": "2026-10-26T03:00:06Z", "date_only": false, "value": "2026-10-26T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vuyoKrhXmTlNF_obOocDflx8Hmwxgpg1efxtQxIn4ZbapV8", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "d8aeee09-7c62-4177-922c-0865d83f8dd9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-26T03:00:06Z", "date_only": false, "value": "2026-10-26T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/vuyoKrhXmTlNF_obOocDflx8Hmwxgpg1efxtQxIn4ZbapV8", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "f27fdeb1-4ac7-425c-b3e5-85e8aca8f4fe"}], "metrics": {"as_of": "2026-11-15T00:23:03.884Z", "anchors": {"origin": {"timestamp": "2026-07-01T22:35:10.353Z", "date_only": false, "value": "2026-07-01T22:35:10.353Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-01T22:35:10.353Z", "date_only": false, "value": "2026-07-01T22:35:10.353Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "a781498b-3891-4f44-8849-9022db036aac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 10009958.647, "hours": 2780.544068611111, "days": 115.8560028587963, "min_seconds": 10009958.647, "max_seconds": 10009958.647, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-01T22:35:10.353Z", "date_only": false, "value": "2026-07-01T22:35:10.353Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "a781498b-3891-4f44-8849-9022db036aac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 11756873.531956, "hours": 3265.798203321111, "days": 136.07492513837963, "min_seconds": 11756873.531956, "max_seconds": 11756873.531956, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-01T22:35:10.353Z", "date_only": false, "value": "2026-07-01T22:35:10.353Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14440", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:23:03.884Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 1746914.884956, "hours": 485.25413470999996, "days": 20.21892227958333, "min_seconds": 1746914.884956, "max_seconds": 1746914.884956, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-25T19:07:49Z", "date_only": false, "value": "2026-10-25T19:07:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107253", "record": "CVE-2026-14440", "field": "creation_timestamp", "uuid": "a781498b-3891-4f44-8849-9022db036aac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 19:03:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107253", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T00:23:03.884Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}