{"metadata": {"vulnerability": "cve-2021-26294", "count": 49, "kinds": {"milestone": 4, "sighting": 25, "kev": 11, "other": 9}}, "data": [{"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-26294", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-07T03:42:34Z", "date_only": false, "value": "2021-03-07T03:42:34.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-26294", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-07T03:42:34Z", "date_only": false, "value": "2021-03-07T03:42:34.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-26294", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-07T04:15:00Z", "date_only": false, "value": "2021-03-07T04:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V4M8-QVH3-JM6C", "record": "GHSA-V4M8-QVH3-JM6C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-07T04:15:00Z", "date_only": false, "value": "2021-03-07T04:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-26294", "record": "GSD-2021-26294", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-03-07T04:15:12.957Z", "date_only": false, "value": "2021-03-07T04:15:12.957", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26294", "record": "FKIE_CVE-2021-26294", "field": "published"}, {"timestamp": "2021-03-11T21:51:00Z", "date_only": false, "value": "2021-03-11T21:51Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-26294", "record": "GSD-2021-26294", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-04T14:51:10Z", "date_only": false, "value": "2021-11-04T14:51:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E904-7tNY_5SsCugfjArkkhd1hZWJs7UA85Xzgg7k4dhsQ", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "fbe13179-a731-471f-831d-064902700551"}, {"timestamp": "2022-01-11T11:05:12Z", "date_only": false, "value": "2022-01-11T11:05:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5174", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "31984368-c4bf-489e-a47f-07085531c0d5", "content": "#exploit\n1. CVE-2022-21661:\nSQL Injection in Wordpress core\nhttps://unsafe.sh/go-99941.html\n\n2. CVE-2021-26294:\nDirectory Traversal in Afterlogic webmail aurora and pro\nhttps://github.com/dorkerdevil/CVE-2021-26294", "url": "https://t.me/CyberSecurityTechnologies/5174"}, {"timestamp": "2022-05-24T17:43:49Z", "date_only": false, "value": "2022-05-24T17:43:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V4M8-QVH3-JM6C", "record": "GHSA-V4M8-QVH3-JM6C", "field": "published"}, {"timestamp": "2022-05-24T17:43:49Z", "date_only": false, "value": "2022-05-24T17:43:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V4M8-QVH3-JM6C", "record": "GHSA-V4M8-QVH3-JM6C", "field": "modified"}, {"timestamp": "2023-11-30T07:58:47Z", "date_only": false, "value": "2023-11-30T07:58:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/796", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "20c874ef-56e0-4276-b9aa-10cb708d49b6", "content": "#ExploitObserverAlert\n\nCVE-2021-26294\n\nDESCRIPTION: Exploit Observer has 14 entries related to CVE-2021-26294. An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/.. when using the caldav_public_user account (with caldav_public_user as its password).\n\nFIRST-EPSS: 0.002650000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/796"}, {"timestamp": "2023-12-13T01:23:33.527Z", "date_only": false, "value": "2023-12-13T01:23:33.527747Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-26294", "record": "GSD-2021-26294", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T20:19:20.346Z", "date_only": false, "value": "2024-08-03T20:19:20.346Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-26294", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T20:19:20.346Z", "date_only": false, "value": "2024-08-03T20:19:20.346Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-26294", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-22T16:32:07Z", "date_only": false, "value": "2025-01-22T16:32:07+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-26294", "field": "timestamps.asserted_at", "uuid": "3afb1e31-77f7-40b5-b0be-1f61abd506fa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-22T16:32:07Z", "date_only": false, "value": "2025-01-22T16:32:07+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-26294", "field": "timestamps.first_seen_at", "uuid": "3afb1e31-77f7-40b5-b0be-1f61abd506fa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "f9d02064-c81a-4023-b0c5-a3b5d1195fde"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "a9ce9462-5ca8-4f68-896b-c063c7dad1c6"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-26294", "field": "timestamps.asserted_at", "uuid": "aa26