{"metadata": {"vulnerability": "CVE-2026-32255", "count": 30, "kinds": {"milestone": 3, "sighting": 10, "kev": 11, "other": 6}}, "data": [{"timestamp": "2026-03-11T15:05:48.396Z", "date_only": false, "value": "2026-03-11T15:05:48.396Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-32255", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-18T23:11:36.892Z", "date_only": false, "value": "2026-03-18T23:11:36.892Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-32255", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-18T23:11:36.892Z", "date_only": false, "value": "2026-03-18T23:11:36.892Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-32255", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-19T00:16:18.003Z", "date_only": false, "value": "2026-03-19T00:16:18.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-32255", "record": "FKIE_CVE-2026-32255", "field": "published"}, {"timestamp": "2026-03-19T00:31:34.257Z", "date_only": false, "value": "2026-03-19T00:31:34.257797Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mheqsfjxvo2s", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "13998f69-d515-4e26-bfe5-49129ede37a3", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mheqsfjxvo2s"}, {"timestamp": "2026-03-19T07:23:06.154Z", "date_only": false, "value": "2026-03-19T07:23:06.154971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfhs7ruqb2u", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "238c4685-5432-4538-bf93-38b12c8bccb6", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfhs7ruqb2u"}, {"timestamp": "2026-03-19T16:10:43.597Z", "date_only": false, "value": "2026-03-19T16:10:43.597431Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-32255", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-19T16:10:43.597Z", "date_only": false, "value": "2026-03-19T16:10:43.597431Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-32255", "record": "FKIE_CVE-2026-32255", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-19T16:11:00.489Z", "date_only": false, "value": "2026-03-19T16:11:00.489Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-32255", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-19T16:11:00.489Z", "date_only": false, "value": "2026-03-19T16:11:00.489Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-32255", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-19T17:00:14.650Z", "date_only": false, "value": "2026-03-19T17:00:14.650586Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhgi2cd7nh2r", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "c22de545-947f-40ed-8c42-dbb699867489", "url": "https://bsky.app/profile/cyberhub.blog/post/3mhgi2cd7nh2r"}, {"timestamp": "2026-03-19T17:38:14.935Z", "date_only": false, "value": "2026-03-19T17:38:14.935502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhgk6bessm22", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "861334d5-140b-46af-b0d2-6c4294678a2e", "url": "https://bsky.app/profile/cyberhub.blog/post/3mhgk6bessm22"}, {"timestamp": "2026-06-17T10:35:26.237Z", "date_only": false, "value": "2026-06-17T10:35:26.237", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-32255", "record": "FKIE_CVE-2026-32255", "field": "lastModified"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-32255", "field": "timestamps.asserted_at", "uuid": "e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-32255", "field": "evidence.0.details.added_date", "uuid": "e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-32255", "field": "timestamps.first_seen_at", "uuid": "e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-32255", "field": "status.status_updated_at", "uuid": "e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-17T11:09:34Z", "date_only": false, "value": "2026-09-17T11:09:34+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-32255", "field": "timestamps.asserted_at", "uuid": "d767d0c5-c02e-48a0-aa96-2fc34a601a64", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-17T11:09:34Z", "date_only": false, "value": "2026-09-17T11:09:34+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-32255", "field": "timestamps.first_seen_at", "uuid": "d767d0c5-c02e-48a0-aa96-2fc34a601a64", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-18T11:00:01Z", "date_only": false, "value": "2026-09-18T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-32255", "field": "timestamps.recorded_at", "uuid": "e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-18T11:00:28.922Z", "date_only": false, "value": "2026-09-18T11:00:28.922134Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "e2c69466-5b95-45ff-b569-965f20a81406", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d8ada1-1a4a-4775-bf91-0b4b6a2616f2"}, {"timestamp": "2026-10-01T23:00:20Z", "date_only": false, "value": "2026-10-01T23:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "16d1ad0b-22db-4be4-b182-509d24af12d4"}, {"timestamp": "2026-10-01T23:00:20Z", "date_only": false, "value": "2026-10-01T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "6958784d-29ad-43f5-8d13-9680abdb0da9"}, {"timestamp": "2026-10-14T19:34:04.634Z", "date_only": false, "value": "2026-10-14T19:34:04.634827Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440934320450100", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "6e0e3da8-ef51-4f13-adf2-8f12d95d0f41", "content": "CVE-2026-110628 Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services, localhost ports, and cloud instance metadata.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110628https://hackmd.io/@leediay/HyIxU63ofghttps://github.com/kanbn/kan/pull/590https://github.com/kanbn/kan/blob/v0.6.0/apps/web/src/pages/api/download/attatchment.ts#L21-L52https://github.com/kanbn/kan/blob/v0.6.0/.env.example#L25-L27https://github.com/kanbn/kan/security/advisories/GHSA-qrx8-9hc6-jvqghttps://github.com/kanbn/kan/commit/53397d8e81dc1494d94132848c1f0416f1152bd7https://github.com/kanbn/kanhttps://www.vulncheck.com/advisories/kan-0.5.5-through-0.6.0-unauthenticated-ssrf-via-api-download-attatchment#kanbn #kan#CVE_2026_110628#bot", "url": "https://infosec.exchange/users/cve/statuses/117440934320450100"}, {"timestamp": "2026-10-17T03:40:05.655Z", "date_only": false, "value": "2026-10-17T03:40:05.655071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3my266o4euz2q", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "1376ffa4-861d-4a1b-a439-35a5faf84bcf", "content": "CVE-2026-32255\nVersions 0.5.5 through 0.6.0 of Kan have a route that can be called without logging in and can be made to request any URL the server can reach. This lets a remote user cause the server to fetch data from\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3my266o4euz2q"}, {"timestamp": "2026-10-21T09:03:10.733Z", "date_only": false, "value": "2026-10-21T09:03:10.733920Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d767d0c5-c02e-48a0-aa96-2fc34a601a64", "record": "CVE-2026-32255", "field": "creation_timestamp", "uuid": "d56eddb1-7488-4311-9510-5c8571cb026c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d767d0c5-c02e-48a0-aa96-2fc34a601a64"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-32255", "field": "timestamps.last_seen_at", "uuid": "d767d0c5-c02e-48a0-aa96-2fc34a601a64", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": true, "value": "2026-10-22", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-32255", "field": "evidence.0.details.observation_date", "uuid": "d767d0c5-c02e-48a0-aa96-2fc34a601a64", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-32255", "field": "status.status_updated_at", "uuid": "d767d0c5-c02e-48a0-aa96-2fc34a601a64", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T01:00:01Z", "date_only": false, "value": "2026-10-24T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-32255", "field": "timestamps.recorded_at", "uuid": "d767d0c5-c02e-48a0-aa96-2fc34a601a64", "status": {"status_reason": "confirmed", "exploited": true}}]}