{"metadata": {"vulnerability": "CVE-2026-15579", "count": 20, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-07-13T09:51:45.547Z", "date_only": false, "value": "2026-07-13T09:51:45.547Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15579", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1205", "record": "CERTFR-2026-AVI-1205", "field": "last_revision_date"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": true, "value": "2026-09-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1205", "record": "CERTFR-2026-AVI-1205", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1205", "record": "CERTFR-2026-AVI-1205", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-18T09:32:59.993Z", "date_only": false, "value": "2026-09-18T09:32:59.993Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15579", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T09:32:59.993Z", "date_only": false, "value": "2026-09-18T09:32:59.993Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Moxa", "record": "CVE-2026-15579", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T10:17:04Z", "date_only": false, "value": "2026-09-18T10:17:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HV3X-FR88-GCJP", "record": "GHSA-HV3X-FR88-GCJP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-18T10:17:04.537Z", "date_only": false, "value": "2026-09-18T10:17:04.537", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15579", "record": "FKIE_CVE-2026-15579", "field": "published"}, {"timestamp": "2026-09-18T10:38:44.190Z", "date_only": false, "value": "2026-09-18T10:38:44.190582Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15579", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T10:38:44.190Z", "date_only": false, "value": "2026-09-18T10:38:44.190582Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15579", "record": "FKIE_CVE-2026-15579", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T10:39:14.140Z", "date_only": false, "value": "2026-09-18T10:39:14.140Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15579", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T10:39:14.140Z", "date_only": false, "value": "2026-09-18T10:39:14.140Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15579", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T11:32:34.828Z", "date_only": false, "value": "2026-09-18T11:32:34.828958Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3l4d5wvgdauoe", "record": "CVE-2026-15579", "field": "creation_timestamp", "uuid": "5c86b4cc-b76a-4657-aa9f-c1c31d16a4ef", "content": "CVE-2026-15579 - Ethernet Switch Web Interface Buffer Overflow Denial of Service\nCVE ID : CVE-2026-15579\n \n Published : Sept. 18, 2026, 10:17 a.m. | 56\u00a0minutes ago\n \n Description : An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3l4d5wvgdauoe"}, {"timestamp": "2026-09-18T12:31:17Z", "date_only": false, "value": "2026-09-18T12:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HV3X-FR88-GCJP", "record": "GHSA-HV3X-FR88-GCJP", "field": "published"}, {"timestamp": "2026-09-18T12:31:17Z", "date_only": false, "value": "2026-09-18T12:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HV3X-FR88-GCJP", "record": "GHSA-HV3X-FR88-GCJP", "field": "modified"}, {"timestamp": "2026-09-18T15:00:10.657Z", "date_only": false, "value": "2026-09-18T15:00:10.657307Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvsgo3vnl423", "record": "CVE-2026-15579", "field": "creation_timestamp", "uuid": "ecc35b58-5080-434f-b80e-8d9b7967fe86", "content": "\ud83d\udd17 CVE : CVE-2026-15579", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvsgo3vnl423"}, {"timestamp": "2026-09-18T16:02:06.712Z", "date_only": false, "value": "2026-09-18T16:02:06.712338Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/a37032d4209bee987101439e7254e730", "record": "CVE-2026-15579", "field": "creation_timestamp", "uuid": "e59c55ac-6d53-4403-9678-4ad5a6221c37", "content": "This daily cybersecurity digest highlights emerging threats, critical vulnerabilities, and vendor advisories from September 2026:\n\n**Active Threats & Campaigns**\n- **Transparent Tribe (APT36):** Pakistan-linked group deploying new Rust-based backdoors targeting Indian and Afghan government/defense entities.\n- **GhostCode Phishing:** Exploits Microsoft 365\u2019s OAuth device authorization flow to capture tokens, persistently register devices via Intune/Azure AD, and maintain up to 14 days of SSO-equivalent access.\n- **Teams Impersonation:** Attackers use default external chats to deliver malicious MSI files that steal passwords via fake Windows lock screens.\n\n**Critical Vulnerabilities & Advisories**\n- **AI Coding Agents:** \u201cPlugin4Shell\u201d exposes a zero-click RCE flaw in Anthropic, OpenAI, Google, and GitHub agents by bypassing Git SHA validation. Anthropic and OpenAI are patched; GitHub remains partially exposed.\n- **Network/ICS:** Moxa and Advantech issued advisories for Ethernet switches vulnerable to CVE-2026-15579 (buffer overflow causing DoS).\n- **Enterprise & Browser:** NetBackup Flex OS has a critical (9.4) privilege escalation flaw (CVE-2026-28197). Grafana OSS (v12.3.0\u201313.2.1) contains a Geomap XSS vulnerability. Google Chrome (<153.0.8010.53) requires urgent patching.\n\n**Key Defensive Actions**\nApply all vendor patches immediately, restrict device-code authentication via Conditional Access, disable default Teams external chats for non-essential users, and monitor AI agent plugin installations alongside EDR/CI-CD logs for anomalous activity.", "url": "https://gist.github.com/ichintu/a37032d4209bee987101439e7254e730"}, {"timestamp": "2026-09-18T16:07:11.711Z", "date_only": false, "value": "2026-09-18T16:07:11.711951Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvskfw7gtm2j", "record": "CVE-2026-15579", "field": "creation_timestamp", "uuid": "70677707-99ce-44d3-ad9e-d26e4733ab4e", "content": "~Cybergcca~\nGrafana, Advantech, Moxa and Chrome users should apply available updates.\n-\nIOCs: CVE-2026-15579\n-\n#CVE202615579 #ThreatIntel #Vulnerability", "url": "https://bsky.app/profile/cyfar.ca/post/3mvskfw7gtm2j"}, {"timestamp": "2026-09-18T16:15:08.484Z", "date_only": false, "value": "2026-09-18T16:15:08.484712Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-938", "record": "CVE-2026-15579", "field": "creation_timestamp", "uuid": "596e99f9-b6bc-41e0-97b2-0c90ff9b1bcd", "url": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-938"}, {"timestamp": "2026-09-18T19:05:01.127Z", "date_only": false, "value": "2026-09-18T19:05:01.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15579", "record": "FKIE_CVE-2026-15579", "field": "lastModified"}]}