{"metadata": {"vulnerability": "CVE-2026-77185", "count": 46, "kinds": {"milestone": 14, "sighting": 5, "kev": 0, "other": 27}}, "data": [{"timestamp": "2026-08-20T16:22:07.843Z", "date_only": false, "value": "2026-08-20T16:22:07.843Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-77185", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T09:22:28Z", "date_only": false, "value": "2026-09-24T09:22:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-24T09:22:28Z", "date_only": false, "value": "2026-09-24T09:22:28+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-09-24T09:22:28Z", "date_only": false, "value": "2026-09-24T09:22:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-30T09:45:32.561Z", "date_only": false, "value": "2026-09-30T09:45:32.561000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-30T09:47:03.852Z", "date_only": false, "value": "2026-09-30T09:47:03.852Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77185", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-30T09:47:03.852Z", "date_only": false, "value": "2026-09-30T09:47:03.852000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-09-30T09:47:03.852Z", "date_only": false, "value": "2026-09-30T09:47:03.852Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-77185", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T10:02:22.779Z", "date_only": false, "value": "2026-09-30T10:02:22.779472+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-30T10:02:38.250Z", "date_only": false, "value": "2026-09-30T10:02:38.250216+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-30T10:13:12.928Z", "date_only": false, "value": "2026-09-30T10:13:12.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-77185", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T10:17:00Z", "date_only": false, "value": "2026-09-30T10:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-77185", "record": "UBUNTU-CVE-2026-77185", "field": "published"}, {"timestamp": "2026-09-30T10:17:17Z", "date_only": false, "value": "2026-09-30T10:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V223-2P4C-WP64", "record": "GHSA-V223-2P4C-WP64", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-30T10:17:17.123Z", "date_only": false, "value": "2026-09-30T10:17:17.123", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77185", "record": "FKIE_CVE-2026-77185", "field": "published"}, {"timestamp": "2026-09-30T10:30:28.818Z", "date_only": false, "value": "2026-09-30T10:30:28.818833Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117359524453653609", "record": "cve-2026-77185", "field": "creation_timestamp", "uuid": "c0e071d3-0d99-45bb-8302-0723d8609dbc", "content": "Apache MINA SSHD auth bypass (CVE-2026-77185, CRITICAL, CVSS 9.1): Async public-key/hostbased auth can be skipped, risking full SSH compromise. Affected: 2.0.0 \u2013 2.19.x, 3.0.0-M1 \u2013 M5. Patch to 2.20.0/3.0.0-M6. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apache-18a51f96ab18bde1 #OffSeq #Apache #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117359524453653609"}, {"timestamp": "2026-09-30T10:30:30.772Z", "date_only": false, "value": "2026-09-30T10:30:30.772890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwq56wiarx22", "record": "cve-2026-77185", "field": "creation_timestamp", "uuid": "b7bcc8e1-1350-44d8-a6cf-62c8bd4338f7", "content": "Apache MINA SSHD hit by CRITICAL auth bypass (CVE-2026-77185). Affects 2.0.0 \u2013 2.19.x, 3.0.0-M1 \u2013 M5. Upgrade to 2.20.0/3.0.0-M6 to prevent unauthorized SSH access. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apach...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwq56wiarx22"}, {"timestamp": "2026-09-30T11:02:16.319Z", "date_only": false, "value": "2026-09-30T11:02:16.319898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwq6xozvdj2y", "record": "CVE-2026-77185", "field": "creation_timestamp", "uuid": "d4b7ae3b-ba77-459e-b99e-d426cfce8852", "content": "\ud83d\udd34 CVE-2026-77185 - Critical (9.1)\n\nAuthentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77185/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwq6xozvdj2y"}, {"timestamp": "2026-09-30T12:07:21.954Z", "date_only": false, "value": "2026-09-30T12:07:21.954616Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqcm4nenq24", "record": "CVE-2026-77185", "field": "creation_timestamp", "uuid": "bf408653-f142-467b-8cd6-beeff4c390fd", "content": "\ud83d\udea8 CVE-2026-77185 \u2014 CVSS 9.1 CRITICAL\n\nAuthentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 