{"metadata": {"vulnerability": "CVE-2026-70179", "count": 37, "kinds": {"milestone": 7, "sighting": 17, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-03T23:48:30.859Z", "date_only": false, "value": "2026-08-03T23:48:30.859Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-70179", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-70179", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-70179", "record": "FKIE_CVE-2026-70179", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:56:15Z", "date_only": false, "value": "2026-10-13T11:56:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "de5acee6-df44-44c7-a7b2-40f4843d7849", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-70179", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T19:00:26.492Z", "date_only": false, "value": "2026-10-13T19:00:26.492Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-70179", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:07:50.005Z", "date_only": false, "value": "2026-10-13T19:07:50.005063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "9c1f4202-32ff-4215-bab4-6b29712cef23", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m"}, {"timestamp": "2026-10-13T19:07:52.902Z", "date_only": false, "value": "2026-10-13T19:07:52.902252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "566d45af-8da6-4382-9fb9-4ceda97c1bb6", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m"}, {"timestamp": "2026-10-13T19:07:55.605Z", "date_only": false, "value": "2026-10-13T19:07:55.605099Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "e7b875b0-e620-47c8-8b7f-715a21aceadc", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m"}, {"timestamp": "2026-10-13T19:07:58.252Z", "date_only": false, "value": "2026-10-13T19:07:58.252035Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "714f3efa-b414-4f90-b09b-a3adc87fb2e0", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m"}, {"timestamp": "2026-10-13T19:08:00.868Z", "date_only": false, "value": "2026-10-13T19:08:00.868982Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "e01f79fc-dbad-4b78-a078-98c1e3ebda7c", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m"}, {"timestamp": "2026-10-13T19:08:03.827Z", "date_only": false, "value": "2026-10-13T19:08:03.827657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "b379a5ac-a420-4f49-a02b-830f02e7cb90", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m"}, {"timestamp": "2026-10-13T19:08:07.196Z", "date_only": false, "value": "2026-10-13T19:08:07.196665Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "beb98740-08bd-4f78-8f77-f55339f86ccf", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m"}, {"timestamp": "2026-10-13T19:08:09.849Z", "date_only": false, "value": "2026-10-13T19:08:09.849468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "78a13423-ed4a-4604-8ac9-1982c0ca58f6", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m"}, {"timestamp": "2026-10-13T19:08:13.124Z", "date_only": false, "value": "2026-10-13T19:08:13.124092Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "e4f80ea9-2870-474f-afb7-38ab5bb4626b", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m"}, {"timestamp": "2026-10-13T19:08:15.820Z", "date_only": false, "value": "2026-10-13T19:08:15.820617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "eccaa17b-8ce8-4386-bf83-cf6e762094db", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m"}, {"timestamp": "2026-10-13T19:08:18.470Z", "date_only": false, "value": "2026-10-13T19:08:18.470937Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "448ae937-412f-48ed-b495-fe9904aae1d5", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m"}, {"timestamp": "2026-10-13T19:08:21.236Z", "date_only": false, "value": "2026-10-13T19:08:21.236819Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "712a09f1-ceb8-40b2-a13c-1a2aae2d21da", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m"}, {"timestamp": "2026-10-13T19:08:23.861Z", "date_only": false, "value": "2026-10-13T19:08:23.861308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "2b0860e0-3f78-453f-96d7-6d972951f953", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m"}, {"timestamp": "2026-10-13T19:19:32.170Z", "date_only": false, "value": "2026-10-13T19:19:32.170", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-70179", "record": "FKIE_CVE-2026-70179", "field": "published"}, {"timestamp": "2026-10-13T20:50:45Z", "date_only": false, "value": "2026-10-13T20:50:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VRRP-6V32-2P8G", "record": "GHSA-VRRP-6V32-2P8G", "field": "published"}, {"timestamp": "2026-10-13T20:50:45Z", "date_only": false, "value": "2026-10-13T20:50:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VRRP-6V32-2P8G", "record": "GHSA-VRRP-6V32-2P8G", "field": "modified"}, {"timestamp": "2026-10-13T21:00:00Z", "date_only": false, "value": "2026-10-13T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2106", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "94826215-d93a-45d2-8c3d-bdae8df0c614", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2106"}, {"timestamp": "2026-10-13T23:56:32.367Z", "date_only": false, "value": "2026-10-13T23:56:32.367455Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117436304046802155", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "04449244-4727-4b55-ab27-e4b109df0ad4", "content": "CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-70179https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179#Microsoft #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10 #Microsoft.AspNetCore.Authentication.Negotiate#CVE_2026_70179#bot", "url": "https://infosec.exchange/users/cve/statuses/117436304046802155"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-70179", "field": "creation_timestamp", "uuid": "89263c71-1f44-4c96-bdc2-371bf629246f", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T03:57:16.487Z", "date_only": false, "value": "2026-10-14T03:57:16.487Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-70179", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T04:18:32.693Z", "date_only": false, "value": "2026-10-14T04:18:32.693", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-70179", "record": "FKIE_CVE-2026-70179", "field": "lastModified"}, {"timestamp": "2026-10-16T23:20:01.997Z", "date_only": false, "value": "2026-10-16T23:20:01.997Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-70179", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T23:20:01.997Z", "date_only": false, "value": "2026-10-16T23:20:01.997Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-70179", "field": "containers.cna.providerMetadata.dateUpdated"}]}