{"metadata": {"vulnerability": "CVE-2026-58025", "count": 27, "kinds": {"milestone": 5, "sighting": 13, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-27T13:32:37.577Z", "date_only": false, "value": "2026-06-27T13:32:37.577Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-58025", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-01T15:23:29.787Z", "date_only": false, "value": "2026-07-01T15:23:29.787Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58025", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-01T15:23:29.787Z", "date_only": false, "value": "2026-07-01T15:23:29.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / wikimedia-foundation", "record": "CVE-2026-58025", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-01T15:51:46.171Z", "date_only": false, "value": "2026-07-01T15:51:46.171460Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58025", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-01T15:51:46.171Z", "date_only": false, "value": "2026-07-01T15:51:46.171460Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58025", "record": "FKIE_CVE-2026-58025", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-01T15:51:56.096Z", "date_only": false, "value": "2026-07-01T15:51:56.096Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-58025", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-01T15:51:56.096Z", "date_only": false, "value": "2026-07-01T15:51:56.096Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58025", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-01T16:16:00Z", "date_only": false, "value": "2026-07-01T16:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-58025", "record": "UBUNTU-CVE-2026-58025", "field": "published"}, {"timestamp": "2026-07-01T16:16:49Z", "date_only": false, "value": "2026-07-01T16:16:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-28RR-RPQP-G8C8", "record": "GHSA-28RR-RPQP-G8C8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-01T16:16:49.703Z", "date_only": false, "value": "2026-07-01T16:16:49.703", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58025", "record": "FKIE_CVE-2026-58025", "field": "published"}, {"timestamp": "2026-07-01T16:26:04.001Z", "date_only": false, "value": "2026-07-01T16:26:04.001320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplwmq2mzg2y", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "23619f1d-4333-412b-ab41-307bf6216656", "content": "CVE-2026-58025 - Remote Code Execution via Unsafe Deserialization in LogItem Import\nCVE ID : CVE-2026-58025\n \n Published : July 1, 2026, 3:23 p.m. | 23\u00a0minutes ago\n \n Description : Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki.\n\n This vulner...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplwmq2mzg2y"}, {"timestamp": "2026-07-01T18:31:49Z", "date_only": false, "value": "2026-07-01T18:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-28RR-RPQP-G8C8", "record": "GHSA-28RR-RPQP-G8C8", "field": "published"}, {"timestamp": "2026-07-02T02:49:45.446Z", "date_only": false, "value": "2026-07-02T02:49:45.446005Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzi6sza72o", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "eb4100e0-d4e0-4893-8168-4595492168ca", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58025 \u0432 MediaWiki: \u0440\u0438\u0441\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/3D6B8A2A-82DC-4A8E-AC18-E91BA29EE5B6", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzi6sza72o"}, {"timestamp": "2026-07-02T04:32:41.563Z", "date_only": false, "value": "2026-07-02T04:32:41.563337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7aar4gf2y", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "d0455ae1-ddc8-483f-8a36-59427e01b5f2", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58025 \u0432 MediaWiki: \u0440\u0438\u0441\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/905854AC-2530-4B22-92AD-26388418D4F1", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7aar4gf2y"}, {"timestamp": "2026-07-02T06:26:29.058Z", "date_only": false, "value": "2026-07-02T06:26:29.058991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnflpf7ai2o", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "48525e50-e89e-4303-950b-e7aba57c49a4", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58025 \u0432 MediaWiki: \u0440\u0438\u0441\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/5E4E8B2E-0906-4546-8085-A9F86F00E788", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnflpf7ai2o"}, {"timestamp": "2026-07-09T19:34:14.067Z", "date_only": false, "value": "2026-07-09T19:34:14.067", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58025", "record": "FKIE_CVE-2026-58025", "field": "lastModified"}, {"timestamp": "2026-07-09T21:31:13Z", "date_only": false, "value": "2026-07-09T21:31:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-28RR-RPQP-G8C8", "record": "GHSA-28RR-RPQP-G8C8", "field": "modified"}, {"timestamp": "2026-07-10T22:26:51Z", "date_only": false, "value": "2026-07-10T22:26:51Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-58025", "record": "UBUNTU-CVE-2026-58025", "field": "modified"}, {"timestamp": "2026-07-29T21:00:09.780Z", "date_only": false, "value": "2026-07-29T21:00:09.780389Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95734", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "5d94005a-d2e9-4d6c-abf1-db46d1759277", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58025\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 18:18:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58025 \u2014 MediaWiki Deserialization RCE via Log Entry Import. LogEntryBase::extractParams() unserialize() user-controlled log_params. CVSS 9.8 | CWE-502 | MediaWiki < 1.43.9, < 1.44.6, < 1.45.4, < 1.46.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95734"}, {"timestamp": "2026-07-30T00:00:08.836Z", "date_only": false, "value": "2026-07-30T00:00:08.836228Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95734", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "b7461c7a-8647-4e71-b210-6b8a58787a22", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58025\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 18:18:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58025 \u2014 MediaWiki Deserialization RCE via Log Entry Import. LogEntryBase::extractParams() unserialize() user-controlled log_params. CVSS 9.8 | CWE-502 | MediaWiki < 1.43.9, < 1.44.6, < 1.45.4, < 1.46.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95734"}, {"timestamp": "2026-07-30T01:00:03.106Z", "date_only": false, "value": "2026-07-30T01:00:03.106725Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8sG8-znVA24HEgCSSOgSFdLJSscjGG_d1L2w-JFGPL2oE2E", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "5d935c99-9834-4b25-9573-bdd6dde23e34"}, {"timestamp": "2026-07-31T00:00:43.899Z", "date_only": false, "value": "2026-07-31T00:00:43.899813Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8sG8-znVA24HEgCSSOgSFdLJSscjGG_d1L2w-JFGPL2oE2E", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "4ae8a7b7-fa31-4c7f-b8e5-4352a7ad6562"}, {"timestamp": "2026-09-02T06:00:06.211Z", "date_only": false, "value": "2026-09-02T06:00:06.211717Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/48242", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "e3e8aa3e-4728-443c-8d61-0064bcadec67", "content": "https://github.com/shinthink/CVE-2026-58025\n\nCVE-2026-58025 \u2014 MediaWiki PHP Deserialization RCE via Log Entry Import\n\n#github #exploit", "url": "https://t.me/HackingTeamGrupoOfficial/48242"}, {"timestamp": "2026-09-02T18:00:05.886Z", "date_only": false, "value": "2026-09-02T18:00:05.886628Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/3590", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "5f88a042-08b9-4242-aa38-7ebaed81b786", "content": "CVE-2026-58025  MediaWiki\n*\nThe deserialization flaw could lead to RCE via malicious log imports. \n*\nPoC", "url": "https://t.me/proxy_bar/3590"}, {"timestamp": "2026-09-03T00:00:40.205Z", "date_only": false, "value": "2026-09-03T00:00:40.205993Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/3590", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "6f7d2df9-3d95-428d-af2b-5aed03c9aee4", "content": "CVE-2026-58025  MediaWiki\n*\nThe deserialization flaw could lead to RCE via malicious log imports. \n*\nPoC", "url": "https://t.me/proxy_bar/3590"}, {"timestamp": "2026-09-03T00:00:52.392Z", "date_only": false, "value": "2026-09-03T00:00:52.392407Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/48242", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "b9e5011b-76ea-4469-b808-d34280f3b4bf", "content": "https://github.com/shinthink/CVE-2026-58025\n\nCVE-2026-58025 \u2014 MediaWiki PHP Deserialization RCE via Log Entry Import\n\n#github #exploit", "url": "https://t.me/HackingTeamGrupoOfficial/48242"}, {"timestamp": "2026-09-07T04:00:04.812Z", "date_only": false, "value": "2026-09-07T04:00:04.812827Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PZ4h1bEYzQUZNpz5jejfcfkAUPMGmF2SrshkVKYlc3YG-0E", "record": "CVE-2026-58025", "field": "creation_timestamp", "uuid": "03d25b83-596a-4aa4-8dbd-a87c638e35c8"}]}