{"metadata": {"vulnerability": "CVE-2026-29059", "count": 60, "kinds": {"milestone": 5, "sighting": 30, "kev": 11, "other": 14}}, "data": [{"timestamp": "2026-03-03T17:50:11.244Z", "date_only": false, "value": "2026-03-03T17:50:11.244Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-29059", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0244", "record": "CERTFR-2026-AVI-0244", "field": "last_revision_date"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": true, "value": "2026-03-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0244", "record": "CERTFR-2026-AVI-0244", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0244", "record": "CERTFR-2026-AVI-0244", "field": "revisions.0.revision_date"}, {"timestamp": "2026-03-06T07:11:28.527Z", "date_only": false, "value": "2026-03-06T07:11:28.527Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-29059", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-06T07:11:28.527Z", "date_only": false, "value": "2026-03-06T07:11:28.527Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-29059", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-06T08:16:26.437Z", "date_only": false, "value": "2026-03-06T08:16:26.437", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-29059", "record": "FKIE_CVE-2026-29059", "field": "published"}, {"timestamp": "2026-03-06T13:15:07.305Z", "date_only": false, "value": "2026-03-06T13:15:07.305009Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgfffrkmn22w", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "e511fc3b-d858-4b64-ac76-8f96cfbf69c1", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgfffrkmn22w"}, {"timestamp": "2026-03-08T23:00:00Z", "date_only": false, "value": "2026-03-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-06T22:00:00Z", "date_only": false, "value": "2026-04-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-04-06T22:00:00Z", "date_only": false, "value": "2026-04-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-07T11:49:10.195Z", "date_only": false, "value": "2026-04-07T11:49:10.195+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0628", "record": "WID-SEC-W-2026-0628", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-07T13:16:09.568Z", "date_only": false, "value": "2026-04-07T13:16:09.568490Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-29059", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-07T13:16:09.568Z", "date_only": false, "value": "2026-04-07T13:16:09.568490Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-29059", "record": "FKIE_CVE-2026-29059", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-07T13:16:12.488Z", "date_only": false, "value": "2026-04-07T13:16:12.488Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-29059", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-07T13:16:12.488Z", "date_only": false, "value": "2026-04-07T13:16:12.488Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-29059", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-14T20:03:14Z", "date_only": false, "value": "2026-04-14T20:03:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "45c76f47-7699-4e80-934d-a75a8a3b84d5"}, {"timestamp": "2026-06-03T04:09:58Z", "date_only": false, "value": "2026-06-03T04:09:58.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-29059.yaml", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "95b11b4e-9852-4eb5-a436-ed41b28002de", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-29059.yaml"}, {"timestamp": "2026-06-17T10:29:31.613Z", "date_only": false, "value": "2026-06-17T10:29:31.613", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-29059", "record": "FKIE_CVE-2026-29059", "field": "lastModified"}, {"timestamp": "2026-07-22T12:36:36Z", "date_only": false, "value": "2026-07-22T12:36:36+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-29059", "field": "timestamps.asserted_at", "uuid": "626d6582-9620-47d1-aa26-819dfa407909", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T12:36:36Z", "date_only": false, "value": "2026-07-22T12:36:36.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-29059", "field": "evidence.0.details.added_date", "uuid": "626d6582-9620-47d1-aa26-819dfa407909", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T12:36:36Z", "date_only": false, "value": "2026-07-22T12:36:36+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-29059", "field": "timestamps.first_seen_at", "uuid": "626d6582-9620-47d1-aa26-819dfa407909", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T12:36:36Z", "date_only": false, "value": "2026-07-22T12:36:36+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-29059", "field": "status.status_updated_at", "uuid": "626d6582-9620-47d1-aa26-819dfa407909", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T14:01:28.864Z", "date_only": false, "value": "2026-07-22T14:01:28.864355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mraidputco2l", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "d3739494-4fbd-491f-a636-c1ed1e2a6618", "content": "Windmill \u306e\u8a8d\u8a3c\u4e0d\u8981\u306a\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u8aad\u307f\u53d6\u308a\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u308b\n\nWindmill CVE-2026-29059 \u306e\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u300124\u30ab\u56fd\u3067\u7d04170\u306e\u30b7\u30b9\u30c6\u30e0\u304c\u9732\u51fa\u3057\u3066\u3044\u307e\u3059\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u30b5\u30fc\u30d0\u30fc\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u3089\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mraidputco2l"}, {"timestamp": "2026-07-22T14:03:32.442Z", "date_only": false, "value": "2026-07-22T14:03:32.442809Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mraihfkjyx2k", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "19450704-2be8-40e7-859e-3659ec92da65", "content": "CVE-2026-29059 enables unauthenticated path traversal in Windmill to read arbitrary server files, potentially exposing SUPERADMIN_SECRET and enabling superadmin takeover.