{"metadata": {"vulnerability": "CVE-2026-32996", "count": 42, "kinds": {"milestone": 6, "sighting": 16, "kev": 5, "other": 15}}, "data": [{"timestamp": "2026-03-17T15:00:07.747Z", "date_only": false, "value": "2026-03-17T15:00:07.747Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-32996", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0652", "record": "CERTFR-2026-AVI-0652", "field": "last_revision_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": true, "value": "2026-05-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0652", "record": "CERTFR-2026-AVI-0652", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0652", "record": "CERTFR-2026-AVI-0652", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-27T14:35:14.916Z", "date_only": false, "value": "2026-05-27T14:35:14.916424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "af3f20ba-d4da-46c2-90eb-26391c7fb2bd", "content": "\ud83d\udd17 CVE : CVE-2026-32996, CVE-2026-32997", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1712", "record": "WID-SEC-W-2026-1712", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1712", "record": "WID-SEC-W-2026-1712", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1712", "record": "WID-SEC-W-2026-1712", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-32996", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-32996", "record": "FKIE_CVE-2026-32996", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-28T04:01:37.686Z", "date_only": false, "value": "2026-05-28T04:01:37.686Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-32996", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-28T04:01:37.686Z", "date_only": false, "value": "2026-05-28T04:01:37.686Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2026-32996", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-28T05:16:35Z", "date_only": false, "value": "2026-05-28T05:16:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3XR7-767Q-QR44", "record": "GHSA-3XR7-767Q-QR44", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-28T05:16:35.637Z", "date_only": false, "value": "2026-05-28T05:16:35.637", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-32996", "record": "FKIE_CVE-2026-32996", "field": "published"}, {"timestamp": "2026-05-28T06:31:08Z", "date_only": false, "value": "2026-05-28T06:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3XR7-767Q-QR44", "record": "GHSA-3XR7-767Q-QR44", "field": "published"}, {"timestamp": "2026-05-28T06:31:08Z", "date_only": false, "value": "2026-05-28T06:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3XR7-767Q-QR44", "record": "GHSA-3XR7-767Q-QR44", "field": "modified"}, {"timestamp": "2026-05-29T03:43:34.554Z", "date_only": false, "value": "2026-05-29T03:43:34.554120Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116655797945283788", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "2b9d90db-47e7-49e4-8b94-8fb86e705026", "content": "Attention, elevated activities detected targeting Veeam Backup and Replication (CVE-2026-32996) https://vuldb.com/vuln/366563/cti", "url": "https://infosec.exchange/users/vuldb/statuses/116655797945283788"}, {"timestamp": "2026-06-23T12:05:28.635Z", "date_only": false, "value": "2026-06-23T12:05:28.635681Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxedmccfs2n", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "4790d634-3d03-4a06-8342-8c08827f65ff", "content": "Veeam\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u5fa9\u65e7\u88fd\u54c1\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\nVeeam Software\u304c\u63d0\u4f9b\u3059\u308b\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u88fd\u54c1\u300cVeeam Backup & Replication\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nVeeam Software\u306f\u73fe\u5730\u6642\u95935\u670826\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-32996\u300d\u300cCVE-2026-32997\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cVeeam Backup & Replication 13.0.1.2067\u300d\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxedmccfs2n"}, {"timestamp": "2026-09-18T04:00:12.950Z", "date_only": false, "value": "2026-09-18T04:00:12.950002Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "e8809846-c391-4948-b42c-445cd193a89d"}, {"timestamp": "2026-09-19T17:00:04.803Z", "date_only": false, "value": "2026-09-19T17:00:04.803045Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102771", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "ee61cf7a-815c-4f10-a00a-dcba35a3d12d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102771"}, {"timestamp": "2026-09-21T20:02:11.820Z", "date_only": false, "value": "2026-09-21T20:02:11.820136Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw2iwvsdrd2n", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "e108efdf-3126-4d25-acc2-21a8e4045d17", "content": "~Arcticwolf~\nPublic PoC enables local users to gain SYSTEM; patch Veeam immediately.\n-\nIOCs: CVE-2026-32996\n-\n#CVE-2026-32996 #ThreatIntel #Veeam", "url": "https://bsky.app/profile/cyfar.ca/post/3mw2iwvsdrd2n"}, {"timestamp": "2026-09-21T20:15:02.692Z", "date_only": false, "value": "2026-09-21T20:15:02.692953Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-513", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "2ae8ba12-0931-4af4-91bf-694d4a0362ec", "url": "https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-513"}, {"timestamp": "2026-09-21T20:34:30Z", "date_only": false, "value": "2026-09-21T20:34:30+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-32996", "field": "timestamps.asserted_at", "uuid": "8c9a57f0-6012-4178-909d-f5c8e33c4d16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-21T20:34:30Z", "date_only": false, "value": "2026-09-21T20:34:30+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-32996", "field": "timestamps.first_seen_at", "uuid": "8c9a57f0-6012-4178-909d-f5c8e33c4d16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-21T20:34:30Z", "date_only": false, "value": "2026-09-21T20:34:30+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-32996", "field": "status.status_updated_at", "uuid": "8c9a57f0-6012-4178-909d-f5c8e33c4d16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-21T20:34:30.610Z", "date_only": false, "value": "2026-09-21T20:34:30.610Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-32996", "field": "evidence.0.details.added_date", "uuid": "8c9a57f0-6012-4178-909d-f5c8e33c4d16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-21T22:00:00Z", "date_only": false, "value": "2026-09-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1712", "record": "WID-SEC-W-2026-1712", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-21T22:00:00Z", "date_only": false, "value": "2026-09-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1712", "record": "WID-SEC-W-2026-1712", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-22T07:35:37.100Z", "date_only": false, "value": "2026-09-22T07:35:37.100092Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw3pot6iq52y", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "93d6f833-1a7d-4faf-81de-28bf267bd3d5", "content": "A