{"metadata": {"vulnerability": "cve-2022-26712", "count": 57, "kinds": {"milestone": 7, "sighting": 16, "kev": 0, "other": 34}}, "data": [{"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-26712", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-16T00:00:00Z", "date_only": false, "value": "2022-05-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "last_revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "last_revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "initial_release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "initial_release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-17T16:58:15Z", "date_only": false, "value": "2022-05-17T16:58:15", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-05-17T16:59:42Z", "date_only": false, "value": "2022-05-17T16:59:42", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-05-26T00:00:00Z", "date_only": false, "value": "2022-05-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-05-26T18:48:02Z", "date_only": false, "value": "2022-05-26T18:48:02.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-26712", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-26T18:48:02Z", "date_only": false, "value": "2022-05-26T18:48:02.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "cve-2022-26712", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-26T19:15:00Z", "date_only": false, "value": "2022-05-26T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5VRR-VCQG-9M85", "record": "GHSA-5VRR-VCQG-9M85", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-26T19:15:00Z", "date_only": false, "value": "2022-05-26T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26712", "record": "GSD-2022-26712", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-05-26T19:15:08.320Z", "date_only": false, "value": "2022-05-26T19:15:08.320000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_release_date.data.5.date"}, {"timestamp": "2022-05-26T19:15:08.320Z", "date_only": false, "value": "2022-05-26T19:15:08.320", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26712", "record": "FKIE_CVE-2022-26712", "field": "published"}, {"timestamp": "2022-05-27T00:00:35Z", "date_only": false, "value": "2022-05-27T00:00:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5VRR-VCQG-9M85", "record": "GHSA-5VRR-VCQG-9M85", "field": "published"}, {"timestamp": "2022-06-07T00:00:00Z", "date_only": false, "value": "2022-06-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-06-07T15:50:00Z", "date_only": false, "value": "2022-06-07T15:50Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26712", "record": "GSD-2022-26712", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-06-08T00:00:56Z", "date_only": false, "value": "2022-06-08T00:00:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5VRR-VCQG-9M85", "record": "GHSA-5VRR-VCQG-9M85", "field": "modified"}, {"timestamp": "2022-07-27T09:48:13Z", "date_only": false, "value": "2022-07-27T09:48:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/6395", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "23dc0e94-340d-452d-99b5-13b6c177af07", "content": "CVE-2022-26712: The POC for SIP-Bypass Is Even Tweetable\n\nhttps://jhftss.github.io/CVE-2022-26712-The-POC-For-SIP-Bypass-Is-Even-Tweetable/", "url": "https://t.me/thebugbountyhunter/6395"}, {"timestamp": "2022-07-31T14:52:30Z", "date_only": false, "value": "2022-07-31T14:52:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6501", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "cc658977-0e86-4bbd-8a31-45ef61d601c1", "content": "#exploit\n1. CVE-2022-26712:\nThe PoC for SIP-Bypass Is Even Tweetable\nhttps://jhftss.github.io/CVE-2022-26712-The-POC-For-SIP-Bypass-Is-Even-Tweetable\n\n2. CVE-2022-26138:\nConfluence Hardcoded Password PoC\nhttps://github.com/z92g/CVE-2022-26138", "url": "https://t.me/CyberSecurityTechnologies/6501"}, {"timestamp": "2022-08-01T15:43:03Z", "date_only": false, "value": "2022-08-01T15:43:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/K-NdsruMw1Fym1ldoCgIBSKfSnuSwSHmNQJK0ReNQEl6Hw", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "6f30ff5a-ba8c-4b40-bb61-6130a002bd96"}, {"timestamp": "2022-08-06T05:25:29Z", "date_only": false, "value": "2022-08-06T05:25:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/N7hpQcKSe76QNriYPxYm679LfZMbR6Yqtw8uC765a_b11A", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "08300c3c-d89e-4c00-b6af-8173b83dedce"}, {"timestamp": "2022-08-09T18:49:23Z", "date_only": false, "value": "2022-08-09T18:49:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/2162", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "fc3db421-1557-4a92-b4f0-797d32e4d018", "content": "CVE-2022-26712: The POC for SIP-Bypass Is Even Tweetable\nI found some new attack surfaces in the macOS PackageKit.framework, and successfully disclosed 15+ critical SIP-Bypass vulnerabilities. Apple has addressed 12 of them with CVE assigned so far. There are still some reports in the Apple\u2019s processing queue. All of them are interesting logic issues, and of course each has a successful exploit demonstration.\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a \n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/2162"}, {"timestamp": "2022-08-16T22:00:00Z", "date_only": false, "value": "2022-08-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-08-24T11:48:28Z", "date_only": false, "value": "2022-08-24T11:48:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/914", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "5c17dbde-6cf1-471f-bbc2-4b9ddf381543", "content": "Updates On Hackbyte Forum:-\n\n1. Erebus - Fast and customisable parameter based vulnerability scanner based on simple YAML Rules\n2. Zeratool - Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems\n3. CVE-2022-36946 linux kernel panic in netfilter_queue\n4. CVE-2022-32744: Critical Samba admin password reset flaw\n5. aif_ru Leak\n6. Exactis Company Leak\n7. paidleaf.co_68K Leak\n8. CVE-2022-26712: The POC for SIP-Bypass\n9. CVE-2022-26138: Confluence Hardcoded Password POC\n10. Blizzard-Jailbreak-9: Blizzard Jailbreak for iOS 9.0 - 9.3.6, 32-Bit\n11. Quasar: Remote Administration Tool for Windows\n12. pochta Leak\n13. COINPAYEX.LTD