{"metadata": {"vulnerability": "CVE-2025-34041", "count": 109, "kinds": {"milestone": 4, "sighting": 86, "kev": 11, "other": 8}}, "data": [{"timestamp": "2025-04-15T19:15:22.547Z", "date_only": false, "value": "2025-04-15T19:15:22.547Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-24T01:46:56Z", "date_only": false, "value": "2025-06-24T01:46:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19278", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "b867415c-124e-47b3-8373-d69cc602557c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34041\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds.\n\ud83d\udccf Published: 2025-06-24T01:39:59.289Z\n\ud83d\udccf Modified: 2025-06-24T01:39:59.289Z\n\ud83d\udd17 References:\n1. https://www.sangfor.com/blog/cybersecurity/sangfor-endpoint-secure-remote-command-execution-vulnerability\n2. https://www.cnvd.org.cn/flaw/show/CNVD-2020-46552\n3. https://vulncheck.com/advisories/sangfor-edr-command-injection", "url": "https://t.me/DarkWebInformer_CVEAlerts/19278", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-24T02:15:22Z", "date_only": false, "value": "2025-06-24T02:15:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M56W-J7R7-P39F", "record": "GHSA-M56W-J7R7-P39F", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-06-24T02:15:22.820Z", "date_only": false, "value": "2025-06-24T02:15:22.820", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34041", "record": "FKIE_CVE-2025-34041", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-24T02:34:27Z", "date_only": false, "value": "2025-06-24T02:34:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "e4041a4e-37a0-4430-a04b-37202316127f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-24T15:36:44.991Z", "date_only": false, "value": "2025-06-24T15:36:44.991954Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-34041", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-24T15:36:44.991Z", "date_only": false, "value": "2025-06-24T15:36:44.991954Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34041", "record": "FKIE_CVE-2025-34041", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-06-24T15:37:55.934Z", "date_only": false, "value": "2025-06-24T15:37:55.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-34041", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-25T21:02:26.165Z", "date_only": false, "value": "2025-06-25T21:02:26.165489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dks2c2k", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "e4aac365-2463-4266-ae6d-3911f767a436", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dks2c2k"}, {"timestamp": "2025-06-26T21:31:04Z", "date_only": false, "value": "2025-06-26T21:31:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M56W-J7R7-P39F", "record": "GHSA-M56W-J7R7-P39F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-26T21:31:04Z", "date_only": false, "value": "2025-06-26T21:31:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M56W-J7R7-P39F", "record": "GHSA-M56W-J7R7-P39F", "field": "modified", "linked_record": true}, {"timestamp": "2025-06-30T18:57:38.775Z", "date_only": false, "value": "2025-06-30T18:57:38.775965Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114773842844379073", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "b0920d7f-bcbc-4b86-9cd1-4f9a09379711", "url": "https://infosec.exchange/users/cR0w/statuses/114773842844379073"}, {"timestamp": "2026-01-21T08:38:28Z", "date_only": false, "value": "2026-01-21T08:38:28+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-21T08:38:28Z", "date_only": false, "value": "2026-01-21T08:38:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "eec366e4-eb72-4742-849b-9b892fcb733a"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "85765262-8ca2-4453-b9b1-423a7268c4f5"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "18f86726-38a6-4c6c-870a-384262fcd072"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-25)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "be7eee4a-a17a-4af4-bc3d-9642caf30a9b"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "f03835c4-097c-4ee3-8867-20cf5b416b65"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "8bc2ad8d-4c64-4dae-beb2-a976bc0f9d5c"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "62eda78a-acee-4817-aa96-7f9d7998f329"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "4ab3bd36-4acf-4a81-8555-81f51b2bce0a"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "f6ff1682-dfac-45c5-bb88-a51461d648e8"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "5f53b3bc-3719-4a31-a5b1-7a8e356cb917"}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "4bbdef27-a2c4-4cca-9633-6a635addb69a"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "011f7dcc-59d9-4355-a86f-036a1e527a3f"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-05)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "000f764f-c2b4-4d4d-967e-46c0c3f2706c"}, {"timestamp": "2026-02-06T00:00:00Z", "date_only": false, "value": "2026-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-06)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "764d9a47-7a6f-43c5-9aac-25ba6962bed6"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "1c04aaf5-b6f9-417c-9933-90ae891e22cb"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-11)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "3b252750-4098-4116-90df-c27b67729798"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "c6dacd84-00df-447c-8bbb-b0fc4013eb83"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-13)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "49992858-27e7-4279-9d78-e2c94e2bda77"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "a205b5ad-682d-41c0-a8b3-c8a4a19d30c6"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-34041", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-34041", "field": "evidence.0.details.added_date", "uuid": "aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "5ebb0b9d-9aeb-421f-8c0a-884f541ad361", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-34041", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "53f05242-a650-4dce-9d9a-6eb4bf17ffdd"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-34041", "field": "status.status_updated_at", "uuid": "aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-17)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "89d0a0ad-6bd3-4f3e-87df-bb1be9f3aca5"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "457995be-d498-4250-b76c-fa9c1f079a50"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "80492f44-7659-4201-8302-0f028b20b615"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "57065273-b5c4-4a67-9b10-86495a2c4eff"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "e9f93288-f988-44d0-b3d6-13663cf27c9d"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "50f3eefb-2071-49c5-a386-befab5be93cb"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "8929a7d3-7223-4e49-bb5b-17f24cdc2896"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "8237aa67-a68d-4744-934f-01f6c9763c0d"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "1d0f19d3-2c1d-40e7-a140-7367db450aca"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "2455d190-7562-49bc-b638-5b0dfac402f1"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "f7aa763f-003f-4cdc-b433-35b8aadac1c7"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": false, "value": "2026-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "c501cdf7-a3f9-4724-831d-f054de6671b5"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "019b5fb1-91fb-43f2-b6e2-131521e08e88"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "37b8315a-c2f9-46c9-a237-d4e3e3d8b3b0"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "a38d45b9-b505-4a79-b48d-0a01bf9c22dd"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "9c3fe594-5f93-45f4-b623-2fa998a1b9cf"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-07)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "04a72488-5a7d-421f-abf3-7216b72c7621"}, {"timestamp": "2026-03-08T00:00:00Z", "date_only": false, "value": "2026-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "ec99e5fc-76ae-41f5-9ed2-f0e8639a7838"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "1e826006-99c4-4086-8a1d-1fd2b21d677e"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "d255fdc1-c0dc-417b-98d6-0a67f938f490"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "a9674778-48d9-4074-a093-abf8c0d9535d"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "f5752bde-0f0d-4574-a8be-ccb299c8dc08"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "98a6d513-c86f-406c-9aff-56ed6e192dc1"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "d68e6339-4298-42e4-80b4-f34d6798661c"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-15)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "5d04757d-673b-4d17-978c-77321ca5baea"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "ad2a6e6d-d1dc-4343-aef6-ae4722ff4881"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": false, "value": "2026-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "0f45feb3-b492-4230-9558-97a64c9f5bf9"}, {"timestamp": "2026-03-19T00:00:00Z", "date_only": false, "value": "2026-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-19)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "d9bccd81-de2b-4c32-bd2f-e491014be186"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "372044fb-00fa-40ec-8039-d641758c1684"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "7e201ec8-62f1-4be7-a52a-4a28a9ee61e6"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "2056f999-5190-47db-ab88-e23d56065f82"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-13)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "0e3afd60-c108-4a1d-86e3-2315d46da131"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "bc33d010-4b01-4f33-8583-84be24184cca"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "d88e3838-0c36-4721-a08f-cbc8353a7eec"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "f6a8ca95-ab26-4900-b4f5-fb2c1d44f0df"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "7681fbbf-9f71-40fd-832f-47d0843cb7f5"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-25)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "1f7ae898-aa4d-4120-a9fc-45e4a9c20d81"}, {"timestamp": "2026-04-26T00:00:00Z", "date_only": false, "value": "2026-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-26)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "bc831227-391a-489b-96e0-014a8d838868"}, {"timestamp": "2026-04-27T00:00:00Z", "date_only": false, "value": "2026-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-27)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "89452eb9-f338-4a5b-b28c-40e077aa6bed"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "89d99d59-4fd7-4aed-b9d1-6095fa3b6083"