{"metadata": {"vulnerability": "CVE-2026-27944", "count": 54, "kinds": {"milestone": 5, "sighting": 37, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-02-25T03:11:36.690Z", "date_only": false, "value": "2026-02-25T03:11:36.690Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-27944", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-05T13:48:56Z", "date_only": false, "value": "2026-03-05T13:48:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "a0b6729b-6a8f-4caf-b1de-b44fe2595745", "url": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762"}, {"timestamp": "2026-03-05T16:28:13.988Z", "date_only": false, "value": "2026-03-05T16:28:13.988Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-27944", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-05T16:28:13.988Z", "date_only": false, "value": "2026-03-05T16:28:13.988Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-27944", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-05T17:58:43.163Z", "date_only": false, "value": "2026-03-05T17:58:43.163498Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116177864137232689", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "0f75c125-4f90-4804-af7d-33b30541cd3d", "url": "https://infosec.exchange/users/AAKL/statuses/116177864137232689"}, {"timestamp": "2026-03-05T18:26:41Z", "date_only": false, "value": "2026-03-05T18:26:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G9W5-QFFC-6762", "record": "GHSA-G9W5-QFFC-6762", "field": "published"}, {"timestamp": "2026-03-05T19:16:05Z", "date_only": false, "value": "2026-03-05T19:16:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G9W5-QFFC-6762", "record": "GHSA-G9W5-QFFC-6762", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-05T19:16:05.840Z", "date_only": false, "value": "2026-03-05T19:16:05.840", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-27944", "record": "FKIE_CVE-2026-27944", "field": "published"}, {"timestamp": "2026-03-05T19:19:04.970Z", "date_only": false, "value": "2026-03-05T19:19:04.970834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdjbobtnp2v", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "0488abd7-6530-4fe5-b5e0-88a5f15fe846", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdjbobtnp2v"}, {"timestamp": "2026-03-05T22:37:19Z", "date_only": false, "value": "2026-03-05T22:37:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G9W5-QFFC-6762", "record": "GHSA-G9W5-QFFC-6762", "field": "modified"}, {"timestamp": "2026-03-07T18:54:42.681Z", "date_only": false, "value": "2026-03-07T18:54:42.681053Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgiitwwjs32y", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "1d234b1b-83b2-434c-9811-063f56598fe4", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgiitwwjs32y"}, {"timestamp": "2026-03-08T19:39:10Z", "date_only": false, "value": "2026-03-08T19:39:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/246807", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "89d446a4-16d6-44ec-88b9-41adcfa177ba", "content": "Critical Nginx UI flaw CVE-2026-27944 exposes server backups\nhttps://ift.tt/Hs16oWR", "url": "https://t.me/ctinow/246807"}, {"timestamp": "2026-03-08T19:40:05Z", "date_only": false, "value": "2026-03-08T19:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cflLzz2nbCnoFIhspzECPpLbzqqKWaFF-EjXQk4krKaQhRRR", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "89853d6a-b015-4515-ac99-9420e5bd1a46"}, {"timestamp": "2026-03-09T14:22:35Z", "date_only": false, "value": "2026-03-09T14:22:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-in-nginx-ui", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "45525ff8-195f-4ec5-83c0-57495066cff3", "url": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-in-nginx-ui"}, {"timestamp": "2026-03-10T15:59:43Z", "date_only": false, "value": "2026-03-10T15:59:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-missing-authentication-vulnerability-nginx-ui-leads-full-system", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "c1bb3419-61ef-4c00-81af-461e3a1221d0", "url": "https://ccb.belgium.be/advisories/warning-critical-missing-authentication-vulnerability-nginx-ui-leads-full-system"}, {"timestamp": "2026-03-10T21:53:24Z", "date_only": false, "value": "2026-03-10T21:53:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/371", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "e0631175-b844-491f-b2f7-7d7bc1fdbf22", "content": "Hello, this is the best type and advanced PoC of CVE-2026-27944 that you ever can find on the Internet , we have developed a lot and it can byp4ss wafs and automatically download exp0sed backups, decrypt them and extract sensitive configuration data, including dbs creds, t0k3ns, and other useful information sometimes stored in backups or memory structures.