{"metadata": {"vulnerability": "cve-2026-54149", "count": 15, "kinds": {"milestone": 3, "sighting": 6, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-11T21:15:33.871Z", "date_only": false, "value": "2026-06-11T21:15:33.871Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-54149", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-10T15:05:32.613Z", "date_only": false, "value": "2026-07-10T15:05:32.613Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-54149", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-10T15:05:32.613Z", "date_only": false, "value": "2026-07-10T15:05:32.613Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-54149", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-10T16:01:03.903Z", "date_only": false, "value": "2026-07-10T16:01:03.903578Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-54149", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-10T16:01:03.903Z", "date_only": false, "value": "2026-07-10T16:01:03.903578Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-54149", "record": "FKIE_CVE-2026-54149", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-10T16:01:08.445Z", "date_only": false, "value": "2026-07-10T16:01:08.445Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-54149", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-10T16:01:08.445Z", "date_only": false, "value": "2026-07-10T16:01:08.445Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-54149", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-10T16:16:32.587Z", "date_only": false, "value": "2026-07-10T16:16:32.587", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-54149", "record": "FKIE_CVE-2026-54149", "field": "published"}, {"timestamp": "2026-07-10T16:58:31.266Z", "date_only": false, "value": "2026-07-10T16:58:31.266145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmnbbo2l2x", "record": "CVE-2026-54149", "field": "creation_timestamp", "uuid": "1a9858db-da1f-4913-b894-8008dda8ae9c", "content": "CVE-2026-54149 - MaxKB MCP tool import validation bypass allows post-authentication remote code execution\nCVE ID : CVE-2026-54149\n \n Published : July 10, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts,...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmnbbo2l2x"}, {"timestamp": "2026-07-10T17:00:47.133Z", "date_only": false, "value": "2026-07-10T17:00:47.133240Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrccqct25", "record": "CVE-2026-54149", "field": "creation_timestamp", "uuid": "9654592c-0707-4989-9761-40cbdf77f82f", "content": "\ud83d\udfe0 CVE-2026-54149 - High (8.8)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import funct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrccqct25"}, {"timestamp": "2026-07-10T19:10:59.333Z", "date_only": false, "value": "2026-07-10T19:10:59.333", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-54149", "record": "FKIE_CVE-2026-54149", "field": "lastModified"}, {"timestamp": "2026-07-10T22:11:21.992Z", "date_only": false, "value": "2026-07-10T22:11:21.992858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd64oaost2c", "record": "CVE-2026-54149", "field": "creation_timestamp", "uuid": "870146e3-0b93-4aa3-8cc6-3cea6af87e14", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/91FF5E02-D4E6-4EBC-9014-0BCA01237FD5", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd64oaost2c"}, {"timestamp": "2026-07-10T22:38:53.343Z", "date_only": false, "value": "2026-07-10T22:38:53.343061Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7nuupzf2d", "record": "CVE-2026-54149", "field": "creation_timestamp", "uuid": "cb356833-a442-4445-ba88-184a23e9e10a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58B24DF0-4314-4D8C-AFCA-04CA11962397", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7nuupzf2d"}, {"timestamp": "2026-07-10T23:12:10.492Z", "date_only": false, "value": "2026-07-10T23:12:10.492434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqdbjffybf2u", "record": "CVE-2026-54149", "field": "creation_timestamp", "uuid": "9a6e6af6-40e6-4939-a3cc-2c255b74a9eb", "content": "CVE-2026-54149 - Critical OS Command Injection in MaxKB. Authenticated users can execute arbitrary commands via malicious .tool import and MCP transport. CVSS 8.8. No patch available yet. Mitigate immediately. #CVE #MaxKB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54149/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqdbjffybf2u"}, {"timestamp": "2026-07-11T00:51:15.218Z", "date_only": false, "value": "2026-07-11T00:51:15.218995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh2l4fg72s", "record": "CVE-2026-54149", "field": "creation_timestamp", "uuid": "cabd10b9-3841-486b-9793-4ded9223b5b2", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3166473E-18C7-424F-9E3D-A07720D8754D", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh2l4fg72s"}]}