{"metadata": {"vulnerability": "CVE-2026-18685", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-08-03T00:00:00Z", "date_only": false, "value": "2026-08-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18685", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-08-03T02:00:00Z", "date_only": false, "value": "2026-08-03T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18685", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-08-03T15:50:05.082Z", "date_only": false, "value": "2026-08-03T15:50:05.082Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18685", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-03T17:55:20Z", "date_only": false, "value": "2026-08-03T17:55:20.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18685", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-08-03T23:15:08.573Z", "date_only": false, "value": "2026-08-03T23:15:08.573Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18685", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-03T23:15:08.573Z", "date_only": false, "value": "2026-08-03T23:15:08.573Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18685", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-03T23:56:05.271Z", "date_only": false, "value": "2026-08-03T23:56:05.271621Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f", "record": "CVE-2026-18685", "field": "creation_timestamp", "uuid": "cee15acd-45a2-4f52-b333-864843c8abb1", "content": "CVE-2026-18685 - gl-mt3000\nThe GL.iNet GL-MT3000 modem has a vulnerability that allows attackers to execute unauthorized commands when upgrading the modem's software. This can be done remotely, which means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f"}, {"timestamp": "2026-08-04T00:00:37.565Z", "date_only": false, "value": "2026-08-04T00:00:37.565864Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117034296046822265", "record": "cve-2026-18685", "field": "creation_timestamp", "uuid": "7a72757c-a25d-4a39-9d4b-4d509546fef1", "content": "CVE-2026-18685: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated RCE possible. No patch yet \u2014 restrict access & monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #vuln #IoT #infosec", "url": "https://infosec.exchange/users/offseq/statuses/117034296046822265"}, {"timestamp": "2026-08-04T00:00:39.884Z", "date_only": false, "value": "2026-08-04T00:00:39.884919Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g", "record": "cve-2026-18685", "field": "creation_timestamp", "uuid": "bcc30692-a3eb-4e03-a514-c51959175014", "content": "GL.iNet GL-MT3000 (v4.4.0 \u2013 4.4.5) hit by CRITICAL command injection (CVE-2026-18685). Remote code execution possible \u2014 no patch yet. Restrict access & monitor devices. https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #IoTSecurity #Vuln...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g"}, {"timestamp": "2026-08-04T00:16:40Z", "date_only": false, "value": "2026-08-04T00:16:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FRJC-J2MW-RV29", "record": "GHSA-FRJC-J2MW-RV29", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-04T00:16:40.350Z", "date_only": false, "value": "2026-08-04T00:16:40.350", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18685", "record": "FKIE_CVE-2026-18685", "field": "published"}, {"timestamp": "2026-08-04T00:34:54Z", "date_only": false, "value": "2026-08-04T00:34:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FRJC-J2MW-RV29", "record": "GHSA-FRJC-J2MW-RV29", "field": "published"}, {"timestamp": "2026-08-04T00:34:54Z", "date_only": false, "value": "2026-08-04T00:34:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FRJC-J2MW-RV29", "record": "GHSA-FRJC-J2MW-RV29", "field": "modified"}, {"timestamp": "2026-08-04T01:55:20.759Z", "date_only": false, "value": "2026-08-04T01:55:20.759165Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn", "record": "CVE-2026-18685", "field": "creation_timestamp", "uuid": "9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9", "content": "CVE-2026-18685 - GL.iNet GL-MT3000 modem.so glc set_upgrade command injection\nCVE ID : CVE-2026-18685\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn"}, {"timestamp": "2026-08-04T14:18:46.542Z", "date_only": false, "value": "2026-08-04T14:18:46.542647Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18685", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-04T14:18:46.542Z", "date_only": false, "value": "2026-08-04T14:18:46.542647Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18685", "record": "FKIE_CVE-2026-18685", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-04T14:19:21.884Z", "date_only": false, "value": "2026-08-04T14:19:21.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18685", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T14:19:21.884Z", "date_only": false, "value": "2026-08-04T14:19:21.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18685", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T20:59:00.027Z", "date_only": false, "value": "2026-08-12T20:59:00.027", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18685", "record": "FKIE_CVE-2026-18685", "field": "lastModified"}]}