{"metadata": {"vulnerability": "CVE-2026-21891", "count": 61, "kinds": {"milestone": 3, "sighting": 41, "kev": 11, "other": 6}}, "data": [{"timestamp": "2026-01-05T17:24:36.929Z", "date_only": false, "value": "2026-01-05T17:24:36.929Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-21891", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-08T14:00:14.578Z", "date_only": false, "value": "2026-01-08T14:00:14.578Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21891", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-08T14:00:14.578Z", "date_only": false, "value": "2026-01-08T14:00:14.578Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-21891", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-08T14:15:57.403Z", "date_only": false, "value": "2026-01-08T14:15:57.403", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21891", "record": "FKIE_CVE-2026-21891", "field": "published"}, {"timestamp": "2026-01-08T14:52:27.926Z", "date_only": false, "value": "2026-01-08T14:52:27.926997Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21891", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-08T14:52:27.926Z", "date_only": false, "value": "2026-01-08T14:52:27.926997Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21891", "record": "FKIE_CVE-2026-21891", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-08T15:00:51.842Z", "date_only": false, "value": "2026-01-08T15:00:51.842607Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwaqeztdf2z", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "7763641a-455b-4065-9ceb-874a50e3c80b", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwaqeztdf2z"}, {"timestamp": "2026-01-08T15:01:23.476Z", "date_only": false, "value": "2026-01-08T15:01:23.476426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbward5lkm2b", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "d40b0f80-f025-41d3-9e21-8a7d0756de09", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbward5lkm2b"}, {"timestamp": "2026-01-08T15:03:50Z", "date_only": false, "value": "2026-01-08T15:03:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uxxdzZqKy2gVHqKwUzSTJZodHF1E_0u6px0vr0T-scLHYls", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "975e257d-8f79-4506-9565-de4ed13701f6"}, {"timestamp": "2026-01-08T15:04:15Z", "date_only": false, "value": "2026-01-08T15:04:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yKq4JZ_i7DqLkj1C3AmJNJ8CdN45JKlyrqrV14cu0DbuA70", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "65637c28-01c6-4a69-90a0-6268b70fc866"}, {"timestamp": "2026-01-08T15:51:11.602Z", "date_only": false, "value": "2026-01-08T15:51:11.602870Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwdkeksqm2q", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "f2ff9309-cd6b-4fcd-a72c-5dae4da55db9", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwdkeksqm2q"}, {"timestamp": "2026-01-08T15:55:23.245Z", "date_only": false, "value": "2026-01-08T15:55:23.245Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-21891", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-08T15:55:23.245Z", "date_only": false, "value": "2026-01-08T15:55:23.245Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21891", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-12T08:39:05Z", "date_only": false, "value": "2026-02-12T08:39:05.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-21891.yaml", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "0a97707d-3e73-46a0-b469-e5c0092c72bf", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-21891.yaml"}, {"timestamp": "2026-02-13T21:03:12.431Z", "date_only": false, "value": "2026-02-13T21:03:12.431242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3merfr6zfi52c", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "d1b8a277-60c2-40e6-8c56-fb7649668912", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3merfr6zfi52c"}, {"timestamp": "2026-03-07T00:11:18Z", "date_only": false, "value": "2026-03-07T00:11:18+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-21891", "field": "timestamps.asserted_at", "uuid": "d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-07T00:11:18Z", "date_only": false, "value": "2026-03-07T00:11:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-21891", "field": "timestamps.first_seen_at", "uuid": "d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "c15b17e6-c283-44e0-a45a-fba6db8db2fa"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "fa964619-e69e-4ad4-b245-0083632704be"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-21891", "field": "timestamps.asserted_at", "uuid": "38a7056e-04d0-4150-90e5-fd9dad1e5e76", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-21891", "field": "evidence.0.details.added_date", "uuid": "38a7056e-04d0-4150-90e5-fd9dad1e5e76", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "3b9c889d-8f05-4e61-98b0-ae28b389f8ef"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-21891", "field": "timestamps.first_seen_at", "uuid": "38a7056e-04d0-4150-90e5-fd9dad1e5e76", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "3541ac61-c5d2-498a-9ad1-b58a026bab03"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-21891", "field": "status.status_updated_at", "uuid": "38a7056e-04d0-4150-90e5-fd9dad1e5e76", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-12T00:00:00Z", "date_only": false, "value": "2026-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "95ca3ec9-6dd8-4df1-831b-a0a5180bcbc0"}, {"timestamp": "2026-04-12T00:00:00Z", "date_only": false, "value": "2026-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-12)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "e1bf6437-178c-49eb-a04a-92606c4037a4"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "9c32a7d7-b1e8-473c-8d41-49f6e61353fd"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-23)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "aa1ded71-ba90-4798-a88a-ae6090f96cab"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "735fb675-e5f6-4a11-a0ea-916fd38bec8f"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "df11bd84-ed57-450e-8a17-388bdd9791a8"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "f47ed2da-62f7-4a92-a394-79567060862f"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "88bcc708-5274-4496-b487-5f118dba8d8f"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-01)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "8c6f4a78-4838-43ac-87ec-aa618213850b"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "459c26b8-26bb-44b0-ae94-35bbd9d76b23"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "c24be0bb-64f3-474e-939d-0416b620a206"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-04)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "9bb0822c-6bbf-4eed-b6f3-cdd9ff6b8da1"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "6c4d555b-5e34-4514-b721-a1dd7eae49fa"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "1eec18b4-000b-45fe-adad-d7dc2bf75c01"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-07)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "d94fd023-8f50-40fb-b858-10a6e1384320"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-08)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "b7561b58-0a1a-41a6-9b97-7dc85ac90b00"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "d3ec47dd-9ac2-4a40-868c-c60862b82019"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "78e886ac-be2e-410a-a7e7-6df882349f8d"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "30a08f6b-d2d1-4edc-874a-e8ea8733d441"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "95e08e95-b013-4993-839e-c3eb92542845"}, {"timestamp": "2026-06-07T00:00:00Z", "date_only": false, "value": "2026-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "b7b1b012-f634-4c05-a4a9-c34ced1530ba"}, {"timestamp": "2026-06-16T00:00:00Z", "date_only": false, "value": "2026-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "9b068b5f-6553-4f5f-89ee-02aa82bde00e"}, {"timestamp": "2026-06-17T10:19:05.990Z", "date_only": false, "value": "2026-06-17T10:19:05.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21891", "record": "FKIE_CVE-2026-21891", "field": "lastModified"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "d865783f-69e5-40fc-8bc3-e11a92685e90"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-21891", "field": "timestamps.recorded_at", "uuid": "38a7056e-04d0-4150-90e5-fd9dad1e5e76", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:31.032Z", "date_only": false, "value": "2026-06-19T12:42:31.032767Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/38a7056e-04d0-4150-90e5-fd9dad1e5e76", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "7797b00f-6aad-4b3d-b000-47e1b6eb9d65", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/38a7056e-04d0-4150-90e5-fd9dad1e5e76"}, {"timestamp": "2026-06-19T12:45:35.746Z", "date_only": false, "value": "2026-06-19T12:45:35.746746Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c25ba025-cf36-49ff-9efb-78a52843383c", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "444a4a5c-119c-42fa-8b5a-4688efbc4177", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c25ba025-cf36-49ff-9efb-78a52843383c"}, {"timestamp": "2026-06-23T14:03:04.989Z", "date_only": false, "value": "2026-06-23T14:03:04.989892Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1cc8595d-14a3-43dd-83d8-26dca2a4abdc", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "65130c95-f480-4f0a-9753-8714f6202e11", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1cc8595d-14a3-43dd-83d8-26dca2a4abdc"}, {"timestamp": "2026-06-30T09:23:37.456Z", "date_only": false, "value": "2026-06-30T09:23:37.456677Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/030bef2d-8546-4246-bf9f-b9168c1627eb", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "9b2c7a4d-0601-45a4-b344-f28497f3fc5e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/030bef2d-8546-4246-bf9f-b9168c1627eb"}, {"timestamp": "2026-07-01T05:53:59.727Z", "date_only": false, "value": "2026-07-01T05:53:59.727103Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "c851fc68-9de6-416d-a8de-2c95b06d18cd", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab"}, {"timestamp": "2026-08-30T10:00:07.299Z", "date_only": false, "value": "2026-08-30T10:00:07.299324Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "862749e4-ba7f-4d1c-a12e-2919070bdfc1"}, {"timestamp": "2026-08-30T10:15:11.287Z", "date_only": false, "value": "2026-08-30T10:15:11.287293Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "record": "CVE-2026-21891", "field": "creation_timestamp", "uuid": "da2eac7c-00a3-4a12-9dde-52886f135341"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-21891", "field": "timestamps.last_seen_at", "uuid": "d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-21891", "field": "evidence.0.details.observation_date", "uuid": "d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-21891", "field": "status.status_updated_at", "uuid": "d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T01:00:01Z", "date_only": false, "value": "2026-11-03T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-21891", "field": "timestamps.recorded_at", "uuid": "d72e98cc-9fe2-4ae1-bc77-e1f38307f3ab", "status": {"status_reason": "confirmed", "exploited": true}}]}