{"metadata": {"vulnerability": "CVE-2026-63219", "count": 25, "kinds": {"milestone": 4, "sighting": 8, "kev": 4, "other": 9}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0343", "record": "NCSC-2026-0343", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-15T22:19:06.907Z", "date_only": false, "value": "2026-07-15T22:19:06.907Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63219", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-63219", "field": "timestamps.asserted_at", "uuid": "4e6e0a66-af53-4db2-a33d-fab986c2c116", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2026-63219", "field": "timestamps.first_seen_at", "uuid": "4e6e0a66-af53-4db2-a33d-fab986c2c116", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2026-63219", "field": "status.status_updated_at", "uuid": "4e6e0a66-af53-4db2-a33d-fab986c2c116", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-03T12:28:54.061Z", "date_only": false, "value": "2026-09-03T12:28:54.061853Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "caffbb93-dcd8-430c-a0e7-bfb102b96422", "url": "https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a"}, {"timestamp": "2026-09-03T17:13:01.357Z", "date_only": false, "value": "2026-09-03T17:13:01.357Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63219", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-03T17:13:01.357Z", "date_only": false, "value": "2026-09-03T17:13:01.357Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-63219", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-03T17:40:15.181Z", "date_only": false, "value": "2026-09-03T17:40:15.181226Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63219", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-03T17:40:15.181Z", "date_only": false, "value": "2026-09-03T17:40:15.181226Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63219", "record": "FKIE_CVE-2026-63219", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-03T17:40:21.680Z", "date_only": false, "value": "2026-09-03T17:40:21.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63219", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-03T17:40:21.680Z", "date_only": false, "value": "2026-09-03T17:40:21.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63219", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-03T18:17:22.997Z", "date_only": false, "value": "2026-09-03T18:17:22.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63219", "record": "FKIE_CVE-2026-63219", "field": "published"}, {"timestamp": "2026-09-03T18:56:33.382Z", "date_only": false, "value": "2026-09-03T18:56:33.382969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b3l2gpccocquf", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "e5aca1de-581f-4038-8658-17b50c5ba19f", "content": "CVE-2026-63219 - Unauthenticated file upload via missing authorization on formatter upload endpoint\nCVE ID : CVE-2026-63219\n \n Published : Sept. 3, 2026, 6:17 p.m. | 20\u00a0minutes ago\n \n Description : GeoNetwork is a catalog application to manage spatially referenced resources. P...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/b3l2gpccocquf"}, {"timestamp": "2026-09-04T07:00:01Z", "date_only": false, "value": "2026-09-04T07:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2026-63219", "field": "timestamps.recorded_at", "uuid": "4e6e0a66-af53-4db2-a33d-fab986c2c116", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-04T07:00:01.454Z", "date_only": false, "value": "2026-09-04T07:00:01.454190Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e6e0a66-af53-4db2-a33d-fab986c2c116", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "cc95af24-272d-46fc-86ea-db5ecba9c895", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e6e0a66-af53-4db2-a33d-fab986c2c116"}, {"timestamp": "2026-09-04T18:00:04.511Z", "date_only": false, "value": "2026-09-04T18:00:04.511716Z", "kind": "sighting", "label": "Seen", "source": "Telegram/9h73ajeEnWq1UUc99NXcO070Q77AwRDt_XFlqiCagLlKFUc", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "4a833004-e463-4a03-b0be-e1dc3b297e36"}, {"timestamp": "2026-09-05T01:00:19.928Z", "date_only": false, "value": "2026-09-05T01:00:19.928832Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9h73ajeEnWq1UUc99NXcO070Q77AwRDt_XFlqiCagLlKFUc", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "97cc9910-fa82-4189-bd01-83a34d30371a"}, {"timestamp": "2026-09-06T23:32:55.980Z", "date_only": false, "value": "2026-09-06T23:32:55.980939Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv5psuuec26", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "adef09a8-41eb-45a5-9f94-f994d3937bdf", "content": "\ud83d\udd34 GeoNetwork unauthenticated RCE chain\n\nCVE-2026-63219 + CVE-2026-58400 can be chained to achieve pre-auth remote code execution in vulnerable GeoNetwork servers. Researchers found \n\nstemshop.top/blog/geonetw...\n\n#CVE #CVE202663219 #CVE202658400 #GeoNetwork #RCE #GeoSecurity #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3muv5psuuec26"}, {"timestamp": "2026-09-07T00:40:51.255Z", "date_only": false, "value": "2026-09-07T00:40:51.255864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbjesqo62r", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "ce55fd67-678b-49dd-a4fd-88d3b6977529", "content": "GeoNetwork Falls To Pre-Auth RCE While Bureaucrats Worship Their Stamps\nPANIC 76% | Lag 0.0h | GeoNetwork servers vulnerable to the CVE-2026-63219 and CVE-2026-58400 chain can be compromised befo\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbjesqo62r"}, {"timestamp": "2026-09-07T12:00:00.558Z", "date_only": false, "value": "2026-09-07T12:00:00.558124Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0343", "record": "NCSC-2026-0343", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-07T12:00:00.558Z", "date_only": false, "value": "2026-09-07T12:00:00.558124Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0343", "record": "NCSC-2026-0343", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-07T12:00:00.558Z", "date_only": false, "value": "2026-09-07T12:00:00.558124Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0343", "record": "NCSC-2026-0343", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-09T21:09:13.080Z", "date_only": false, "value": "2026-09-09T21:09:13.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63219", "record": "FKIE_CVE-2026-63219", "field": "lastModified"}, {"timestamp": "2026-10-01T10:02:30.638Z", "date_only": false, "value": "2026-10-01T10:02:30.638431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0xacb.com/post/3mwsm3rttkr2c", "record": "CVE-2026-63219", "field": "creation_timestamp", "uuid": "5279d11e-137b-47de-8798-56f719ca1272", "content": "CVE-2026-63219 - Unauthenticated file upload via missing Authorization on formatter Upload Endpoint\nCVE-2026-55864 - Unauthenticated Server-Side Request Forgery in SLD Tool\nCVE-2026-57582 - Reflected XSS via unsanitized Javascript Sink\nCVE-2026-58400 - Remote Code Execution via unsafe Saxon XSLT", "url": "https://bsky.app/profile/0xacb.com/post/3mwsm3rttkr2c"}]}