{"metadata": {"vulnerability": "CVE-2026-18686", "count": 20, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-08-03T00:00:00Z", "date_only": false, "value": "2026-08-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18686", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-08-03T02:00:00Z", "date_only": false, "value": "2026-08-03T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18686", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-08-03T15:50:09.485Z", "date_only": false, "value": "2026-08-03T15:50:09.485Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18686", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-03T17:55:25Z", "date_only": false, "value": "2026-08-03T17:55:25.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18686", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-08-04T00:00:12.184Z", "date_only": false, "value": "2026-08-04T00:00:12.184Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18686", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-04T00:00:12.184Z", "date_only": false, "value": "2026-08-04T00:00:12.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-18686", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T00:16:40Z", "date_only": false, "value": "2026-08-04T00:16:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7892-84CJ-C35C", "record": "GHSA-7892-84CJ-C35C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-04T00:16:40.520Z", "date_only": false, "value": "2026-08-04T00:16:40.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18686", "record": "FKIE_CVE-2026-18686", "field": "published"}, {"timestamp": "2026-08-04T00:34:54Z", "date_only": false, "value": "2026-08-04T00:34:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7892-84CJ-C35C", "record": "GHSA-7892-84CJ-C35C", "field": "published"}, {"timestamp": "2026-08-04T00:34:54Z", "date_only": false, "value": "2026-08-04T00:34:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7892-84CJ-C35C", "record": "GHSA-7892-84CJ-C35C", "field": "modified"}, {"timestamp": "2026-08-04T01:30:25.850Z", "date_only": false, "value": "2026-08-04T01:30:25.850830Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117034649197021910", "record": "cve-2026-18686", "field": "creation_timestamp", "uuid": "2a409c84-8f90-4be2-bb33-84a84d61a092", "content": "CVE-2026-18686: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated code execution possible \u2014 no patch yet. Limit admin interface exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE #RouterSecurity", "url": "https://infosec.exchange/users/offseq/statuses/117034649197021910"}, {"timestamp": "2026-08-04T01:30:29.063Z", "date_only": false, "value": "2026-08-04T01:30:29.063716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x", "record": "cve-2026-18686", "field": "creation_timestamp", "uuid": "bc902cd8-0afc-49a2-8da3-de51e0e11b50", "content": "CRITICAL command injection (CVE-2026-18686) hits GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote attackers can run commands \u2014 no patch yet. Restrict admin access & monitor closely. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE", "url": "https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x"}, {"timestamp": "2026-08-04T02:01:18.571Z", "date_only": false, "value": "2026-08-04T02:01:18.571730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cknwu5hcvw2cw", "record": "CVE-2026-18686", "field": "creation_timestamp", "uuid": "9a13a0d9-cea3-4983-89a8-2e661d0d9684", "content": "CVE-2026-18686 - GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection\nCVE ID : CVE-2026-18686\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected e...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/cknwu5hcvw2cw"}, {"timestamp": "2026-08-04T11:07:42.750Z", "date_only": false, "value": "2026-08-04T11:07:42.750755Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msauoyb6mx2r", "record": "cve-2026-18686", "field": "creation_timestamp", "uuid": "7d131304-8b1e-4c4c-b293-ba187889060f", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18686/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3msauoyb6mx2r"}, {"timestamp": "2026-08-04T11:07:45.606Z", "date_only": false, "value": "2026-08-04T11:07:45.606757Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117036919208348305", "record": "cve-2026-18686", "field": "creation_timestamp", "uuid": "a149fe02-d587-4402-82fe-910d213e6044", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\nhttps://www.valtersit.com/cve/cve-2026-18686/", "url": "https://mastodon.social/users/hugovalters/statuses/117036919208348305"}, {"timestamp": "2026-08-04T13:27:21.443Z", "date_only": false, "value": "2026-08-04T13:27:21.443352Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18686", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-04T13:27:21.443Z", "date_only": false, "value": "2026-08-04T13:27:21.443352Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18686", "record": "FKIE_CVE-2026-18686", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-04T15:04:21.037Z", "date_only": false, "value": "2026-08-04T15:04:21.037Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18686", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T15:04:21.037Z", "date_only": false, "value": "2026-08-04T15:04:21.037Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18686", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T20:59:00.027Z", "date_only": false, "value": "2026-08-12T20:59:00.027", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18686", "record": "FKIE_CVE-2026-18686", "field": "lastModified"}]}