{"metadata": {"vulnerability": "CVE-2025-29635", "count": 88, "kinds": {"milestone": 4, "sighting": 49, "kev": 17, "other": 18}}, "data": [{"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-25T13:03:40.937Z", "date_only": false, "value": "2025-03-25T13:03:40.937Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-29635", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-25T13:23:59Z", "date_only": false, "value": "2025-03-25T13:23:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8651", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f2d5dee7-5424-4902-96a5-a8b9f22db1b5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T13:03:40.937Z\n\ud83d\udd17 References:\n1. https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/8651", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-25T14:15:29Z", "date_only": false, "value": "2025-03-25T14:15:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M9WC-3H85-PP63", "record": "GHSA-M9WC-3H85-PP63", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-25T14:15:29.043Z", "date_only": false, "value": "2025-03-25T14:15:29.043000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202503-3607", "record": "VAR-202503-3607", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2025-03-25T14:15:29.043Z", "date_only": false, "value": "2025-03-25T14:15:29.043", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29635", "record": "FKIE_CVE-2025-29635", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-25T15:31:29Z", "date_only": false, "value": "2025-03-25T15:31:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M9WC-3H85-PP63", "record": "GHSA-M9WC-3H85-PP63", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-25T16:49:44.557Z", "date_only": false, "value": "2025-03-25T16:49:44.557202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zfffq2j", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "755c784c-1921-42d5-a772-2c14e77160e1", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zfffq2j"}, {"timestamp": "2025-03-25T17:30:48Z", "date_only": false, "value": "2025-03-25T17:30:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4yRTt9dy-kSa9hw9IvAX8xqiMQA60h8go96Ck2HC1in5CKw", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "1b72d544-07ea-4849-83ca-e0663b402b8f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-25T17:49:20Z", "date_only": false, "value": "2025-03-25T17:49:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21109", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "275a78f8-a958-4684-89ed-9177688c020e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29635 - D-Link DIR-823X Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29635 \nPublished : March 25, 2025, 2:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21109"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": true, "value": "2025-03-27", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-11330", "record": "CNVD-2025-11330", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-04-03T17:35:51.163Z", "date_only": false, "value": "2025-04-03T17:35:51.163000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202503-3607", "record": "VAR-202503-3607", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202503-3607", "record": "VAR-202503-3607", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2025-04-23T06:20:00Z", "date_only": false, "value": "2025-04-23T06:20:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202503-3607", "record": "VAR-202503-3607", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": false, "value": "2025-06-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202503-3607", "record": "VAR-202503-3607", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": true, "value": "2025-06-04", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-11330", "record": "CNVD-2025-11330", "field": "openTime", "linked_record": true}, {"timestamp": "2025-06-05T23:16:50.388Z", "date_only": false, "value": "2025-06-05T23:16:50.388000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202503-3607", "record": "VAR-202503-3607", "field": "last_update_date", "linked_record": true}, {"timestamp": "2026-04-22T18:04:27Z", "date_only": false, "value": "2026-04-22T18:04:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249198", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "d687d5b1-4b71-493d-a835-6c6d547c2bee", "content": "Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers\nhttps://ift.tt/fD7Le5k", "url": "https://t.me/ctinow/249198", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-22T18:10:04Z", "date_only": false, "value": "2026-04-22T18:10:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/47EgD6HRFdjL8lSrN_oseytw7Re77bEJzRFd7eCT8rFsEpNY", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5e6e52ae-90b8-4791-90e4-138c353c4fe4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-22T18:29:34.718Z", "date_only": false, "value": "2026-04-22T18:29:34.718552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk44vdcb7624", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "9a814a15-b6bf-4152-a0fd-aa818c219403", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk44vdcb7624"}, {"timestamp": "2026-04-22T18:46:39.126Z", "date_only": false, "value": "2026-04-22T18:46:39