{"metadata": {"vulnerability": "cve-2025-8426", "count": 18, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-07-31T03:00:00Z", "date_only": false, "value": "2025-07-31T03:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-733/", "record": "CVE-2025-8426", "field": "creation_timestamp", "uuid": "c3b7a283-6914-48cb-b65e-af12c39fa6a5", "url": "http://www.zerodayinitiative.com/advisories/ZDI-25-733/"}, {"timestamp": "2025-07-31T17:08:28.669Z", "date_only": false, "value": "2025-07-31T17:08:28.669Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-8426", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-31T17:08:28.756Z", "date_only": false, "value": "2025-07-31T17:08:28.756Z", "kind": "other", "label": "Date Assigned", "source": "cvelistv5 / zdi", "record": "cve-2025-8426", "field": "containers.cna.dateAssigned"}, {"timestamp": "2025-07-31T17:12:43.708Z", "date_only": false, "value": "2025-07-31T17:12:43.708Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "cve-2025-8426", "field": "containers.cna.datePublic"}, {"timestamp": "2025-07-31T17:57:54.748Z", "date_only": false, "value": "2025-07-31T17:57:54.748Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-8426", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-07-31T17:57:54.748Z", "date_only": false, "value": "2025-07-31T17:57:54.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / zdi", "record": "cve-2025-8426", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-31T18:15:44Z", "date_only": false, "value": "2025-07-31T18:15:44Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JGFH-9R2W-FCRH", "record": "GHSA-JGFH-9R2W-FCRH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-07-31T18:15:44.030Z", "date_only": false, "value": "2025-07-31T18:15:44.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8426", "record": "FKIE_CVE-2025-8426", "field": "published"}, {"timestamp": "2025-07-31T18:25:48.378Z", "date_only": false, "value": "2025-07-31T18:25:48.378788Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-8426", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-07-31T18:25:48.378Z", "date_only": false, "value": "2025-07-31T18:25:48.378788Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8426", "record": "FKIE_CVE-2025-8426", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-07-31T18:26:02.364Z", "date_only": false, "value": "2025-07-31T18:26:02.364Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-8426", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-31T18:26:02.364Z", "date_only": false, "value": "2025-07-31T18:26:02.364Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-8426", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-31T18:32:04Z", "date_only": false, "value": "2025-07-31T18:32:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JGFH-9R2W-FCRH", "record": "GHSA-JGFH-9R2W-FCRH", "field": "published"}, {"timestamp": "2025-07-31T18:32:04Z", "date_only": false, "value": "2025-07-31T18:32:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JGFH-9R2W-FCRH", "record": "GHSA-JGFH-9R2W-FCRH", "field": "modified"}, {"timestamp": "2025-08-01T01:31:28.130Z", "date_only": false, "value": "2025-08-01T01:31:28.130760Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvcivqswhs2t", "record": "cve-2025-8426", "field": "creation_timestamp", "uuid": "cbaebc87-22c1-48b4-8dec-ca9015221416", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lvcivqswhs2t"}, {"timestamp": "2025-08-10T17:27:27Z", "date_only": false, "value": "2025-08-10T17:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1127", "record": "CVE-2025-8426", "field": "creation_timestamp", "uuid": "d432f8a5-9fa4-4c24-b558-ab792e3fceea", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "url": "https://t.me/bhhub/1127"}, {"timestamp": "2025-08-10T17:27:27Z", "date_only": false, "value": "2025-08-10T17:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/866", "record": "CVE-2025-8426", "field": "creation_timestamp", "uuid": "3bb26e2e-17f8-43ce-8f5c-70508365de61", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "url": "https://t.me/bhhub/866"}, {"timestamp": "2026-06-17T10:06:57.807Z", "date_only": false, "value": "2026-06-17T10:06:57.807", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8426", "record": "FKIE_CVE-2025-8426", "field": "lastModified"}]}