\n\nFor any problems, or to purchase VIP access and features, please contact: @uncodeboss \n\nFofa: title=\"Nginx UI\" \n\nShodan: http.title:\"Nginx UI\"\n\nEnjoy;\n\nThis content is shared strictly for authorized testing, educational, and research purposes only. It is not intended for malicious use. All techniques, tools, or information provided are meant to demonstrate security concepts and to raise awareness in a controlled and legal environment. Please do not remove or flag this content, as it is shared responsibly for learning and academic purposes.", "url": "https://t.me/realcodeb0ss/371"}, {"timestamp": "2026-03-12T23:00:00Z", "date_only": false, "value": "2026-03-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0712", "record": "WID-SEC-W-2026-0712", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-12T23:00:00Z", "date_only": false, "value": "2026-03-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0712", "record": "WID-SEC-W-2026-0712", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-12T23:00:00Z", "date_only": false, "value": "2026-03-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0712", "record": "WID-SEC-W-2026-0712", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-03-12T23:00:00Z", "date_only": false, "value": "2026-03-12T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0712", "record": "WID-SEC-W-2026-0712", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-13T09:06:40.265Z", "date_only": false, "value": "2026-03-13T09:06:40.265+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0712", "record": "WID-SEC-W-2026-0712", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-011/", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "be79f879-9a8c-4029-992d-d7545befb9d1", "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-011/"}, {"timestamp": "2026-03-19T14:48:53.820Z", "date_only": false, "value": "2026-03-19T14:48:53.820842Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-27944", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-19T14:48:53.820Z", "date_only": false, "value": "2026-03-19T14:48:53.820842Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-27944", "record": "FKIE_CVE-2026-27944", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-19T14:49:05.173Z", "date_only": false, "value": "2026-03-19T14:49:05.173Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-27944", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-19T14:49:05.173Z", "date_only": false, "value": "2026-03-19T14:49:05.173Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-27944", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-19T21:03:01.692Z", "date_only": false, "value": "2026-03-19T21:03:01.692128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdlioo2h", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "f4f8d8f4-dda8-467f-b9c4-d5f7654a3dcb", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdlioo2h"}, {"timestamp": "2026-03-23T00:00:15.112Z", "date_only": false, "value": "2026-03-23T00:00:15.112056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhoqw3swrw2i", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "67f9acac-f51a-40e8-8109-152340a6e4d2", "url": "https://bsky.app/profile/cyberhub.blog/post/3mhoqw3swrw2i"}, {"timestamp": "2026-04-01T11:01:10.079Z", "date_only": false, "value": "2026-04-01T11:01:10.079846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0xdf.bsky.social/post/3migk26go5a25", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "e062eae8-0c7b-45fe-8832-96613955cf94", "url": "https://bsky.app/profile/0xdf.bsky.social/post/3migk26go5a25"}, {"timestamp": "2026-04-02T02:28:59.260Z", "date_only": false, "value": "2026-04-02T02:28:59.260389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mii5vb4mib2l", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "7f0447b5-089f-45fc-b88b-8ee12098695e", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mii5vb4mib2l"}, {"timestamp": "2026-04-03T03:00:07Z", "date_only": false, "value": "2026-04-03T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/os88SBnIxm2unq36kG5-IN3u61MzjKGV6jmqq5X9_izXolg", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "4530ea92-cdb6-4e73-8c3b-00c670f80aed"}, {"timestamp": "2026-05-06T23:00:05Z", "date_only": false, "value": "2026-05-06T23:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/83124", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "cc4c97a5-eee5-44ee-a212-7d2fa6aafcc5", "url": "https://t.me/GithubRedTeam/83124"}, {"timestamp": "2026-05-07T03:00:06Z", "date_only": false, "value": "2026-05-07T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/N1Jo8qZWaWReiL_t-N5l6uzcgIVKcO6O8PdoiYgN9aP0HPY", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "fb8c5400-4ecc-4a49-b8e0-588683cab768"}, {"timestamp": "2026-05-07T22:00:05Z", "date_only": false, "value": "2026-05-07T22:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/83265", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "1ebea9b5-6b8c-41f9-81f7-e5e9971b3253", "url": "https://t.me/GithubRedTeam/83265"}, {"timestamp": "2026-05-08T03:00:06Z", "date_only": false, "value": "2026-05-08T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/xvoYgOFnUf5jFw65_bW2FC7fcn6orx4l4LTjm0d68ZkOEzo", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "ab44217a-5e2c-41b4-ba05-93aed5e93c55"}, {"timestamp": "2026-06-17T10:27:57.110Z", "date_only": false, "value": "2026-06-17T10:27:57.