{"metadata": {"vulnerability": "CVE-2026-18576", "count": 2, "kinds": {"milestone": 0, "sighting": 2, "kev": 0, "other": 0}}, "data": [{"timestamp": "2026-08-03T20:52:02.116Z", "date_only": false, "value": "2026-08-03T20:52:02.116453Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3ms7euvqoup2d", "record": "CVE-2026-18576", "field": "creation_timestamp", "uuid": "f9ffbf49-c49f-4f9c-9ebd-43afe4ac7488", "content": "\ud83e\udd16 CVE-2026-18577: auth bypass in N-able N-central actively exploited. Incomplete fix for CVE-2026-18576; both allow admin takeover. Hotfix 2026.3.1.7 out, on-prem must patch.\n\nhttps://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3ms7euvqoup2d"}, {"timestamp": "2026-08-05T20:37:17.531Z", "date_only": false, "value": "2026-08-05T20:37:17.531918Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mseeyfddjh2b", "record": "CVE-2026-18576", "field": "creation_timestamp", "uuid": "b8f8a207-5b96-49a7-bd02-b9d6b541b13a", "content": "\ud83e\udd16 CISA KEV adds 3 exploited flaws: CVE-2026-9198 (9.8) Langflow RCE; CVE-2026-18576 N-central admin hijack; CVE-2026-34486 (7.5) Tomcat. Patch in 3 days.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mseeyfddjh2b"}], "metrics": {"as_of": "2026-10-30T04:03:54.635Z", "anchors": {"origin": null, "discovery": null, "report": null, "acknowledgement": null, "disclosure": null, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["start", "end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["start", "end"]}, "time_unpatched": {"available": false, "missing": ["start"]}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
