{"metadata": {"vulnerability": "CVE-2026-91001", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-91001", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-14T02:00:00Z", "date_only": false, "value": "2026-09-14T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-91001", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-14T15:34:55.062Z", "date_only": false, "value": "2026-09-14T15:34:55.062Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-91001", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-14T15:49:20.360Z", "date_only": false, "value": "2026-09-14T15:49:20.360833Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117270181306657011", "record": "CVE-2026-91001", "field": "creation_timestamp", "uuid": "611f8483-64d7-4777-9cce-5ae9581f3f4b", "content": "A new vulnerability with increased severity was disclosed for D-Link DI-8400 (CVE-2026-91001) https://vuldb.com/vuln/403582", "url": "https://infosec.exchange/users/vuldb/statuses/117270181306657011"}, {"timestamp": "2026-09-14T17:40:00Z", "date_only": false, "value": "2026-09-14T17:40:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-91001", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-15T05:15:14.158Z", "date_only": false, "value": "2026-09-15T05:15:14.158Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-91001", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-15T05:15:14.158Z", "date_only": false, "value": "2026-09-15T05:15:14.158Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-91001", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-15T06:00:26.778Z", "date_only": false, "value": "2026-09-15T06:00:26.778058Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117273527976059635", "record": "cve-2026-91001", "field": "creation_timestamp", "uuid": "efe5703e-1349-47d3-a792-eceb75b69ae6", "content": "Stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) in D-Link DI-8400 (16.07) exposes devices to RCE. Exploit code is public. Restrict management access until fix. Details: https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202691001 #IoTSecurity #Vulnerability", "url": "https://infosec.exchange/users/offseq/statuses/117273527976059635"}, {"timestamp": "2026-09-15T06:00:29.307Z", "date_only": false, "value": "2026-09-15T06:00:29.307492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjx4b43rz2z", "record": "cve-2026-91001", "field": "creation_timestamp", "uuid": "a1428b2c-2098-45a8-a893-2ea948ef4933", "content": "D-Link DI-8400 routers (fw 16.07) hit by CRITICAL stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) \ud83d\udea8. Public exploit code available \u2014 restrict management access now. https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvjx4b43rz2z"}, {"timestamp": "2026-09-15T06:16:59Z", "date_only": false, "value": "2026-09-15T06:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GQWF-9WG7-Q94Q", "record": "GHSA-GQWF-9WG7-Q94Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-15T06:16:59.970Z", "date_only": false, "value": "2026-09-15T06:16:59.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91001", "record": "FKIE_CVE-2026-91001", "field": "published"}, {"timestamp": "2026-09-15T06:20:09.184Z", "date_only": false, "value": "2026-09-15T06:20:09.184164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvjy7cuxaa2f", "record": "CVE-2026-91001", "field": "creation_timestamp", "uuid": "cbf6bb29-22ce-4ece-92ed-83260300112c", "content": "CVE-2026-91001 - di-8400\nThe DDNS configuration page on D-Link DI-8400 routers (firmware 16.07) can be tricked into overwriting its memory, allowing a remote attacker to run their own programs on the device.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#di8400 #dlink #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvjy7cuxaa2f"}, {"timestamp": "2026-09-15T06:30:31Z", "date_only": false, "value": "2026-09-15T06:30:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GQWF-9WG7-Q94Q", "record": "GHSA-GQWF-9WG7-Q94Q", "field": "published"}, {"timestamp": "2026-09-15T06:30:31Z", "date_only": false, "value": "2026-09-15T06:30:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GQWF-9WG7-Q94Q", "record": "GHSA-GQWF-9WG7-Q94Q", "field": "modified"}, {"timestamp": "2026-09-15T10:04:36.177Z", "date_only": false, "value": "2026-09-15T10:04:36.177713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkeqrnpau22", "record": "CVE-2026-91001", "field": "creation_timestamp", "uuid": "ab4c48c8-8d2a-437a-b4c0-6ed59a7c1b72", "content": "\ud83d\udd34 CVE-2026-91001 - Critical (9.9)\n\nA security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-91001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkeqrnpau22"}, {"timestamp": "2026-09-15T13:59:05.976Z", "date_only": false, "value": "2026-09-15T13:59:05.976699Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-91001", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-15T13:59:05.976Z", "date_only": false, "value": "2026-09-15T13:59:05.976699Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91001", "record": "FKIE_CVE-2026-91001", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-15T13:59:20.155Z", "date_only": false, "value": "2026-09-15T13:59:20.155Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-91001", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-15T13:59:20.155Z", "date_only": false, "value": "2026-09-15T13:59:20.155Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-91001", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-15T15:12:56.517Z", "date_only": false, "value": "2026-09-15T15:12:56.517511Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvkvy5jliv27", "record": "CVE-2026-91001", "field": "creation_timestamp", "uuid": "75cacc2d-b921-4534-b8ea-8af0d6849d95", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-91001: A security flaw has been discovered in D-Link DI-8400 16.07\nCVSS 9.9 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-91001\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvkvy5jliv27"}, {"timestamp": "2026-09-15T15:17:30.983Z", "date_only": false, "value": "2026-09-15T15:17:30.983", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91001", "record": "FKIE_CVE-2026-91001", "field": "lastModified"}]}