{"metadata": {"vulnerability": "CVE-2026-80428", "count": 26, "kinds": {"milestone": 4, "sighting": 13, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-26T00:00:00Z", "date_only": false, "value": "2026-08-26T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-80428", "field": "containers.cna.datePublic"}, {"timestamp": "2026-08-26T10:43:44.175Z", "date_only": false, "value": "2026-08-26T10:43:44.175Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-80428", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-26T15:44:55.917Z", "date_only": false, "value": "2026-08-26T15:44:55.917Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-80428", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-26T16:16:45Z", "date_only": false, "value": "2026-08-26T16:16:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6H76-35RH-GXM9", "record": "GHSA-6H76-35RH-GXM9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-26T16:16:45.100Z", "date_only": false, "value": "2026-08-26T16:16:45.100", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-80428", "record": "FKIE_CVE-2026-80428", "field": "published"}, {"timestamp": "2026-08-26T18:00:54.392Z", "date_only": false, "value": "2026-08-26T18:00:54.392378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtyw22q63722", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "eb7b2d5f-ef30-4bc0-849d-4a4e16d30d57", "content": "\ud83d\udd34 CVE-2026-80428 - Critical (9.8)\n\nILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-80428/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtyw22q63722"}, {"timestamp": "2026-08-26T18:07:56.524Z", "date_only": false, "value": "2026-08-26T18:07:56.524067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywgihb3z2y", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "4a3f460f-1c73-4191-9071-a168fc0c5f7d", "content": "\ud83d\udea8 CVE-2026-80428 \u2014 CVSS 9.3 CRITICAL\n\nILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-80428\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywgihb3z2y"}, {"timestamp": "2026-08-26T18:31:56Z", "date_only": false, "value": "2026-08-26T18:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6H76-35RH-GXM9", "record": "GHSA-6H76-35RH-GXM9", "field": "published"}, {"timestamp": "2026-08-29T02:41:22.173Z", "date_only": false, "value": "2026-08-29T02:41:22.173954Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-80428", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-29T02:41:22.173Z", "date_only": false, "value": "2026-08-29T02:41:22.173954Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-80428", "record": "FKIE_CVE-2026-80428", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-29T02:41:40.892Z", "date_only": false, "value": "2026-08-29T02:41:40.892Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-80428", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-29T15:20:12.302Z", "date_only": false, "value": "2026-08-29T15:20:12.302914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mua6hazcn42e", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "3e98e8d7-feda-4804-addb-cb77fcc75d91", "content": "CVE-2026-80428 - ilias\nThe ILIAS learning platform\u2019s logout URL can be called by anyone, even without logging in. When it runs, it automatically converts stored session information into live objects without validation,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ilias #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mua6hazcn42e"}, {"timestamp": "2026-09-03T15:00:06.206Z", "date_only": false, "value": "2026-09-03T15:00:06.206418Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100935", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "f2118f0f-35f7-4fbf-a101-f57563be7322", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Zipkoppie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 13:41:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-80428 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100935"}, {"timestamp": "2026-09-03T19:00:05.465Z", "date_only": false, "value": "2026-09-03T19:00:05.465180Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100945", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "e68723b0-4d33-4925-8eb1-4aa7449df1b4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a digiprosec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 14:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-80428 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100945"}, {"timestamp": "2026-09-03T22:00:09.606Z", "date_only": false, "value": "2026-09-03T22:00:09.606371Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "b13b13b9-2e71-4247-b148-ef8fe8dd2483"}, {"timestamp": "2026-09-04T05:00:04.982Z", "date_only": false, "value": "2026-09-04T05:00:04.982007Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "85b3e1ec-6b42-47f6-ad31-89f97498d636"}, {"timestamp": "2026-09-05T01:00:38.278Z", "date_only": false, "value": "2026-09-05T01:00:38.278737Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "14b76137-3abe-4a2b-90cc-4d60828e88b5"}, {"timestamp": "2026-09-12T19:54:59.568Z", "date_only": false, "value": "2026-09-12T19:54:59.568314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvdudqenhe2x", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "647207c9-51a1-4372-acb0-58ca872ad8db", "content": "[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3\n\nThis is a technical exploit disclosure, essentially a proof-of-concept provided as a tool for researchers and administrators. In CONSTRUCTIVE MODE, this represents a high-fideli\u2026", "url": "https://bsky.app/profile/arc-codex.com/post/3mvdudqenhe2x"}, {"timestamp": "2026-09-14T03:00:14.813Z", "date_only": false, "value": "2026-09-14T03:00:14.813612Z", "kind": "sighting", "label": "Seen", "source": "Telegram/W6MQJZB9eSGTu_BFv1QUn2sTTVpGC_UPn5aGEa0hFDVBrqM", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "264c0544-58e3-4e74-9e40-b615fb358028"}, {"timestamp": "2026-09-15T00:00:21.378Z", "date_only": false, "value": "2026-09-15T00:00:21.378962Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/W6MQJZB9eSGTu_BFv1QUn2sTTVpGC_UPn5aGEa0hFDVBrqM", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "c8e7e7d1-e558-441c-beb9-0068c6bda936"}, {"timestamp": "2026-09-30T16:39:08.178Z", "date_only": false, "value": "2026-09-30T16:39:08.178Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-80428", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-30T16:39:08.178Z", "date_only": false, "value": "2026-09-30T16:39:08.178Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-80428", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T17:16:50.173Z", "date_only": false, "value": "2026-09-30T17:16:50.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-80428", "record": "FKIE_CVE-2026-80428", "field": "lastModified"}, {"timestamp": "2026-09-30T18:32:38Z", "date_only": false, "value": "2026-09-30T18:32:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6H76-35RH-GXM9", "record": "GHSA-6H76-35RH-GXM9", "field": "modified"}, {"timestamp": "2026-10-09T07:01:42Z", "date_only": false, "value": "2026-10-09T07:01:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104747", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "40bf36e3-cdec-4b40-915d-9f653f31540a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackfutSecRoot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 06:15:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nILIAS \u2264 9.21 / 10.9 / 11.2 \u2014 Unauthenticated PHP Object Injection (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104747"}, {"timestamp": "2026-10-09T07:01:42Z", "date_only": false, "value": "2026-10-09T07:01:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104747", "record": "CVE-2026-80428", "field": "creation_timestamp", "uuid": "810c4fdf-7cb0-46be-91ce-aeda1b62c6b6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackfutSecRoot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 06:15:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nILIAS \u2264 9.21 / 10.9 / 11.2 \u2014 Unauthenticated PHP Object Injection (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104747"}]}