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-27944", "record": "FKIE_CVE-2026-27944", "field": "lastModified"}, {"timestamp": "2026-07-13T22:00:12.271Z", "date_only": false, "value": "2026-07-13T22:00:12.271573Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92027", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "bc0c8211-84d4-4df2-ba44-283d2ee5b8dd", "url": "https://t.me/GithubRedTeam/92027"}, {"timestamp": "2026-07-14T00:00:20.480Z", "date_only": false, "value": "2026-07-14T00:00:20.480495Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92027", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "6f4dbad4-deac-41fd-b1c9-813025c44e81", "url": "https://t.me/GithubRedTeam/92027"}, {"timestamp": "2026-07-15T00:00:29.755Z", "date_only": false, "value": "2026-07-15T00:00:29.755325Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92027", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "20abe6a2-7932-4f87-8025-018cc1389b75", "url": "https://t.me/GithubRedTeam/92027"}, {"timestamp": "2026-07-16T12:00:06.283Z", "date_only": false, "value": "2026-07-16T12:00:06.283954Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93476", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "7191198d-617b-4a8e-a722-1058a1553849", "url": "https://t.me/GithubRedTeam/93476"}, {"timestamp": "2026-07-16T19:00:06.580Z", "date_only": false, "value": "2026-07-16T19:00:06.580565Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "ff71a9a7-c7be-4469-8eb5-e6deeaa32baf"}, {"timestamp": "2026-07-16T19:00:21.695Z", "date_only": false, "value": "2026-07-16T19:00:21.695868Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "a7b015a3-2d2d-4400-a9f1-a734fa4bd004"}, {"timestamp": "2026-07-17T00:00:11.385Z", "date_only": false, "value": "2026-07-17T00:00:11.385722Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "0c4bc3f7-9b5a-4861-8b69-e7a73b865ab1"}, {"timestamp": "2026-07-17T00:00:53.290Z", "date_only": false, "value": "2026-07-17T00:00:53.290521Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93476", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "b8d63e7c-2f2a-423d-9a68-bb6ae45a5741", "url": "https://t.me/GithubRedTeam/93476"}, {"timestamp": "2026-07-17T01:00:19.803Z", "date_only": false, "value": "2026-07-17T01:00:19.803003Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "9ddbdf63-c8f1-45e1-a1f3-d34879ad7585"}, {"timestamp": "2026-07-18T00:00:22.688Z", "date_only": false, "value": "2026-07-18T00:00:22.688319Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "1c11a65d-9ee3-49c2-ac21-1ba576a0887a"}, {"timestamp": "2026-07-22T15:19:15.145Z", "date_only": false, "value": "2026-07-22T15:19:15.145414Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/greynoise/statuses/116964298203115730", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "adfadeeb-5981-4c6a-84f1-882ccba4c12f", "url": "https://infosec.exchange/users/greynoise/statuses/116964298203115730"}, {"timestamp": "2026-07-22T15:22:04.868Z", "date_only": false, "value": "2026-07-22T15:22:04.868106Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mramou5dyyd2", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "1411201b-a4f5-48ee-be37-d85a02bd7279", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mramou5dyyd2"}, {"timestamp": "2026-08-04T13:00:19.436Z", "date_only": false, "value": "2026-08-04T13:00:19.436227Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/189", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "c8e1142d-f759-49e2-a32d-8fe9a3f7697d", "url": "https://t.me/cyberok_news/189"}, {"timestamp": "2026-08-05T00:00:36.175Z", "date_only": false, "value": "2026-08-05T00:00:36.175230Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/189", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "f000c665-9ac4-4d8e-bcd9-e3d27c64bcf0", "url": "https://t.me/cyberok_news/189"}, {"timestamp": "2026-08-06T00:00:57.229Z", "date_only": false, "value": "2026-08-06T00:00:57.229548Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberok_news/189", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "fa7e873f-970f-44d1-ba00-6827816120d2", "url": "https://t.me/cyberok_news/189"}, {"timestamp": "2026-09-01T13:00:05.946Z", "date_only": false, "value": "2026-09-01T13:00:05.946250Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/p3Nt3st3rsTAr/14", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "d1015947-8c47-490d-a99d-36d451a9ee1c", "url": "https://t.me/p3Nt3st3rsTAr/14"}, {"timestamp": "2026-09-13T15:00:05.264Z", "date_only": false, "value": "2026-09-13T15:00:05.264409Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "b1bd5b8c-af0a-4c95-b793-d46fec766352"}, {"timestamp": "2026-09-14T00:00:12.704Z", "date_only": false, "value": "2026-09-14T00:00:12.704214Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "record": "CVE-2026-27944", "field": "creation_timestamp", "uuid": "7f1e98d1-0154-4d2d-ad5a-06c8fe07addb"}]}