{"metadata": {"vulnerability": "CVE-2026-65641", "count": 32, "kinds": {"milestone": 6, "sighting": 16, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-07-22T15:00:06.103Z", "date_only": false, "value": "2026-07-22T15:00:06.103Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-65641", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-25T00:00:00Z", "date_only": true, "value": "2026-08-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-08-26T08:32:55.362Z", "date_only": false, "value": "2026-08-26T08:32:55.362653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtxwcgg72o2v", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "4f444e61-7ff5-410e-bb63-4daaf2150d2f", "content": "A critical Veeam ONE vulnerability (CVE-2026-65641, CVSS 9.3) lets an unauthenticated attacker coerce SMB authentication. Patch Veeam now.\n\n#Veeam #CyberSecurity #CVE202665641 #SMB #Infosec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mtxwcgg72o2v"}, {"timestamp": "2026-08-26T12:35:13.244Z", "date_only": false, "value": "2026-08-26T12:35:13.244780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtpmdku2x", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "d9edfdc2-3f19-48a1-90a0-0c4213072a6a", "content": "\ud83d\udd17 CVE : CVE-2026-58070, CVE-2026-65641", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtpmdku2x"}, {"timestamp": "2026-08-26T21:21:40.955Z", "date_only": false, "value": "2026-08-26T21:21:40.955Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65641", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-26T21:21:40.955Z", "date_only": false, "value": "2026-08-26T21:21:40.955Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2026-65641", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-26T22:16:25Z", "date_only": false, "value": "2026-08-26T22:16:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MFFW-5W3V-PM66", "record": "GHSA-MFFW-5W3V-PM66", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-26T22:16:25.747Z", "date_only": false, "value": "2026-08-26T22:16:25.747", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65641", "record": "FKIE_CVE-2026-65641", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-26T22:58:41.575Z", "date_only": false, "value": "2026-08-26T22:58:41.575243Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/117164285669881073", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "5ead35b7-a5b7-408d-af41-f1a6b4ce2a32", "content": "Kritische Veeam ONE-Schwachstelle CVE-2026-65641 (CVSS 9.3) - patchen\nhttps://borncity.com/blog/2026/08/27/veeam-one/", "url": "https://social.tchncs.de/users/gborn/statuses/117164285669881073"}, {"timestamp": "2026-08-26T22:59:00.103Z", "date_only": false, "value": "2026-08-26T22:59:00.103696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mtzgp6nlec2v", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "0ffe4733-3e48-4e56-b5ff-9194edd3b6ba", "content": "Kritische Veeam ONE-Schwachstelle CVE-2026-65641 (CVSS 9.3) - patchen\n\nborncity.com/blog/2026/08...", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mtzgp6nlec2v"}, {"timestamp": "2026-08-26T23:04:33.968Z", "date_only": false, "value": "2026-08-26T23:04:33.968720Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/117164308781204585", "record": "cve-2026-65641", "field": "creation_timestamp", "uuid": "c32704c9-bc50-49c8-bf2b-3a9f61148880", "content": "Veeam ONE with Critical Vulnerability CVE-2026-65641 (CVSS 9.3)\nhttps://borncity.com/win/2026/08/27/veeam-one-with-critical-vulnerability-cve-2026-65641-cvss-9-3/", "url": "https://social.tchncs.de/users/gborn/statuses/117164308781204585"}, {"timestamp": "2026-08-26T23:05:02.271Z", "date_only": false, "value": "2026-08-26T23:05:02.271510Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mtzgzxounk2v", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "6c08e365-41e0-4494-ab7e-03da528bd821", "content": "Veeam ONE with Critical Vulnerability CVE-2026-65641 (CVSS 9.3)\n\nborncity.com/win/2026/08/...", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mtzgzxounk2v"}, {"timestamp": "2026-08-26T23:20:04.318Z", "date_only": false, "value": "2026-08-26T23:20:04.318901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtzhus5cr72b", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "8c6c525f-9310-4f66-b210-2cc53230be6e", "content": "CVE-2026-65641 - one\nA network attacker who does not need a login can force the SMB file\u2011sharing service to try authenticating using its built\u2011in service account. This can expose the account\u2019s credentials and give\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#one #veeam #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtzhus5cr72b"}, {"timestamp": "2026-08-26T23:42:39.525Z", "date_only": false, "value": "2026-08-26T23:42:39.525270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtzj56gcye26", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "c523badc-dadf-4114-8cac-178657f0508a", "content": "CVE-2026-65641 is trending. Hype score 5, currently #5 on cvemon.\n\nA vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-65641", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mtzj56gcye26"}, {"timestamp": "2026-08-27T00:07:06.534Z", "date_only": false, "value": "2026-08-27T00:07:06.534075Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtzkiuwxh72m", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "465f7272-e084-43a4-8050-e3471de9301a", "content": "SMB Tricked Into Courting Attackers While Defenders Pantomime Urgency\nPANIC 78% | Lag 0.0h | CVE-2026-65641 lets a network attacker without a login force the SMB service to authenticate to the \n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtzkiuwxh72m"}, {"timestamp": "2026-08-27T00:07:28.974Z", "date_only": false, "value": "2026-08-27T00:07:28.974547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtzkjld2oa2c", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "ab0454bb-3583-4f8b-a3d2-6cf31e0b1c40", "content": "\ud83d\udea8 CVE-2026-65641 