{"metadata": {"vulnerability": "CVE-2022-36266", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2022-07-18T00:00:00Z", "date_only": false, "value": "2022-07-18T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-36266", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-08T14:35:29Z", "date_only": false, "value": "2022-08-08T14:35:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-36266", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-08-08T15:15:00Z", "date_only": false, "value": "2022-08-08T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-26CM-5C58-46MM", "record": "GHSA-26CM-5C58-46MM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-08-08T15:15:00Z", "date_only": false, "value": "2022-08-08T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-36266", "record": "GSD-2022-36266", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-08-08T15:15:08.990Z", "date_only": false, "value": "2022-08-08T15:15:08.990", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36266", "record": "FKIE_CVE-2022-36266", "field": "published"}, {"timestamp": "2022-08-08T18:23:41Z", "date_only": false, "value": "2022-08-08T18:23:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/47731", "record": "CVE-2022-36266", "field": "creation_timestamp", "uuid": "cb34b7ef-6cd0-40d8-8cbf-4c510198d2d7", "content": "\u203c CVE-2022-36266 \u203c\n\nIn Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi-bin/login.cgi does not check if the user is authenticated, a malicious actor can craft a specific request on the login.cgi endpoint that contains a base32 encoded XSS payload that will be accepted and stored. A successful attack will results in the injection of malicious scripts into the user settings page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/47731"}, {"timestamp": "2022-08-09T00:00:25Z", "date_only": false, "value": "2022-08-09T00:00:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-26CM-5C58-46MM", "record": "GHSA-26CM-5C58-46MM", "field": "published"}, {"timestamp": "2022-08-09T00:00:25Z", "date_only": false, "value": "2022-08-09T00:00:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-26CM-5C58-46MM", "record": "GHSA-26CM-5C58-46MM", "field": "modified"}, {"timestamp": "2022-08-19T16:06:13Z", "date_only": false, "value": "2022-08-19T16:06:13.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-36266", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-10-26T18:06:00Z", "date_only": false, "value": "2022-10-26T18:06Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-36266", "record": "GSD-2022-36266", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:21.352Z", "date_only": false, "value": "2023-12-13T01:19:21.352624Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-36266", "record": "GSD-2022-36266", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-11T07:14:50Z", "date_only": false, "value": "2024-03-11T07:14:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10122", "record": "CVE-2022-36266", "field": "creation_timestamp", "uuid": "9854f1be-ea9e-4125-9547-ab9dddc997ea", "content": "#exploit\n1. CVE-2023-36049:\nMicrosoft .NET CRLF Injection Arbitrary File Write/Deletion\nhttps://www.zerodayinitiative.com/blog/2024/3/6/cve-2023-36049-microsoft-net-crlf-injection-arbitrary-file-writedeletion-vulnerability\n\n2. CVE-2022-36266, CVE-2022-36267, CVE-2022-36264, CVE-2022-36265:\nAirspan AirSpot 5410 Vulnerabilities\nhttps://neroteam.com/blog/airspan-airspot-5410-vulnerability-report", "url": "https://t.me/CyberSecurityTechnologies/10122"}, {"timestamp": "2024-08-03T10:00:04.483Z", "date_only": false, "value": "2024-08-03T10:00:04.483Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-36266", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T10:00:04.483Z", "date_only": false, "value": "2024-08-03T10:00:04.483Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-36266", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:53:08.933Z", "date_only": false, "value": "2026-06-17T04:53:08.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36266", "record": "FKIE_CVE-2022-36266", "field": "lastModified"}, {"timestamp": "2026-09-01T20:01:25.908Z", "date_only": false, "value": "2026-09-01T20:01:25.908906Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/66025", "record": "CVE-2022-36266", "field": "creation_timestamp", "uuid": "f8688ca5-0379-4b9f-9b89-5a2bdfca1e5b", "url": "https://t.me/hacking_Attack/66025"}, {"timestamp": "2026-09-05T11:00:04.007Z", "date_only": false, "value": "2026-09-05T11:00:04.007607Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/66025", "record": "CVE-2022-36266", "field": "creation_timestamp", "uuid": "7be96671-3da7-488a-9bc9-addc8643ea48", "url": "https://t.me/hacking_Attack/66025"}]}