{"metadata": {"vulnerability": "CVE-2026-86405", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-07T11:25:25.549Z", "date_only": false, "value": "2026-09-07T11:25:25.549Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-86405", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-09T12:47:00Z", "date_only": false, "value": "2026-10-09T12:47:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-86405", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-09T12:52:43.902Z", "date_only": false, "value": "2026-10-09T12:52:43.902Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86405", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-09T12:52:43.902Z", "date_only": false, "value": "2026-10-09T12:52:43.902Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-86405", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T13:17:11Z", "date_only": false, "value": "2026-10-09T13:17:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7PX9-F7PG-H379", "record": "GHSA-7PX9-F7PG-H379", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-09T13:17:11.100Z", "date_only": false, "value": "2026-10-09T13:17:11.100", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86405", "record": "FKIE_CVE-2026-86405", "field": "published"}, {"timestamp": "2026-10-09T13:30:30.381Z", "date_only": false, "value": "2026-10-09T13:30:30.381706Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117411193134892551", "record": "cve-2026-86405", "field": "creation_timestamp", "uuid": "91988c1a-6986-42c1-acd2-1a7253606f69", "content": "CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper cryptographic signature checks allow spoofing & data tampering. Patch not confirmed \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity", "url": "https://infosec.exchange/users/offseq/statuses/117411193134892551"}, {"timestamp": "2026-10-09T13:30:32.253Z", "date_only": false, "value": "2026-10-09T13:30:32.253732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxh3h4qzeq2r", "record": "cve-2026-86405", "field": "creation_timestamp", "uuid": "f6e8d4b6-50f5-422d-a96a-82db26ef9d88", "content": "CRITICAL flaw (CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper signature checks allow spoofing & unauthorized actions. Monitor for vendor patches & restrict access. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxh3h4qzeq2r"}, {"timestamp": "2026-10-09T13:59:28.247Z", "date_only": false, "value": "2026-10-09T13:59:28.247433Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zkzrfw2gh6rz", "record": "CVE-2026-86405", "field": "creation_timestamp", "uuid": "5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8", "content": "CVE-2026-86405 - Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop\nCVE ID : CVE-2026-86405\n \n Published : Oct. 9, 2026, 12:52 p.m. | 37\u00a0minutes ago\n \n Description : Improper verification of cryptographic signature vulnerability in Sipay Electronic Money...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/5zkzrfw2gh6rz"}, {"timestamp": "2026-10-09T14:07:47.751Z", "date_only": false, "value": "2026-10-09T14:07:47.751039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxh5jqxjbu27", "record": "CVE-2026-86405", "field": "creation_timestamp", "uuid": "6937a706-2583-4a4a-970a-fda319a5079b", "content": "\ud83d\udea8 CVE-2026-86405 \u2014 CVSS 9.8 CRITICAL\n\nImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86405\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxh5jqxjbu27"}, {"timestamp": "2026-10-09T15:31:30Z", "date_only": false, "value": "2026-10-09T15:31:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7PX9-F7PG-H379", "record": "GHSA-7PX9-F7PG-H379", "field": "published"}, {"timestamp": "2026-10-09T15:31:30Z", "date_only": false, "value": "2026-10-09T15:31:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7PX9-F7PG-H379", "record": "GHSA-7PX9-F7PG-H379", "field": "modified"}, {"timestamp": "2026-10-09T23:30:05.348Z", "date_only": false, "value": "2026-10-09T23:30:05.348007Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4x7whm22o", "record": "CVE-2026-86405", "field": "creation_timestamp", "uuid": "2904c45a-e023-41e7-b203-cbcb72c3aed5", "content": "CVE-2026-86405 - prestashop virtual pos module\nThe PrestaShop Virtual POS extension from Sipay Electronic Money can be tricked into accepting forged payment signatures, letting attackers make payments appear legitimate. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4x7whm22o"}, {"timestamp": "2026-10-12T22:48:31.496Z", "date_only": false, "value": "2026-10-12T22:48:31.496815Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86405", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-12T22:48:31.496Z", "date_only": false, "value": "2026-10-12T22:48:31.496815Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86405", "record": "FKIE_CVE-2026-86405", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-12T22:54:01.843Z", "date_only": false, "value": "2026-10-12T22:54:01.843Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-86405", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T22:54:01.843Z", "date_only": false, "value": "2026-10-12T22:54:01.843Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86405", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T23:17:45.413Z", "date_only": false, "value": "2026-10-12T23:17:45.413", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86405", "record": "FKIE_CVE-2026-86405", "field": "lastModified"}]}