{"metadata": {"vulnerability": "CVE-2026-89413", "count": 15, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-11T17:08:50.541Z", "date_only": false, "value": "2026-09-11T17:08:50.541Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-89413", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-15T07:41:59Z", "date_only": false, "value": "2026-09-15T07:41:59.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-89413", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-17T18:31:56Z", "date_only": false, "value": "2026-09-17T18:31:56.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-89413", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-18T06:38:51.386Z", "date_only": false, "value": "2026-09-18T06:38:51.386Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89413", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-18T06:38:51.386Z", "date_only": false, "value": "2026-09-18T06:38:51.386Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-89413", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T07:16:51Z", "date_only": false, "value": "2026-09-18T07:16:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7PG5-G4GJ-969X", "record": "GHSA-7PG5-G4GJ-969X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-18T07:16:51.337Z", "date_only": false, "value": "2026-09-18T07:16:51.337", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89413", "record": "FKIE_CVE-2026-89413", "field": "published"}, {"timestamp": "2026-09-18T09:31:06Z", "date_only": false, "value": "2026-09-18T09:31:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7PG5-G4GJ-969X", "record": "GHSA-7PG5-G4GJ-969X", "field": "published"}, {"timestamp": "2026-09-18T09:31:06Z", "date_only": false, "value": "2026-09-18T09:31:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7PG5-G4GJ-969X", "record": "GHSA-7PG5-G4GJ-969X", "field": "modified"}, {"timestamp": "2026-09-18T12:02:04.959Z", "date_only": false, "value": "2026-09-18T12:02:04.959436Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/19747df30b81712f748bb20d82e42524", "record": "CVE-2026-89413", "field": "creation_timestamp", "uuid": "f5df599c-7ef7-4e1f-921a-f2e745355c9e", "content": "This daily cybersecurity roundup covers four key areas:\n\n* **Operational Lessons:** A new ESXi user\u2019s lab misconfiguration caused unintended production network access and DHCP conflicts, highlighting the critical need for strict environment isolation.\n* **Threat Intelligence:** The WeaselBiscuit JavaScript stealer is spreading via 13 npm packages (linked to North Korea\u2019s \u201cContagious Interview\u201d campaign), while another npm-based stealer, PhantomRaven, appears LLM-assisted. Conflicting reports also suggest AI models still struggle with CAPTCHAs.\n* **Vulnerability Disclosures:** Several high-severity flaws were published, including a broken access control in TECHIN2B (CVE-2026-12384, 8.8), an authorization bypass in WordPress\u2019s Filter Gallery plugin (CVE-2026-89413, 8.1), and a quartet of Linux local root privilege escalation vulnerabilities.\n* **Strategic Insights:** Industry analysis emphasizes that sustainable cybersecurity relies on mastering fundamentals\u2014asset/identity management, operational resilience, and business-aligned risk communication\u2014rather than chasing advanced or emerging technologies.", "url": "https://gist.github.com/ichintu/19747df30b81712f748bb20d82e42524"}, {"timestamp": "2026-09-18T14:15:34.382Z", "date_only": false, "value": "2026-09-18T14:15:34.382142Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89413", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T14:15:34.382Z", "date_only": false, "value": "2026-09-18T14:15:34.382142Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89413", "record": "FKIE_CVE-2026-89413", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T14:31:44.393Z", "date_only": false, "value": "2026-09-18T14:31:44.393Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-89413", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T14:31:44.393Z", "date_only": false, "value": "2026-09-18T14:31:44.393Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89413", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T15:17:17.990Z", "date_only": false, "value": "2026-09-18T15:17:17.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89413", "record": "FKIE_CVE-2026-89413", "field": "lastModified"}]}