{"metadata": {"vulnerability": "CVE-2026-8024", "count": 20, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-06T06:31:06.618Z", "date_only": false, "value": "2026-05-06T06:31:06.618Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-8024", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-18T09:43:14.712Z", "date_only": false, "value": "2026-06-18T09:43:14.712Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8024", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-18T09:45:34.902Z", "date_only": false, "value": "2026-06-18T09:45:34.902Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERTVDE", "record": "CVE-2026-8024", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-18T10:01:16.299Z", "date_only": false, "value": "2026-06-18T10:01:16.299432Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/116770529327887486", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "401126ed-e637-4d37-9f49-75c2f0f1edcb", "content": "#OT #Advisory VDE-2026-051iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator\nRemote Code Execution (RCE) running under the service user account, thereby allowing privilege escalation.#CVE CVE-2026-8024\nhttps://certvde.com/en/advisories/vde-2026-051/#oCSAF#CSAF https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json", "url": "https://infosec.exchange/users/certvde/statuses/116770529327887486"}, {"timestamp": "2026-06-18T10:01:32.589Z", "date_only": false, "value": "2026-06-18T10:01:32.589199Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mokl2y64ikr2", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "acdb5937-2adc-4add-86b5-186cd1c7b914", "content": "#OT #Advisory VDE-2026-051\niba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator\n\nRemote Code Execution (RCE) running under the service user account, thereby allowing privilege escalation.\n#CVE CVE-2026-8024\n\nhttps://certvde.com/en/advisories/vde-2026-051/\n#oCSAF\n#CSAF [\u2026]", "url": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mokl2y64ikr2"}, {"timestamp": "2026-06-18T12:19:34.273Z", "date_only": false, "value": "2026-06-18T12:19:34.273518Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokss6uoa324", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "6b94afe8-4a19-4c33-a881-6661be0f9c51", "content": "CVE-2026-8024 - Deserialization vulnerability in ibaPDA and ibaDatCoordinator\nCVE ID : CVE-2026-8024\n \n Published : June 18, 2026, 9:43 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerabili...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokss6uoa324"}, {"timestamp": "2026-06-18T13:11:37.413Z", "date_only": false, "value": "2026-06-18T13:11:37.413154Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8024", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-18T13:11:37.413Z", "date_only": false, "value": "2026-06-18T13:11:37.413154Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8024", "record": "FKIE_CVE-2026-8024", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-18T13:53:21.412Z", "date_only": false, "value": "2026-06-18T13:53:21.412Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-8024", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-18T13:53:21.412Z", "date_only": false, "value": "2026-06-18T13:53:21.412Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8024", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-18T14:17:35Z", "date_only": false, "value": "2026-06-18T14:17:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-29X2-9V4J-Q39R", "record": "GHSA-29X2-9V4J-Q39R", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-18T14:17:35.190Z", "date_only": false, "value": "2026-06-18T14:17:35.190", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8024", "record": "FKIE_CVE-2026-8024", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-18T15:32:03Z", "date_only": false, "value": "2026-06-18T15:32:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-29X2-9V4J-Q39R", "record": "GHSA-29X2-9V4J-Q39R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-18T15:32:03Z", "date_only": false, "value": "2026-06-18T15:32:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-29X2-9V4J-Q39R", "record": "GHSA-29X2-9V4J-Q39R", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-22T00:39:50.111Z", "date_only": false, "value": "2026-06-22T00:39:50.111410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnkoa5c32n", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "496175d1-ef83-4a85-8170-cf5187d9c799", "content": "\ud83d\udea8  ALERT: CVE-2026-8024\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: NETWO", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnkoa5c32n"}, {"timestamp": "2026-06-22T17:47:16.070Z", "date_only": false, "value": "2026-06-22T17:47:16.070", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8024", "record": "FKIE_CVE-2026-8024", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-02T09:56:27.944Z", "date_only": false, "value": "2026-09-02T09:56:27.944354Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/117200846014325133", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "76b8587d-d911-4e5d-b728-4c05ae65bf62", "content": "\ud83d\udd04 CSAF advisory updated (version 2.0.0)\nVDE-2026-051iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinatorCVE-2026-8024\nChanges: Added ibaLogic to the affected products and the mitigation for this product.\nHTML: https://certvde.com/en/advisories/VDE-2026-051CSAF JSON: https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json\n#OT #Advisory", "url": "https://infosec.exchange/users/certvde/statuses/117200846014325133"}, {"timestamp": "2026-09-02T09:56:32.741Z", "date_only": false, "value": "2026-09-02T09:56:32.741657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mujoaffovwq2", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "d15a0d8e-5e20-4454-84ab-b326185f5c5b", "content": "\ud83d\udd04 CSAF advisory updated (version 2.0.0)\n\nVDE-2026-051\niba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator\nCVE-2026-8024\n\nChanges: Added ibaLogic to the affected products and the mitigation for this product.\n\nHTML: https://certvde.com/en/advisories/VDE-2026-051\nCSAF JSON [\u2026]", "url": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mujoaffovwq2"}, {"timestamp": "2026-09-17T08:41:07.660Z", "date_only": false, "value": "2026-09-17T08:41:07.660024Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/117285484446243801", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "23c274dd-cef1-44d0-bfbd-0a0bc0ce61a7", "content": "\ud83d\udd04 CSAF advisory updated (version 3.0.0)\nVDE-2026-051iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinatorCVE-2026-8024\nChanges: Corrected all CPE numbers and vendor name of all products.\nHTML: https://certvde.com/en/advisories/VDE-2026-051CSAF JSON: https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json\n#OT #Advisory", "url": "https://infosec.exchange/users/certvde/statuses/117285484446243801"}, {"timestamp": "2026-09-17T08:41:15.897Z", "date_only": false, "value": "2026-09-17T08:41:15.897956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvpazj3vkow2", "record": "CVE-2026-8024", "field": "creation_timestamp", "uuid": "6a1aacca-744d-4b24-805b-58a741da3c86", "content": "\ud83d\udd04 CSAF advisory updated (version 3.0.0)\n\nVDE-2026-051\niba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator\nCVE-2026-8024\n\nChanges: Corrected all CPE numbers and vendor name of all products.\n\nHTML: https://certvde.com/en/advisories/VDE-2026-051\nCSAF JSON [\u2026]", "url": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvpazj3vkow2"}], "metrics": {"as_of": "2026-11-04T16:29:20.330Z", "anchors": {"origin": {"timestamp": "2026-06-18T09:43:14.712Z", "date_only": false, "value": "2026-06-18T09:43:14.712Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8024", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-18T09:43:14.712Z", "date_only": false, "value": "2026-06-18T09:43:14.712Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8024", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 12033965.618265, "hours": 3342.768227295833, "days": 139.28200947065972, "min_seconds": 12033965.618265, "max_seconds": 12033965.618265, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-18T09:43:14.712Z", "date_only": false, "value": "2026-06-18T09:43:14.712Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8024", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T16:29:20.330Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}