{"metadata": {"vulnerability": "CVE-2021-25646", "count": 152, "kinds": {"milestone": 4, "sighting": 124, "kev": 11, "other": 13}}, "data": [{"timestamp": "2021-01-21T00:00:00Z", "date_only": false, "value": "2021-01-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-25646", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-29T00:00:00Z", "date_only": true, "value": "2021-01-29", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-25646", "record": "GSD-2021-25646", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-01-29T19:15:12Z", "date_only": false, "value": "2021-01-29T19:15:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-25646", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-01-29T20:15:00Z", "date_only": false, "value": "2021-01-29T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WRQF-RRRW-W3MG", "record": "GHSA-WRQF-RRRW-W3MG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-01-29T20:15:00Z", "date_only": false, "value": "2021-01-29T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-25646", "record": "GSD-2021-25646", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-01-29T20:15:12.997Z", "date_only": false, "value": "2021-01-29T20:15:12.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25646", "record": "FKIE_CVE-2021-25646", "field": "published"}, {"timestamp": "2021-02-01T00:00:00Z", "date_only": true, "value": "2021-02-01", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-09502", "record": "CNVD-2021-09502", "field": "submitTime"}, {"timestamp": "2021-02-05T23:22:52Z", "date_only": false, "value": "2021-02-05T23:22:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/5128", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "5be63d53-8bf5-40d4-94b9-1a6a444d9a2c", "content": "CVE-2021-25646 Apache Druid RCE POC\n\nhttps://gist.github.com/FanqXu/36c5e0070fd8e0b6646993b4e386a6b1", "url": "https://t.me/thebugbountyhunter/5128"}, {"timestamp": "2021-02-06T00:00:00Z", "date_only": true, "value": "2021-02-06", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-09502", "record": "CNVD-2021-09502", "field": "openTime"}, {"timestamp": "2021-02-06T07:37:08Z", "date_only": false, "value": "2021-02-06T07:37:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/3868", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "46038b53-aa30-42a7-96d2-3278a9930d6d", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2021-25646 Apache Druid RCE POC\n\nhttps://gist.github.com/FanqXu/36c5e0070fd8e0b6646993b4e386a6b1", "url": "https://t.me/cKure/3868"}, {"timestamp": "2021-02-09T12:30:57Z", "date_only": false, "value": "2021-02-09T12:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/428", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "607ec888-6390-4b8b-ae66-9e24a231a8f8", "content": "Apache Druid Remote Code Execution Vulnerability\n\n#ApacheDruid #RCE #cve-2021-25646 #Vulnerability\n\nhttps://upurl.me/h8rwo", "url": "https://t.me/reconshell/428"}, {"timestamp": "2021-03-03T05:37:03Z", "date_only": false, "value": "2021-03-03T05:37:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2815", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "5d425bd1-a932-489b-ac58-9a2ebac8d91d", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (feb 1-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2021-24074, CVE-2021-24094, CVE-2021-24086 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday", "url": "https://t.me/CyberSecurityTechnologies/2815"}, {"timestamp": "2021-04-05T21:52:53Z", "date_only": false, "value": "2021-04-05T21:52:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WRQF-RRRW-W3MG", "record": "GHSA-WRQF-RRRW-W3MG", "field": "modified"}, {"timestamp": "2021-04-26T17:10:10Z", "date_only": false, "value": "2021-04-26T17:10:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_druid_js_rce.rb", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "99a6a3c6-0965-41c3-8fc2-017ba6348120", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_druid_js_rce.rb"}, {"timestamp": "2021-05-05T13:27:00Z", "date_only": false, "value": "2021-05-05T13:27Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-25646", "record": "GSD-2021-25646", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-06-16T17:40:47Z", "date_only": false, "value": "2021-06-16T17:40:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WRQF-RRRW-W3MG", "record": "GHSA-WRQF-RRRW-W3MG", "field": "published"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/14", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d935000d-e62a-4b01-a379-52df30d8bf05", "content": "CVE-2021-25646 Apache Druid JavaScript