{"metadata": {"vulnerability": "cve-2026-86167", "count": 18, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-86167", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-05T02:00:00Z", "date_only": false, "value": "2026-09-05T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-86167", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-05T10:32:11.111Z", "date_only": false, "value": "2026-09-05T10:32:11.111Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-86167", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-05T12:38:06Z", "date_only": false, "value": "2026-09-05T12:38:06.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-86167", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-06T04:30:12.687Z", "date_only": false, "value": "2026-09-06T04:30:12.687Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-86167", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-06T04:30:12.687Z", "date_only": false, "value": "2026-09-06T04:30:12.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-86167", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-06T05:00:05.023Z", "date_only": false, "value": "2026-09-06T05:00:05.023938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mut7jydmri2j", "record": "CVE-2026-86167", "field": "creation_timestamp", "uuid": "e2165df0-6c9e-488b-981a-9f702ba8945e", "content": "CVE-2026-86167 - hg10\nThe admin web page on Tenda HG10 routers can be tricked into running any system command by sending a crafted request. This can be done over the network by an attacker, potentially giving\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hg10 #tenda #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mut7jydmri2j"}, {"timestamp": "2026-09-06T05:16:50Z", "date_only": false, "value": "2026-09-06T05:16:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W592-PR34-FRCQ", "record": "GHSA-W592-PR34-FRCQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-06T05:16:50.477Z", "date_only": false, "value": "2026-09-06T05:16:50.477", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86167", "record": "FKIE_CVE-2026-86167", "field": "published"}, {"timestamp": "2026-09-06T05:58:24.430Z", "date_only": false, "value": "2026-09-06T05:58:24.430189Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2w6vkimf37bns", "record": "CVE-2026-86167", "field": "creation_timestamp", "uuid": "a2215565-f4eb-476b-a411-54fd6cd5881b", "content": "CVE-2026-86167 - Tenda HG10 Boa formgponConf os command injection\nCVE ID : CVE-2026-86167\n \n Published : Sept. 6, 2026, 4:30 a.m. | 57\u00a0minutes ago\n \n Description : A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boafor...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/2w6vkimf37bns"}, {"timestamp": "2026-09-06T06:30:21Z", "date_only": false, "value": "2026-09-06T06:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W592-PR34-FRCQ", "record": "GHSA-W592-PR34-FRCQ", "field": "published"}, {"timestamp": "2026-09-06T06:30:21Z", "date_only": false, "value": "2026-09-06T06:30:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W592-PR34-FRCQ", "record": "GHSA-W592-PR34-FRCQ", "field": "modified"}, {"timestamp": "2026-09-06T10:47:55.034Z", "date_only": false, "value": "2026-09-06T10:47:55.034043Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mutsxxprnl2i", "record": "CVE-2026-86167", "field": "creation_timestamp", "uuid": "b7742cd1-afe2-400a-b6cb-60428581e917", "content": "Tenda HG10 300001138\u306eformgponConf\u95a2\u6570\u306bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u60aa\u7528\u304c\u53ef\u80fd\u3002\nCVE-2026-86167 CVSS 9.9 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mutsxxprnl2i"}, {"timestamp": "2026-09-08T17:45:51.458Z", "date_only": false, "value": "2026-09-08T17:45:51.458509Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-86167", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-08T17:45:51.458Z", "date_only": false, "value": "2026-09-08T17:45:51.458509Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86167", "record": "FKIE_CVE-2026-86167", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-08T17:46:03.504Z", "date_only": false, "value": "2026-09-08T17:46:03.504Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-86167", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-08T17:46:03.504Z", "date_only": false, "value": "2026-09-08T17:46:03.504Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-86167", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-08T18:21:15.533Z", "date_only": false, "value": "2026-09-08T18:21:15.533", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86167", "record": "FKIE_CVE-2026-86167", "field": "lastModified"}]}