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-13)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "417f6d1a-733f-498b-9edf-d87d8c4f5fd7"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-15)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "6705f997-c6cb-4430-bb85-e17ddeeae3b8"}, {"timestamp": "2026-06-17T09:13:21.777Z", "date_only": false, "value": "2026-06-17T09:13:21.777", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34041", "record": "FKIE_CVE-2025-34041", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-34041", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:34.914Z", "date_only": false, "value": "2026-06-19T12:42:34.914060Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "27e4bddf-c9c2-4a66-b3e5-352ad50cad4d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/aeaf8cfe-647e-40f5-89e7-ee2ab34aee52", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T12:45:39.638Z", "date_only": false, "value": "2026-06-19T12:45:39.638147Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78918a8d-c69e-4b58-b482-e87290fd0035", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "82f4398e-b9ba-4c78-886c-a5eee6f30efa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78918a8d-c69e-4b58-b482-e87290fd0035", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:07.623Z", "date_only": false, "value": "2026-06-23T14:03:07.623900Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3dda6aa8-8470-432b-9b50-70ad57b51867", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "543af67e-e705-4fd4-b59f-8ca2787e8190", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3dda6aa8-8470-432b-9b50-70ad57b51867", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-27T10:00:08.175Z", "date_only": false, "value": "2026-06-27T10:00:08.175653Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "3294102f-ac10-4288-9efd-47de50b7aed7"}, {"timestamp": "2026-06-28T10:00:05.394Z", "date_only": false, "value": "2026-06-28T10:00:05.394888Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "fd885be4-41d1-4f2a-bc01-6d551ff30627"}, {"timestamp": "2026-06-30T09:22:57.527Z", "date_only": false, "value": "2026-06-30T09:22:57.527361Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cf8b4a42-13d4-48d7-9a45-f143d5d82079", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "6e55f178-473a-4242-b701-b35506c07488", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cf8b4a42-13d4-48d7-9a45-f143d5d82079", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T10:00:04.732Z", "date_only": false, "value": "2026-06-30T10:00:04.732990Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "9071a4d8-1a90-4edb-a817-a8b936efb378"}, {"timestamp": "2026-07-01T05:53:59.122Z", "date_only": false, "value": "2026-07-01T05:53:59.122219Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/25b7f7fb-3d95-4003-af4e-44ae77a382c7", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "2470dcbb-9d10-4dc3-b961-672df4059414", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/25b7f7fb-3d95-4003-af4e-44ae77a382c7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-05T10:00:14.052Z", "date_only": false, "value": "2026-07-05T10:00:14.052592Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "0d2f4ad9-6ef3-43f3-aefb-a264ecf9ad37"}, {"timestamp": "2026-07-14T22:25:39.973Z", "date_only": false, "value": "2026-07-14T22:25:39.973Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-14T22:25:39.973Z", "date_only": false, "value": "2026-07-14T22:25:39.973Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2025-34041", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-31T10:00:08.371Z", "date_only": false, "value": "2026-07-31T10:00:08.371976Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "39dd3f9a-74d0-44d8-aa3e-76c53272a6a3"}, {"timestamp": "2026-08-03T10:27:21.296Z", "date_only": false, "value": "2026-08-03T10:27:21.296975Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-02)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "13f21d2e-d992-44b4-891f-f4918fc874af"}, {"timestamp": "2026-08-16T10:00:06.467Z", "date_only": false, "value": "2026-08-16T10:00:06.467261Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-15)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "354b08f0-08fd-4435-a1bd-71ebe217d1d6"}, {"timestamp": "2026-08-18T10:00:07.569Z", "date_only": false, "value": "2026-08-18T10:00:07.569177Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-17)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "6da63d0a-c993-47c0-87d6-a7a43387d89d"}, {"timestamp": "2026-08-26T10:00:12.090Z", "date_only": false, "value": "2026-08-26T10:00:12.090751Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-25)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "62624a7e-e0fd-46d2-8c2f-c52b3209fc55"}, {"timestamp": "2026-08-27T10:00:39.390Z", "date_only": false, "value": "2026-08-27T10:00:39.390846Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-26)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "913c373d-8b26-4b88-bef1-1f0a68259441"}, {"timestamp": "2026-09-03T10:00:08.933Z", "date_only": false, "value": "2026-09-03T10:00:08.933872Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-02)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "b8e02b33-10c2-4b7b-b762-d9e6faac1e4e"}, {"timestamp": "2026-09-11T10:00:15.610Z", "date_only": false, "value": "2026-09-11T10:00:15.610668Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "3d4962e2-03fe-4561