.126116Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mk45tuketq27", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "66a86efb-8733-4ef9-aa04-72f4f8f2fca4", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mk45tuketq27"}, {"timestamp": "2026-04-22T20:05:05.716Z", "date_only": false, "value": "2026-04-22T20:05:05.716051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mk4ca4xuiz2l", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "44df19ed-96a1-4c2c-8dd3-fbdbdb2e3d1e", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mk4ca4xuiz2l"}, {"timestamp": "2026-04-22T20:16:21Z", "date_only": false, "value": "2026-04-22T20:16:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/24518", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5d710fb2-184a-49db-882c-9c7f98d99d86", "content": "\u200aNew Mirai campaign exploits RCE flaw in EoL D-Link routers\n\nA new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. [...]\n\nhttps://www.bleepingcomputer.com/news/security/new-mirai-campaign-exploits-rce-flaw-in-eol-d-link-routers/", "url": "https://t.me/BleepingComputer/24518", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-22T21:02:32.693Z", "date_only": false, "value": "2026-04-22T21:02:32.693052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgt2shf2g", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "98b86aad-7d49-4e95-93bc-446ae5a4375c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgt2shf2g"}, {"timestamp": "2026-04-22T21:45:18.915Z", "date_only": false, "value": "2026-04-22T21:45:18.915371Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mk4htdnv6d2x", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3a22fe84-1689-402a-b8df-1446d8bfa4a2", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mk4htdnv6d2x"}, {"timestamp": "2026-04-22T23:29:41.246Z", "date_only": false, "value": "2026-04-22T23:29:41.246831Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mk4nny6jky24", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4315c353-aca4-4ba2-95fa-ac98b928d641", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mk4nny6jky24"}, {"timestamp": "2026-04-23T00:00:31.119Z", "date_only": false, "value": "2026-04-23T00:00:31.119595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk4pf43qdo2u", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3b691cda-2225-4194-bb49-0a3487b2b2ab", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk4pf43qdo2u"}, {"timestamp": "2026-04-23T05:52:39.519Z", "date_only": false, "value": "2026-04-23T05:52:39.519657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mk5d2p7vvk2d", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "439ae2cf-12cf-4a40-9606-e776c90cb5b3", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3mk5d2p7vvk2d"}, {"timestamp": "2026-04-23T06:21:32.415Z", "date_only": false, "value": "2026-04-23T06:21:32.415969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mk5eogpfv22w", "record": "cve-2025-29635", "field": "creation_timestamp", "uuid": "373c6040-3583-4927-aa3c-5f11c77f806a", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mk5eogpfv22w"}, {"timestamp": "2026-04-23T11:01:06.714Z", "date_only": false, "value": "2026-04-23T11:01:06.714166Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116453675237302014", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "78acbf9a-533d-42ed-90b0-7601c99e326b", "url": "https://infosec.exchange/users/dragonjar/statuses/116453675237302014"}, {"timestamp": "2026-04-23T17:42:42.368Z", "date_only": false, "value": "2026-04-23T17:42:42.368574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6kqhf6ss2d", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f6126f43-a42f-48db-a096-2f92f14d0df3", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6kqhf6ss2d"}, {"timestamp": "2026-04-23T21:16:26.050Z", "date_only": false, "value": "2026-04-23T21:16:26.050470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6womi3ok2d", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f8c71c32-6a31-4779-b899-49bf6890e646", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6womi3ok2d"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": true, "value": "2026-04-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29635", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": true, "value": "2026-04-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "evidence.0.details.date_added", "uuid": "5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29635", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29635", "record": "FKIE_CVE-2025-29635", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "status.status_updated_at", "uuid": "5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29635", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2025-29635 added to CISA