{"metadata": {"vulnerability": "cve-2022-24716", "count": 50, "kinds": {"milestone": 4, "sighting": 24, "kev": 11, "other": 11}}, "data": [{"timestamp": "2022-02-10T00:00:00Z", "date_only": false, "value": "2022-02-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-08T20:15:00Z", "date_only": false, "value": "2022-03-08T20:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-24716", "record": "UBUNTU-CVE-2022-24716", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-08T20:15:00Z", "date_only": false, "value": "2022-03-08T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24716", "record": "GSD-2022-24716", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-03-08T20:15:07.853Z", "date_only": false, "value": "2022-03-08T20:15:07.853", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24716", "record": "FKIE_CVE-2022-24716", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-08T22:40:55Z", "date_only": false, "value": "2022-03-08T22:40:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/38556", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "da06ba4d-230d-4026-b8d3-dff6d4576d22", "content": "\u203c CVE-2022-24716 \u203c\n\nIcinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/38556"}, {"timestamp": "2023-03-21T09:01:04Z", "date_only": false, "value": "2023-03-21T09:01:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2612", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "4a8f2fcb-abe3-47e2-b30e-67a0e01d8a6b", "content": "CVE-2022-24716:  Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2`.\n\nPoC Icinga Web 2 <2.8.6, <2.9.6, <2.10 https://github.com/JacobEbben/CVE-2022-24716", "url": "https://t.me/dilagrafie/2612", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-21T11:01:01Z", "date_only": false, "value": "2023-03-21T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7967", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "d2e485d1-c65b-4524-806d-039aef4fcb66", "content": "#exploit\n1. CVE-2022-24715 / CVE-2022-24716:\nAuthenticated RCE / Arbitrary File Disclosure Vulnerability in Icinga Web2 <2.8.6, <2.9.6, <2.10\nhttps://github.com/JacobEbben/CVE-2022-24715\nhttps://github.com/JacobEbben/CVE-2022-24716\n\n2. CVE-2023-27326:\nVM Escape for Parallels Desktop <18.1.1\nhttps://github.com/Impalabs/CVE-2023-27326\n\n3. CVE-2023-23192:\nUserlock Multi-Factor Authentication (MFA) Bypass\nhttps://github.com/pinarsadioglu/CVE-2023-23192", "url": "https://t.me/CyberSecurityTechnologies/7967", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-10T00:00:00Z", "date_only": false, "value": "2023-04-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2022-24716", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-10T20:15:00Z", "date_only": false, "value": "2023-04-10T20:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24716", "record": "GSD-2022-24716", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-03T17:04:07Z", "date_only": false, "value": "2023-05-03T17:04:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/icinga_static_library_file_directory_traversal.rb", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "f2754ee5-42eb-4a99-876a-ee5ee46c9a31", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/icinga_static_library_file_directory_traversal.rb"}, {"timestamp": "2023-10-14T14:57:41Z", "date_only": false, "value": "2023-10-14T14:57:41+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:41Z", "date_only": false, "value": "2023-10-14T14:57:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:19:42.705Z", "date_only": false, "value": "2023-12-13T01:19:42.705269Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24716", "record": "GSD-2022-24716", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T04:20:49.887Z", "date_only": false, "value": "2024-08-03T04:20:49.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-24716", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "be615ade-b1d0-4453-aa02-438f56d7dc75"}, {"timestamp": "2025-02-23T04:10:44Z", "date_only": false, "value": "2025-02-23T04:10:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "9da82c79-c9f4-49dc-a307-8c0e0d14bfea"}, {"timestamp": "2025-04-23T15:57:07.715Z", "date_only": false, "value": "2025-04-23T15:57:07.715188Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-24716", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T15:57:07.715Z", "date_only": false, "value": "2025-04-23T15:57:07.715188Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24716", "record": "FKIE_CVE-2022-24716", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T18:58:45.413Z", "date_only": false, "value": "2025-04-23T18:58:45.413Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T18:58:45.413Z", "date_only": false, "value": "2025-04-23T18:58:45.413Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-24716", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T19:05:21Z", "date_only": false, "value": "2025-04-23T19:05:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13124", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "9d053e11-db71-4d8f-95c2-6774519b2c90", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-24716\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated.\n\ud83d\udccf Published: 2022-03-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T18:58:45.413Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icingaweb2/security/advisories/GHSA-5p3f-rh28-8frw\n2. https://github.com/Icinga/icingaweb2/commit/9931ed799650f5b8d5e1dc58ea3415a4cdc5773d\n3. https://security.gentoo.org/glsa/202208-05\n4. http://packetstormsecurity.com/files/171774/Icinga-Web-2.10-Arbitrary-File-Disclosure.