{"metadata": {"vulnerability": "cve-2026-15580", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-13T10:21:53.607Z", "date_only": false, "value": "2026-07-13T10:21:53.607Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-15580", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-21T11:55:28.297Z", "date_only": false, "value": "2026-08-21T11:55:28.297484Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117133366257032689", "record": "CVE-2026-15580", "field": "creation_timestamp", "uuid": "7a071f29-182d-446e-b9e4-ce31ca2d8182", "content": "A critical vulnerability (CVE-2026-15580) in the N-Able PassPortal browser extension allowed attackers to hijack user password vaults by intercepting sensitive session tokens through unsafe cross-context communication. The security flaw, which affected over 73,000 users, was resolved when N-able released a patch that implements strict origin validation and message handling.https://gbhackers.com/critical-n-able-passportal-extension-flaw/", "url": "https://infosec.exchange/users/edwardk/statuses/117133366257032689"}, {"timestamp": "2026-08-21T11:55:58.975Z", "date_only": false, "value": "2026-08-21T11:55:58.975164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mtlpcvhj4s24", "record": "CVE-2026-15580", "field": "creation_timestamp", "uuid": "60d75d2f-0388-4363-9335-43a0d43389be", "content": "A critical vulnerability (CVE-2026-15580) in the N-Able PassPortal browser extension allowed attackers to hijack user password vaults by intercepting sensitive session tokens through unsafe cross-context communication.\n\ngbhackers.com/critical-n-a...", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mtlpcvhj4s24"}, {"timestamp": "2026-08-21T13:00:40.762Z", "date_only": false, "value": "2026-08-21T13:00:40.762006Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/08/21/critical-nable-passportal-extension-flaw.html", "record": "CVE-2026-15580", "field": "creation_timestamp", "uuid": "14be46e2-28be-4163-8b61-0863fa2f96ef", "content": "Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access\n\nA critical vulnerability (CVE-2026-15580) in the N-Able PassPortal browser extension allowed attackers to hijack user password vaults by intercepting sensitive session tokens through unsafe cross-context communication. The security flaw, which affected over 73,000 users, was resolved when N-able released a patch that implements strict origin validation and message handling.", "url": "https://threatintel.cc/2026/08/21/critical-nable-passportal-extension-flaw.html"}, {"timestamp": "2026-08-21T13:56:00Z", "date_only": false, "value": "2026-08-21T13:56:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / N-able", "record": "cve-2026-15580", "field": "containers.cna.datePublic"}, {"timestamp": "2026-08-21T14:00:10.835Z", "date_only": false, "value": "2026-08-21T14:00:10.835Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-15580", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-21T14:00:10.835Z", "date_only": false, "value": "2026-08-21T14:00:10.835Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / N-able", "record": "cve-2026-15580", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T14:16:48Z", "date_only": false, "value": "2026-08-21T14:16:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6637-GH22-J6HQ", "record": "GHSA-6637-GH22-J6HQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-21T14:16:48.587Z", "date_only": false, "value": "2026-08-21T14:16:48.587", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15580", "record": "FKIE_CVE-2026-15580", "field": "published"}, {"timestamp": "2026-08-21T15:07:26.667Z", "date_only": false, "value": "2026-08-21T15:07:26.667124Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-15580", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-21T15:07:26.667Z", "date_only": false, "value": "2026-08-21T15:07:26.667124Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15580", "record": "FKIE_CVE-2026-15580", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-21T15:07:33.739Z", "date_only": false, "value": "2026-08-21T15:07:33.739Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-15580", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-21T15:07:33.739Z", "date_only": false, "value": "2026-08-21T15:07:33.739Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-15580", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T15:32:12Z", "date_only": false, "value": "2026-08-21T15:32:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6637-GH22-J6HQ", "record": "GHSA-6637-GH22-J6HQ", "field": "published"}, {"timestamp": "2026-08-21T15:32:12Z", "date_only": false, "value": "2026-08-21T15:32:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6637-GH22-J6HQ", "record": "GHSA-6637-GH22-J6HQ", "field": "modified"}, {"timestamp": "2026-10-15T19:10:00.173Z", "date_only": false, "value": "2026-10-15T19:10:00.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15580", "record": "FKIE_CVE-2026-15580", "field": "lastModified"}]}