{"metadata": {"vulnerability": "CVE-2026-76158", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-19T08:03:53.871Z", "date_only": false, "value": "2026-08-19T08:03:53.871Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-76158", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-21T01:00:00Z", "date_only": false, "value": "2026-08-21T01:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / ZUSO ART", "record": "CVE-2026-76158", "field": "containers.cna.datePublic"}, {"timestamp": "2026-08-21T02:02:23.070Z", "date_only": false, "value": "2026-08-21T02:02:23.070Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-76158", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-21T02:02:23.070Z", "date_only": false, "value": "2026-08-21T02:02:23.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ZUSO ART", "record": "CVE-2026-76158", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T03:00:25.137Z", "date_only": false, "value": "2026-08-21T03:00:25.137508Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117131262323183747", "record": "cve-2026-76158", "field": "creation_timestamp", "uuid": "c4107ddc-a58d-4463-bbb5-3c32cbad64da", "content": "CVE-2026-76158: Datiphy Data Management Center 8.3.0 faces CRITICAL vuln (CVSS 9.3) \u2014 upload API allows unauthenticated file writes anywhere via path traversal \ud83d\uddc2\ufe0f. Restrict access & monitor uploads until patch. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-management-center-6c6f4960c6201d48 #OffSeq #Vuln #Datiphy #CVE202676158", "url": "https://infosec.exchange/users/offseq/statuses/117131262323183747"}, {"timestamp": "2026-08-21T03:00:27.505Z", "date_only": false, "value": "2026-08-21T03:00:27.505892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkrfdbwjx2w", "record": "cve-2026-76158", "field": "creation_timestamp", "uuid": "43466339-74c5-41b0-91b3-79d0762f7677", "content": "CRITICAL: Datiphy Data Management Center 8.3.0 vulnerable (CVE-2026-76158). Unauthenticated attackers can write files anywhere via upload API. Restrict access & monitor uploads now. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-man...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mtkrfdbwjx2w"}, {"timestamp": "2026-08-21T03:16:39Z", "date_only": false, "value": "2026-08-21T03:16:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3G7V-7VPF-GWMM", "record": "GHSA-3G7V-7VPF-GWMM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-21T03:16:39.903Z", "date_only": false, "value": "2026-08-21T03:16:39.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76158", "record": "FKIE_CVE-2026-76158", "field": "published"}, {"timestamp": "2026-08-21T03:31:22Z", "date_only": false, "value": "2026-08-21T03:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3G7V-7VPF-GWMM", "record": "GHSA-3G7V-7VPF-GWMM", "field": "published"}, {"timestamp": "2026-08-21T03:31:22Z", "date_only": false, "value": "2026-08-21T03:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3G7V-7VPF-GWMM", "record": "GHSA-3G7V-7VPF-GWMM", "field": "modified"}, {"timestamp": "2026-08-21T03:50:05.223Z", "date_only": false, "value": "2026-08-21T03:50:05.223047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtku63r6uh2u", "record": "CVE-2026-76158", "field": "creation_timestamp", "uuid": "59168aa5-c217-427e-a10e-6b6605f45901", "content": "CVE-2026-76158 - data management center\nThe upload feature in Datiphy Data Management Center versions 8.3.0 through 8.5.1 can be tricked into writing files to locations you didn't intend. This could let a remote\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtku63r6uh2u"}, {"timestamp": "2026-08-21T04:07:24.771Z", "date_only": false, "value": "2026-08-21T04:07:24.771008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4gox73pk2mqpr", "record": "CVE-2026-76158", "field": "creation_timestamp", "uuid": "2d6e254c-591a-4802-9e74-21696c4121a4", "content": "CVE-2026-76158 - Datiphy Data Management Center - External Control of File Name or Path\nCVE ID : CVE-2026-76158\n \n Published : Aug. 21, 2026, 3:16 a.m. | 39\u00a0minutes ago\n \n Description : External Control of File Name or Path in the upload API endpoint of Datiphy Data Management...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4gox73pk2mqpr"}, {"timestamp": "2026-08-21T04:09:38.675Z", "date_only": false, "value": "2026-08-21T04:09:38.675547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvb3a6zq2j", "record": "CVE-2026-76158", "field": "creation_timestamp", "uuid": "d9cb51eb-648a-4c87-be89-ab8563f5e0ea", "content": "\ud83d\udea8 CVE-2026-76158 \u2014 CVSS 9.3 CRITICAL\n\nExternal Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76158\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvb3a6zq2j"}, {"timestamp": "2026-08-21T12:59:38.983Z", "date_only": false, "value": "2026-08-21T12:59:38.983780Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76158", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-21T12:59:38.983Z", "date_only": false, "value": "2026-08-21T12:59:38.983780Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76158", "record": "FKIE_CVE-2026-76158", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-21T13:01:03.052Z", "date_only": false, "value": "2026-08-21T13:01:03.052Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-76158", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-21T13:01:03.052Z", "date_only": false, "value": "2026-08-21T13:01:03.052Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76158", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-18T20:10:00.110Z", "date_only": false, "value": "2026-10-18T20:10:00.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76158", "record": "FKIE_CVE-2026-76158", "field": "lastModified"}]}