RCE\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-25646_Apache_Druid_JavaScript_RCE%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/14"}, {"timestamp": "2021-10-20T04:45:22Z", "date_only": false, "value": "2021-10-20T04:45:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/apache_druid_preauth_rce_cve_2021_25646", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "6430100c-ef4e-4a2a-ac10-a737ad61927b", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/apache_druid_preauth_rce_cve_2021_25646"}, {"timestamp": "2021-12-12T14:58:13Z", "date_only": false, "value": "2021-12-12T14:58:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/976", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "c079ce33-8a7f-4e18-92ce-b93c5346624e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1aApache Druid remote code execution vulnerability - Apache Druid \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u5229\u7528\nURL\uff1ahttps://github.com/j2ekim/cve-2021-25646", "url": "https://t.me/GithubRedTeam/976"}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": true, "value": "2022-07-12", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-25646", "record": "GSD-2021-25646", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25646.yaml", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "8ec2137a-93df-43ac-9fc1-b2b3f0e7f77f", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25646.yaml"}, {"timestamp": "2023-10-14T14:56:53Z", "date_only": false, "value": "2023-10-14T14:56:53+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-25646", "field": "timestamps.asserted_at", "uuid": "e8d91e0a-d109-464e-91d4-edc39fdcad48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:56:53Z", "date_only": false, "value": "2023-10-14T14:56:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-25646", "field": "timestamps.first_seen_at", "uuid": "e8d91e0a-d109-464e-91d4-edc39fdcad48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-08T12:13:26Z", "date_only": false, "value": "2023-12-08T12:13:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1556", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "7ad27a02-b231-4097-86f7-8aa07212adfb", "content": "#ExploitObserverAlert\n\nCVE-2021-25646\n\nDESCRIPTION: Exploit Observer has 74 entries related to CVE-2021-25646. Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process.\n\nFIRST-EPSS: 0.972840000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1556"}, {"timestamp": "2023-12-13T01:23:21.407Z", "date_only": false, "value": "2023-12-13T01:23:21.407946Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-25646", "record": "GSD-2021-25646", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-22T06:15:17Z", "date_only": false, "value": "2024-05-22T06:15:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "85b342f2-f793-4ae9-b860-4d2e1936fde1", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "url": "https://t.me/CyberSecurityTechnologies/2661"}, {"timestamp": "2024-08-03T20:11:28.147Z", "date_only": false, "value": "2024-08-03T20:11:28.147Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-25646", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-03T20:13:06Z", "date_only": false, "value": "2024-08-03T20:13:06.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2021-25646", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-04T15:27:08Z", "date_only": false, "value": "2024-10-04T15:27:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8675", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "5ebb8715-3783-4436-a2e3-68e8d3c804a3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1aCVE-2021-25646 \u4e00\u952e\u5316\u6f0f\u6d1e\u626b\u63cf\u548c\u5229\u7528\u5de5\u5177\nURL\uff1ahttps://github.com/luobai8/CVE-2021-25646-exp\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u5229\u7528", "url": "https://t.me/GithubRedTeam/8675"}, {"timestamp": "2024-10-09T19:20:48Z", "date_only": false, "value": "2024-10-09T19:20:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2639", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "c19a7715-405b-47b2-a1eb-0a90bbd3f5dd", "content": "#exploit\nCVE-2021-25646:\nApache Druid <=0.20.1 - RCE\nhttps://gist.github.com/pikpikcu/d208f19ea222efe21c4a6e6003d57069", "url": "https://t.me/CyberSecurityTechnologies/2639"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-20)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "a9011cc2-d6aa-498b-9b2a-d6231efdc379"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-21)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "c945fc73-2f40-4b92-a0f5-d811e21d6d9e"}, {"timestamp": "2024-12-22T00:00:00Z", "date_only": false, "value": "2024-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-22)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "87f4da56-8c72-46ff-b8a9-17a64ff198b8"}, {"timestamp": "2024-12-24T00:00:00Z", "date_only": false, "value": "2024-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-24)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "b401f3a8-8636-4064-bafb-ebe2defd9941"}, {"timestamp": "2024-12-31T00:00:00Z", "date_only": false, "value": "2024-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "e7c21e9c-a301-4167-b1da-924be77bca68"}, {"timestamp": "2025-01-12T00:00:00Z", "date_only": false, "value": "2025-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "9fbbb71f-b6cc-4133-9373-1fa5aabeeb27"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "0144c4fb-0fce-4ce3-a446-e1a103a3ca27"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "55b81c45-ba90-4936-b4f0-cf97911376c7"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "47237f61-02bd-4d77-bb67-72b9c1daac6a"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "5e26f540-b115-4ac1-a9ee-a9d7df2cfbac"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "bd1a0705-ff39-4122-ad25-f341f6c3844d"}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "207df222-e369-4f6a-bfaa-25be35e2f919"}, {"timestamp": "2025-02-13T16:27:49.264Z", "date_only": false, "value": "2025-02-13T16:27:49.264Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-25646", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "1a982a61-2b6a-4268-b3ac-d8c1934538bc"}, {"timestamp": "2025-02-23T04:10:36Z", "date_only": false, "value": "2025-02-23T04:10:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "825155ac-db56-418e-b855-f7b913886698"}, {"timestamp": "2025-03-01T00:00:00Z", "date_only": false, "value": "2025-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "93b043a1-480b-4a78-9d0e-e0abf2106b46"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-03)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "486d7b60-3a5d-43fe-a516-04909c3f86a0"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "846bc9c3-7321-4a4a-a3fb-1eef7cb5ff97"}, {"timestamp": "2025-03-12T00:00:00Z", "date_only": false, "value": "2025-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "6b51f0c3-f18e-4f58-9514-804b0e03f9a2"}, {"timestamp": "2025-03-12T16:00:08Z", "date_only": false, "value": "2025-03-12T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jugsekZTROByY-lots9MBC6qUmVXrKpGjzxGk9sSuKN2Djo", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "7138dcce-e277-4d2a-8204-4b9400ceb75f"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "43fe65f0-443c-45d2-8b11-1e8e01d34b9a"}, {"timestamp": "2025-03-29T00:00:00Z", "date_only": false, "value": "2025-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "00f411b7-7027-4a0b-b2c6-2f1a682366b2"}, {"timestamp": "2025-04-05T00:00:00Z", "date_only": false, "value": "2025-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "4776f051-7bbb-4aeb-b995-56dd7ed51ca8"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "cf94d5db-a685-497a-a1ba-742bb8e90a91"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "1b42128c-6835-4b58-bfa4-a852b4bd4041"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-20)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "dae4aa3a-b79c-4790-913a-6a952326114b"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d40d61fa-0437-46a9-b099-2aab3cf1013f"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-25646", "field": "timestamps.asserted_at", "uuid": "905e2533-4c67-466b-b8e0-ea3631e85ad5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-25646", "field": "evidence.0.details.added_date", "uuid": "905e2533-4c67-466b-b8e0-ea3631e85ad5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "13b688d0-cc98-4c63-b55b-a336aa517a8a"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-25646", "field": "timestamps.first_seen_at", "uuid": "905e2533-4c67-466b-b8e0-ea3631e85ad5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-25646", "field": "status.status_updated_at", "uuid": "905e2533-4c67-466b-b8e0-ea3631e85ad5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-30T00:00:00Z", "date_only": false, "value": "2025-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "934f0390-51c5-4e1c-8cac-3083eb73cba6"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "09da6651-4e99-48fd-9a67-bd520d9c89e1"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "767d8ff4-13f7-48d1-866a-c315c56ab1df"}, {"timestamp": "2025-05-09T05:00:07Z", "date_only": false, "value": "2025-05-09T05:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4Oydh8Tgpxa6Sr1ETKEhGFgRilkjy4VveLbeuCCkjq2EJac", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "ed2006e4-548a-4090-9d06-67f01eb5eb9c"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "a9b35731-39f0-4e8b-ab41-96cc2f72cfa6"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "2a8013a3-5370-4522-96e9-38194fd2c047"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "f9eeec4a-dc6a-4124-9e51-7e50e00d4bfa"}, {"timestamp": "2025-06-03T00:00:00Z", "date_only": false, "value": "2025-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "55a15ce1-a195-44ea-9713-2c07cb90c6b4"}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": false, "value": "2025-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-04)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3b0d31fe-a2c7-4fcc-acc5-427d2a278374"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "42b9e473-94b5-43ef-8443-5bc7ad0c28da"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "8381acf5-7a27-4e85-9530-63e781221d25"}, {"timestamp": "2025-07-06T15:00:06Z", "date_only": false, "value": "2025-07-06T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ziOVGRU4cKcimSIJ_E6PMSYJvnmBXzqpvenCO7rqIs6XBvg", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d2e3d4d9-8c23-4bcc-9420-3926c3331c8b"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "94d2f2ea-fe7c-48e9-930d-ea2fd6a1e6af"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "cdae36d8-f81a-4317-b3a0-2cf08f310aef"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3b0958f9-06f6-41e6-b1fc-ec505587106a"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "0955e03b-8dcb-4ae0-8409-44b85937cfb3"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "307df790-c607-4813-b8a6-24cdd3c1bda6"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "bdb8a149-3487-46de-ba4e-f41a5860d238"}, {"timestamp": "2025-08-27T00:00:00Z", "date_only": false, "value": "2025-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "54b9b898-a86e-4b52-bef9-81f4c739cbf6"}, {"timestamp": "2025-08-31T00:00:00Z", "date_only": false, "value": "2025-08-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "204cce32-8e08-4e36-a881-b3f58799c128"}, {"timestamp": "2025-09-02T00:00:00Z", "date_only": false, "value": "2025-09-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "ff130b2d-870d-4d17-a1a1-2dbceaec3642"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "22d4dd4d-88d6-45a1-a4d9-10a08af43483"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "320d00ee-28fa-4872-9e61-0937ce7b5a08"}, {"timestamp": "2025-09-20T00:00:00Z", "date_only": false, "value": "2025-09-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-20)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "771f06d3-ad88-4be5-b8a0-6c46eb2b2491"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "8d950f9e-780c-4d73-aef1-5abc32cb5832"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "959f944b-f0b1-4097-9964-9f0eaf4e0716"}, {"timestamp": "2025-11-26T00:00:00Z", "date_only": false, "value": "2025-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-26)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d3cab34e-33c7-4b45-aa61-799262e18286"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "bf7be615-2ee6-440f-99de-c95af0ba85b0"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-05)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "7855b485-2c34-4eee-801d-a0141f55eddf"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d5ff94a7-0bfa-4c2a-bae4-a39bcf8da8bf"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "0b5e9e8e-9475-4002-80a9-ce4cb6775fac"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "db3c6486-2ba8-4cdb-9dcd-1221fcfbb873"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d187086a-1039-48d5-823e-0db12d8f5429"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "f0adabbd-c356-4f8e-9518-76eb4b1d44f5"}, {"timestamp": "2026-01-17T00:00:00Z", "date_only": false, "value": "2026-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3f2a214e-9210-463f-951a-342d184f70c1"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "2cb59b83-7f4c-46b2-af73-faebf13a9fc1"}, {"timestamp": "2026-03-08T00:00:00Z", "date_only": false, "value": "2026-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-08)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "08be0c72-2bda-4146-b3ff-5c498acd80fe"}, {"timestamp": "2026-03-23T00:00:00Z", "date_only": false, "value": "2026-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d9be4e38-6202-4835-ad49-d3b82c7b80f0"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-26)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "77ae22d2-0b8f-4495-b5d3-ea4bdf7caa2d"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "85bd45a7-083b-4558-8ea4-f5d42307a4f0"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "c5418494-54ff-4fd9-801c-c57177aa3eff"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "f7351b48-3ab9-4ad1-b1d0-b3f473173dd7"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "e7e114c3-49ce-41cc-a858-89dd4d39b412"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-15)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "7f7301bc-7904-4ecf-93fc-da3bddaff8a9"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "cabcc25d-bd7e-4835-bfb9-4e89735b72c5"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "1cef1044-39f8-444a-b542-f024e378795b"}, {"timestamp": "2026-05-16