{"metadata": {"vulnerability": "cve-2026-42087", "count": 18, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-04-23T14:12:02Z", "date_only": false, "value": "2026-04-23T14:12:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V529-VHWC-WFC5", "record": "GHSA-V529-VHWC-WFC5", "field": "published"}, {"timestamp": "2026-04-23T19:17:30.566Z", "date_only": false, "value": "2026-04-23T19:17:30.566Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-42087", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-04T17:18:02.965Z", "date_only": false, "value": "2026-05-04T17:18:02.965Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-42087", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-04T17:18:02.965Z", "date_only": false, "value": "2026-05-04T17:18:02.965Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-42087", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-04T18:16:30Z", "date_only": false, "value": "2026-05-04T18:16:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V529-VHWC-WFC5", "record": "GHSA-V529-VHWC-WFC5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-04T18:16:30.830Z", "date_only": false, "value": "2026-05-04T18:16:30.830", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42087", "record": "FKIE_CVE-2026-42087", "field": "published"}, {"timestamp": "2026-05-04T18:16:30.830Z", "date_only": false, "value": "2026-05-04T18:16:30.830Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-2244", "record": "PYSEC-2026-2244", "field": "published"}, {"timestamp": "2026-05-04T18:23:50.030Z", "date_only": false, "value": "2026-05-04T18:23:50.030880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c63yso62r", "record": "CVE-2026-42087", "field": "creation_timestamp", "uuid": "d1005db3-e240-4b46-bd78-592fcbf409e9", "content": "\ud83d\udd34 CVE-2026-42087 - Critical (9.6)\n\nOpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42087/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c63yso62r"}, {"timestamp": "2026-05-04T18:28:26.406Z", "date_only": false, "value": "2026-05-04T18:28:26.406327Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cgemy2x2v", "record": "CVE-2026-42087", "field": "creation_timestamp", "uuid": "af8cca6a-bcd5-43a8-b432-bde4c2d97148", "content": "CVE-2026-42087 - OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base\nCVE ID : CVE-2026-42087\n \n Published : May 4, 2026, 5:18 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one o...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cgemy2x2v"}, {"timestamp": "2026-05-05T12:46:08.929Z", "date_only": false, "value": "2026-05-05T12:46:08.929960Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-42087", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-05T12:46:08.929Z", "date_only": false, "value": "2026-05-05T12:46:08.929960Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42087", "record": "FKIE_CVE-2026-42087", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-05T12:46:14.311Z", "date_only": false, "value": "2026-05-05T12:46:14.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-42087", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-05T12:46:14.311Z", "date_only": false, "value": "2026-05-05T12:46:14.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-42087", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-08T23:07:07.166Z", "date_only": false, "value": "2026-05-08T23:07:07.166483Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mletuecyio2f", "record": "CVE-2026-42087", "field": "creation_timestamp", "uuid": "d3f5fa74-2808-4a66-a6bb-292e1c8bf462", "content": "\ud83d\udccc CVE-2026-42087 - OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before v... https://www.cyberhub.blog/cves/CVE-2026-42087", "url": "https://bsky.app/profile/cyberhub.blog/post/3mletuecyio2f"}, {"timestamp": "2026-05-29T21:46:48Z", "date_only": false, "value": "2026-05-29T21:46:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V529-VHWC-WFC5", "record": "GHSA-V529-VHWC-WFC5", "field": "modified"}, {"timestamp": "2026-06-17T10:47:24.877Z", "date_only": false, "value": "2026-06-17T10:47:24.877", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42087", "record": "FKIE_CVE-2026-42087", "field": "lastModified"}, {"timestamp": "2026-07-13T05:50:29.656Z", "date_only": false, "value": "2026-07-13T05:50:29.656312Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-2244", "record": "PYSEC-2026-2244", "field": "modified"}, {"timestamp": "2026-09-12T10:00:17.664Z", "date_only": false, "value": "2026-09-12T10:00:17.664912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shimiscyberworld/1193", "record": "CVE-2026-42087", "field": "creation_timestamp", "uuid": "07215216-5e45-4889-8e53-6492a2c6c542", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42087 \u2014 CVSS 9.6\nOpenC3 COSMOS TSDB SQL Injection Flaw Exposes Critical Systems\n\nCVE-2026-42087 \u2014 OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42087 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1193"}]}