{"metadata": {"vulnerability": "cve-2026-4387", "count": 20, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / StrongDM", "record": "cve-2026-4387", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / StrongDM", "record": "cve-2026-4387", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-03-18T13:52:47.802Z", "date_only": false, "value": "2026-03-18T13:52:47.802Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-4387", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / StrongDM", "record": "cve-2026-4387", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-04-01T13:20:00Z", "date_only": false, "value": "2026-04-01T13:20:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / StrongDM", "record": "cve-2026-4387", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2026-05-29T18:28:00.572Z", "date_only": false, "value": "2026-05-29T18:28:00.572Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-4387", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-29T19:49:18.108Z", "date_only": false, "value": "2026-05-29T19:49:18.108657Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-4387", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-29T19:49:18.108Z", "date_only": false, "value": "2026-05-29T19:49:18.108657Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4387", "record": "FKIE_CVE-2026-4387", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-29T19:49:33.218Z", "date_only": false, "value": "2026-05-29T19:49:33.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-4387", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-29T20:16:30Z", "date_only": false, "value": "2026-05-29T20:16:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QGJM-4MG2-6WM5", "record": "GHSA-QGJM-4MG2-6WM5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-29T20:16:30.650Z", "date_only": false, "value": "2026-05-29T20:16:30.650", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4387", "record": "FKIE_CVE-2026-4387", "field": "published"}, {"timestamp": "2026-05-29T21:31:24Z", "date_only": false, "value": "2026-05-29T21:31:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QGJM-4MG2-6WM5", "record": "GHSA-QGJM-4MG2-6WM5", "field": "published"}, {"timestamp": "2026-05-29T22:18:54.796Z", "date_only": false, "value": "2026-05-29T22:18:54.796451Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkxilymg25", "record": "CVE-2026-4387", "field": "creation_timestamp", "uuid": "c260563e-2b18-4668-b09d-e7b831dcb3ae", "content": "CVE-2026-4387 - Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file\nCVE ID : CVE-2026-4387\n \n Published : May 29, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0)...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkxilymg25"}, {"timestamp": "2026-05-30T00:00:00Z", "date_only": false, "value": "2026-05-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / StrongDM", "record": "cve-2026-4387", "field": "containers.cna.timeline.4.time"}, {"timestamp": "2026-06-01T16:26:35.443Z", "date_only": false, "value": "2026-06-01T16:26:35.443Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-4387", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-01T16:26:35.443Z", "date_only": false, "value": "2026-06-01T16:26:35.443Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / StrongDM", "record": "cve-2026-4387", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-01T17:07:54.263Z", "date_only": false, "value": "2026-06-01T17:07:54.263971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/1cemoon.bsky.social/post/3mnakxoqqss2v", "record": "CVE-2026-4387", "field": "creation_timestamp", "uuid": "a71228f7-7ba5-4f99-bee4-1084766ba233", "content": "I'm excited to be able to finally publish the public disclosure for CVE-2026-4387. Check out my blog on discovering the reuse of the state.kv file to get authenticated sessions with StrongDM (now fixed). specterops.io/blog/2026/06...", "url": "https://bsky.app/profile/1cemoon.bsky.social/post/3mnakxoqqss2v"}, {"timestamp": "2026-06-01T17:48:52.675Z", "date_only": false, "value": "2026-06-01T17:48:52.675358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/specterops.io/post/3mnan66epoz24", "record": "CVE-2026-4387", "field": "creation_timestamp", "uuid": "6d8c1423-26fe-4a92-85d4-3df9f66d7d66", "content": "During an assessment, our team discovered that StrongDM auth state files containing JWTs & key material could be reused across hosts to obtain authenticated sessions & access infrastructure resources (CVE-2026-4387).\n\nRead more from @1cemoon.bsky.social: https://ghst.ly/4egbgVd", "url": "https://bsky.app/profile/specterops.io/post/3mnan66epoz24"}, {"timestamp": "2026-06-01T18:31:47Z", "date_only": false, "value": "2026-06-01T18:31:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QGJM-4MG2-6WM5", "record": "GHSA-QGJM-4MG2-6WM5", "field": "modified"}, {"timestamp": "2026-10-06T22:10:00.247Z", "date_only": false, "value": "2026-10-06T22:10:00.247", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4387", "record": "FKIE_CVE-2026-4387", "field": "lastModified"}]}