{"metadata": {"vulnerability": "CVE-2025-26658", "count": 26, "kinds": {"milestone": 7, "sighting": 2, "kev": 0, "other": 17}}, "data": [{"timestamp": "2025-02-12T21:05:31.735Z", "date_only": false, "value": "2025-02-12T21:05:31.735Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-26658", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0076", "record": "NCSC-2025-0076", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0521", "record": "WID-SEC-W-2025-0521", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0521", "record": "WID-SEC-W-2025-0521", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0521", "record": "WID-SEC-W-2025-0521", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0521", "record": "WID-SEC-W-2025-0521", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0190", "record": "CERTFR-2025-AVI-0190", "field": "last_revision_date"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": true, "value": "2025-03-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0190", "record": "CERTFR-2025-AVI-0190", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0190", "record": "CERTFR-2025-AVI-0190", "field": "revisions.0.revision_date"}, {"timestamp": "2025-03-11T00:35:34.989Z", "date_only": false, "value": "2025-03-11T00:35:34.989Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-26658", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-11T00:35:34.989Z", "date_only": false, "value": "2025-03-11T00:35:34.989Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "CVE-2025-26658", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-11T01:15:35Z", "date_only": false, "value": "2025-03-11T01:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3FJR-H35G-VFC9", "record": "GHSA-3FJR-H35G-VFC9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-11T01:15:35.533Z", "date_only": false, "value": "2025-03-11T01:15:35.533", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-26658", "record": "FKIE_CVE-2025-26658", "field": "published"}, {"timestamp": "2025-03-11T01:41:32Z", "date_only": false, "value": "2025-03-11T01:41:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7089", "record": "CVE-2025-26658", "field": "creation_timestamp", "uuid": "cf02b7a7-b9a7-4a3e-af07-83d71836a36a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-26658\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Service Layer in SAP Business One, allows attackers to potentially gain unauthorized access and impersonate other users in the application to perform unauthorized actions. Due to the improper session management, the attackers can elevate themselves to higher privilege and can read, modify and/or write new data. To gain authenticated sessions of other users, the attacker must invest considerable time and effort. This vulnerability has a high impact on the confidentiality and integrity of the application with no effect on the availability of the application.\n\ud83d\udccf Published: 2025-03-11T00:35:34.989Z\n\ud83d\udccf Modified: 2025-03-11T00:35:34.989Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3561045\n2. https://url.sap/sapsecuritypatchday", "url": "https://t.me/DarkWebInformer_CVEAlerts/7089"}, {"timestamp": "2025-03-11T03:24:35Z", "date_only": false, "value": "2025-03-11T03:24:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20015", "record": "CVE-2025-26658", "field": "creation_timestamp", "uuid": "9dfcd285-d9d2-41b9-8d3e-2debea448fd0", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-26658 - SAP Business One Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-26658 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : The Service Layer in SAP Business One, allows attackers to potentially gain unauthorized access and impersonate other users in the application to perform unauthorized actions. Due to the improper session management, the attackers can elevate themselves to higher privilege and can read, modify and/or write new data. To gain authenticated sessions of other users, the attacker must invest considerable time and effort. This vulnerability has a high impact on the confidentiality and integrity of the application with no effect on the availability of the application. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20015"}, {"timestamp": "2025-03-11T03:30:50Z", "date_only": false, "value": "2025-03-11T03:30:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3FJR-H35G-VFC9", "record": "GHSA-3FJR-H35G-VFC9", "field": "published"}, {"timestamp": "2025-03-11T03:30:50Z", "date_only": false, "value": "2025-03-11T03:30:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3FJR-H35G-VFC9", "record": "GHSA-3FJR-H35G-VFC9", "field": "modified"}, {"timestamp": "2025-03-11T11:40:17.201Z", "date_only": false, "value": "2025-03-11T11:40:17.201+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0521", "record": "WID-SEC-W-2025-0521", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-11T12:20:06.258Z", "date_only": false, "value": "2025-03-11T12:20:06.258896Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0076", "record": "NCSC-2025-0076", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-11T12:20:06.258Z", "date_only": false, "value": "2025-03-11T12:20:06.258896Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0076", "record": "NCSC-2025-0076", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-03-11T12:20:06.258Z", "date_only": false, "value": "2025-03-11T12:20:06.258896Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0076", "record": "NCSC-2025-0076", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-12T04:00:43.583Z", "date_only": false, "value": "2025-03-12T04:00:43.583518Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-26658", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-12T04:00:43.583Z", "date_only": false, "value": "2025-03-12T04:00:43.583518Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-26658", "record": "FKIE_CVE-2025-26658", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-02-26T19:09:43.294Z", "date_only": false, "value": "2026-02-26T19:09:43.294Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-26658", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:43.294Z", "date_only": false, "value": "2026-02-26T19:09:43.294Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-26658", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:02:13.220Z", "date_only": false, "value": "2026-06-17T09:02:13.220", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-26658", "record": "FKIE_CVE-2025-26658", "field": "lastModified"}]}
