{"metadata": {"vulnerability": "CVE-2026-56737", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-22T19:17:28.959Z", "date_only": false, "value": "2026-06-22T19:17:28.959Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-56737", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-13T12:55:56Z", "date_only": false, "value": "2026-07-13T12:55:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5", "record": "CVE-2026-56737", "field": "creation_timestamp", "uuid": "e9775795-7b91-4d10-98ea-141959119a48", "url": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8gpw-xvpf-hvx5"}, {"timestamp": "2026-09-24T14:59:35.695Z", "date_only": false, "value": "2026-09-24T14:59:35.695Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-56737", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-24T14:59:35.695Z", "date_only": false, "value": "2026-09-24T14:59:35.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-56737", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T16:17:07Z", "date_only": false, "value": "2026-09-24T16:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8GPW-XVPF-HVX5", "record": "GHSA-8GPW-XVPF-HVX5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-24T16:17:07.637Z", "date_only": false, "value": "2026-09-24T16:17:07.637", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56737", "record": "FKIE_CVE-2026-56737", "field": "published"}, {"timestamp": "2026-09-24T16:49:19.863Z", "date_only": false, "value": "2026-09-24T16:49:19.863694Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbpkrqb4325", "record": "CVE-2026-56737", "field": "creation_timestamp", "uuid": "25650203-39e4-4302-a0d9-617b7c9f3c8e", "content": "\ud83d\udfe0 CVE-2026-56737 - High (8.1)\n\nphpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56737/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbpkrqb4325"}, {"timestamp": "2026-09-24T19:29:27Z", "date_only": false, "value": "2026-09-24T19:29:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8GPW-XVPF-HVX5", "record": "GHSA-8GPW-XVPF-HVX5", "field": "published"}, {"timestamp": "2026-09-24T19:29:28Z", "date_only": false, "value": "2026-09-24T19:29:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8GPW-XVPF-HVX5", "record": "GHSA-8GPW-XVPF-HVX5", "field": "modified"}, {"timestamp": "2026-09-24T20:17:34.269Z", "date_only": false, "value": "2026-09-24T20:17:34.269466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mwc375slnz26", "record": "CVE-2026-56737", "field": "creation_timestamp", "uuid": "8c8a0179-9eaf-4ed3-81c5-c8361ca18d52", "content": "CVE-2026-56737: phpMyFAQ's two-factor login endpoint grants access on a valid TOTP code and chosen user ID alone, without verifying the password, allowing an authentication bypass on 2FA-enabled accounts. Fixed in phpMyFAQ 4.1.6. No exploitation confirmed.", "url": "https://bsky.app/profile/suriq.io/post/3mwc375slnz26"}, {"timestamp": "2026-09-29T02:47:07.965Z", "date_only": false, "value": "2026-09-29T02:47:07.965759Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-56737", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-29T02:47:07.965Z", "date_only": false, "value": "2026-09-29T02:47:07.965759Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56737", "record": "FKIE_CVE-2026-56737", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-29T02:47:34.341Z", "date_only": false, "value": "2026-09-29T02:47:34.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-56737", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-29T02:47:34.341Z", "date_only": false, "value": "2026-09-29T02:47:34.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-56737", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-29T03:17:16.310Z", "date_only": false, "value": "2026-09-29T03:17:16.310", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56737", "record": "FKIE_CVE-2026-56737", "field": "lastModified"}]}