T00:00:00Z", "date_only": false, "value": "2026-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-16)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3b0ccb9a-54d0-486f-86d5-a024b41a7527"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "40e1991a-dfc2-4055-8b2b-dda85d02a7dc"}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "b927c4bc-1cd2-4574-a801-0e30294eb5a5"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "9eea8084-8739-47f8-9a05-30b9a948e74e"}, {"timestamp": "2026-06-07T00:00:00Z", "date_only": false, "value": "2026-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "08d6dee4-9e9f-4409-9682-b607bfbdc33d"}, {"timestamp": "2026-06-15T00:00:00Z", "date_only": false, "value": "2026-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3c490d46-1316-40c3-8edc-92ca7ed0a630"}, {"timestamp": "2026-06-17T03:42:16.333Z", "date_only": false, "value": "2026-06-17T03:42:16.333", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25646", "record": "FKIE_CVE-2021-25646", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:18.299Z", "date_only": false, "value": "2026-06-19T12:46:18.299843Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/efebae50-9d78-4c0d-a279-ec5720ac39db", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "29ec7ae7-8523-48a6-baf0-82b7391beb24", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/efebae50-9d78-4c0d-a279-ec5720ac39db"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-25646", "field": "timestamps.recorded_at", "uuid": "905e2533-4c67-466b-b8e0-ea3631e85ad5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:06.643Z", "date_only": false, "value": "2026-06-23T11:13:06.643179Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/905e2533-4c67-466b-b8e0-ea3631e85ad5", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d628b591-10a8-43dd-8bfe-ea21e99e458a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/905e2533-4c67-466b-b8e0-ea3631e85ad5"}, {"timestamp": "2026-06-23T14:04:25.842Z", "date_only": false, "value": "2026-06-23T14:04:25.842762Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eaaab828-5624-49be-aa39-b56f19493445", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "1874b216-2f07-4e55-a77b-311fb62ab582", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eaaab828-5624-49be-aa39-b56f19493445"}, {"timestamp": "2026-06-26T10:15:13.926Z", "date_only": false, "value": "2026-06-26T10:15:13.926283Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "648b563a-dbb8-4237-87ac-99ca76f4f974"}, {"timestamp": "2026-06-30T09:23:05.290Z", "date_only": false, "value": "2026-06-30T09:23:05.290572Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/678b5048-1cc6-4c32-89f5-b63726d627b3", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "da697bf6-6c58-4d75-90fe-6b52b83e488c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/678b5048-1cc6-4c32-89f5-b63726d627b3"}, {"timestamp": "2026-07-01T05:53:58.514Z", "date_only": false, "value": "2026-07-01T05:53:58.514696Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e8d91e0a-d109-464e-91d4-edc39fdcad48", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "cf8849d2-3764-42c0-a636-93c7807b2a8e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e8d91e0a-d109-464e-91d4-edc39fdcad48"}, {"timestamp": "2026-07-13T10:15:30.623Z", "date_only": false, "value": "2026-07-13T10:15:30.623858Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "4935ae86-d562-4094-845f-979dc5a9eaa1"}, {"timestamp": "2026-07-13T22:00:04.632Z", "date_only": false, "value": "2026-07-13T22:00:04.632295Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92989", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "52b8c48a-94af-4917-8b4a-ddadecdd3307", "url": "https://t.me/GithubRedTeam/92989"}, {"timestamp": "2026-07-14T00:00:08.310Z", "date_only": false, "value": "2026-07-14T00:00:08.310678Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92989", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "c0359702-cf1f-4fa3-8c75-3d1abfc532d1", "url": "https://t.me/GithubRedTeam/92989"}, {"timestamp": "2026-07-16T12:15:03.425Z", "date_only": false, "value": "2026-07-16T12:15:03.425988Z", "kind": "sighting", "label": "Seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "543cdaa2-8472-48fe-add3-fa4c14c6cedd"}, {"timestamp": "2026-07-17T10:15:08.965Z", "date_only": false, "value": "2026-07-17T10:15:08.965810Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "843752ea-b948-4b0d-80a1-dce74aea41fb"}, {"timestamp": "2026-07-24T10:15:15.734Z", "date_only": false, "value": "2026-07-24T10:15:15.734376Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3335c73f-83ef-44ad-b528-1b87ec56ebd9"}, {"timestamp": "2026-07-25T10:15:18.788Z", "date_only": false, "value": "2026-07-25T10:15:18.788851Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "23630713