{"metadata": {"vulnerability": "cve-2026-14913", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-07T05:59:21.543Z", "date_only": false, "value": "2026-07-07T05:59:21.543Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-14913", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-14913", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14913", "record": "FKIE_CVE-2026-14913", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-23T11:28:25.842Z", "date_only": false, "value": "2026-09-23T11:28:25.842Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-14913", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T11:28:25.842Z", "date_only": false, "value": "2026-09-23T11:28:25.842Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zohocorp", "record": "cve-2026-14913", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T12:17:05Z", "date_only": false, "value": "2026-09-23T12:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PRPV-X87V-Q3XV", "record": "GHSA-PRPV-X87V-Q3XV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-23T12:17:05.507Z", "date_only": false, "value": "2026-09-23T12:17:05.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14913", "record": "FKIE_CVE-2026-14913", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T12:31:15Z", "date_only": false, "value": "2026-09-23T12:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PRPV-X87V-Q3XV", "record": "GHSA-PRPV-X87V-Q3XV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T12:31:15Z", "date_only": false, "value": "2026-09-23T12:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PRPV-X87V-Q3XV", "record": "GHSA-PRPV-X87V-Q3XV", "field": "modified"}, {"timestamp": "2026-09-23T16:01:57.007Z", "date_only": false, "value": "2026-09-23T16:01:57.007519Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/2e6f8ce728dea0dd9cf4a6348df184a8", "record": "CVE-2026-14913", "field": "creation_timestamp", "uuid": "dd6bf2f9-3bd6-4687-9bfd-baa2cf9e508b", "content": "**September 22\u201323, 2026 Cyber Threat Intelligence Summary**\n\n**\ud83d\udd34 Critical Vulnerabilities & Patches**\nUrgent updates required for **WordPress** (AV26-952) and **SolarWinds** (AV26-950) due to actively exploited, unauthenticated RCEs. **HPE** (AV26-951) patches DoS and multiple flaws in ALE and Telco Orchestrator. Other notable advisories include a cPanel root-escalation bug, ManageEngine SQLi (CVE-2026-14913), Tauri v2 CSP bypass (CVE-2026-95626), Chrome 154 (108 patches, 11 critical), and an unpatched Ubuntu kernel flaw (CVE-2026-80521) enabling container escape to host root.\n\n**\ud83e\udda0 Emerging Threats & Malware**\n- **CLOSEDQUORUM:** Windows malware using AI model voting for C2 to steal credentials and crypto wallets.\n- **MemTensor Compromise:** Legitimate npm/PyPI packages hijacked to distribute the cross-platform `sckit` credential stealer.\n- **Android MDM Spyware:** Targeting logistics companies via corporate mobile device management systems.\n\n**\ud83d\udd17 Supply Chain & Operational Risks**\n- **GitHub App Keys:** Private keys never expire, creating persistent takeover risks. GitGuardian identified 474 active leaked keys, many with admin/write privileges.\n- **MSP Relationships:** Heavily trust-based MSP contracts are flagged as a major supply chain vector. Experts recommend enforcing dedicated admin accounts, phishing-resistant MFA, full audit logging, and strict offboarding/breach protocols.\n\n**\ud83d\udcf1 Platform Updates**\n- **Android 17:** Enables Certificate Transparency, which will break trust in custom/internal CAs and require PKI adjustments.\n\n**\u2705 Key Actions:** Immediately patch affected software, revoke unused GitHub App keys, audit MSP security controls, and prepare for Android 17 CA changes.", "url": "https://gist.github.com/ichintu/2e6f8ce728dea0dd9cf4a6348df184a8"}, {"timestamp": "2026-09-23T16:54:48.179Z", "date_only": false, "value": "2026-09-23T16:54:48.179980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw77fo4apb2e", "record": "CVE-2026-14913", "field": "creation_timestamp", "uuid": "6fef19b2-614a-4bb7-8cbe-82afbd7381f6", "content": "Zoho ManageEngine OpManager/Firewall Analyzer 12.8.669\u4ee5\u524d\u306f\u3001\u30eb\u30fc\u30eb\u7ba1\u7406\u691c\u7d22\u30ec\u30dd\u30fc\u30c8\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u6a5f\u5bc6\u60c5\u5831\u3078\u306e\u30a2\u2026\nCVE-2026-14913 CVSS 8.8 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mw77fo4apb2e"}, {"timestamp": "2026-09-24T03:55:23.486Z", "date_only": false, "value": "2026-09-24T03:55:23.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-14913", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T03:55:23.486Z", "date_only": false, "value": "2026-09-24T03:55:23.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-14913", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T04:17:39.397Z", "date_only": false, "value": "2026-09-24T04:17:39.397", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14913", "record": "FKIE_CVE-2026-14913", "field": "lastModified"}], "metrics": {"as_of": "2026-10-30T20:26:02.803Z", "anchors": {"origin": {"timestamp": "2026-09-23T11:28:25.842Z", "date_only": false, "value": "2026-09-23T11:28:25.842Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-14913", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-23T11:28:25.842Z", "date_only": false, "value": "2026-09-23T11:28:25.842Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-14913", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3229056.961072, "hours": 896.9602669644445, "days": 37.373344456851854, "min_seconds": 3229056.961072, "max_seconds": 3229056.961072, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-23T11:28:25.842Z", "date_only": false, "value": "2026-09-23T11:28:25.842Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-14913", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T20:26:02.803Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}