f151-8441-47a4-9370-917630bdf690", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-26294", "field": "evidence.0.details.added_date", "uuid": "aa26f151-8441-47a4-9370-917630bdf690", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "300bb7e8-509a-47b8-97da-05f6acae6113"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-26294", "field": "timestamps.first_seen_at", "uuid": "aa26f151-8441-47a4-9370-917630bdf690", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-26294", "field": "status.status_updated_at", "uuid": "aa26f151-8441-47a4-9370-917630bdf690", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "5a0bfee9-7918-4067-b916-f8a3f36b9d72"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "66522fc8-1ddb-4784-86e1-73ec162ecfff"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "90e0f0fa-82ad-42e8-96fd-fd86e17ca889"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-03)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "78c71632-217f-4b23-9c9e-e491685c80ad"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "eee217ff-2882-4b00-b8aa-a08ecaf19127"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-02)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "bce56d16-be89-4b39-a3b0-eb4b2b9ad738"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "740fcaa8-c198-4f56-8c16-ed1a8dae7dae"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "62610827-6894-4fe3-a2f7-1c4ffc040c69"}, {"timestamp": "2026-04-07T00:00:00Z", "date_only": false, "value": "2026-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "9d3f84b2-10dc-4b75-946e-b01d86553c51"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "4d88c624-b091-4eaa-8c1a-87da1e974db0"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "7b1b3e29-12a0-44fa-966a-1b5451ac3b39"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-03)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "5e9016dc-a40c-4fbb-a092-5cf74423aadb"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "f1f08f35-423a-41cc-9902-e719367e13d6"}, {"timestamp": "2026-06-07T00:00:00Z", "date_only": false, "value": "2026-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "0ad05811-5661-47a0-a136-707da55bc8aa"}, {"timestamp": "2026-06-17T03:43:04.057Z", "date_only": false, "value": "2026-06-17T03:43:04.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26294", "record": "FKIE_CVE-2021-26294", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:18.162Z", "date_only": false, "value": "2026-06-19T12:46:18.162383Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a7efc4de-1453-4ef3-bcd8-888ce0a04558", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "c0cb98a1-06d4-414c-8ed3-57de2951311f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a7efc4de-1453-4ef3-bcd8-888ce0a04558"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-26294", "field": "timestamps.recorded_at", "uuid": "aa26f151-8441-47a4-9370-917630bdf690", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:26.008Z", "date_only": false, "value": "2026-06-23T14:04:26.008496Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa26f151-8441-47a4-9370-917630bdf690", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "dfa70d6f-0218-4cd9-940a-60f19c896540", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa26f151-8441-47a4-9370-917630bdf690"}, {"timestamp": "2026-06-30T09:22:53.064Z", "date_only": false, "value": "2026-06-30T09:22:53.064987Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3afb1e31-77f7-40b5-b0be-1f61abd506fa", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "2e07024f-1097-4ffb-a4b4-daaad25cfadf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3afb1e31-77f7-40b5-b0be-1f61abd506fa"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-26294", "field": "timestamps.last_seen_at", "uuid": "3afb1e31-77f7-40b5-b0be-1f61abd506fa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-26294", "field": "evidence.0.details.observation_date", "uuid": "3afb1e31-77f7-40b5-b0be-1f61abd506fa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-26294", "field": "status.status_updated_at", "uuid": "3afb1e31-77f7-40b5-b0be-1f61abd506fa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-26294", "field": "timestamps.recorded_at", "uuid": "3afb1e31-77f7-40b5-b0be-1f61abd506fa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-20T10:15:07.514Z", "date_only": false, "value": "2026-09-20T10:15:07.514435Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "5ac4fc32-1b45-4ebd-80bd-b9b64f0d0806"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-30)", "record": "CVE-2021-26294", "field": "creation_timestamp", "uuid": "5fdb7dda-a60b-4bb3-bb31-51f58dfcb79f"}]}