Data Leak\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffbAll Updates On :- https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "url": "https://t.me/crackcodes/914"}, {"timestamp": "2022-09-20T22:00:00Z", "date_only": false, "value": "2022-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-09-22T22:00:00Z", "date_only": false, "value": "2022-09-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-09-25T22:00:00Z", "date_only": false, "value": "2022-09-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-11-21T23:00:00Z", "date_only": false, "value": "2022-11-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2022-12-27T14:07:57Z", "date_only": false, "value": "2022-12-27T14:07:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1248", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "4b948526-ab43-4862-8f28-e60ea0d3a04a", "content": "\u041a\u043e\u043b\u043b\u0435\u043a\u0446\u0438\u044f Exploits - MacOS\n*\nCVE-2022-22583\nCVE-2022-22616\nCVE-2022-22639\nCVE-2022-26690\nCVE-2022-26712\nCVE-2022-26728\nCVE-2022-32786\nCVE-2022-32800\n*\ndownload\n\n#exploit #macOS", "url": "https://t.me/proxy_bar/1248"}, {"timestamp": "2022-12-28T11:03:01Z", "date_only": false, "value": "2022-12-28T11:03:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7439", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "b69b0779-ced0-44c0-8550-4d16889c0c1c", "content": "#exploit\n1. CVE-2022-26712:\nApple System Integrity Protection (SIP) Bypass\nhttps://jhftss.github.io/CVE-2022-26712-The-POC-For-SIP-Bypass-Is-Even-Tweetable\n\n2. Netcomm NF20MESH/NL1902 - Unauthenticated RCE\nhttps://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md", "url": "https://t.me/CyberSecurityTechnologies/7439"}, {"timestamp": "2022-12-28T17:20:01Z", "date_only": false, "value": "2022-12-28T17:20:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2024", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "62f94608-e0c8-4fed-a079-21e9972b939b", "content": "#exploit\n1. CVE-2022-26712:\nApple System Integrity Protection (SIP) Bypass\nhttps://jhftss.github.io/CVE-2022-26712-The-POC-For-SIP-Bypass-Is-Even-Tweetable\n\n2. Netcomm NF20MESH/NL1902 - Unauthenticated RCE\nhttps://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md", "url": "https://t.me/crackcodes/2024"}, {"timestamp": "2023-01-04T11:11:04Z", "date_only": false, "value": "2023-01-04T11:11:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aOf_rbDrwIUidyWTOY_j25ydnl1rugPysH4L_dx_8LcxgtM", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "15d4b5c9-8164-4d2d-9b1c-1dd1c78228e7"}, {"timestamp": "2023-01-04T14:18:09Z", "date_only": false, "value": "2023-01-04T14:18:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingshadow/2875", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "3e16864b-f09f-401d-bef6-e1d94776e57c", "content": "#exploit\n1. CVE-2022-26712:\nApple System Integrity Protection (SIP) Bypass\nhttps://jhftss.github.io/CVE-2022-26712-The-POC-For-SIP-Bypass-Is-Even-Tweetable\n\n2. Netcomm NF20MESH/NL1902 - Unauthenticated RCE\nhttps://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md", "url": "https://t.me/hackingshadow/2875"}, {"timestamp": "2023-01-29T13:21:42Z", "date_only": false, "value": "2023-01-29T13:21:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/y9riWSybSxM5iM9MBxLXE1DhDytPghMHh8g33kHWQzIo-7c", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "d8186d39-ae0d-4888-b2a2-7bf196396ecf"}, {"timestamp": "2023-02-04T11:10:12Z", "date_only": false, "value": "2023-02-04T11:10:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2514", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "91793896-5e1a-4a15-b1cc-61efcbfcb2b0", "content": "CVE-2022-22583 CVE-2022-22616 CVE-2022-22639 CVE-2022-26690 CVE-2022-26712 CVE-2022-26728 CVE-2022-32786 CVE-2022-32800\n\nhttps://github.com/jhftss/POC", "url": "https://t.me/crackcodes/2514"}, {"timestamp": "2023-02-04T17:02:30Z", "date_only": false, "value": "2023-02-04T17:02:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/m2MEtejkEp4yOpntKii6ucLVNNthGc7DTbm8HilSEZO0Ako", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "c6547003-15b0-44fe-abd6-931113ce0c72"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_release_date.data.1.date"}, {"timestamp": "2023-08-21T05:02:00Z", "date_only": false, "value": "2023-08-21T05:02:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-12-13T01:19:39.227Z", "date_only": false, "value": "2023-12-13T01:19:39.227056Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26712", "record": "GSD-2022-26712", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:11:44.500Z", "date_only": false, "value": "2024-08-03T05:11:44.500Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-26712", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:11:44.500Z", "date_only": false, "value": "2024-08-03T05:11:44.500Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-26712", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:33:27.405Z", "date_only": false, "value": "2024-08-15T17:33:27.405+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-21T06:54:22.020Z", "date_only": false, "value": "2024-11-21T06:54:22.020000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-11-23T21:08:36.543Z", "date_only": false, "value": "2024-11-23T21:08:36.543000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202205-1325", "record": "VAR-202205-1325", "field": "last_update_date"}, {"timestamp": "2026-06-17T04:35:40.583Z", "date_only": false, "value": "2026-06-17T04:35:40.583", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26712", "record": "FKIE_CVE-2022-26712", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:26.325Z", "date_only": false, "value": "2026-09-01T17:00:26.325908Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6038", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "7788b211-306c-4f44-ad3a-59abd8348a43", "url": "https://t.me/cissp/6038"}, {"timestamp": "2026-09-10T07:00:04.590Z", "date_only": false, "value": "2026-09-10T07:00:04.590525Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6038", "record": "CVE-2022-26712", "field": "creation_timestamp", "uuid": "3b7566a7-795a-487e-8d45-4af9e2d82d4c", "url": "https://t.me/cissp/6038"}]}