{"metadata": {"vulnerability": "cve-2026-5426", "count": 48, "kinds": {"milestone": 4, "sighting": 31, "kev": 5, "other": 8}}, "data": [{"timestamp": "2026-04-02T14:20:13.588Z", "date_only": false, "value": "2026-04-02T14:20:13.588Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-5426", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-16T15:18:46.224Z", "date_only": false, "value": "2026-04-16T15:18:46.224Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-5426", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-04-16T16:16:17Z", "date_only": false, "value": "2026-04-16T16:16:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G88C-8GFJ-6C98", "record": "GHSA-G88C-8GFJ-6C98", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-16T16:16:17.693Z", "date_only": false, "value": "2026-04-16T16:16:17.693", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5426", "record": "FKIE_CVE-2026-5426", "field": "published"}, {"timestamp": "2026-04-16T18:04:10.027Z", "date_only": false, "value": "2026-04-16T18:04:10.027758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjmymffdvg2t", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "30052e01-f494-4293-958e-ac9ad3722594", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjmymffdvg2t"}, {"timestamp": "2026-04-16T18:31:22Z", "date_only": false, "value": "2026-04-16T18:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G88C-8GFJ-6C98", "record": "GHSA-G88C-8GFJ-6C98", "field": "published"}, {"timestamp": "2026-04-17T00:00:41.190Z", "date_only": false, "value": "2026-04-17T00:00:41.190629Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116417104416675988", "record": "cve-2026-5426", "field": "creation_timestamp", "uuid": "e5637507-72e7-47af-a93c-3ecbae40d9f9", "url": "https://infosec.exchange/users/offseq/statuses/116417104416675988"}, {"timestamp": "2026-04-17T00:00:42.440Z", "date_only": false, "value": "2026-04-17T00:00:42.440333Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjnmlvw67525", "record": "cve-2026-5426", "field": "creation_timestamp", "uuid": "450096da-30e3-4df7-ba4c-e336423215a5", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mjnmlvw67525"}, {"timestamp": "2026-04-18T05:18:34Z", "date_only": false, "value": "2026-04-18T05:18:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "a6e44065-350b-4342-bfda-925d3257a475"}, {"timestamp": "2026-05-25T07:00:00Z", "date_only": false, "value": "2026-05-25T07:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-5426", "field": "timestamps.asserted_at", "uuid": "66c1e780-c52f-45be-934f-204367b04f1e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-25T07:00:00Z", "date_only": false, "value": "2026-05-25T07:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-5426", "field": "evidence.0.details.added_date", "uuid": "66c1e780-c52f-45be-934f-204367b04f1e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-25T07:00:00Z", "date_only": false, "value": "2026-05-25T07:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://cloud.google.com/blog/topics/threat-intelligence/knowledgedeliver-viewstate-deserialization-vulnerability", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "3ad6099f-d869-4bf8-9808-b447a1a3bf8f", "url": "https://cloud.google.com/blog/topics/threat-intelligence/knowledgedeliver-viewstate-deserialization-vulnerability"}, {"timestamp": "2026-05-25T07:00:00Z", "date_only": false, "value": "2026-05-25T07:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-5426", "field": "timestamps.first_seen_at", "uuid": "66c1e780-c52f-45be-934f-204367b04f1e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-25T07:00:00Z", "date_only": false, "value": "2026-05-25T07:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-5426", "field": "status.status_updated_at", "uuid": "66c1e780-c52f-45be-934f-204367b04f1e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-25T07:37:14.765Z", "date_only": false, "value": "2026-05-25T07:37:14.765437Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116633539838473469", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "3c9e3be4-7669-4e4a-adb1-5eebce0fddd6", "url": "https://swecyb.com/ap/users/116080658609901341/statuses/116633539838473469"}, {"timestamp": "2026-05-25T12:36:16.296Z", "date_only": false, "value": "2026-05-25T12:36:16.296851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmoijxbker2n", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "fc99a307-37b0-4f20-b01e-c0011341ba07", "url": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmoijxbker2n"}, {"timestamp": "2026-05-26T03:19:38Z", "date_only": false, "value": "2026-05-26T03:19:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.html", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "6344a9c8-2efa-439d-8f37-657492850374", "url": "https://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.html"}, {"timestamp": "2026-05-26T05:31:04Z", "date_only": false, "value": "2026-05-26T05:31:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/9078", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "db019d5e-8690-488f-8ba6-7e714586adf6", "content": "\ud83d\udea8 One shared key. Every deployment at risk.