{"metadata": {"vulnerability": "CVE-2026-21391", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-01-07T15:15:23.421Z", "date_only": false, "value": "2026-01-07T15:15:23.421Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-21391", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-14T11:18:33.045Z", "date_only": false, "value": "2026-09-14T11:18:33.045Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21391", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-14T11:18:33.045Z", "date_only": false, "value": "2026-09-14T11:18:33.045Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Ping Identity", "record": "CVE-2026-21391", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-14T12:17:38Z", "date_only": false, "value": "2026-09-14T12:17:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CVQ5-QF5H-V345", "record": "GHSA-CVQ5-QF5H-V345", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-14T12:17:38.810Z", "date_only": false, "value": "2026-09-14T12:17:38.810", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21391", "record": "FKIE_CVE-2026-21391", "field": "published"}, {"timestamp": "2026-09-14T12:31:40Z", "date_only": false, "value": "2026-09-14T12:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CVQ5-QF5H-V345", "record": "GHSA-CVQ5-QF5H-V345", "field": "published"}, {"timestamp": "2026-09-14T12:31:40Z", "date_only": false, "value": "2026-09-14T12:31:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CVQ5-QF5H-V345", "record": "GHSA-CVQ5-QF5H-V345", "field": "modified"}, {"timestamp": "2026-09-14T12:33:20.577Z", "date_only": false, "value": "2026-09-14T12:33:20.577951Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4mojdw4nqgh7w", "record": "CVE-2026-21391", "field": "creation_timestamp", "uuid": "734f6eec-247c-4431-9787-a1379c044da9", "content": "CVE-2026-21391 - Improper Claim Validation in PingAM OIDC Provider\nCVE ID : CVE-2026-21391\n \n Published : Sept. 14, 2026, 11:18 a.m. | 34\u00a0minutes ago\n \n Description : An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or pro...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4mojdw4nqgh7w"}, {"timestamp": "2026-09-14T13:30:05.403Z", "date_only": false, "value": "2026-09-14T13:30:05.403180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rcze6a2f", "record": "CVE-2026-21391", "field": "creation_timestamp", "uuid": "a0318e95-9370-4dd5-abdd-a87b0e56bdb3", "content": "CVE-2026-21391 - pingam\nPingAM does not correctly validate certain requests, allowing a crafted request to change the information placed in a login token. This can let an attacker pretend to be another\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pingam #pingidentity #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rcze6a2f"}, {"timestamp": "2026-09-14T14:07:14.826Z", "date_only": false, "value": "2026-09-14T14:07:14.826620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibtrbp562y", "record": "CVE-2026-21391", "field": "creation_timestamp", "uuid": "9e117546-6b28-495f-906d-8b3b7c86f6dd", "content": "\ud83d\udea8 CVE-2026-21391 \u2014 CVSS 9.5 CRITICAL\n\nAn improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-21391\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibtrbp562y"}, {"timestamp": "2026-09-14T14:24:57.614Z", "date_only": false, "value": "2026-09-14T14:24:57.614272Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21391", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-14T14:24:57.614Z", "date_only": false, "value": "2026-09-14T14:24:57.614272Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21391", "record": "FKIE_CVE-2026-21391", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-14T14:25:10.479Z", "date_only": false, "value": "2026-09-14T14:25:10.479Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-21391", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-14T14:25:10.479Z", "date_only": false, "value": "2026-09-14T14:25:10.479Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21391", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-15T11:39:39.033Z", "date_only": false, "value": "2026-09-15T11:39:39.033167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvkk2qquwp2j", "record": "CVE-2026-21391", "field": "creation_timestamp", "uuid": "6c5d90be-3fa4-49f7-b7c1-d1b4a7f3cde1", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-21391\n\nAn improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or o...", "url": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvkk2qquwp2j"}, {"timestamp": "2026-09-18T19:30:42.730Z", "date_only": false, "value": "2026-09-18T19:30:42.730", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21391", "record": "FKIE_CVE-2026-21391", "field": "lastModified"}]}