{"metadata": {"vulnerability": "CVE-2026-24002", "count": 20, "kinds": {"milestone": 3, "sighting": 11, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-01-19T18:49:20.658Z", "date_only": false, "value": "2026-01-19T18:49:20.658Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-24002", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-22T02:26:28.765Z", "date_only": false, "value": "2026-01-22T02:26:28.765Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24002", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-22T02:26:28.765Z", "date_only": false, "value": "2026-01-22T02:26:28.765Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-24002", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-22T03:15:47.777Z", "date_only": false, "value": "2026-01-22T03:15:47.777", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24002", "record": "FKIE_CVE-2026-24002", "field": "published"}, {"timestamp": "2026-01-22T04:05:37.134Z", "date_only": false, "value": "2026-01-22T04:05:37.134595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycnlt2qk2r", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "b8bce353-daa7-4939-a3e4-5126b048a338", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycnlt2qk2r"}, {"timestamp": "2026-01-22T04:09:16.524Z", "date_only": false, "value": "2026-01-22T04:09:16.524775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcycu5qkai2t", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "fcddca53-f0cc-48c9-80f6-f8ea7ec4308b", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcycu5qkai2t"}, {"timestamp": "2026-01-22T12:52:12.413Z", "date_only": false, "value": "2026-01-22T12:52:12.413052Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24002", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-22T12:52:12.413Z", "date_only": false, "value": "2026-01-22T12:52:12.413052Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24002", "record": "FKIE_CVE-2026-24002", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-22T12:54:32.232Z", "date_only": false, "value": "2026-01-22T12:54:32.232Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-24002", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-22T12:54:32.232Z", "date_only": false, "value": "2026-01-22T12:54:32.232Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24002", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-27T09:36:00Z", "date_only": false, "value": "2026-01-27T09:36:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/01/critical-grist-core-vulnerability.html", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "9097c540-fdaa-4afd-bee5-5ad5b951ad42", "url": "https://thehackernews.com/2026/01/critical-grist-core-vulnerability.html"}, {"timestamp": "2026-01-27T11:27:34.529Z", "date_only": false, "value": "2026-01-27T11:27:34.529034Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdfnoipjjj2l", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "4458e65c-2282-4b1d-a716-5ae42763fca2", "url": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdfnoipjjj2l"}, {"timestamp": "2026-01-28T09:47:57.094Z", "date_only": false, "value": "2026-01-28T09:47:57.094697Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhylaam4c2k", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "eeeb66f3-7e25-4d14-a9e3-38f2a2a08ab2", "url": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhylaam4c2k"}, {"timestamp": "2026-01-29T04:58:29.924Z", "date_only": false, "value": "2026-01-29T04:58:29.924157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjyum2vxf2w", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "44d8c7ee-7673-4b39-a541-f756059bd9cd", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjyum2vxf2w"}, {"timestamp": "2026-01-29T11:32:14.590Z", "date_only": false, "value": "2026-01-29T11:32:14.590402Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mdkounutbo2n", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "e2cb26ca-c88b-4612-b05e-2dc770ec3e66", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mdkounutbo2n"}, {"timestamp": "2026-01-29T16:04:21.163Z", "date_only": false, "value": "2026-01-29T16:04:21.163992Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdl633jd5s2w", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "99ff07a9-3913-451d-85a8-93cd584c7e67", "url": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdl633jd5s2w"}, {"timestamp": "2026-06-17T10:22:27.640Z", "date_only": false, "value": "2026-06-17T10:22:27.640", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24002", "record": "FKIE_CVE-2026-24002", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:06.871Z", "date_only": false, "value": "2026-07-26T02:00:06.871319Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/1065", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "5df54901-c3b8-4e69-9732-416e9b11faf1", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "url": "https://t.me/cyberwarehouse/1065"}, {"timestamp": "2026-08-15T08:00:03.969Z", "date_only": false, "value": "2026-08-15T08:00:03.969763Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/575", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "7b54bda9-4346-4197-8271-8abb2c418eb8", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "url": "https://t.me/wh_lab/575"}, {"timestamp": "2026-08-29T20:00:23.052Z", "date_only": false, "value": "2026-08-29T20:00:23.052374Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/597", "record": "CVE-2026-24002", "field": "creation_timestamp", "uuid": "919f7a0a-7666-49cc-b842-c1a7b3581773", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "url": "https://t.me/CyberDispatch/597"}]}