{"metadata": {"vulnerability": "CVE-2026-28325", "count": 31, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-26T14:46:41.521Z", "date_only": false, "value": "2026-02-26T14:46:41.521Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-28325", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": false, "value": "2026-09-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28325", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": false, "value": "2026-09-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28325", "record": "FKIE_CVE-2026-28325", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T19:12:44.576Z", "date_only": false, "value": "2026-09-22T19:12:44.576Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28325", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-22T19:12:44.576Z", "date_only": false, "value": "2026-09-22T19:12:44.576Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SolarWinds", "record": "CVE-2026-28325", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T20:17:03Z", "date_only": false, "value": "2026-09-22T20:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R476-9MP7-PHXC", "record": "GHSA-R476-9MP7-PHXC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-22T20:17:03.430Z", "date_only": false, "value": "2026-09-22T20:17:03.430", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28325", "record": "FKIE_CVE-2026-28325", "field": "published"}, {"timestamp": "2026-09-22T21:31:28Z", "date_only": false, "value": "2026-09-22T21:31:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R476-9MP7-PHXC", "record": "GHSA-R476-9MP7-PHXC", "field": "published"}, {"timestamp": "2026-09-22T21:31:28Z", "date_only": false, "value": "2026-09-22T21:31:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R476-9MP7-PHXC", "record": "GHSA-R476-9MP7-PHXC", "field": "modified"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "last_revision_date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "initial_release_date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-23T03:56:15.650Z", "date_only": false, "value": "2026-09-23T03:56:15.650Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-28325", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-23T03:56:15.650Z", "date_only": false, "value": "2026-09-23T03:56:15.650Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28325", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T09:09:24.130Z", "date_only": false, "value": "2026-09-23T09:09:24.130271Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-23T09:09:24.130Z", "date_only": false, "value": "2026-09-23T09:09:24.130271Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-23T09:09:24.130Z", "date_only": false, "value": "2026-09-23T09:09:24.130271Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-23T13:15:07.116Z", "date_only": false, "value": "2026-09-23T13:15:07.116472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6t4ti2wv2r", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "35e9abf6-91c0-4be2-8894-3b72ea29a800", "content": "\ud83d\udd17 CVE : CVE-2026-28324, CVE-2026-28325", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6t4ti2wv2r"}, {"timestamp": "2026-09-23T16:04:46.243Z", "date_only": false, "value": "2026-09-23T16:04:46.243638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "dec37d34-7956-43c4-bfd3-86776cf9071f", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "url": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23"}, {"timestamp": "2026-09-23T16:15:30.407Z", "date_only": false, "value": "2026-09-23T16:15:30.407106Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "477478f3-0954-4a99-9665-29c59c2b7460", "url": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950"}, {"timestamp": "2026-09-24T08:40:40Z", "date_only": false, "value": "2026-09-24T08:40:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "01eaea7d-44b2-4a39-a08d-31c55db60eb1", "content": "The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\n\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.", "url": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/"}, {"timestamp": "2026-09-24T13:00:24.178Z", "date_only": false, "value": "2026-09-24T13:00:24.178190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "76024b27-0ee7-4d79-9388-2e28c7a0e259", "content": "SolarWinds patched two critical RCE flaws in Observability Self-Hosted, including CVE-2026-28324 and CVE-2026-28325. No exploitation in the wild has been reported. #SolarWinds #RCE #CVE202628324", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r"}, {"timestamp": "2026-09-24T21:00:46.893Z", "date_only": false, "value": "2026-09-24T21:00:46.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28325", "record": "FKIE_CVE-2026-28325", "field": "lastModified"}, {"timestamp": "2026-09-24T21:05:08Z", "date_only": false, "value": "2026-09-24T21:05:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/55973", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "0ecf6140-05d3-418a-b99b-2762c0891bb6", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/55973"}, {"timestamp": "2026-09-24T23:00:53Z", "date_only": false, "value": "2026-09-24T23:00:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44588", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "3b01656a-faea-40c9-9412-629dc2644d0a", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "url": "https://t.me/VulnerabilityNews/44588"}, {"timestamp": "2026-09-25T01:00:21.202Z", "date_only": false, "value": "2026-09-25T01:00:21.202070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "b0de029c-ee76-4a28-915e-f6be32e83f68", "content": "SolarWinds patches two unauth RCE flaws in Observability Self-Hosted: CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325\u2026 https://0daynews.com/articles/2026-09-24-solarwinds-observability-cve-2026-28324-28325-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3489", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h"}, {"timestamp": "2026-09-25T14:00:32.556Z", "date_only": false, "value": "2026-09-25T14:00:32.556869Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwdwlvqyha2z", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "73dc4fb4-9a52-4ab1-ae97-5bffb55a889c", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwdwlvqyha2z"}, {"timestamp": "2026-09-25T18:00:33.177Z", "date_only": false, "value": "2026-09-25T18:00:33.177090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwedz2vgsk2n", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "b4b51997-5f9f-4a00-86d6-198bf91a5baa", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwedz2vgsk2n"}, {"timestamp": "2026-09-25T21:00:33.188Z", "date_only": false, "value": "2026-09-25T21:00:33.188534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mweo2wpcpn2f", "record": "CVE-2026-28325", "field": "creation_timestamp", "uuid": "a7a1a182-83b1-443f-921e-e00241e63f5d", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mweo2wpcpn2f"}]}