-abcd-4174-917f-597928ab54d3"}, {"timestamp": "2026-08-07T10:43:03.207Z", "date_only": false, "value": "2026-08-07T10:43:03.207933Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "032c65e0-0f9a-4695-8ce7-604bfcbcd7a4"}, {"timestamp": "2026-08-08T11:06:25.924Z", "date_only": false, "value": "2026-08-08T11:06:25.924454Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "31a59b2e-af3f-42a5-917e-fc1993fd2348"}, {"timestamp": "2026-08-10T10:15:07.514Z", "date_only": false, "value": "2026-08-10T10:15:07.514662Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "dfa6a5b3-9a12-4345-bf0c-2b289aafef76"}, {"timestamp": "2026-08-12T10:15:09.819Z", "date_only": false, "value": "2026-08-12T10:15:09.819478Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "35f9f66f-c79f-4448-a288-a359c1ebd4a1"}, {"timestamp": "2026-08-15T10:15:09.056Z", "date_only": false, "value": "2026-08-15T10:15:09.056863Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "3290f214-f4f4-4b9e-8ca4-0d09621c536d"}, {"timestamp": "2026-08-16T10:15:07.136Z", "date_only": false, "value": "2026-08-16T10:15:07.136017Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "4e709c3c-861c-4fee-933c-d629ca99f43d"}, {"timestamp": "2026-08-25T10:15:09.642Z", "date_only": false, "value": "2026-08-25T10:15:09.642627Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "edc704a1-4f0d-4887-9177-35468a586d57"}, {"timestamp": "2026-08-26T10:15:30.318Z", "date_only": false, "value": "2026-08-26T10:15:30.318343Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "1c2516fd-935e-4b84-9b24-d5dd76537f04"}, {"timestamp": "2026-08-29T10:15:20.557Z", "date_only": false, "value": "2026-08-29T10:15:20.557110Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "af4b2afe-2ef9-415a-9e3b-9aad4df9bd82"}, {"timestamp": "2026-08-31T10:15:15.298Z", "date_only": false, "value": "2026-08-31T10:15:15.298671Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "5fb17aef-1f3e-4121-b4e4-4fc0f70a31b2"}, {"timestamp": "2026-09-01T10:15:10.476Z", "date_only": false, "value": "2026-09-01T10:15:10.476419Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "4a57d303-3385-4a95-8235-c3f0171f13d5"}, {"timestamp": "2026-09-02T10:15:09.979Z", "date_only": false, "value": "2026-09-02T10:15:09.979816Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "b89a4f58-94ae-446b-9616-139ccb45f189"}, {"timestamp": "2026-09-06T10:15:09.890Z", "date_only": false, "value": "2026-09-06T10:15:09.890927Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "14a3eeab-bb5b-42fa-b7d4-1c4f33ab9d2a"}, {"timestamp": "2026-09-07T10:15:11.266Z", "date_only": false, "value": "2026-09-07T10:15:11.266176Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "dabd1793-ac28-4eb7-aeea-7ebcc7b54a04"}, {"timestamp": "2026-09-08T08:00:04.638Z", "date_only": false, "value": "2026-09-08T08:00:04.638186Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cIHcu7G3jT84CI_VDAcSv22w5VoeESB-v4S64bVakq00Oic", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "d08a88ad-2e77-42b5-875d-f69ebd6064b1"}, {"timestamp": "2026-09-09T00:00:35.297Z", "date_only": false, "value": "2026-09-09T00:00:35.297897Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cIHcu7G3jT84CI_VDAcSv22w5VoeESB-v4S64bVakq00Oic", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "015b0473-db92-4d36-854c-3f0eaaeb4590"}, {"timestamp": "2026-09-12T10:15:19.574Z", "date_only": false, "value": "2026-09-12T10:15:19.574532Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "606097c2-01bb-448f-9b24-ea80d077e724"}, {"timestamp": "2026-09-14T10:15:09.233Z", "date_only": false, "value": "2026-09-14T10:15:09.233132Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "392a3315-f235-4678-aba1-2e5d1d5f5e8a"}, {"timestamp": "2026-09-15T10:15:11.044Z", "date_only": false, "value": "2026-09-15T10:15:11.044096Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "record": "CVE-2021-25646", "field": "creation_timestamp", "uuid": "14db3ebb-c864-4dbe-8017-f6dd6db709e4"}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-25646", "field": "timestamps.last_seen_at", "uuid": "e8d91e0a-d109-464e-91d4-edc39fdcad48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": true, "value": "2026-10-31", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-25646", "field": "evidence.0.details.observation_date", "uuid": "e8d91e0a-d109-464e-91d4-edc39fdcad48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-25646", "field": "status.status_updated_at", "uuid": "e8d91e0a-d109-464e-91d4-edc39fdcad48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T01:00:01Z", "date_only": false, "value": "2026-11-02T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-25646", "field": "timestamps.recorded_at", "uuid": "e8d91e0a-d109-464e-91d4-edc39fdcad48", "status": {"status_reason": "confirmed", "exploited": true}}]}