KEV"}, {"timestamp": "2026-04-24T02:43:01.928Z", "date_only": false, "value": "2026-04-24T02:43:01.928738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mk7iw463ccrs", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "63088775-ea56-4a0b-9531-b2cde874cc4b", "url": "https://bsky.app/profile/shiojiri.com/post/3mk7iw463ccrs"}, {"timestamp": "2026-04-24T08:04:03.063Z", "date_only": false, "value": "2026-04-24T08:04:03.063912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mka2u3nqukrs", "record": "cve-2025-29635", "field": "creation_timestamp", "uuid": "28053d07-cd55-4ab8-874b-96d504153df8", "url": "https://bsky.app/profile/shiojiri.com/post/3mka2u3nqukrs"}, {"timestamp": "2026-04-24T17:29:19.051Z", "date_only": false, "value": "2026-04-24T17:29:19.051142Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116460864002205112", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "591edccb-4156-4807-a4c3-1f8eb7b696e3", "url": "https://infosec.exchange/users/AAKL/statuses/116460864002205112"}, {"timestamp": "2026-04-24T17:50:15.178Z", "date_only": false, "value": "2026-04-24T17:50:15.178049Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116460946332281703", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4e15a064-bcab-4981-b780-2b6345cb2323", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116460946332281703"}, {"timestamp": "2026-04-24T17:50:43.073Z", "date_only": false, "value": "2026-04-24T17:50:43.073230Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mkb3npe6wg27", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "b6d31a2a-e54b-438c-a5c3-27fa95191611", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mkb3npe6wg27"}, {"timestamp": "2026-04-24T18:00:01.887Z", "date_only": false, "value": "2026-04-24T18:00:01.887431Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "7cbf7320-49cd-45c3-86e5-a15e885675ab", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-24T18:00:01.890Z", "date_only": false, "value": "2026-04-24T18:00:01.890596Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "b0bdb66b-9d0d-4990-8e5b-c42c7bce509b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-24T18:30:35Z", "date_only": false, "value": "2026-04-24T18:30:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M9WC-3H85-PP63", "record": "GHSA-M9WC-3H85-PP63", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-24T19:38:38.814Z", "date_only": false, "value": "2026-04-24T19:38:38.814244Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6334753", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "25535be0-d91a-4458-a9e3-95645b736b79", "url": "https://feedsin.space/feed/CISAKevBot/items/6334753"}, {"timestamp": "2026-04-25T03:55:37.481Z", "date_only": false, "value": "2026-04-25T03:55:37.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-25T03:55:37.481Z", "date_only": false, "value": "2026-04-25T03:55:37.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29635", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-25T08:28:28Z", "date_only": false, "value": "2026-04-25T08:28:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stone776/62caf070c1c841dbb439acee42f962a2", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5daf19c3-ae87-4268-9177-5eeeabccd4a0", "url": "https://gist.github.com/stone776/62caf070c1c841dbb439acee42f962a2"}, {"timestamp": "2026-04-25T21:03:11.947Z", "date_only": false, "value": "2026-04-25T21:03:11.947456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwuk7fub2g", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "51e289a4-62c5-4e54-b7f0-0c6ec57dd8c0", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwuk7fub2g"}, {"timestamp": "2026-04-27T01:02:53Z", "date_only": false, "value": "2026-04-27T01:02:53+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-27T01:02:53Z", "date_only": false, "value": "2026-04-27T01:02:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-27T20:40:28.288Z", "date_only": false, "value": "2026-04-27T20:40:28.288429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkiwjvrbw223", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "b8383176-82fa-4989-92ef-31aaba199cb2", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkiwjvrbw223"}, {"timestamp": "2026-04-28T23:34:46.745Z", "date_only": false, "value": "2026-04-28T23:34:46.745915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklqqlpops2w", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "786be539-928e-4455-b8de-606bd0252bef", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklqqlpops2w"}, {"timestamp": "2026-05-01T12:57:28.740Z", "date_only": false, "value": "2026-05-01T12:57:28.740903Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116499431109566275", "record": "cve-2025-29635", "field": "creation_timestamp", "uuid": "b3defa14-7500-459d-89b2-f2609cc443eb", "url": "https://infosec.exchange/users/threatcodex/statuses/116499431109566275"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": true, "value": "2026-05-08", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "evidence.0.details.due_date", "uuid": "5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43Z", "date_only": false, "value": "2026-06-01T13:23:43+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-29635", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43Z", "date_only": false, "value": "2026-06-01T13:23:43+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-29635", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43Z", "date_only": false, "value": "2026-06-01T13:23:43+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-29635", "field": "status.status_updated_at", "uuid": "19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43.718Z", "date_only": false, "value": "2026-06-01T13:23:43.718Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-29635", "field": "evidence.0.details.added_date", "uuid": "19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:05:33.707Z", "date_only": false, "value": "2026-06-17T09:05:33.