{"metadata": {"vulnerability": "CVE-2026-16740", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-23T08:43:20.747Z", "date_only": false, "value": "2026-07-23T08:43:20.747Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-16740", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T12:43:00Z", "date_only": false, "value": "2026-10-14T12:43:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-16740", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T12:47:35.900Z", "date_only": false, "value": "2026-10-14T12:47:35.900Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16740", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T12:50:50.848Z", "date_only": false, "value": "2026-10-14T12:50:50.848Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-16740", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:17:27Z", "date_only": false, "value": "2026-10-14T13:17:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4Q93-P2JM-73J6", "record": "GHSA-4Q93-P2JM-73J6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T13:17:27.977Z", "date_only": false, "value": "2026-10-14T13:17:27.977", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16740", "record": "FKIE_CVE-2026-16740", "field": "published"}, {"timestamp": "2026-10-14T13:30:25.858Z", "date_only": false, "value": "2026-10-14T13:30:25.858030Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117439504393324400", "record": "cve-2026-16740", "field": "creation_timestamp", "uuid": "f8b956d6-d921-4c18-80ab-5c611c03be8b", "content": "TR7 ASP (TR7 Cyber Defense Inc.) is vulnerable to unauthenticated OS command injection (CVE-2026-16740, CVSS 9.8, CRITICAL). Remote attackers can fully compromise affected versions. Restrict access & monitor for abuse. https://radar.offseq.com/threat/cve-2026-16740-cwe-306-missing-authentication-for-critical-function-in-tr7-cyber-defense-inc-tr7-asp-604c8853c8296eb5 #OffSeq #Vuln #TR7 #CVE202616740", "url": "https://infosec.exchange/users/offseq/statuses/117439504393324400"}, {"timestamp": "2026-10-14T13:30:28.110Z", "date_only": false, "value": "2026-10-14T13:30:28.110590Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxtnrlpha62y", "record": "cve-2026-16740", "field": "creation_timestamp", "uuid": "134b4170-a2b6-40d9-9601-4a8a2c462c6d", "content": "CVE-2026-16740: CRITICAL OS command injection in TR7 ASP (CVSS 9.8). Remote, no-auth attack possible. Restrict access, monitor for abuse. Patch status unknown. https://radar.offseq.com/threat/cve-2026-16740-cwe-306-missing-authentication-for-critical-function-in-tr7-cyber-defense-inc-tr7-asp-604c...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxtnrlpha62y"}, {"timestamp": "2026-10-14T14:02:01.782Z", "date_only": false, "value": "2026-10-14T14:02:01.782498Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16740", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:02:01.782Z", "date_only": false, "value": "2026-10-14T14:02:01.782498Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16740", "record": "FKIE_CVE-2026-16740", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:02:23.445Z", "date_only": false, "value": "2026-10-14T14:02:23.445Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-16740", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:02:23.445Z", "date_only": false, "value": "2026-10-14T14:02:23.445Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16740", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:07:34.482Z", "date_only": false, "value": "2026-10-14T14:07:34.482150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtptxw2wx2l", "record": "CVE-2026-16740", "field": "creation_timestamp", "uuid": "1595b7ac-ae0e-457a-a634-3baf5d99dc6d", "content": "\ud83d\udea8 CVE-2026-16740 \u2014 CVSS 9.8 CRITICAL\n\nMissing authentication for critical function vulnerability in TR7 Cyber \u200b\u200bDefense Inc. TR7 ASP on virtual a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16740\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtptxw2wx2l"}, {"timestamp": "2026-10-14T14:43:15.752Z", "date_only": false, "value": "2026-10-14T14:43:15.752854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eigmvwvs3cvf2", "record": "CVE-2026-16740", "field": "creation_timestamp", "uuid": "4d22c886-e28a-4b9e-838e-3fedc4d704bc", "content": "CVE-2026-16740 - Missing Authentication for Critical Function in TR7 Cyber \u200b\u200bDefense's TR7 ASP\nCVE ID : CVE-2026-16740\n \n Published : Oct. 14, 2026, 1:17 p.m. | 15\u00a0minutes ago\n \n Description : Missing authentication for critical function vulnerability in TR7 Cyber \u200b\u200bDefense In...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/eigmvwvs3cvf2"}, {"timestamp": "2026-10-14T15:20:04.544Z", "date_only": false, "value": "2026-10-14T15:20:04.544950Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxttvm2rtl2q", "record": "CVE-2026-16740", "field": "creation_timestamp", "uuid": "17071a4e-f6f7-45f4-a462-419c70f7e305", "content": "CVE-2026-16740 - tr7 asp\nThe TR7 ASP product, both virtual and physical appliances, does not require authentication for a critical function, allowing anyone to execute operating system commands. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tr7asp #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxttvm2rtl2q"}, {"timestamp": "2026-10-14T15:32:18Z", "date_only": false, "value": "2026-10-14T15:32:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4Q93-P2JM-73J6", "record": "GHSA-4Q93-P2JM-73J6", "field": "published"}, {"timestamp": "2026-10-14T15:32:18Z", "date_only": false, "value": "2026-10-14T15:32:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4Q93-P2JM-73J6", "record": "GHSA-4Q93-P2JM-73J6", "field": "modified"}, {"timestamp": "2026-10-14T18:20:02.068Z", "date_only": false, "value": "2026-10-14T18:20:02.068281Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440643176595256", "record": "CVE-2026-16740", "field": "creation_timestamp", "uuid": "e9487d16-40e6-46f6-b4f5-dcc49ad20e03", "content": "CVE-2026-16740 Missing Authentication for Critical Function in TR7 Cyber \u200b\u200bDefense's TR7 ASP Missing authentication for critical function vulnerability in TR7 Cyber \u200b\u200bDefense Inc. TR7 ASP on virtual appliance and TR7 Cyber \u200b\u200bDefense Inc. TR7 ASP on physical appliance allows OS Command Injection.\nThis issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.\nhttps://www.cve.org/CVERecord?id=CVE-2026-16740https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327#TR7Cyber\u200b\u200bDefenseInc. #TR7ASP#CVE_2026_16740#bot", "url": "https://infosec.exchange/users/cve/statuses/117440643176595256"}, {"timestamp": "2026-10-15T14:42:22.220Z", "date_only": false, "value": "2026-10-15T14:42:22.220", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16740", "record": "FKIE_CVE-2026-16740", "field": "lastModified"}]}