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mraihfkjyx2k"}, {"timestamp": "2026-07-22T14:15:05.442Z", "date_only": false, "value": "2026-07-22T14:15:05.442538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mraj42e2fk2o", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "a8134a8d-ec97-40d0-9937-e8e5d2cf3362", "content": "Windmill \u306b\u8a8d\u8a3c\u306a\u3057\u3067\u4efb\u610f\u306e\u30b5\u30fc\u30d0\u30fc\u30d5\u30a1\u30a4\u30eb\u304c\u8aad\u307f\u53d6\u3089\u308c\u308b\u8106\u5f31\u6027 (CVE-2026-29059) \u304c\u767a\u898b\u3055\u308c\u3001\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mraj42e2fk2o"}, {"timestamp": "2026-07-22T15:00:01Z", "date_only": false, "value": "2026-07-22T15:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-29059", "field": "timestamps.recorded_at", "uuid": "626d6582-9620-47d1-aa26-819dfa407909", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T15:00:28.183Z", "date_only": false, "value": "2026-07-22T15:00:28.183850Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/626d6582-9620-47d1-aa26-819dfa407909", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "d791d389-643f-4910-bfb6-a7645bd79d81", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/626d6582-9620-47d1-aa26-819dfa407909"}, {"timestamp": "2026-07-22T15:02:53.044Z", "date_only": false, "value": "2026-07-22T15:02:53.044291Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mralrjzzvm2j", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "b57e0a81-d613-4643-9c4e-2942ff4409fc", "content": "\ud83e\udd16 CVE-2026-29059 (CVSS 7.5): Active exploitation of path traversal in Windmill open-source platform. Unauthenticated file read via get_log_file endpoint.\nhttps://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mralrjzzvm2j"}, {"timestamp": "2026-07-22T16:00:46.505Z", "date_only": false, "value": "2026-07-22T16:00:46.505846Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "248f0dca-9837-4539-8f16-ddb659dac303", "content": "A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.\n\nThe vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's \"get_log_file\" endpoint (\"/api/w/{workspace}/jobs_u/get_log_file/{filename}\").\n\n\"The filename parameter is concatenated into", "url": "https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html"}, {"timestamp": "2026-07-22T17:32:02.728Z", "date_only": false, "value": "2026-07-22T17:32:02.728862Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3mrau4apys62l", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "9a8f33f6-fbf2-442c-b3ac-f8126ea671ee", "content": "Windmill CVE-2026-29059 is not routine patch debt. One exposed automation server can leak files, secrets, and admin paths before defenders catch up. https://www.hexon.bot/blog/windmill-vulnerability-workflow-automation-secrets #Cybersecurity #AppSec", "url": "https://bsky.app/profile/hexonbot.bsky.social/post/3mrau4apys62l"}, {"timestamp": "2026-07-22T18:45:24.615Z", "date_only": false, "value": "2026-07-22T18:45:24.615925Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mray7gebs52z", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "8fa59994-8ef6-4dbd-8887-1a99ea00cca8", "content": "Actively exploited Windmill flaw CVE-2026-29059 lets attackers use get_log_file path traversal to read arbitrary server files without auth, including /etc/passwd and SUPERADMIN_SECRET. #Windmill #CVE202629059 #CISA", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mray7gebs52z"}, {"timestamp": "2026-07-23T05:00:04.023Z", "date_only": false, "value": "2026-07-23T05:00:04.023344Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/9581", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "d87486a5-5d41-4fc0-abbb-20911fca9d89", "content": "Windmill servers are under active attack.\n\nExperts say attackers are exploiting CVE-2026-29059 to read arbitrary server files without logging in. On some systems, the same flaw can lead to superadmin access and code execution.\n\nFull details: https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "url": "https://t.me/thehackernews/9581"}, {"timestamp": "2026-07-23T05:40:07.736Z", "date_only": false, "value": "2026-07-23T05:40:07.736949Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrc4s5vdwk2a", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "3f3f4f00-df3c-4874-9418-922bda395f67", "content": "Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication\n\nA high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.\n\nThe vulnerability in question is CVE-2026-29059 (CVS\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrc4s5vdwk2a"}, {"timestamp": "2026-07-23T10:00:02.719Z", "date_only": false, "value": "2026-07-23T10:00:02.719287Z", "kind": "sighting", "label": "Seen", "source": "Telegram/D39b8odzloEyVSPfYMfhmnBgzft4qdO2zImNqzlw4Q0WVA", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "b44530ea-8f16-47eb-af81-812e1bd8246d"}, {"timestamp": "2026-07-23T11:11:40.105Z", "date_only": false, "value": "2026-07-23T11:11:40.105112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mrcpcyh5ge2r", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "bb7c9cb6-0ddd-40d4-887a-0487db343817", "content": "VulnCheck says attackers are exploiting Windmill CVE-2026-29059 to read server files, with about 170 vulnerable systems exposed in 24 countries.", "url": "https://bsky.app/profile/technology-news.bsky.social/post/3mrcpcyh5ge2r"}, {"timestamp": "2026-07-24T00:00:09.387Z", "date_only": false, "value": "2026-07-24T00:00:09.387494Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/D39b8odzloEyVSPfYMfhmnBgzft4qdO2zImNqzlw4Q0WVA", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "bfd26d90-f4f8-4298-92ab-24629da0e4c7"}, {"timestamp": "2026-07-24T00:00:11.399Z", "date_only": false, "value": "2026-07-24T00:00:11.399037Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/9581", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "3c69b1e0-c70e-4d01-9c63-98e65369f5ec", "content": "Windmill servers are under active attack.