{"metadata": {"vulnerability": "CVE-2026-63159", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-15T21:18:20.186Z", "date_only": false, "value": "2026-07-15T21:18:20.186Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63159", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63159", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T19:46:07Z", "date_only": false, "value": "2026-10-13T19:46:07.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63159", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T20:02:50.106Z", "date_only": false, "value": "2026-10-13T20:02:50.106501Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63159", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T20:02:50.106Z", "date_only": false, "value": "2026-10-13T20:02:50.106501Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63159", "record": "FKIE_CVE-2026-63159", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T20:03:00.562Z", "date_only": false, "value": "2026-10-13T20:03:00.562Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63159", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:17:31Z", "date_only": false, "value": "2026-10-13T20:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2R64-8HVP-8498", "record": "GHSA-2R64-8HVP-8498", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T20:17:31.273Z", "date_only": false, "value": "2026-10-13T20:17:31.273", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63159", "record": "FKIE_CVE-2026-63159", "field": "published"}, {"timestamp": "2026-10-13T21:37:24Z", "date_only": false, "value": "2026-10-13T21:37:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2R64-8HVP-8498", "record": "GHSA-2R64-8HVP-8498", "field": "published"}, {"timestamp": "2026-10-13T21:37:24Z", "date_only": false, "value": "2026-10-13T21:37:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2R64-8HVP-8498", "record": "GHSA-2R64-8HVP-8498", "field": "modified"}, {"timestamp": "2026-10-14T00:13:49.234Z", "date_only": false, "value": "2026-10-14T00:13:49.234782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsbb3p6ot2l", "record": "CVE-2026-63159", "field": "creation_timestamp", "uuid": "d20c71f2-70a2-4ea9-b51e-43d9581801a3", "content": "\ud83d\udea8 CVE-2026-63159 \u2014 CVSS 9.1 CRITICAL\n\nOmnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63159\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsbb3p6ot2l"}, {"timestamp": "2026-10-14T06:20:04.852Z", "date_only": false, "value": "2026-10-14T06:20:04.852884Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsvpyurvr2z", "record": "CVE-2026-63159", "field": "creation_timestamp", "uuid": "9c9b8c0d-6a6d-4f1c-b506-50b5ab9560b0", "content": "CVE-2026-63159 - agora project\nThe Agora Project version before 26.10.0 uses a password\u2011reset code that is calculated in a predictable way from the user\u2019s login name and password. This lets someone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#agoraproject #omnispace #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsvpyurvr2z"}, {"timestamp": "2026-10-14T13:17:56.626Z", "date_only": false, "value": "2026-10-14T13:17:56.626263Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117439455310231942", "record": "CVE-2026-63159", "field": "creation_timestamp", "uuid": "2307baec-0cbb-413b-ae44-80af3b51ab51", "content": "CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1(login.password), a deterministic and reusable value. Attackers can derive or brute-force the reset token from known or guessed login and password combinations to forge valid password-reset requests and hijack arbitrary accounts.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63159https://github.com/xech/agora-project/releases/tag/26.10https://www.agora-project.net/https://www.vulncheck.com/advisories/omnispace-agora-project-predictable-password-reset-token-account-takeover#Omnispace #AgoraProject#CVE_2026_63159#bot", "url": "https://infosec.exchange/users/cve/statuses/117439455310231942"}, {"timestamp": "2026-10-14T15:16:00.418Z", "date_only": false, "value": "2026-10-14T15:16:00.418Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63159", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:16:00.418Z", "date_only": false, "value": "2026-10-14T15:16:00.418Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63159", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:52:40.503Z", "date_only": false, "value": "2026-10-15T15:52:40.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63159", "record": "FKIE_CVE-2026-63159", "field": "lastModified"}]}