{"metadata": {"vulnerability": "CVE-2026-82957", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-82957", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-08-31T02:00:00Z", "date_only": false, "value": "2026-08-31T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-82957", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-08-31T12:43:33.880Z", "date_only": false, "value": "2026-08-31T12:43:33.880Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-82957", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-31T14:48:39Z", "date_only": false, "value": "2026-08-31T14:48:39.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-82957", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-08-31T22:00:11.629Z", "date_only": false, "value": "2026-08-31T22:00:11.629Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82957", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-31T22:00:11.629Z", "date_only": false, "value": "2026-08-31T22:00:11.629Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-82957", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-31T22:17:34Z", "date_only": false, "value": "2026-08-31T22:17:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WQ27-C6XR-6C38", "record": "GHSA-WQ27-C6XR-6C38", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-31T22:17:34.250Z", "date_only": false, "value": "2026-08-31T22:17:34.250", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82957", "record": "FKIE_CVE-2026-82957", "field": "published"}, {"timestamp": "2026-09-01T00:31:43Z", "date_only": false, "value": "2026-09-01T00:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WQ27-C6XR-6C38", "record": "GHSA-WQ27-C6XR-6C38", "field": "published"}, {"timestamp": "2026-09-01T00:31:43Z", "date_only": false, "value": "2026-09-01T00:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WQ27-C6XR-6C38", "record": "GHSA-WQ27-C6XR-6C38", "field": "modified"}, {"timestamp": "2026-09-01T14:26:20.454Z", "date_only": false, "value": "2026-09-01T14:26:20.454400Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-82957", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-01T14:26:20.454Z", "date_only": false, "value": "2026-09-01T14:26:20.454400Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82957", "record": "FKIE_CVE-2026-82957", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-01T14:26:29.045Z", "date_only": false, "value": "2026-09-01T14:26:29.045Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-82957", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-01T14:26:29.045Z", "date_only": false, "value": "2026-09-01T14:26:29.045Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-82957", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-01T20:48:22.513Z", "date_only": false, "value": "2026-09-01T20:48:22.513", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82957", "record": "FKIE_CVE-2026-82957", "field": "lastModified"}, {"timestamp": "2026-10-13T17:07:35Z", "date_only": false, "value": "2026-10-13T17:07:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/105208", "record": "CVE-2026-82957", "field": "creation_timestamp", "uuid": "c85a02c5-7d93-455d-b64b-ccee32bd6c4e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82957\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hakaioffsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-13 16:16:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSSRF in Hyperledger FireFly Webhook Subscriptions (CVE-2026-82957)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/105208"}, {"timestamp": "2026-10-13T18:06:37.781Z", "date_only": false, "value": "2026-10-13T18:06:37.781036Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117434928108117595", "record": "CVE-2026-82957", "field": "creation_timestamp", "uuid": "37a77f8b-5fe4-447d-9b3b-7725ae16a33d", "content": "\ud83d\udea8 PoC released for a Hyperledger FireFly server-side request forgery vulnerability; CVE-2026-82957\nPoC: https://github.com/hakaioffsec/CVE-2026-82957\nThe flaw affects FireFly webhook subscriptions, where a user-controlled webhook URL can be accepted without properly validating the destination host. This can allow the FireFly node to send requests to internal services, private networks, loopback addresses, and cloud metadata endpoints.\nCVSS: 8.5 HighAffected: Hyperledger FireFly \u2264 1.5.0\nThe PoC creates a malicious webhook subscription, triggers a matching event, and verifies that the request originates from the FireFly server itself.", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117434928108117595"}]}