-8e5c-b921544c2371"}, {"timestamp": "2026-09-17T10:00:08.249Z", "date_only": false, "value": "2026-09-17T10:00:08.249736Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "680b02ff-978c-450a-8d86-9705514b0a0d"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-24)", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "0994fc3b-a4db-479c-b61c-d4b7682e545b"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.last_seen_at", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-34041", "field": "evidence.0.details.observation_date", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-34041", "field": "status.status_updated_at", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T01:00:01Z", "date_only": false, "value": "2026-11-03T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T10:08:54.707Z", "anchors": {"origin": {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-06-24T01:46:56Z", "date_only": false, "value": "2025-06-24T01:46:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19278", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "b867415c-124e-47b3-8373-d69cc602557c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34041\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds.\n\ud83d\udccf Published: 2025-06-24T01:39:59.289Z\n\ud83d\udccf Modified: 2025-06-24T01:39:59.289Z\n\ud83d\udd17 References:\n1. https://www.sangfor.com/blog/cybersecurity/sangfor-endpoint-secure-remote-command-execution-vulnerability\n2. https://www.cnvd.org.cn/flaw/show/CNVD-2020-46552\n3. https://vulncheck.com/advisories/sangfor-edr-command-injection", "url": "https://t.me/DarkWebInformer_CVEAlerts/19278", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-01-21T08:38:28Z", "date_only": false, "value": "2026-01-21T08:38:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 18255508.711, "hours": 5070.974641944445, "days": 211.2906100810185, "min_seconds": 18255508.711, "max_seconds": 18255508.711, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-01-21T08:38:28Z", "date_only": false, "value": "2026-01-21T08:38:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 18255508.711, "hours": 5070.974641944445, "days": 211.2906100810185, "min_seconds": 18255508.711, "max_seconds": 18255508.711, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-01-21T08:38:28Z", "date_only": false, "value": "2026-01-21T08:38:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 416.711, "hours": 0.11575305555555555, "days": 0.004823043981481482, "min_seconds": 416.711, "max_seconds": 416.711, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-06-24T01:46:56Z", "date_only": false, "value": "2025-06-24T01:46:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19278", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "b867415c-124e-47b3-8373-d69cc602557c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34041\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds.\n\ud83d\udccf Published: 2025-06-24T01:39:59.289Z\n\ud83d\udccf Modified: 2025-06-24T01:39:59.289Z\n\ud83d\udd17 References:\n1. https://www.sangfor.com/blog/cybersecurity/sangfor-endpoint-secure-remote-command-execution-vulnerability\n2. https://www.cnvd.org.cn/flaw/show/CNVD-2020-46552\n3. https://vulncheck.com/advisories/sangfor-edr-command-injection", "url": "https://t.me/DarkWebInformer_CVEAlerts/19278", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 44008135.418993, "hours": 12224.48206083139, "days": 509.35341920130793, "min_seconds": 44008135.418993, "max_seconds": 44008135.418993, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-24T01:39:59.289Z", "date_only": false, "value": "2025-06-24T01:39:59.289Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34041", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T10:08:54.707Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 25752626.707993, "hours": 7153.507418886945, "days": 298.0628091202894, "min_seconds": 25752626.707993, "max_seconds": 25752626.707993, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-21T08:38:28Z", "date_only": false, "value": "2026-01-21T08:38:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34041", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "25b7f7fb-3d95-4003-af4e-44ae77a382c7", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T10:08:54.707Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 44007718.707993, "hours": 12224.366307775834, "days": 509.34859615732637, "min_seconds": 44007718.707993, "max_seconds": 44007718.707993, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-24T01:46:56Z", "date_only": false, "value": "2025-06-24T01:46:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19278", "record": "CVE-2025-34041", "field": "creation_timestamp", "uuid": "b867415c-124e-47b3-8373-d69cc602557c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34041\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds.\n\ud83d\udccf Published: 2025-06-24T01:39:59.289Z\n\ud83d\udccf Modified: 2025-06-24T01:39:59.289Z\n\ud83d\udd17 References:\n1. https://www.sangfor.com/blog/cybersecurity/sangfor-endpoint-secure-remote-command-execution-vulnerability\n2. https://www.cnvd.org.cn/flaw/show/CNVD-2020-46552\n3. https://vulncheck.com/advisories/sangfor-edr-command-injection", "url": "https://t.me/DarkWebInformer_CVEAlerts/19278", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T10:08:54.707Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}