{"metadata": {"vulnerability": "cve-2026-76071", "count": 20, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-18T21:04:48.503Z", "date_only": false, "value": "2026-08-18T21:04:48.503Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-76071", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-20T00:00:00Z", "date_only": false, "value": "2026-08-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-76071", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-20T05:00:03.343Z", "date_only": false, "value": "2026-08-20T05:00:03.343041Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZ_QJPu8IyHlpngfjWOA", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "321460f0-82d5-4dde-96fc-f7f3e5d10b41", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-22T19:00:06.004Z", "date_only": false, "value": "2026-08-22T19:00:06.004887Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98838", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "5e110bb3-448c-45a9-a694-2c0306044310", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76071\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ozcanpng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 23:35:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal research and non-destructive PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98838"}, {"timestamp": "2026-08-23T00:00:30.325Z", "date_only": false, "value": "2026-08-23T00:00:30.325287Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98838", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "e9395cfc-8d65-45dd-b957-d34961b6ce42", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76071\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ozcanpng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 23:35:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal research and non-destructive PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98838", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T15:42:33.056Z", "date_only": false, "value": "2026-08-24T15:42:33.056Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-76071", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-24T15:42:33.056Z", "date_only": false, "value": "2026-08-24T15:42:33.056Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-76071", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-24T16:17:23Z", "date_only": false, "value": "2026-08-24T16:17:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MX2Q-89WP-JRVH", "record": "GHSA-MX2Q-89WP-JRVH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-24T16:17:23.117Z", "date_only": false, "value": "2026-08-24T16:17:23.117", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76071", "record": "FKIE_CVE-2026-76071", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-24T16:30:06.795Z", "date_only": false, "value": "2026-08-24T16:30:06.795937Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttpzv2c2c2t", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "0191ba58-cb00-415f-9c55-64c59860bc4b", "content": "CVE-2026-76071 - nc63\nThe Netis NC63 router\u2019s firmware up to version 3.0.0.3327 can be tricked into running malicious code when a specially crafted request is sent. An attacker does not need to log in and can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nc63 #netis #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mttpzv2c2c2t"}, {"timestamp": "2026-08-24T17:00:58.730Z", "date_only": false, "value": "2026-08-24T17:00:58.730428Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttrr2hu6l22", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "690d2a33-66ac-4cfd-9734-1b9cf8eafe03", "content": "\ud83d\udd34 CVE-2026-76071 - Critical (9.8)\n\nNetis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76071/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttrr2hu6l22"}, {"timestamp": "2026-08-24T17:02:16.967Z", "date_only": false, "value": "2026-08-24T17:02:16.967156Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6rqft5dfaxcri", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "c8097b20-cb1c-4369-8738-e66a038de298", "content": "CVE-2026-76071 - Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter\nCVE ID : CVE-2026-76071\n \n Published : Aug. 24, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability t...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/6rqft5dfaxcri"}, {"timestamp": "2026-08-24T18:08:15.489Z", "date_only": false, "value": "2026-08-24T18:08:15.489997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttvjf52v22u", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "bc6d337f-915c-40a8-b867-82fb300555cc", "content": "\ud83d\udea8 CVE-2026-76071 \u2014 CVSS 9.3 CRITICAL\n\nNetis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76071\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mttvjf52v22u"}, {"timestamp": "2026-08-24T18:31:51Z", "date_only": false, "value": "2026-08-24T18:31:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MX2Q-89WP-JRVH", "record": "GHSA-MX2Q-89WP-JRVH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-24T18:31:51Z", "date_only": false, "value": "2026-08-24T18:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MX2Q-89WP-JRVH", "record": "GHSA-MX2Q-89WP-JRVH", "field": "modified"}, {"timestamp": "2026-08-26T18:25:03.729Z", "date_only": false, "value": "2026-08-26T18:25:03.729510Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-76071", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-26T18:25:03.729Z", "date_only": false, "value": "2026-08-26T18:25:03.729510Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76071", "record": "FKIE_CVE-2026-76071", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-26T18:25:12.168Z", "date_only": false, "value": "2026-08-26T18:25:12.168Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-76071", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-26T18:25:12.168Z", "date_only": false, "value": "2026-08-26T18:25:12.168Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-76071", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T15:10:00.207Z", "date_only": false, "value": "2026-10-12T15:10:00.207", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76071", "record": "FKIE_CVE-2026-76071", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T15:57:54.815Z", "anchors": {"origin": {"timestamp": "2026-08-20T00:00:00Z", "date_only": false, "value": "2026-08-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-76071", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-20T00:00:00Z", "date_only": false, "value": "2026-08-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-76071", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-20T05:00:03.343Z", "date_only": false, "value": "2026-08-20T05:00:03.343041Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZ_QJPu8IyHlpngfjWOA", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "321460f0-82d5-4dde-96fc-f7f3e5d10b41", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 18003.343, "hours": 5.000928611111111, "days": 0.20837202546296296, "min_seconds": -68396.657, "max_seconds": 18003.343, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-20T00:00:00Z", "date_only": false, "value": "2026-08-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-76071", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-20T05:00:03.343Z", "date_only": false, "value": "2026-08-20T05:00:03.343041Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZ_QJPu8IyHlpngfjWOA", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "321460f0-82d5-4dde-96fc-f7f3e5d10b41", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 6278274.815539, "hours": 1743.965226538611, "days": 72.66521777244212, "min_seconds": 6191874.815539, "max_seconds": 6278274.815539, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-20T00:00:00Z", "date_only": false, "value": "2026-08-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-76071", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T15:57:54.815Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 6260271.472539, "hours": 1738.9642979275, "days": 72.45684574697917, "min_seconds": 6260271.472539, "max_seconds": 6260271.472539, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-20T05:00:03.343Z", "date_only": false, "value": "2026-08-20T05:00:03.343041Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZ_QJPu8IyHlpngfjWOA", "record": "CVE-2026-76071", "field": "creation_timestamp", "uuid": "321460f0-82d5-4dde-96fc-f7f3e5d10b41", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T15:57:54.815Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}