{"metadata": {"vulnerability": "CVE-2025-3460", "count": 23, "kinds": {"milestone": 4, "sighting": 10, "kev": 0, "other": 9}}, "data": [{"timestamp": "2000-12-31T23:00:00Z", "date_only": false, "value": "2000-12-31T23:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://takeonme.org/cve/", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "f638b23d-960d-4efa-8b11-108485bb7967", "url": "http://takeonme.org/cve/"}, {"timestamp": "2025-04-08T23:41:08.314Z", "date_only": false, "value": "2025-04-08T23:41:08.314Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-3460", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-08T18:58:51Z", "date_only": false, "value": "2025-06-08T18:58:51.000000Z", "kind": "sighting", "label": "Seen", "source": "http://takeonme.org/cves/cve-2025-3460/", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "52617657-d84d-4d67-920c-e221f3d68740", "url": "http://takeonme.org/cves/cve-2025-3460/"}, {"timestamp": "2025-06-08T21:00:00Z", "date_only": false, "value": "2025-06-08T21:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / AHA", "record": "CVE-2025-3460", "field": "containers.cna.datePublic"}, {"timestamp": "2025-06-08T21:02:24.334Z", "date_only": false, "value": "2025-06-08T21:02:24.334Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3460", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-08T21:15:32Z", "date_only": false, "value": "2025-06-08T21:15:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RMR3-F2F2-5GJH", "record": "GHSA-RMR3-F2F2-5GJH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-08T21:15:32.900Z", "date_only": false, "value": "2025-06-08T21:15:32.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3460", "record": "FKIE_CVE-2025-3460", "field": "published"}, {"timestamp": "2025-06-08T21:30:31Z", "date_only": false, "value": "2025-06-08T21:30:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RMR3-F2F2-5GJH", "record": "GHSA-RMR3-F2F2-5GJH", "field": "published"}, {"timestamp": "2025-06-08T21:30:31Z", "date_only": false, "value": "2025-06-08T21:30:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RMR3-F2F2-5GJH", "record": "GHSA-RMR3-F2F2-5GJH", "field": "modified"}, {"timestamp": "2025-06-08T22:04:34Z", "date_only": false, "value": "2025-06-08T22:04:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G5p0ZxgBHJPvrrOlkboQk4PzfxBFi8LKHLFE-2EiRTRCqd4", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "018a6151-9078-4718-981f-fcb645e6d8eb"}, {"timestamp": "2025-06-08T22:04:35Z", "date_only": false, "value": "2025-06-08T22:04:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jsCqnphfOLOJXlqbeV7bu86SK03eKtIMK7lovxABucy8fXA", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "373cea18-35b6-437d-b555-369c6de8e04e"}, {"timestamp": "2025-06-08T22:04:36Z", "date_only": false, "value": "2025-06-08T22:04:36.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bpb7nsT2hmu5GwIcHQxIepbB4NivfmeMl4cTLbU1nySRnVA", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "4ee97421-11c5-4232-a247-9b6f5f78ed60"}, {"timestamp": "2025-06-09T01:36:59.445Z", "date_only": false, "value": "2025-06-09T01:36:59.445853Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "record": "cve-2025-3460", "field": "creation_timestamp", "uuid": "06860f3f-dfbc-40f7-9bc7-37fb24749baa", "url": "https://infosec.exchange/users/cR0w/statuses/114650842275216216"}, {"timestamp": "2025-06-09T15:02:58.903Z", "date_only": false, "value": "2025-06-09T15:02:58.903057Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3460", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-09T15:02:58.903Z", "date_only": false, "value": "2025-06-09T15:02:58.903057Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3460", "record": "FKIE_CVE-2025-3460", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-09T15:03:04.372Z", "date_only": false, "value": "2025-06-09T15:03:04.372Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3460", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-09T18:33:57.925Z", "date_only": false, "value": "2025-06-09T18:33:57.925Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-3460", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-09T18:33:57.925Z", "date_only": false, "value": "2025-06-09T18:33:57.925Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / AHA", "record": "CVE-2025-3460", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-09T19:48:17Z", "date_only": false, "value": "2025-06-09T19:48:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17752", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "e5f39094-5470-4335-8500-df2cb640f3b1", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32458\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, \"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'),\" and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).\nThis issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.\n\ud83d\udccf Published: 2025-06-08T21:04:12.492Z\n\ud83d\udccf Modified: 2025-06-09T18:39:52.055Z\n\ud83d\udd17 References:\n1. https://takeonme.org/cves/cve-2025-3460\n2. https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices", "url": "https://t.me/DarkWebInformer_CVEAlerts/17752"}, {"timestamp": "2025-06-09T19:48:18Z", "date_only": false, "value": "2025-06-09T19:48:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17753", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "745d0c8a-6a0c-4193-927e-75bf8cf04751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32456\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, \"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'),\" and is estimated as a CVSS 7.7\u00a0(CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).\nThis issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.\n\ud83d\udccf Published: 2025-06-08T21:03:12.814Z\n\ud83d\udccf Modified: 2025-06-09T18:39:25.998Z\n\ud83d\udd17 References:\n1. https://takeonme.org/cves/cve-2025-3460\n2. https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices", "url": "https://t.me/DarkWebInformer_CVEAlerts/17753"}, {"timestamp": "2025-06-09T19:48:19Z", "date_only": false, "value": "2025-06-09T19:48:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17754", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "6a40068c-4519-44d2-8040-a0bdbbebbd1e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32457\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, \"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'),\" and is estimated as a CVSS 7.7\u00a0(CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).\nThis issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.\n\ud83d\udccf Published: 2025-06-08T21:03:24.532Z\n\ud83d\udccf Modified: 2025-06-09T18:39:03.969Z\n\ud83d\udd17 References:\n1. https://takeonme.org/cves/cve-2025-3460\n2. https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices", "url": "https://t.me/DarkWebInformer_CVEAlerts/17754"}, {"timestamp": "2025-06-09T19:48:24Z", "date_only": false, "value": "2025-06-09T19:48:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17757", "record": "CVE-2025-3460", "field": "creation_timestamp", "uuid": "44205871-7e8b-4e70-8cc4-ed71aacda557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32459\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, \"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'),\" and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).\n\nThis issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.\n\ud83d\udccf Published: 2025-06-08T21:04:25.317Z\n\ud83d\udccf Modified: 2025-06-09T18:37:45.430Z\n\ud83d\udd17 References:\n1. https://takeonme.org/cves/cve-2025-3460\n2. https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices", "url": "https://t.me/DarkWebInformer_CVEAlerts/17757"}, {"timestamp": "2026-06-17T09:19:59.563Z", "date_only": false, "value": "2026-06-17T09:19:59.563", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3460", "record": "FKIE_CVE-2025-3460", "field": "lastModified"}]}