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-65641\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtzkjld2oa2c"}, {"timestamp": "2026-08-27T00:30:28Z", "date_only": false, "value": "2026-08-27T00:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MFFW-5W3V-PM66", "record": "GHSA-MFFW-5W3V-PM66", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-27T00:30:28Z", "date_only": false, "value": "2026-08-27T00:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MFFW-5W3V-PM66", "record": "GHSA-MFFW-5W3V-PM66", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-27T01:25:50.322Z", "date_only": false, "value": "2026-08-27T01:25:50.322973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtzovn3ezm2t", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "467bcc9f-ab63-4288-91e2-cbb2829401f6", "content": "CVE-2026-65641 (CVSS 9.3): Veeam ONE\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304cSMB\u8a8d\u8a3c\u3092\u5f37\u5236\u7684\u306b\u5b9f\u884c\u3067\u304d\u308b \n\nCVE-2026-65641 (CVSS 9.3): Veeam ONE Flaw Lets Unauthenticated Attacker Coerce SMB Authentication  #DailyCyberSecurity (Aug 26)\n\nsecurityonline.info/veeam-cve-20...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mtzovn3ezm2t"}, {"timestamp": "2026-08-27T11:59:21.411Z", "date_only": false, "value": "2026-08-27T11:59:21.411154Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu2scilfqy2t", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "73b92677-5315-40f0-839f-8188164e25c5", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 22 interactions\nCVE-2026-19490: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65641: 8 interactions\nCVE-2026-16812: 5 interactions\nCVE-2026-19632: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mu2scilfqy2t"}, {"timestamp": "2026-08-27T13:01:28.078Z", "date_only": false, "value": "2026-08-27T13:01:28.078735Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-65641", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-27T13:01:28.078Z", "date_only": false, "value": "2026-08-27T13:01:28.078735Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65641", "record": "FKIE_CVE-2026-65641", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-27T15:04:11.392Z", "date_only": false, "value": "2026-08-27T15:04:11.392Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-65641", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-27T15:04:11.392Z", "date_only": false, "value": "2026-08-27T15:04:11.392Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-65641", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-28T05:05:12.693Z", "date_only": false, "value": "2026-08-28T05:05:12.693649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mu4lmuvuk32m", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "adfa99ea-b2fd-44a0-9509-ab0dc1a0af1d", "content": "Daily IT Security Digest \u2014 2026-08-28\n(CVE-2026-65182)\n\nApache Tomcat patched a critical vulnerability allowing unauthenticated attackers to bypass security constraints via path-ordering logic manipulation. Combined with Veeam's critical auth-coercion flaw (CVE-2026-65641), which allows theft of", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mu4lmuvuk32m"}, {"timestamp": "2026-09-01T06:44:20.873Z", "date_only": false, "value": "2026-09-01T06:44:20.873581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mugszsy5ri24", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "bc92e7e1-903e-4e22-918e-b096b5c6c3f5", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-60004: 21 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-62626: 10 interactions\nCVE-2023-28252: 8 interactions\nCVE-2026-81578: 6 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mugszsy5ri24"}, {"timestamp": "2026-09-02T06:22:33.493Z", "date_only": false, "value": "2026-09-02T06:22:33.493828Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mujcbrqrdu2q", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "ac04dda3-fa74-4e6f-af24-7404dfa7dc2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 41 interactions\nCVE-2026-60004: 16 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-62911: 10 interactions\nCVE-2026-70551: 8 interactions\nCVE-2026-83548: 7 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mujcbrqrdu2q"}, {"timestamp": "2026-09-09T15:41:24.427Z", "date_only": false, "value": "2026-09-09T15:41:24.427", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65641", "record": "FKIE_CVE-2026-65641", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-24T22:43:21.434Z", "date_only": false, "value": "2026-09-24T22:43:21.434361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcddsywvs2t", "record": "CVE-2026-65641", "field": "creation_timestamp", "uuid": "3e6ef53b-7898-4f85-8abc-790bf0226046", "content": "\u300cVeeam ONE\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027\u3092\u89e3\u6d88\n\nVeeam Software\u306f\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u74b0\u5883\u306e\u76e3\u8996\u30c4\u30fc\u30eb\u300cVeeam ONE\u300d\u306b\u304a\u3044\u3066\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3088\u308a\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u300c\u540c13.1\u7cfb\u300d\u3067\u306f\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u3078\u306e\u5bfe\u5fdc\u3082\u542b\u307e\u308c\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670825\u65e5\u3001\u300c\u540c13\u7cfb\u300d\u306b\u95a2\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u306bSMB\u8a8d\u8a3c\u3092\u884c\u308f\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-65641\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u8106\u5f31\u6027\u5831\u544a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3092\u901a\u3058\u3066\u5831\u544a\u3055\u308c\u305f\u3068\u3044\u3046\u3002\n\n\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv4.0\u300d\u306e...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcddsywvs2t"}], "metrics": {"as_of": "2026-11-03T08:15:29.191Z", "anchors": {"origin": {"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5991329.191897, "hours": 1664.2581088602778, "days": 69.34408786917824, "min_seconds": 5904929.191897, "max_seconds": 5991329.191897, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1080", "record": "CERTFR-2026-AVI-1080", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-03T08:15:29.191Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