fo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77185\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqcm4nenq24"}, {"timestamp": "2026-09-30T12:35:15Z", "date_only": false, "value": "2026-09-30T12:35:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V223-2P4C-WP64", "record": "GHSA-V223-2P4C-WP64", "field": "published"}, {"timestamp": "2026-09-30T12:35:15Z", "date_only": false, "value": "2026-09-30T12:35:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V223-2P4C-WP64", "record": "GHSA-V223-2P4C-WP64", "field": "modified"}, {"timestamp": "2026-09-30T14:17:23Z", "date_only": false, "value": "2026-09-30T14:17:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-30T16:51:36.604Z", "date_only": false, "value": "2026-09-30T16:51:36.604858Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77185", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-30T16:51:36.604Z", "date_only": false, "value": "2026-09-30T16:51:36.604858Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77185", "record": "FKIE_CVE-2026-77185", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-30T16:52:13.274Z", "date_only": false, "value": "2026-09-30T16:52:13.274Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-77185", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-30T16:52:13.274Z", "date_only": false, "value": "2026-09-30T16:52:13.274Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77185", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T17:16:49.877Z", "date_only": false, "value": "2026-09-30T17:16:49.877", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77185", "record": "FKIE_CVE-2026-77185", "field": "lastModified"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11940-1", "record": "OPENSUSE-SU-2026:11940-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11940-1", "record": "OPENSUSE-SU-2026:11940-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11940-1", "record": "OPENSUSE-SU-2026:11940-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11940-1", "record": "OPENSUSE-SU-2026:11940-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-02T10:46:41Z", "date_only": false, "value": "2026-10-02T10:46:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11940-1", "record": "OPENSUSE-SU-2026:11940-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-02T10:46:41Z", "date_only": false, "value": "2026-10-02T10:46:41Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11940-1", "record": "OPENSUSE-SU-2026:11940-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.13.published_at"}, {"timestamp": "2026-10-11T00:00:00Z", "date_only": true, "value": "2026-10-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": true, "value": "2026-10-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.15.published_at"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": true, "value": "2026-10-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "last_revision_date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "initial_release_date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-17T09:52:43Z", "date_only": false, "value": "2026-10-17T09:52:43Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-77185", "record": "UBUNTU-CVE-2026-77185", "field": "modified"}, {"timestamp": "2026-10-22T03:57:37Z", "date_only": false, "value": "2026-10-22T03:57:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-22T03:57:37Z", "date_only": false, "value": "2026-10-22T03:57:37+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T03:57:37Z", "date_only": false, "value": "2026-10-22T03:57:37+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:71541", "record": "RHSA-2026:71541", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-23T14:05:06Z", "date_only": false, "value": "2026-10-23T14:05:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3707", "record": "CVE-2026-77185", "field": "creation_timestamp", "uuid": "d3bc1566-ae3d-45d9-a150-1df1adff73e9", "content": "\ud83d\udd34 Atlassian Patches 75 Flaws in Data Center and Server Products\n\nAtlassian on Tuesday published its October 2026 security bulletin, which lists 162 high-severity and 14 critical-severity vulnerabilities.\n\nAll of the entries are tied to third-party dependencies, and many CVEs appear under several products. By SecurityWeek\u2019s count, the bulletin covers 75 unique CVEs, six of them rated critical.\n\nThe affected products are Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Software, and Jira Service Management.\n\nThe critical-severity flaws are:\n\n- CVE-2026-65637, CVE-2026-65182, and CVE-2026-68525 \u2013 Apache Tomcat issues listed for Confluence and Crowd.\n- CVE-2026-58062 \u2013 a Bouncy Castle issue listed for Confluence, Crowd, Jira Software, and Jira Service Management.\n- CVE-2026-75595 \u2013 a Netty issue listed for Confluence, Jira Software, and Jira Service Management.\n- CVE-2026-77185 \u2013 an Apache SSHD issue listed for Fisheye/Crucible.", "url": "https://t.me/pphm_HackerNews/3707"}]}