{"metadata": {"vulnerability": "cve-2021-25296", "count": 49, "kinds": {"milestone": 4, "sighting": 16, "kev": 11, "other": 18}}, "data": [{"timestamp": "2021-01-18T00:00:00Z", "date_only": false, "value": "2021-01-18T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-25296", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-15T00:00:00Z", "date_only": false, "value": "2021-02-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-25296", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-15T13:15:00Z", "date_only": false, "value": "2021-02-15T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8HGR-54HV-7PGC", "record": "GHSA-8HGR-54HV-7PGC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-15T13:15:00Z", "date_only": false, "value": "2021-02-15T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-25296", "record": "GSD-2021-25296", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-15T13:15:12.683Z", "date_only": false, "value": "2021-02-15T13:15:12.683", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25296", "record": "FKIE_CVE-2021-25296", "field": "published"}, {"timestamp": "2021-02-15T16:46:41Z", "date_only": false, "value": "2021-02-15T16:46:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/23591", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "3c34be93-c368-430e-be8a-19df4d848316", "content": "\u203c CVE-2021-25296 \u203c\n\nNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/23591"}, {"timestamp": "2021-02-19T00:00:00Z", "date_only": true, "value": "2021-02-19", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-11071", "record": "CNVD-2021-11071", "field": "submitTime"}, {"timestamp": "2021-02-20T00:00:00Z", "date_only": true, "value": "2021-02-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-11071", "record": "CNVD-2021-11071", "field": "openTime"}, {"timestamp": "2021-04-27T13:43:41Z", "date_only": false, "value": "2021-04-27T13:43:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5aa0b3ce-e9c4-4a1d-b95b-4e232c7929fc", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "40364540-0240-4daa-ace0-8d370da2e13e"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-25296", "field": "timestamps.asserted_at", "uuid": "3f41d26a-7398-4bdc-9b3c-7898abc2dc13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-25296", "field": "timestamps.asserted_at", "uuid": "e3d40f7b-6fe2-4010-8369-5cd27d0e7a44", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-25296", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-25296", "record": "GSD-2021-25296", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-25296", "field": "evidence.0.details.added_date", "uuid": "e3d40f7b-6fe2-4010-8369-5cd27d0e7a44", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-25296", "field": "evidence.0.details.date_added", "uuid": "3f41d26a-7398-4bdc-9b3c-7898abc2dc13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-25296", "field": "timestamps.first_seen_at", "uuid": "3f41d26a-7398-4bdc-9b3c-7898abc2dc13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-25296", "field": "timestamps.first_seen_at", "uuid": "e3d40f7b-6fe2-4010-8369-5cd27d0e7a44", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-25296", "field": "status.status_updated_at", "uuid": "3f41d26a-7398-4bdc-9b3c-7898abc2dc13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-25296", "field": "status.status_updated_at", "uuid": "e3d40f7b-6fe2-4010-8369-5cd27d0e7a44", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-25296", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-25296", "field": "evidence.0.details.due_date", "uuid": "3f41d26a-7398-4bdc-9b3c-7898abc2dc13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-25296", "record": "GSD-2021-25296", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:42:15Z", "date_only": false, "value": "2022-05-24T17:42:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8HGR-54HV-7PGC", "record": "GHSA-8HGR-54HV-7PGC", "field": "published"}, {"timestamp": "2023-02-07T21:54:12Z", "date_only": false, "value": "2023-02-07T21:54:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_configwizards_authenticated_rce.rb", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "7b8bf9b2-aa6f-4d81-a1b3-243dd7055ed7", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_configwizards_authenticated_rce.rb"}, {"timestamp": "2023-03-01T02:15:00Z", "date_only": false, "value": "2023-03-01T02:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-25296", "record": "GSD-2021-25296", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25296.yaml", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "6792a4be-b091-4ef7-acfa-508ffa33bf3d", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25296.yaml"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "505cb930-4e3d-4ff9-93c3-7d74c3d97d6c"}, {"timestamp": "2023-12-04T21:39:41Z", "date_only": false, "value": "2023-12-04T21:39:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1312", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "0a5322cc-f768-448e-9349-d0f8a14ea6e1", "content": "#ExploitObserverAlert\n\nCVE-2021-25296\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2021-25296. Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.\n\nFIRST-EPSS: 0.888680000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1312"}, {"timestamp": "2023-12-13T01:23:21.543Z", "date_only": false, "value": "2023-12-13T01:23:21.543413Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-25296", "record": "GSD-2021-25296", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-12-24T20:26:06.281Z", "date_only": false, "value": "2024-12-24T20:26:06.281470Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971222", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "cb1a1dce-10de-42d0-8aec-eaaa36070785", "url": "https://feedsin.space/feed/CISAKevBot/items/2971222"}, {"timestamp": "2025-02-04T20:17:13.052Z", "date_only": false, "value": "2025-02-04T20:17:13.052541Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-25296", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T20:17:13.052Z", "date_only": false, "value": "2025-02-04T20:17:13.052541Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25296", "record": "FKIE_CVE-2021-25296", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "0937e649-0c54-4437-94d4-2d3fd0950f14"}, {"timestamp": "2025-02-23T02:10:29Z", "date_only": false, "value": "2025-02-23T02:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "e8f51bca-f1ef-4377-8607-6846c26c8113"}, {"timestamp": "2025-02-23T04:10:35Z", "date_only": false, "value": "2025-02-23T04:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "721d8310-cbdb-4e87-8814-cf491d6bf053"}, {"timestamp": "2025-10-21T23:35:27.410Z", "date_only": false, "value": "2025-10-21T23:35:27.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-25296", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:02Z", "date_only": false, "value": "2025-10-22T00:32:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8HGR-54HV-7PGC", "record": "GHSA-8HGR-54HV-7PGC", "field": "modified"}, {"timestamp": "2026-02-02T12:28:27.137Z", "date_only": false, "value": "2026-02-02T12:28:27.137408Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a5d98dbc-297a-416b-9a3e-374430d954f8", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "603b1583-6b72-4f59-aadf-d2050013d0b5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a5d98dbc-297a-416b-9a3e-374430d954f8"}, {"timestamp": "2026-02-02T12:28:27.137Z", "date_only": false, "value": "2026-02-02T12:28:27.137408Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a5d98dbc-297a-416b-9a3e-374430d954f8", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "ae74e634-334e-43b7-83bd-dc833e5774f5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a5d98dbc-297a-416b-9a3e-374430d954f8"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-25296", "field": "timestamps.recorded_at", "uuid": "3f41d26a-7398-4bdc-9b3c-7898abc2dc13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T17:01:13Z", "date_only": false, "value": "2026-06-04T17:01:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5aa0b3ce-e9c4-4a1d-b95b-4e232c7929fc", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "df901883-9d64-4609-96f2-bc2fa125d827"}, {"timestamp": "2026-06-19T12:47:41.157Z", "date_only": false, "value": "2026-06-19T12:47:41.157673Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84a26713-c1a0-471d-bdb8-207e7ea7f64b", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "d37e5789-7763-42d1-b77d-65e7cf1a9a02", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84a26713-c1a0-471d-bdb8-207e7ea7f64b"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-25296", "field": "timestamps.recorded_at", "uuid": "e3d40f7b-6fe2-4010-8369-5cd27d0e7a44", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:28.163Z", "date_only": false, "value": "2026-06-23T11:13:28.163695Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e3d40f7b-6fe2-4010-8369-5cd27d0e7a44", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "0c01c016-d89e-47c4-995a-cbc786eeab01", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e3d40f7b-6fe2-4010-8369-5cd27d0e7a44"}, {"timestamp": "2026-06-23T14:04:54.266Z", "date_only": false, "value": "2026-06-23T14:04:54.266367Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/080f48f5-742a-4dbd-a005-2657ba2e0739", "record": "CVE-2021-25296", "field": "creation_timestamp", "uuid": "8c7ce712-d921-4d6f-9914-4d47aa4ed786", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/080f48f5-742a-4dbd-a005-2657ba2e0739"}, {"timestamp": "2026-07-05T00:12:47.455Z", "date_only": false, "value": "2026-07-05T00:12:47.455Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-25296", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:12:24.420Z", "date_only": false, "value": "2026-07-09T00:12:24.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-25296", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:12:24.420Z", "date_only": false, "value": "2026-07-09T00:12:24.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-25296", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T13:39:49.130Z", "date_only": false, "value": "2026-07-09T13:39:49.130", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25296", "record": "FKIE_CVE-2021-25296", "field": "lastModified"}]}