{"metadata": {"vulnerability": "CVE-2026-77635", "count": 22, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-20T20:52:01.928Z", "date_only": false, "value": "2026-08-20T20:52:01.928Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-77635", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-24T20:30:34.492Z", "date_only": false, "value": "2026-08-24T20:30:34.492Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77635", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-24T20:30:34.492Z", "date_only": false, "value": "2026-08-24T20:30:34.492Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-77635", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-24T21:17:00Z", "date_only": false, "value": "2026-08-24T21:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-77635", "record": "UBUNTU-CVE-2026-77635", "field": "published"}, {"timestamp": "2026-08-24T21:17:48Z", "date_only": false, "value": "2026-08-24T21:17:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FXF7-VHH8-7VPQ", "record": "GHSA-FXF7-VHH8-7VPQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-24T21:17:48.457Z", "date_only": false, "value": "2026-08-24T21:17:48.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77635", "record": "FKIE_CVE-2026-77635", "field": "published"}, {"timestamp": "2026-08-24T21:50:05.933Z", "date_only": false, "value": "2026-08-24T21:50:05.933479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtubw2onnx2j", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "b3fe352c-a168-4f6b-9537-ed36bad7b861", "content": "CVE-2026-77635 - cakephp\nIf you use CakePHP versions older than the latest releases, a function that handles JSON data with PostgreSQL can be tricked into executing unwanted database commands when it receives crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtubw2onnx2j"}, {"timestamp": "2026-08-24T22:07:50.127Z", "date_only": false, "value": "2026-08-24T22:07:50.127320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtucvroixe2b", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "da4824a2-bb5e-45d0-8ec7-784626099a15", "content": "\ud83d\udea8 CVE-2026-77635 \u2014 CVSS 9.2 CRITICAL\n\nCakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their resp...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77635\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtucvroixe2b"}, {"timestamp": "2026-08-25T08:00:05.614Z", "date_only": false, "value": "2026-08-25T08:00:05.614387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvdyt3jdz25", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "f059a2fe-9345-48a5-890b-41866034c5b3", "content": "CVE-2026-77635\nOlder versions of the CakePHP framework let a specially crafted input in a JSON query be used to change the database commands that are run. An attacker could read, modify or delete data. Update CakePHP to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvdyt3jdz25"}, {"timestamp": "2026-08-25T13:31:32.774Z", "date_only": false, "value": "2026-08-25T13:31:32.774379Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77635", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-25T13:31:32.774Z", "date_only": false, "value": "2026-08-25T13:31:32.774379Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77635", "record": "FKIE_CVE-2026-77635", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-25T13:31:40.225Z", "date_only": false, "value": "2026-08-25T13:31:40.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-77635", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-25T13:31:40.225Z", "date_only": false, "value": "2026-08-25T13:31:40.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77635", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-27T14:00:05.884Z", "date_only": false, "value": "2026-08-27T14:00:05.884730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2z2foxe52t", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "f86bf19c-38a5-499b-b25d-7c7dd3aa3ebd", "content": "CVE-2026-77635 - cakephp\nIf you use CakePHP versions older than the latest releases, a function that handles JSON data with PostgreSQL can be tricked into executing unintended database queries when\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #debian #Debian11 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2z2foxe52t"}, {"timestamp": "2026-09-02T16:27:47Z", "date_only": false, "value": "2026-09-02T16:27:47Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-77635", "record": "UBUNTU-CVE-2026-77635", "field": "modified"}, {"timestamp": "2026-09-08T20:56:41Z", "date_only": false, "value": "2026-09-08T20:56:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FXF7-VHH8-7VPQ", "record": "GHSA-FXF7-VHH8-7VPQ", "field": "published"}, {"timestamp": "2026-09-08T20:56:41Z", "date_only": false, "value": "2026-09-08T20:56:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FXF7-VHH8-7VPQ", "record": "GHSA-FXF7-VHH8-7VPQ", "field": "modified"}, {"timestamp": "2026-09-22T07:00:09.017Z", "date_only": false, "value": "2026-09-22T07:00:09.017293Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "d1be74e5-932e-4de1-a5ee-d388ab7db148"}, {"timestamp": "2026-09-22T07:00:10.142Z", "date_only": false, "value": "2026-09-22T07:00:10.142620Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "b8f70ef8-822b-45ed-9265-385b1f7e79c0"}, {"timestamp": "2026-09-23T00:00:12.601Z", "date_only": false, "value": "2026-09-23T00:00:12.601296Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "066fa9bb-e4e1-4e32-9fc0-c62f4bee5d83"}, {"timestamp": "2026-09-23T00:00:14.420Z", "date_only": false, "value": "2026-09-23T00:00:14.420573Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "record": "CVE-2026-77635", "field": "creation_timestamp", "uuid": "c6736667-86c4-42f9-b955-74b3ee028c69"}, {"timestamp": "2026-10-12T21:10:00.227Z", "date_only": false, "value": "2026-10-12T21:10:00.227", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77635", "record": "FKIE_CVE-2026-77635", "field": "lastModified"}]}