{"metadata": {"vulnerability": "CVE-2026-28299", "count": 25, "kinds": {"milestone": 5, "sighting": 7, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-02-26T14:15:09.403Z", "date_only": false, "value": "2026-02-26T14:15:09.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-28299", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-02T19:31:56.824Z", "date_only": false, "value": "2026-06-02T19:31:56.824Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28299", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-02T20:16:33Z", "date_only": false, "value": "2026-06-02T20:16:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F247-223F-RHFM", "record": "GHSA-F247-223F-RHFM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-02T20:16:33.783Z", "date_only": false, "value": "2026-06-02T20:16:33.783", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28299", "record": "FKIE_CVE-2026-28299", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-02T20:32:18.595Z", "date_only": false, "value": "2026-06-02T20:32:18.595081Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28299", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-02T20:32:18.595Z", "date_only": false, "value": "2026-06-02T20:32:18.595081Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28299", "record": "FKIE_CVE-2026-28299", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-02T20:55:26.245Z", "date_only": false, "value": "2026-06-02T20:55:26.245Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28299", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-02T21:30:42Z", "date_only": false, "value": "2026-06-02T21:30:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F247-223F-RHFM", "record": "GHSA-F247-223F-RHFM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-02T21:30:42Z", "date_only": false, "value": "2026-06-02T21:30:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F247-223F-RHFM", "record": "GHSA-F247-223F-RHFM", "field": "modified"}, {"timestamp": "2026-06-02T21:44:21.787Z", "date_only": false, "value": "2026-06-02T21:44:21.787039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndkvfnbjb2m", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "6a8878ab-b912-461f-aeac-61b0230c4309", "content": "CVE-2026-28299 - SolarWinds Web Help Desk Denial-of-Service Vulnerability\nCVE ID : CVE-2026-28299\n \n Published : June 2, 2026, 7:31 p.m. | 53\u00a0minutes ago\n \n Description : SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploite...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndkvfnbjb2m"}, {"timestamp": "2026-06-02T22:00:00Z", "date_only": false, "value": "2026-06-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-02T22:00:00Z", "date_only": false, "value": "2026-06-02T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-03T00:02:26.131Z", "date_only": false, "value": "2026-06-03T00:02:26.131987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndsmblm4g2r", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "b5f33f7f-f934-4cf1-be40-22f6e0eaaa7b", "content": "\ud83d\udfe0 CVE-2026-28299 - High (8.2)\n\nSolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28299/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndsmblm4g2r"}, {"timestamp": "2026-06-03T06:02:58.522Z", "date_only": false, "value": "2026-06-03T06:02:58.522+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-03T22:19:15.127Z", "date_only": false, "value": "2026-06-03T22:19:15.127Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-28299", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-03T22:19:15.127Z", "date_only": false, "value": "2026-06-03T22:19:15.127Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SolarWinds", "record": "CVE-2026-28299", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-04T11:54:48Z", "date_only": false, "value": "2026-06-04T11:54:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-549", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "02689618-eb40-4986-acc3-79b085f7929b", "url": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-549"}, {"timestamp": "2026-06-05T02:37:05.927Z", "date_only": false, "value": "2026-06-05T02:37:05.927133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnj46oyvxu2o", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "36b1ce5e-3d6a-4cb6-a1d7-96387b463f9b", "content": "\ud83d\udccc CVE-2026-28299 - SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to c... https://www.cyberhub.blog/cves/CVE-2026-28299", "url": "https://bsky.app/profile/cyberhub.blog/post/3mnj46oyvxu2o"}, {"timestamp": "2026-07-22T19:10:00.120Z", "date_only": false, "value": "2026-07-22T19:10:00.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28299", "record": "FKIE_CVE-2026-28299", "field": "lastModified"}, {"timestamp": "2026-08-08T03:20:43.714Z", "date_only": false, "value": "2026-08-08T03:20:43.714937Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msk4dqxqxl2d", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "c3caa6fd-c986-4a20-b69b-161ce64ec697", "content": "The latest update for #ArcticWolf includes \"SolarWinds Web #HelpDesk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299\" and \"Payroll Pirates: Strange New Tides in Business Email Compromise\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "url": "https://bsky.app/profile/opsmatters.com/post/3msk4dqxqxl2d"}, {"timestamp": "2026-08-11T03:05:09.175Z", "date_only": false, "value": "2026-08-11T03:05:09.175647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msrmyjzble2u", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "b8582e7b-6f8d-4323-9fec-b533663347b7", "content": "The latest update for #ArcticWolf includes \"Active #SupplyChain Attack on npm Packages (keyv, cacheable): Immediate Mitigation Required\" and \"SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "url": "https://bsky.app/profile/opsmatters.com/post/3msrmyjzble2u"}, {"timestamp": "2026-08-29T20:02:53.094Z", "date_only": false, "value": "2026-08-29T20:02:53.094720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muaoaxc25z23", "record": "CVE-2026-28299", "field": "creation_timestamp", "uuid": "728eb6c9-f6a4-48a5-9ea5-648093ae1cbd", "content": "~Arcticwolf~\nUnauthenticated WHD flaws enable session bypass and DoS; patch to 2026.2.1.\n-\nIOCs: CVE-2026-28323, CVE-2026-28299\n-\n#CVE202628299 #CVE202628323 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3muaoaxc25z23"}], "metrics": {"as_of": "2026-11-01T01:16:19.352Z", "anchors": {"origin": {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 13576579.352279, "hours": 3771.272042299722, "days": 157.13633509582175, "min_seconds": 13576579.352279, "max_seconds": 13576579.352279, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1703", "record": "WID-SEC-W-2026-1703", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T01:16:19.352Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}