{"metadata": {"vulnerability": "cve-2026-25895", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-02-05T00:37:30Z", "date_only": false, "value": "2026-02-05T00:37:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-88QH-CPHV-996C", "record": "GHSA-88QH-CPHV-996C", "field": "published"}, {"timestamp": "2026-02-06T21:08:39.130Z", "date_only": false, "value": "2026-02-06T21:08:39.130Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-25895", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-09T22:29:48.203Z", "date_only": false, "value": "2026-02-09T22:29:48.203Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-25895", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-02-09T22:30:05.359Z", "date_only": false, "value": "2026-02-09T22:30:05.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-25895", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-09T23:16:05Z", "date_only": false, "value": "2026-02-09T23:16:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-88QH-CPHV-996C", "record": "GHSA-88QH-CPHV-996C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-02-09T23:16:05.617Z", "date_only": false, "value": "2026-02-09T23:16:05.617", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25895", "record": "FKIE_CVE-2026-25895", "field": "published"}, {"timestamp": "2026-02-10T00:00:48.029Z", "date_only": false, "value": "2026-02-10T00:00:48.029877Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mehntchb352m", "record": "cve-2026-25895", "field": "creation_timestamp", "uuid": "a466b095-ed52-4ba6-b481-d5f4c6d32858", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mehntchb352m"}, {"timestamp": "2026-02-10T00:00:50.833Z", "date_only": false, "value": "2026-02-10T00:00:50.833312Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116043392265377056", "record": "cve-2026-25895", "field": "creation_timestamp", "uuid": "230ae153-35b1-4c95-901c-bb7063bc2f4f", "url": "https://infosec.exchange/users/offseq/statuses/116043392265377056"}, {"timestamp": "2026-02-10T02:57:44Z", "date_only": false, "value": "2026-02-10T02:57:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-88QH-CPHV-996C", "record": "GHSA-88QH-CPHV-996C", "field": "modified"}, {"timestamp": "2026-02-11T21:24:43.519Z", "date_only": false, "value": "2026-02-11T21:24:43.519834Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-25895", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-02-11T21:24:43.519Z", "date_only": false, "value": "2026-02-11T21:24:43.519834Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25895", "record": "FKIE_CVE-2026-25895", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-02-11T21:24:49.202Z", "date_only": false, "value": "2026-02-11T21:24:49.202Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-25895", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-11T21:24:49.202Z", "date_only": false, "value": "2026-02-11T21:24:49.202Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-25895", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-24T22:00:05Z", "date_only": false, "value": "2026-04-24T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/81569", "record": "CVE-2026-25895", "field": "creation_timestamp", "uuid": "4c816637-0f58-41d1-b51a-bed5e39c56ee", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a FUXAPWN\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hann1bl3L3ct3r\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-24 21:30:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/81569"}, {"timestamp": "2026-04-25T03:00:05Z", "date_only": false, "value": "2026-04-25T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LegGEKh0JTQmQ5caQ5fsgnXr59alAvRjbf9RqdH14mBAnic", "record": "CVE-2026-25895", "field": "creation_timestamp", "uuid": "82dc46c8-4094-4686-aa65-06a79a8980de"}, {"timestamp": "2026-06-17T10:25:23.857Z", "date_only": false, "value": "2026-06-17T10:25:23.857", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25895", "record": "FKIE_CVE-2026-25895", "field": "lastModified"}, {"timestamp": "2026-08-18T20:28:31.304Z", "date_only": false, "value": "2026-08-18T20:28:31.304590Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25", "record": "CVE-2026-25895", "field": "creation_timestamp", "uuid": "6208de34-4899-46c4-b953-47bdc7dc6be0", "content": "\ud83e\udd16 CVE-2026-64849 (CVSS 9.3): unauthenticated SSRF in MLflow (<3.15.0) exploited in the wild to exfiltrate cloud credentials. CVE-2026-25895 (CVSS 9.5): path traversal to RCE in FUXA SCADA/HMI, mass scanning.\nhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25"}, {"timestamp": "2026-08-18T22:04:24.249Z", "date_only": false, "value": "2026-08-18T22:04:24.249196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mtf7vxl4xx2k", "record": "CVE-2026-25895", "field": "creation_timestamp", "uuid": "d5c0bcd0-6490-421b-af8e-694a65aa1ae5", "content": "Two critical vulnerabilities in MLflow (CVE-2026-64849, CVSS 9.3) and FUXA (CVE-2026-25895, CVSS 9.5) are under active exploitation. Attackers are exploiting [\u2026]", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mtf7vxl4xx2k"}]}