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29635", "record": "FKIE_CVE-2025-29635", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-29635", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:05.654Z", "date_only": false, "value": "2026-06-19T12:42:05.654553Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "e3ac2ed6-da93-4a32-8884-dea03ae888af", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/19fe80f0-3d7e-48f4-bdf8-21bdd934e7f1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T12:45:12.655Z", "date_only": false, "value": "2026-06-19T12:45:12.655186Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59e7059b-ebb2-4fbb-b123-75d55b192356", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "2b814dae-5104-4e9b-b769-a20bd5cbf524", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59e7059b-ebb2-4fbb-b123-75d55b192356", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:38.846Z", "date_only": false, "value": "2026-06-23T14:03:38.846651Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53b6d067-d05f-4dc8-acde-9b58617a3674", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3aac5ce4-3eab-44c1-b349-7963fb858d4e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53b6d067-d05f-4dc8-acde-9b58617a3674", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:58.873Z", "date_only": false, "value": "2026-06-30T09:23:58.873969Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/34ec8177-b8c1-444c-955f-7234284ca382", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "2d7aec7f-92bd-42f7-bb7c-2a7319f4ae5a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/34ec8177-b8c1-444c-955f-7234284ca382", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T07:18:42.666Z", "date_only": false, "value": "2026-07-01T07:18:42.666810Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "9d286131-c2b9-47b1-a3bd-4cc67ac9c915", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-10T10:15:07.516Z", "date_only": false, "value": "2026-07-10T10:15:07.516842Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5ef682f5-4ef0-4cde-8ffe-6ba629f5b75b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-11T10:15:12.660Z", "date_only": false, "value": "2026-07-11T10:15:12.660827Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "29632c09-d8b0-4f25-b4a8-9e6be8eaeff3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-25T15:00:07.824Z", "date_only": false, "value": "2026-07-25T15:00:07.824329Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/670", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "58152677-7f9c-462d-9126-f7564bf69389", "url": "https://t.me/ZerodayAlert/670"}, {"timestamp": "2026-07-26T00:00:36.868Z", "date_only": false, "value": "2026-07-26T00:00:36.868548Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/670", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "27168f8e-08e5-40b7-b138-39d519799891", "url": "https://t.me/ZerodayAlert/670", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:03:14.223Z", "date_only": false, "value": "2026-07-29T12:03:14.223311Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2552", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3068ccc1-799d-429f-9276-8b8057e6986c", "url": "https://t.me/sysadm_in_up/2552"}, {"timestamp": "2026-07-30T00:03:00.139Z", "date_only": false, "value": "2026-07-30T00:03:00.139335Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2552", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4be43bfd-678a-4fbf-9ea4-a5c14f5e5d1c", "url": "https://t.me/sysadm_in_up/2552"}, {"timestamp": "2026-08-03T23:00:13.429Z", "date_only": false, "value": "2026-08-03T23:00:13.429104Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2552", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "75fe6da5-19e5-46f4-9025-91adc167023b", "url": "https://t.me/sysadm_in_up/2552", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T00:00:10.334Z", "date_only": false, "value": "2026-08-04T00:00:10.334019Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2552", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "23b56666-cd1b-4355-a5a4-b6f58e578460", "url": "https://t.me/sysadm_in_up/2552", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T10:00:16.762Z", "date_only": false, "value": "2026-08-14T10:00:16.762793Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "c7dd0a54-1a3c-442d-8c2b-658f8ad5c965"}, {"timestamp": "2026-08-18T19:00:03.848Z", "date_only": false, "value": "2026-08-18T19:00:03.848094Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42105", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "90a7a51f-2892-4c11-89f5-c4055bb9e9ce", "url": "https://t.me/VulnerabilityNews/42105"}, {"timestamp": "2026-08-18T19:00:03.965Z", "date_only": false, "value": "2026-08-18T19:00:03.965908Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42162", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4e080536-fa9a-464a-bd8c-be96c20b6cd5", "url": "https://t.me/VulnerabilityNews/42162"}, {"timestamp": "2026-08-19T00:00:10.137Z", "date_only": false