{"metadata": {"vulnerability": "CVE-2026-63087", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-15T00:00:00Z", "date_only": false, "value": "2026-07-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63087", "field": "containers.cna.datePublic"}, {"timestamp": "2026-07-15T15:45:44.600Z", "date_only": false, "value": "2026-07-15T15:45:44.600Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63087", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-16T16:03:55.866Z", "date_only": false, "value": "2026-07-16T16:03:55.866Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63087", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-16T16:44:05.680Z", "date_only": false, "value": "2026-07-16T16:44:05.680111Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqromxze3h2c", "record": "CVE-2026-63087", "field": "creation_timestamp", "uuid": "09338e0c-e913-452a-bf5f-b834ce11494d", "content": "CVE-2026-63087 - oncall\nAn attacker can access Grafana OnCall without a password by sending a specific request to the plugin install endpoint. This allows them to create new users, revoke legitimate access, and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oncall #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqromxze3h2c"}, {"timestamp": "2026-07-16T17:16:58Z", "date_only": false, "value": "2026-07-16T17:16:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WHW8-2869-JF7J", "record": "GHSA-WHW8-2869-JF7J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-16T17:16:58.703Z", "date_only": false, "value": "2026-07-16T17:16:58.703", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63087", "record": "FKIE_CVE-2026-63087", "field": "published"}, {"timestamp": "2026-07-16T18:31:34Z", "date_only": false, "value": "2026-07-16T18:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WHW8-2869-JF7J", "record": "GHSA-WHW8-2869-JF7J", "field": "published"}, {"timestamp": "2026-07-16T18:31:34Z", "date_only": false, "value": "2026-07-16T18:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WHW8-2869-JF7J", "record": "GHSA-WHW8-2869-JF7J", "field": "modified"}, {"timestamp": "2026-07-16T19:09:18.701Z", "date_only": false, "value": "2026-07-16T19:09:18.701284Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwqns4ep22", "record": "CVE-2026-63087", "field": "creation_timestamp", "uuid": "77de3884-472e-45b6-a965-4d8e1ada6fd8", "content": "CVE-2026-63087 - Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint\nCVE ID : CVE-2026-63087\n \n Published : July 16, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerab...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwqns4ep22"}, {"timestamp": "2026-07-17T14:00:05.991Z", "date_only": false, "value": "2026-07-17T14:00:05.991296Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3320", "record": "CVE-2026-63087", "field": "creation_timestamp", "uuid": "83b24616-bb5e-4152-bcee-c8509e62a556", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Grafana OnCall \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-09904\nCVE-2026-63087\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.vulncheck.com/advisories/grafana-oncall-unauthenticated-token-hijack-via-plugin-install-endpoint", "url": "https://t.me/bdufstecru/3320"}, {"timestamp": "2026-07-17T14:05:50.719Z", "date_only": false, "value": "2026-07-17T14:05:50.719036Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63087", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-17T14:05:50.719Z", "date_only": false, "value": "2026-07-17T14:05:50.719036Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63087", "record": "FKIE_CVE-2026-63087", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-17T14:05:58.085Z", "date_only": false, "value": "2026-07-17T14:05:58.085Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63087", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-17T14:17:27.073Z", "date_only": false, "value": "2026-07-17T14:17:27.073", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63087", "record": "FKIE_CVE-2026-63087", "field": "lastModified"}, {"timestamp": "2026-07-23T13:25:46.253Z", "date_only": false, "value": "2026-07-23T13:25:46.253Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63087", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-23T13:25:46.253Z", "date_only": false, "value": "2026-07-23T13:25:46.253Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63087", "field": "containers.cna.providerMetadata.dateUpdated"}]}