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/13124", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-08T16:50:03Z", "date_only": false, "value": "2025-09-08T16:50:03Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-24716", "record": "UBUNTU-CVE-2022-24716", "field": "modified"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "e3aa9b65-61f3-4453-a59e-e78c24fb5b80"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-24716", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-24716", "field": "evidence.0.details.added_date", "uuid": "cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "c78909bb-4da3-4f0a-926a-4dd6190a57d1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-24716", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-24716", "field": "status.status_updated_at", "uuid": "cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:32:21.573Z", "date_only": false, "value": "2026-06-17T04:32:21.573", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24716", "record": "FKIE_CVE-2022-24716", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:10.499Z", "date_only": false, "value": "2026-06-19T12:45:10.499358Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19e4f05c-a142-485e-978e-676cb2708179", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "7109c524-21f8-4572-add6-e2a58b18bc13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19e4f05c-a142-485e-978e-676cb2708179", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-24716", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:01.268Z", "date_only": false, "value": "2026-06-23T14:03:01.268175Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "b0ae26de-88ea-4d24-93e1-2d7d03890c5a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb1d013e-a1ae-4be6-bc4b-d4dfe28fb20f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:19.687Z", "date_only": false, "value": "2026-06-30T09:23:19.687322Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6355e224-637a-4be3-bed9-ec8c60e2ab56", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "4c97c39b-4c32-44d1-aa35-1335ca520566", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6355e224-637a-4be3-bed9-ec8c60e2ab56", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.last_seen_at", "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-24716", "field": "evidence.0.details.observation_date", "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-24716", "field": "status.status_updated_at", "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-29T12:00:30.499Z", "date_only": false, "value": "2026-07-29T12:00:30.499305Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13366", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "9f757467-8302-481f-80be-52f9eee75887", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/antisecc/CVE-2022-24716", "url": "https://t.me/CVEhub/13366"}, {"timestamp": "2026-07-29T12:00:45.019Z", "date_only": false, "value": "2026-07-29T12:00:45.019524Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9248", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "8fc7a56a-a9af-4b06-9961-7bf92718af54", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/doosec101/CVE-2022-24716", "url": "https://t.me/CVEhub/9248"}, {"timestamp": "2026-07-29T12:00:45.292Z", "date_only": false, "value": "2026-07-29T12:00:45.292337Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9181", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "a337da38-5220-403f-9d1f-262c51ff38b3", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/pumpkinpiteam/CVE-2022-24716", "url": "https://t.me/CVEhub/9181"}, {"timestamp": "2026-07-29T12:00:48.392Z", "date_only": false, "value": "2026-07-29T12:00:48.392431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8584", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "8ff534c4-edc4-46ef-89a9-cb02bd3ba93d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/JacobEbben/CVE-2022-24716", "url": "https://t.me/CVEhub/8584"}, {"timestamp": "2026-07-29T12:00:48.419Z", "date_only": false, "value": "2026-07-29T12:00:48.419578Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8632", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "64790a2c-f329-43c1-954e-787b20d86f81", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/joaoviictorti/CVE-2022-24716", "url": "https://t.me/CVEhub/8632"}, {"timestamp": "2026-07-31T00:00:10.460Z", "date_only": false, "value": "2026-07-31T00:00:10.460594Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13366", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "1d816c01-295c-4fa6-bea7-add92cf6d20e", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/antisecc/CVE-2022-24716", "url": "https://t.me/CVEhub/13366", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T11:00:03.298Z", "date_only": false, "value": "2026-07-31T11:00:03.298424Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9248", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "03885051-a6dd-494d-a049-db5e2815fdee", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/doosec101/CVE-2022-24716", "url": "https://t.me/CVEhub/9248", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T12:00:04.997Z", "date_only": false, "value": "2026-07-31T12:00:04.997224Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9181", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "390e305b-724d-4017-a924-eb4a648532be", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/pumpkinpiteam/CVE-2022-24716", "url": "https://t.me/CVEhub/9181", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T14:00:04.719Z", "date_only": false, "value": "2026-07-31T14:00:04.719920Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8632", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "d35fa6b4-06eb-4bc2-a36d-dee4bc934952", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/joaoviictorti/CVE-2022-24716", "url": "https://t.me/CVEhub/8632", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T14:00:04.763Z", "date_only": false, "value": "2026-07-31T14:00:04.763559Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8584", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "3141520a-59ec-459b-8e94-ba8a9d23f8a9", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-24716*\nGithub: https://github.com/JacobEbben/CVE-2022-24716", "url": "https://t.me/CVEhub/8584", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:21.459Z", "date_only": false, "value": "2026-09-01T17:00:21.459446Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6680", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "38ef91e5-5269-4bf2-b0dd-3ab7e5f951ad", "content": "exploit\n1. CVE-2022-24715 / CVE-2022-24716:\nAuthenticated RCE / Arbitrary File Disclosure Vulnerability in Icinga Web2 <2.8.6, <2.9.6, <2.10\nhttps://github.com/JacobEbben/CVE-2022-24715\nhttps://github.com/JacobEbben/CVE-2022-24716\n\n2. CVE-2023-27326:\nVM Escape for Parallels Desktop <18.1.1\nhttps://github.com/Impalabs/CVE-2023-27326\n\n3. CVE-2023-23192:\nUserlock Multi-Factor Authentication (MFA) Bypass\nhttps://github.com/pinarsadioglu/CVE-2023-23192\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.02", "url": "https://t.me/cissp/6680"}, {"timestamp": "2026-09-10T01:00:03.816Z", "date_only": false, "value": "2026-09-10T01:00:03.816201Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6680", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "b717a766-17f9-4ed8-9f07-8bda62f9257c", "content": "exploit\n1. CVE-2022-24715 / CVE-2022-24716:\nAuthenticated RCE / Arbitrary File Disclosure Vulnerability in Icinga Web2 <2.8.6, <2.9.6, <2.10\nhttps://github.com/JacobEbben/CVE-2022-24715\nhttps://github.com/JacobEbben/CVE-2022-24716\n\n2. CVE-2023-27326:\nVM Escape for Parallels Desktop <18.1.1\nhttps://github.com/Impalabs/CVE-2023-27326\n\n3. CVE-2023-23192:\nUserlock Multi-Factor Authentication (MFA) Bypass\nhttps://github.com/pinarsadioglu/CVE-2023-23192\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.02", "url": "https://t.me/cissp/6680", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-29T08:09:15.272Z", "anchors": {"origin": {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-03-21T09:01:04Z", "date_only": false, "value": "2023-03-21T09:01:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2612", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "4a8f2fcb-abe3-47e2-b30e-67a0e01d8a6b", "content": "CVE-2022-24716:  Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2`.\n\nPoC Icinga Web 2 <2.8.6, <2.9.6, <2.10 https://github.com/JacobEbben/CVE-2022-24716", "url": "https://t.me/dilagrafie/2612", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-14T14:57:41Z", "date_only": false, "value": "2023-10-14T14:57:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 50597861.0, "hours": 14054.961388888889, "days": 585.6233912037037, "min_seconds": 50511461.0, "max_seconds": 50597861.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:57:41Z", "date_only": false, "value": "2023-10-14T14:57:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 50597861.0, "hours": 14054.961388888889, "days": 585.6233912037037, "min_seconds": 50511461.0, "max_seconds": 50597861.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:57:41Z", "date_only": false, "value": "2023-10-14T14:57:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 32691664.0, "hours": 9081.017777777777, "days": 378.37574074074075, "min_seconds": 32605264.0, "max_seconds": 32691664.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-03-21T09:01:04Z", "date_only": false, "value": "2023-03-21T09:01:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2612", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "4a8f2fcb-abe3-47e2-b30e-67a0e01d8a6b", "content": "CVE-2022-24716:  Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2`.\n\nPoC Icinga Web 2 <2.8.6, <2.9.6, <2.10 https://github.com/JacobEbben/CVE-2022-24716", "url": "https://t.me/dilagrafie/2612", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 146563755.272203, "hours": 40712.15424227861, "days": 1696.3397600949422, "min_seconds": 146477355.272203, "max_seconds": 146563755.272203, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24716", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T08:09:15.272Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 95965894.272203, "hours": 26657.192853389723, "days": 1110.7163688912385, "min_seconds": 95965894.272203, "max_seconds": 95965894.272203, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-10-14T14:57:41Z", "date_only": false, "value": "2023-10-14T14:57:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24716", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "6355e224-637a-4be3-bed9-ec8c60e2ab56", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-29T08:09:15.272Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 113872091.272203, "hours": 31631.136464500833, "days": 1317.9640193542014, "min_seconds": 113872091.272203, "max_seconds": 113872091.272203, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-21T09:01:04Z", "date_only": false, "value": "2023-03-21T09:01:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2612", "record": "CVE-2022-24716", "field": "creation_timestamp", "uuid": "4a8f2fcb-abe3-47e2-b30e-67a0e01d8a6b", "content": "CVE-2022-24716:  Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2`.\n\nPoC Icinga Web 2 <2.8.6, <2.9.6, <2.10 https://github.com/JacobEbben/CVE-2022-24716", "url": "https://t.me/dilagrafie/2612", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T08:09:15.272Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}