, "value": "2026-08-19T00:00:10.137074Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42105", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "9c80d3ab-18af-4d96-84c2-9936c9cbbaf1", "url": "https://t.me/VulnerabilityNews/42105", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "5dc1488b-5c54-4d00-829d-88aaa1cfd57b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.last_seen_at", "uuid": "525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": true, "value": "2026-11-05", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-29635", "field": "evidence.0.details.observation_date", "uuid": "525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-29635", "field": "status.status_updated_at", "uuid": "525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-07T01:00:01Z", "date_only": false, "value": "2026-11-07T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "525cfe08-a745-4ec2-9c16-5b76c7dc0f41", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T20:27:04.182Z", "anchors": {"origin": {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-25T13:23:59Z", "date_only": false, "value": "2025-03-25T13:23:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8651", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f2d5dee7-5424-4902-96a5-a8b9f22db1b5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T13:03:40.937Z\n\ud83d\udd17 References:\n1. https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/8651", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-04-22T18:04:27Z", "date_only": false, "value": "2026-04-22T18:04:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249198", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "d687d5b1-4b71-493d-a835-6c6d547c2bee", "content": "Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers\nhttps://ift.tt/fD7Le5k", "url": "https://t.me/ctinow/249198", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 34020267.0, "hours": 9450.074166666667, "days": 393.7530902777778, "min_seconds": 33933867.0, "max_seconds": 34020267.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-22T18:04:27Z", "date_only": false, "value": "2026-04-22T18:04:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249198", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "d687d5b1-4b71-493d-a835-6c6d547c2bee", "content": "Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers\nhttps://ift.tt/fD7Le5k", "url": "https://t.me/ctinow/249198", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 34020267.0, "hours": 9450.074166666667, "days": 393.7530902777778, "min_seconds": 33933867.0, "max_seconds": 34020267.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-22T18:04:27Z", "date_only": false, "value": "2026-04-22T18:04:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249198", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "d687d5b1-4b71-493d-a835-6c6d547c2bee", "content": "Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers\nhttps://ift.tt/fD7Le5k", "url": "https://t.me/ctinow/249198", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 48239.0, "hours": 13.399722222222222, "days": 0.5583217592592593, "min_seconds": -38161.0, "max_seconds": 48239.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-25T13:23:59Z", "date_only": false, "value": "2025-03-25T13:23:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8651", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f2d5dee7-5424-4902-96a5-a8b9f22db1b5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T13:03:40.937Z\n\ud83d\udd17 References:\n1. https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/8651", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51827224.182715, "hours": 14396.451161865278, "days": 599.8521317443866, "min_seconds": 51740824.182715, "max_seconds": 51827224.182715, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T20:27:04.182Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 17806957.182715, "hours": 4946.3769951986105, "days": 206.09904146660878, "min_seconds": 17806957.182715, "max_seconds": 17806957.182715, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-22T18:04:27Z", "date_only": false, "value": "2026-04-22T18:04:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249198", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "d687d5b1-4b71-493d-a835-6c6d547c2bee", "content": "Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers\nhttps://ift.tt/fD7Le5k", "url": "https://t.me/ctinow/249198", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T20:27:04.182Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 51778985.182715, "hours": 14383.051439643055, "days": 599.2938099851273, "min_seconds": 51778985.182715, "max_seconds": 51778985.182715, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-25T13:23:59Z", "date_only": false, "value": "2025-03-25T13:23:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8651", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f2d5dee7-5424-4902-96a5-a8b9f22db1b5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T13:03:40.937Z\n\ud83d\udd17 References:\n1. https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/8651", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T20:27:04.182Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}