critical exploited Veeam Agent vulnerability (CVE-2026-32996) is under active attack. Public PoC exploit code has been disclosed. Update systems now.\n\n#Veeam #CVE202632996 #Cybersecurity #Vulnerability #Infosec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mw3pot6iq52y"}, {"timestamp": "2026-09-22T07:41:35.450Z", "date_only": false, "value": "2026-09-22T07:41:35.450+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1712", "record": "WID-SEC-W-2026-1712", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-22T11:20:46.464Z", "date_only": false, "value": "2026-09-22T11:20:46.464250Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/117314423748594898", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "6af166a4-0ef4-4421-adf1-4070d580dc76", "content": "Veeam Agent LPE PoC https://github.com/suce0155/CVE-2026-32996", "url": "https://infosec.exchange/users/obivan/statuses/117314423748594898"}, {"timestamp": "2026-09-22T11:20:57.407Z", "date_only": false, "value": "2026-09-22T11:20:57.407110Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mw44bofp4n72", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "4248cf09-2236-4fad-8c5e-1dbdde24ed56", "content": "Veeam Agent LPE PoC https://github.com/suce0155/CVE-2026-32996", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mw44bofp4n72"}, {"timestamp": "2026-09-22T21:00:02Z", "date_only": false, "value": "2026-09-22T21:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-32996", "field": "timestamps.recorded_at", "uuid": "8c9a57f0-6012-4178-909d-f5c8e33c4d16", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T21:00:32.810Z", "date_only": false, "value": "2026-09-22T21:00:32.810892Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c9a57f0-6012-4178-909d-f5c8e33c4d16", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "9e13f136-9a76-4de3-984f-a010dc5cc0c8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c9a57f0-6012-4178-909d-f5c8e33c4d16"}, {"timestamp": "2026-09-23T03:55:30.103Z", "date_only": false, "value": "2026-09-23T03:55:30.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-32996", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-23T03:55:30.103Z", "date_only": false, "value": "2026-09-23T03:55:30.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-32996", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T04:17:43.927Z", "date_only": false, "value": "2026-09-23T04:17:43.927", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-32996", "record": "FKIE_CVE-2026-32996", "field": "lastModified"}, {"timestamp": "2026-09-23T10:45:14.214Z", "date_only": false, "value": "2026-09-23T10:45:14.214771Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6kqsluct2y", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "3860f331-ede6-4357-a44a-8b1dde07a28d", "content": "CISA KEV: Zyxel GS1900 CVE-2026-7273 and Veeam Agent CVE-2026-32996 both under active exploitation. Patches available for both\u2026 https://0daynews.com/articles/2026-09-22-zyxel-veeam-kev-active-exploitation/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3277", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6kqsluct2y"}, {"timestamp": "2026-09-24T14:30:07.856Z", "date_only": false, "value": "2026-09-24T14:30:07.856470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mwbhrv3ts224", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "65a090fd-8a5f-4c5c-804d-d37df8a32e8f", "content": "\ud83d\udce2 [VULN] Veeam Agent pour Windows - Une faille qui donne les droits SYSTEM CVE-2026-32996\n\nSi vous faites tourner Veeam Agent pour sauvegarder un poste Windows, et surtout si plusieurs personnes s'y connectent, allez v\u00e9rifier tout de suite son num\u00e9ro de build parce que depuis que\u2026\n\n#CVE #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mwbhrv3ts224"}, {"timestamp": "2026-09-24T17:08:09.293Z", "date_only": false, "value": "2026-09-24T17:08:09.293478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbqmepsqs23", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "35b58f8a-384c-48e5-b7c5-56d85dae6deb", "content": "Veeam Agent pour Windows : la faille CVE-2026-32996 offre les privil\u00e8ges SYSTEM, un exploit est public\nwww.it-connect.fr/veeam-agent-...", "url": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbqmepsqs23"}, {"timestamp": "2026-09-25T08:01:18.468Z", "date_only": false, "value": "2026-09-25T08:01:18.468054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mwdcjj3jqx22", "record": "CVE-2026-32996", "field": "creation_timestamp", "uuid": "66b90ac5-2f87-445d-814a-a8791818613b", "content": "\u26a0\ufe0f  Veeam Agent pour Windows : la faille CVE-2026-32996 offre les privil\u00e8ges SYSTEM, un exploit est public\n\nTous les d\u00e9tails sur IT-Connect : \n- www.it-connect.fr/veeam-agent-...\n\n#veeam #infosec #cybersecurite", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3mwdcjj3jqx22"}, {"timestamp": "2026-09-27T17:37:07.375Z", "date_only": false, "value": "2026-09-27T17:37:07.375982Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwjdmycfuv23", "record": "cve-2026-32996", "field": "creation_timestamp", "uuid": "6d6a3088-72c8-48ed-a0ad-82802d76bf49", "content": "\ud83d\udccc Public Exploit Targets CVE-2026-32996 Vulnerability in Veeam Agent for Windows Allowing SYSTEM Privi... https://www.cyberhub.blog/article/32644-public-exploit-targets-cve-2026-32996-vulnerability-in-veeam-agent-for-windows-allowing-system-privilege-escalation", "url": "https://bsky.app/profile/cyberhub.blog/post/3mwjdmycfuv23"}]}