\n\nExperts say attackers are exploiting CVE-2026-29059 to read arbitrary server files without logging in. On some systems, the same flaw can lead to superadmin access and code execution.\n\nFull details: https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "url": "https://t.me/thehackernews/9581"}, {"timestamp": "2026-07-25T11:39:03.559Z", "date_only": false, "value": "2026-07-25T11:39:03.559948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mrhrrsvpcz2k", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "2e6d0f8f-78a4-4284-9b23-89fba1e4fdaa", "content": "\ud83d\udd34 EXPLOITED\n\nWindmill, the open-source automation platform, has an unauthenticated flaw (CVE-2026-29059) that lets a stranger read files off the server. It is being exploited now.\n\nRun Windmill? Update to 1.603.3 and rotate exposed secrets.", "url": "https://bsky.app/profile/suriq.io/post/3mrhrrsvpcz2k"}, {"timestamp": "2026-07-25T23:30:04.467Z", "date_only": false, "value": "2026-07-25T23:30:04.467075Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mrizj7i2ye2c", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "c7299fb3-0b54-4a4a-b83f-1238eb6c4810", "content": "Active exploit! CVE-2026-29059 (CVSS 7.5) affects Windmill's get_log_file endpoint via unauthenticated path traversal. Urgent patch needed to prevent compromise. #CyberSecurity", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mrizj7i2ye2c"}, {"timestamp": "2026-08-27T18:00:23Z", "date_only": false, "value": "2026-08-27T18:00:23+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-29059", "field": "timestamps.asserted_at", "uuid": "cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T18:00:23Z", "date_only": false, "value": "2026-08-27T18:00:23+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-29059", "field": "timestamps.first_seen_at", "uuid": "cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-28T10:00:05.881Z", "date_only": false, "value": "2026-08-28T10:00:05.881473Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "e19cc929-202d-432d-93fc-c8b3e68f8dba"}, {"timestamp": "2026-08-29T01:00:31.405Z", "date_only": false, "value": "2026-08-29T01:00:31.405366Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "9cedad78-ad8c-473d-b9fe-95df8fe637e1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102"}, {"timestamp": "2026-08-29T20:00:06.926Z", "date_only": false, "value": "2026-08-29T20:00:06.926022Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/2353", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "e7004fb4-0195-480c-bba1-7098c782921d", "content": "Windmill servers are under active attack.\n\nExperts say attackers are exploiting CVE-2026-29059 to read arbitrary server files without logging in. On some systems, the same flaw can lead to superadmin access and code execution.", "url": "https://t.me/CyberDispatch/2353"}, {"timestamp": "2026-08-30T00:00:37.384Z", "date_only": false, "value": "2026-08-30T00:00:37.384402Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/2353", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "02ee9fcf-9bae-4789-9749-12c9368865d6", "content": "Windmill servers are under active attack.\n\nExperts say attackers are exploiting CVE-2026-29059 to read arbitrary server files without logging in. On some systems, the same flaw can lead to superadmin access and code execution.", "url": "https://t.me/CyberDispatch/2353"}, {"timestamp": "2026-09-08T10:00:06.102Z", "date_only": false, "value": "2026-09-08T10:00:06.102464Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "6bc99c73-6614-43d0-b018-4581c841dbb8"}, {"timestamp": "2026-09-10T10:00:10.873Z", "date_only": false, "value": "2026-09-10T10:00:10.873560Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "45cc2d3d-433b-4d69-b0b4-3426c9689529"}, {"timestamp": "2026-09-14T10:00:07.593Z", "date_only": false, "value": "2026-09-14T10:00:07.593709Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "a4c5d9e2-c0c4-4d51-81eb-d86a297676c3"}, {"timestamp": "2026-09-21T10:00:06.559Z", "date_only": false, "value": "2026-09-21T10:00:06.559222Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-20)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "b457c6e7-015c-4ebc-b5cd-223a8ac91682"}, {"timestamp": "2026-10-04T00:00:00Z", "date_only": false, "value": "2026-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-04)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "d38bca70-f6b0-488e-8744-aee5c82f0cd9"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-08)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "31c91dde-d2d4-4134-818e-255289f596fd"}, {"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-10)", "record": "CVE-2026-29059", "field": "creation_timestamp", "uuid": "faf4f4fc-8c07-48cd-84a2-2e4fe27b6687"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-29059", "field": "timestamps.last_seen_at", "uuid": "cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-29059", "field": "evidence.0.details.observation_date", "uuid": "cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-29059", "field": "status.status_updated_at", "uuid": "cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T01:00:01Z", "date_only": false, "value": "2026-10-23T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-29059", "field": "timestamps.recorded_at", "uuid": "cdf3b3dc-7ab6-42bb-8e0a-830a3ba84102", "status": {"status_reason": "confirmed", "exploited": true}}]}