{"metadata": {"vulnerability": "CVE-2026-97163", "count": 23, "kinds": {"milestone": 4, "sighting": 11, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-24T04:35:50.607Z", "date_only": false, "value": "2026-09-24T04:35:50.607Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-97163", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-26T14:33:44.748Z", "date_only": false, "value": "2026-09-26T14:33:44.748Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-97163", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-26T15:16:55Z", "date_only": false, "value": "2026-09-26T15:16:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6PGC-8534-JJRF", "record": "GHSA-6PGC-8534-JJRF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-26T15:16:55.890Z", "date_only": false, "value": "2026-09-26T15:16:55.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97163", "record": "FKIE_CVE-2026-97163", "field": "published"}, {"timestamp": "2026-09-26T15:31:27Z", "date_only": false, "value": "2026-09-26T15:31:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6PGC-8534-JJRF", "record": "GHSA-6PGC-8534-JJRF", "field": "published"}, {"timestamp": "2026-09-26T15:31:27Z", "date_only": false, "value": "2026-09-26T15:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6PGC-8534-JJRF", "record": "GHSA-6PGC-8534-JJRF", "field": "modified"}, {"timestamp": "2026-09-26T16:08:39.247Z", "date_only": false, "value": "2026-09-26T16:08:39.247953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7vkhiw2y", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "401c9655-3aed-41ca-a3b2-f66b36c96531", "content": "\ud83d\udea8 CVE-2026-97163 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97163\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7vkhiw2y"}, {"timestamp": "2026-09-26T16:37:06.894Z", "date_only": false, "value": "2026-09-26T16:37:06.894117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3asz3cg5gqaer", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "5989218c-524e-493c-ac3c-ce727b9fa150", "content": "CVE-2026-97163 - Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97163\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr - Una...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3asz3cg5gqaer"}, {"timestamp": "2026-09-26T21:00:08Z", "date_only": false, "value": "2026-09-26T21:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103468", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "4c939bc6-3cd6-4027-83ba-55b050a83c46", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97163\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (\u22646.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97163\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103468"}, {"timestamp": "2026-09-26T22:00:08Z", "date_only": false, "value": "2026-09-26T22:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103476", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "2e739fd4-e34d-4992-86a2-963d8d4b961e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103476"}, {"timestamp": "2026-09-26T22:00:08Z", "date_only": false, "value": "2026-09-26T22:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103476", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "af44f510-00be-4445-8f31-4ce086bc4374", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103476"}, {"timestamp": "2026-09-26T22:20:06.574Z", "date_only": false, "value": "2026-09-26T22:20:06.574270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy4qbkl2u", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "55923d39-a7e8-461a-b362-d2ba6110805e", "content": "CVE-2026-97163 - up plugin for joomla\nThe UP plugin for Joomla from lomart.fr (versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29) lets anyone on the internet add and run their own code on the server without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy4qbkl2u"}, {"timestamp": "2026-09-26T22:56:42.633Z", "date_only": false, "value": "2026-09-26T22:56:42.633277Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97163", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-26T22:56:42.633Z", "date_only": false, "value": "2026-09-26T22:56:42.633277Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97163", "record": "FKIE_CVE-2026-97163", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-26T22:56:52.330Z", "date_only": false, "value": "2026-09-26T22:56:52.330Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97163", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-26T23:00:16Z", "date_only": false, "value": "2026-09-26T23:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "a421618f-7d72-4750-a40c-b760c52a8ad3"}, {"timestamp": "2026-09-26T23:00:16Z", "date_only": false, "value": "2026-09-26T23:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "01c0a371-a43d-49c6-bbfb-911089c87ad9"}, {"timestamp": "2026-09-27T04:47:20.414Z", "date_only": false, "value": "2026-09-27T04:47:20.414Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-97163", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-27T04:47:20.414Z", "date_only": false, "value": "2026-09-27T04:47:20.414Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Joomla", "record": "CVE-2026-97163", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-27T09:00:04Z", "date_only": false, "value": "2026-09-27T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "e81d8cb6-53c9-4438-b566-cb0702e383fa"}, {"timestamp": "2026-09-27T09:00:04Z", "date_only": false, "value": "2026-09-27T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "db6a89f8-2981-4655-afd1-a0257c9796e3"}, {"timestamp": "2026-09-27T12:22:40.181Z", "date_only": false, "value": "2026-09-27T12:22:40.181317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2qaia72k", "record": "CVE-2026-97163", "field": "creation_timestamp", "uuid": "f12e8867-bc4e-4f6a-a5f9-460dd828c1af", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97163: Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-97163\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mwis2qaia72k"}, {"timestamp": "2026-09-29T21:39:02.570Z", "date_only": false, "value": "2026-09-29T21:39:02.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97163", "record": "FKIE_CVE-2026-97163", "field": "lastModified"}]}