\n\nAttackers exploited CVE-2026-5426 in the KnowledgeDeliver LMS to gain unauthenticated RCE through hard-coded ASP-NET machineKeys, deploy the Godzilla (BLUEBEAM) web shell, and deliver Cobalt Strike Beacon on vulnerable internet-facing systems.\n\nRead \ud83e\udc12 https://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.html", "url": "https://t.me/thehackernews/9078"}, {"timestamp": "2026-05-26T06:10:38.589Z", "date_only": false, "value": "2026-05-26T06:10:38.589582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mmqdhd34xa2q", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "90b25872-a1b2-4e43-a791-025ebcfae9d5", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mmqdhd34xa2q"}, {"timestamp": "2026-05-26T06:36:04Z", "date_only": false, "value": "2026-05-26T06:36:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rDPiK1vGJg8wRnXGbqSk3bi_Vn49HLdYqID-Bg62JfX7ng", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "984d753b-ca50-49d8-9970-05f1ed864bd1"}, {"timestamp": "2026-05-26T07:02:46.855Z", "date_only": false, "value": "2026-05-26T07:02:46.855217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mmqgeka5yc2c", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "2c0784ab-6050-4ed6-9e94-c1a21703c811", "url": "https://bsky.app/profile/calimegai.bsky.social/post/3mmqgeka5yc2c"}, {"timestamp": "2026-05-26T07:21:36.556Z", "date_only": false, "value": "2026-05-26T07:21:36.556408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mmqhg7p55c2z", "record": "cve-2026-5426", "field": "creation_timestamp", "uuid": "681dc69e-a3cb-4cb4-b675-8e859246dbd1", "url": "https://bsky.app/profile/oxfemale.bsky.social/post/3mmqhg7p55c2z"}, {"timestamp": "2026-05-26T09:06:15.188Z", "date_only": false, "value": "2026-05-26T09:06:15.188461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mmqnbdggm72p", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "eb709cf7-7ad7-44ca-a015-b7852182fa71", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mmqnbdggm72p"}, {"timestamp": "2026-05-26T12:00:06.872Z", "date_only": false, "value": "2026-05-26T12:00:06.872142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmqwyadgzi2x", "record": "cve-2026-5426", "field": "creation_timestamp", "uuid": "23bb807c-e919-4f40-892a-f387aa28f671", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmqwyadgzi2x"}, {"timestamp": "2026-05-26T14:50:06Z", "date_only": false, "value": "2026-05-26T14:50:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8244", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "9c618aef-7edd-425b-bbf8-c6c5e05d1e18", "url": "https://t.me/true_secator/8244"}, {"timestamp": "2026-05-26T15:59:49.484Z", "date_only": false, "value": "2026-05-26T15:59:49.484719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmreekkxak2q", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "4814c8d5-368c-4c80-af11-1b4b018c27c3", "url": "https://bsky.app/profile/newstecnicas.com/post/3mmreekkxak2q"}, {"timestamp": "2026-05-26T17:08:59.810Z", "date_only": false, "value": "2026-05-26T17:08:59.810913Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-5426", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-05-26T17:08:59.810Z", "date_only": false, "value": "2026-05-26T17:08:59.810913Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5426", "record": "FKIE_CVE-2026-5426", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-26T18:48:16.722Z", "date_only": false, "value": "2026-05-26T18:48:16.722Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Mandiant", "record": "cve-2026-5426", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-26T21:31:37Z", "date_only": false, "value": "2026-05-26T21:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G88C-8GFJ-6C98", "record": "GHSA-G88C-8GFJ-6C98", "field": "modified"}, {"timestamp": "2026-05-26T22:00:27.686Z", "date_only": false, "value": "2026-05-26T22:00:27.686846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmryjq4to32s", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "6112ceae-6368-4b70-915a-a547c6b5b78f", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmryjq4to32s"}, {"timestamp": "2026-05-27T07:56:52.045Z", "date_only": false, "value": "2026-05-27T07:56:52.045931Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-486a-16a3-a903-786386626250", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "9f3a1b37-89ac-410f-9daf-14a0df049473", "url": "https://poliverso.org/objects/0477a01e-486a-16a3-a903-786386626250"}, {"timestamp": "2026-05-27T07:57:03.424Z", "date_only": false, "value": "2026-05-27T07:57:03.424559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmszuhdmsjq2", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "de1c8b31-7a9b-414e-a2a1-c47de03eaf5f", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmszuhdmsjq2"}, {"timestamp": "2026-05-27T10:34:06.319Z", "date_only": false, "value": "2026-05-27T10:34:06.319794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mmtcnajjkr24", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "46c0336c-5678-4faf-9289-c3a763c2be79", "url": "https://bsky.app/profile/nuke86.rfeed.it/post/3mmtcnajjkr24"}, {"timestamp": "2026-05-27T14:53:16.313Z", "date_only": false, "value": "2026-05-27T14:53:16.313Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-5426", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-27T14:53:16.313Z", "date_only": false, "value": "2026-05-27T14:53:16.313Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-5426", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-27T19:12:55.396Z", "date_only": false, "value": "2026-05-27T19:12:55.396158Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mmu7muiluxh2", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "021f9c9b-f2db-44bb-ba8e-1d26ee24f63a", "url": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mmu7muiluxh2"}, {"timestamp": "2026-05-27T21:12:27Z", "date_only": false, "value": "2026-05-27T21:12:27.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "d47dc552-4bdc-4f31-8b24-23e8a1ce21fa"}, {"timestamp": "2026-05-29T16:13:41.839Z", "date_only": false, "value": "2026-05-29T16:13:41.839400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmywkdlvkc27", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "49177872-221c-4d04-84fa-9190a4c57559", "url": "https://bsky.app/profile/newstecnicas.com/post/3mmywkdlvkc27"}, {"timestamp": "2026-05-29T23:30:05.279Z", "date_only": false, "value": "2026-05-29T23:30:05.279524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mmzowr45uv2z", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "c9043b24-aea6-4fa2-b5db-7ee7aedd69ca", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mmzowr45uv2z"}, {"timestamp": "2026-06-17T10:59:00.653Z", "date_only": false, "value": "2026-06-17T10:59:00.653", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5426", "record": "FKIE_CVE-2026-5426", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-5426", "field": "timestamps.recorded_at", "uuid": "66c1e780-c52f-45be-934f-204367b04f1e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:21.680Z", "date_only": false, "value": "2026-06-19T12:42:21.680163Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66c1e780-c52f-45be-934f-204367b04f1e", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "e6479836-e7b8-4ec9-8e74-c761c513f8a6", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66c1e780-c52f-45be-934f-204367b04f1e"}, {"timestamp": "2026-06-19T12:45:33.157Z", "date_only": false, "value": "2026-06-19T12:45:33.157087Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ec02fb-65ac-46a6-a0c0-f704604579d7", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "01cf028d-b1e8-47cc-b826-78e536959261", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ec02fb-65ac-46a6-a0c0-f704604579d7"}, {"timestamp": "2026-07-21T04:00:08.515Z", "date_only": false, "value": "2026-07-21T04:00:08.515900Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infosec_ita_notizie/2890", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "d9168ee2-0f7d-41dd-a725-342f77555c9a", "url": "https://t.me/infosec_ita_notizie/2890"}, {"timestamp": "2026-07-22T00:00:32.117Z", "date_only": false, "value": "2026-07-22T00:00:32.117617Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infosec_ita_notizie/2890", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "d789120d-14d3-40ef-8664-47ac3013fb45", "url": "https://t.me/infosec_ita_notizie/2890"}, {"timestamp": "2026-08-29T20:00:14.725Z", "date_only": false, "value": "2026-08-29T20:00:14.725923Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1738", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "f366e7f1-741d-42b2-8232-42563a60d19b", "url": "https://t.me/CyberDispatch/1738"}, {"timestamp": "2026-08-31T00:00:38.263Z", "date_only": false, "value": "2026-08-31T00:00:38.263539Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/1738", "record": "CVE-2026-5426", "field": "creation_timestamp", "uuid": "83a38ad7-962e-4d23-97ff-43d823e562d5", "url": "https://t.me/CyberDispatch/1738"}]}