{"metadata": {"vulnerability": "cve-2025-26654", "count": 35, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 25}}, "data": [{"timestamp": "2025-02-12T21:05:31.735Z", "date_only": false, "value": "2025-02-12T21:05:31.735Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-26654", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-07T22:00:00Z", "date_only": false, "value": "2025-04-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-07T22:00:00Z", "date_only": false, "value": "2025-04-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-07T22:00:00Z", "date_only": false, "value": "2025-04-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-08T07:13:04.452Z", "date_only": false, "value": "2025-04-08T07:13:04.452Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-26654", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-08T07:13:04.452Z", "date_only": false, "value": "2025-04-08T07:13:04.452Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "cve-2025-26654", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-08T07:46:37Z", "date_only": false, "value": "2025-04-08T07:46:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10871", "record": "CVE-2025-26654", "field": "creation_timestamp", "uuid": "e7d94c61-acd1-482c-be27-24774535c7d8", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-26654\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a redirect from port 80 to 443 (HTTPS). As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request before the redirect may be impacted if the client is configured to use HTTP and sends confidential data on the first request before the redirect.\n\ud83d\udccf Published: 2025-04-08T07:13:04.452Z\n\ud83d\udccf Modified: 2025-04-08T07:13:04.452Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/3543274\n2. https://url.sap/sapsecuritypatchday", "url": "https://t.me/DarkWebInformer_CVEAlerts/10871"}, {"timestamp": "2025-04-08T08:15:15Z", "date_only": false, "value": "2025-04-08T08:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GJ2R-XJ7G-VP59", "record": "GHSA-GJ2R-XJ7G-VP59", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-08T08:15:15.903Z", "date_only": false, "value": "2025-04-08T08:15:15.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-26654", "record": "FKIE_CVE-2025-26654", "field": "published"}, {"timestamp": "2025-04-08T09:17:07.154Z", "date_only": false, "value": "2025-04-08T09:17:07.154234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5cjxzha2g", "record": "CVE-2025-26654", "field": "creation_timestamp", "uuid": "17daeceb-5a85-47fd-8fdc-ed93c877a236", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5cjxzha2g"}, {"timestamp": "2025-04-08T09:31:10Z", "date_only": false, "value": "2025-04-08T09:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GJ2R-XJ7G-VP59", "record": "GHSA-GJ2R-XJ7G-VP59", "field": "published"}, {"timestamp": "2025-04-08T09:31:10Z", "date_only": false, "value": "2025-04-08T09:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GJ2R-XJ7G-VP59", "record": "GHSA-GJ2R-XJ7G-VP59", "field": "modified"}, {"timestamp": "2025-04-08T11:29:21Z", "date_only": false, "value": "2025-04-08T11:29:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22432", "record": "CVE-2025-26654", "field": "creation_timestamp", "uuid": "f6c709bc-7ebc-4ba2-828b-a6018c51dbc8", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-26654 - SAP Commerce Cloud HTTP to HTTPS Redirect Insecure Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-26654 \nPublished : April 8, 2025, 8:15 a.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a redirect from port 80 to 443 (HTTPS). As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request before the redirect may be impacted if the client is configured to use HTTP and sends confidential data on the first request before the redirect. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22432"}, {"timestamp": "2025-04-09T04:00:46.359Z", "date_only": false, "value": "2025-04-09T04:00:46.359262Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-26654", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-09T04:00:46.359Z", "date_only": false, "value": "2025-04-09T04:00:46.359262Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-26654", "record": "FKIE_CVE-2025-26654", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-09T09:12:05.705Z", "date_only": false, "value": "2025-04-09T09:12:05.705017Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-09T09:12:05.705Z", "date_only": false, "value": "2025-04-09T09:12:05.705017Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-14T00:00:00Z", "date_only": true, "value": "2025-04-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-07505", "record": "CNVD-2025-07505", "field": "submitTime"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": true, "value": "2025-04-15", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-07505", "record": "CNVD-2025-07505", "field": "openTime"}, {"timestamp": "2025-04-24T22:00:00Z", "date_only": false, "value": "2025-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-24T22:00:00Z", "date_only": false, "value": "2025-04-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2025-04-24T22:00:00Z", "date_only": false, "value": "2025-04-24T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "last_revision_date"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0285", "record": "CERTFR-2025-AVI-0285", "field": "revisions.1.revision_date"}, {"timestamp": "2025-04-25T09:49:22.319Z", "date_only": false, "value": "2025-04-25T09:49:22.319+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0719", "record": "WID-SEC-W-2025-0719", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-25T12:10:29.929Z", "date_only": false, "value": "2025-04-25T12:10:29.929217Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-28T09:35:57.213Z", "date_only": false, "value": "2025-04-28T09:35:57.213875Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-04-30T13:12:27.070Z", "date_only": false, "value": "2025-04-30T13:12:27.070565Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-04-30T13:12:27.070Z", "date_only": false, "value": "2025-04-30T13:12:27.070565Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0119", "record": "NCSC-2025-0119", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-26T18:28:43.731Z", "date_only": false, "value": "2026-02-26T18:28:43.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-26654", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:43.731Z", "date_only": false, "value": "2026-02-26T18:28:43.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-26654", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:02:12.810Z", "date_only": false, "value": "2026-06-17T09:02:12.810", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-26654", "record": "FKIE_CVE-2025-26654", "field": "lastModified"}]}