{"metadata": {"vulnerability": "CVE-2026-75937", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-18T15:53:39.284Z", "date_only": false, "value": "2026-08-18T15:53:39.284Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-75937", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-02T20:33:56.823Z", "date_only": false, "value": "2026-10-02T20:33:56.823Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75937", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-02T20:33:56.823Z", "date_only": false, "value": "2026-10-02T20:33:56.823Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Digi", "record": "CVE-2026-75937", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-02T21:16:56Z", "date_only": false, "value": "2026-10-02T21:16:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QQMH-GH5M-J2H2", "record": "GHSA-QQMH-GH5M-J2H2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-02T21:16:56.337Z", "date_only": false, "value": "2026-10-02T21:16:56.337", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75937", "record": "FKIE_CVE-2026-75937", "field": "published"}, {"timestamp": "2026-10-02T21:32:07Z", "date_only": false, "value": "2026-10-02T21:32:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QQMH-GH5M-J2H2", "record": "GHSA-QQMH-GH5M-J2H2", "field": "published"}, {"timestamp": "2026-10-02T21:32:07Z", "date_only": false, "value": "2026-10-02T21:32:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QQMH-GH5M-J2H2", "record": "GHSA-QQMH-GH5M-J2H2", "field": "modified"}, {"timestamp": "2026-10-02T21:40:15.381Z", "date_only": false, "value": "2026-10-02T21:40:15.381657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6isehgai3ro7y", "record": "CVE-2026-75937", "field": "creation_timestamp", "uuid": "08c835e1-be2e-4cd8-96f4-3ec5aa13c596", "content": "CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)\nCVE ID : CVE-2026-75937\n \n Published : Oct. 2, 2026, 8:33 p.m. | 28\u00a0minutes ago\n \n Description : A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/6isehgai3ro7y"}, {"timestamp": "2026-10-02T22:00:16.819Z", "date_only": false, "value": "2026-10-02T22:00:16.819180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwweo5phq222", "record": "CVE-2026-75937", "field": "creation_timestamp", "uuid": "77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3", "content": "Digi DAL OS vulnerability CVE-2026-75937 (CVSS 9.4) lets attackers run root commands on Digi Accelerated Linux devices. Patch now.\n\n#Digi #DALOS #CVE202675937 #CommandInjection #IoTSecurity #OTSecurity #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mwweo5phq222"}, {"timestamp": "2026-10-02T22:07:47.995Z", "date_only": false, "value": "2026-10-02T22:07:47.995543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwf3n2nqa2h", "record": "CVE-2026-75937", "field": "creation_timestamp", "uuid": "e601b1d6-86d2-499b-b376-81ec94e9c1a9", "content": "\ud83d\udea8 CVE-2026-75937 \u2014 CVSS 9.4 CRITICAL\n\nA specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75937\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwf3n2nqa2h"}, {"timestamp": "2026-10-03T04:30:23.899Z", "date_only": false, "value": "2026-10-03T04:30:23.899361Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117375095480797763", "record": "cve-2026-75937", "field": "creation_timestamp", "uuid": "5fd103af-7c2a-4b31-9871-e606be695ea9", "content": "Digi IX Family devices hit by CRITICAL OS command injection (CVE-2026-75937, CVSS 9.4). Unauthenticated remote attackers can execute root commands via HTTP POST. Disable web admin interface to reduce risk. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-deedd882034e65bf #OffSeq #Vulnerability #IoT #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117375095480797763"}, {"timestamp": "2026-10-03T04:30:25.977Z", "date_only": false, "value": "2026-10-03T04:30:25.977827Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwx2hsq6pv2j", "record": "cve-2026-75937", "field": "creation_timestamp", "uuid": "74760fd3-0f10-45e9-86b2-e9389e58f460", "content": "CRITICAL: CVE-2026-75937 in Digi IX Family enables unauthenticated root command execution via web admin. Disable web server if not in use. Patch not yet available. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-de...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwx2hsq6pv2j"}, {"timestamp": "2026-10-03T15:47:40.910Z", "date_only": false, "value": "2026-10-03T15:47:40.910645Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-75937", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-03T15:47:40.910Z", "date_only": false, "value": "2026-10-03T15:47:40.910645Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75937", "record": "FKIE_CVE-2026-75937", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-03T15:52:55.213Z", "date_only": false, "value": "2026-10-03T15:52:55.213Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-75937", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-03T15:52:55.213Z", "date_only": false, "value": "2026-10-03T15:52:55.213Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-75937", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-03T18:04:58.875Z", "date_only": false, "value": "2026-10-03T18:04:58.875465Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378298570053167", "record": "CVE-2026-75937", "field": "creation_timestamp", "uuid": "8e00e97c-3f71-4694-85e1-28df78fa34b9", "content": "The severity is increased for this new vulnerability affecting Digi International AnywhereUSB Plus Family and other products (CVE-2026-75937) https://vuldb.com/vuln/413224", "url": "https://infosec.exchange/users/vuldb/statuses/117378298570053167"}, {"timestamp": "2026-10-06T15:08:38.397Z", "date_only": false, "value": "2026-10-06T15:08:38.397", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75937", "record": "FKIE_CVE-2026-75937", "field": "lastModified"}]}