{"metadata": {"vulnerability": "cve-2026-56271", "count": 27, "kinds": {"milestone": 4, "sighting": 9, "kev": 5, "other": 9}}, "data": [{"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-56271", "field": "containers.cna.datePublic"}, {"timestamp": "2026-06-20T01:47:54Z", "date_only": false, "value": "2026-06-20T01:47:54.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-56271", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-12T12:06:32.246Z", "date_only": false, "value": "2026-07-12T12:06:32.246Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-56271", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-12T12:06:32.246Z", "date_only": false, "value": "2026-07-12T12:06:32.246Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-56271", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-12T12:16:45Z", "date_only": false, "value": "2026-07-12T12:16:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JPVQ-QWHH-PW47", "record": "GHSA-JPVQ-QWHH-PW47", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-12T12:16:45.290Z", "date_only": false, "value": "2026-07-12T12:16:45.290", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56271", "record": "FKIE_CVE-2026-56271", "field": "published"}, {"timestamp": "2026-07-12T12:31:48Z", "date_only": false, "value": "2026-07-12T12:31:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JPVQ-QWHH-PW47", "record": "GHSA-JPVQ-QWHH-PW47", "field": "published"}, {"timestamp": "2026-07-12T12:31:48Z", "date_only": false, "value": "2026-07-12T12:31:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JPVQ-QWHH-PW47", "record": "GHSA-JPVQ-QWHH-PW47", "field": "modified"}, {"timestamp": "2026-07-12T12:33:19.767Z", "date_only": false, "value": "2026-07-12T12:33:19.767402Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6qvmwwo2y", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "0acbb9a3-7d56-4ba8-9f77-70938c87ba78", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56271 \u0432 Flowise: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CC8F73D0-809A-4082-AF00-34E8DF898442", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6qvmwwo2y"}, {"timestamp": "2026-07-12T12:46:05.288Z", "date_only": false, "value": "2026-07-12T12:46:05.288356Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqh7hpkdws2f", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "c6f165cc-2945-45ec-aac7-627c7a0c21cc", "content": "CVE-2026-56271 - flowise\nFlowise versions 3.0.13 and earlier use weak default secrets in its JWT authentication system. This allows attackers to create fake authentication tokens, potentially impersonating\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqh7hpkdws2f"}, {"timestamp": "2026-07-12T12:54:26.276Z", "date_only": false, "value": "2026-07-12T12:54:26.276247Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqh7wndsdd2w", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "50a58aa2-fe29-4106-8cfb-fbdb7c321937", "content": "CVE-2026-56271 - Flowise - Weak Default JWT Secrets in Authentication Middleware\nCVE ID : CVE-2026-56271\n \n Published : July 12, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secre...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqh7wndsdd2w"}, {"timestamp": "2026-07-12T13:01:03.545Z", "date_only": false, "value": "2026-07-12T13:01:03.545973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhacgw2kj2c", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "33d5488c-b96e-4ffd-8de5-92a19cc9a533", "content": "\ud83d\udd34 CVE-2026-56271 - Critical (9.8)\n\nFlowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secre...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56271/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhacgw2kj2c"}, {"timestamp": "2026-07-13T05:02:06.599Z", "date_only": false, "value": "2026-07-13T05:02:06.599023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqivyyahck2h", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "32110028-52fd-48a3-a687-956e95b732ab", "content": "CVE-2026-56271 - flowise\nFlowise has weak default JWT secrets that can be used by attackers to impersonate any user, potentially leading to complete authentication bypass and unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #henryheng #npm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqivyyahck2h"}, {"timestamp": "2026-07-13T15:41:03.185Z", "date_only": false, "value": "2026-07-13T15:41:03.185025Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-56271", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-13T15:41:03.185Z", "date_only": false, "value": "2026-07-13T15:41:03.185025Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56271", "record": "FKIE_CVE-2026-56271", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-13T15:41:09.159Z", "date_only": false, "value": "2026-07-13T15:41:09.159Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-56271", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-13T15:41:09.159Z", "date_only": false, "value": "2026-07-13T15:41:09.159Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-56271", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-14T00:30:59.262Z", "date_only": false, "value": "2026-07-14T00:30:59.262257Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxd3rand2y", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "694d8928-137e-48cf-b24d-745b55efff75", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56271 \u0432 Flowise: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/019BF5B0-AE55-42EB-B292-1B822DCF3FF7", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxd3rand2y"}, {"timestamp": "2026-07-14T03:44:14Z", "date_only": false, "value": "2026-07-14T03:44:14.000785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc4nbx7d2f", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "ee29cb80-b518-490b-910a-61b5b54f06eb", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56271 \u0432 Flowise: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BB98A4DD-AF5E-49EA-9558-94D17BC67523", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc4nbx7d2f"}, {"timestamp": "2026-07-14T18:24:59.487Z", "date_only": false, "value": "2026-07-14T18:24:59.487", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56271", "record": "FKIE_CVE-2026-56271", "field": "lastModified"}, {"timestamp": "2026-07-15T03:37:06.496Z", "date_only": false, "value": "2026-07-15T03:37:06.496356Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqns6szms22f", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "75eff869-f2e4-4514-8bff-e8b8c57d192a", "content": "\ud83d\udccc CVE-2026-56271 - Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audien... https://www.cyberhub.blog/cves/CVE-2026-56271", "url": "https://bsky.app/profile/cyberhub.blog/post/3mqns6szms22f"}, {"timestamp": "2026-09-22T11:32:55Z", "date_only": false, "value": "2026-09-22T11:32:55+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-56271", "field": "timestamps.asserted_at", "uuid": "19974dd3-6491-475e-86c3-fd4ddcafc724", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T11:32:55Z", "date_only": false, "value": "2026-09-22T11:32:55+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-56271", "field": "timestamps.first_seen_at", "uuid": "19974dd3-6491-475e-86c3-fd4ddcafc724", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T11:32:55Z", "date_only": false, "value": "2026-09-22T11:32:55+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-56271", "field": "status.status_updated_at", "uuid": "19974dd3-6491-475e-86c3-fd4ddcafc724", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T11:32:55.153Z", "date_only": false, "value": "2026-09-22T11:32:55.153Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-56271", "field": "evidence.0.details.added_date", "uuid": "19974dd3-6491-475e-86c3-fd4ddcafc724", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T12:00:01Z", "date_only": false, "value": "2026-09-23T12:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-56271", "field": "timestamps.recorded_at", "uuid": "19974dd3-6491-475e-86c3-fd4ddcafc724", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T12:00:32.520Z", "date_only": false, "value": "2026-09-23T12:00:32.520749Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19974dd3-6491-475e-86c3-fd4ddcafc724", "record": "CVE-2026-56271", "field": "creation_timestamp", "uuid": "5aaf09ba-f662-4da6-830d-ec808a246150", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19974dd3-6491-475e-86c3-fd4ddcafc724"}]}