{"metadata": {"vulnerability": "CVE-2026-85809", "count": 27, "kinds": {"milestone": 7, "sighting": 6, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-04T18:08:54.994Z", "date_only": false, "value": "2026-09-04T18:08:54.994Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85809", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85809", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85809", "record": "FKIE_CVE-2026-85809", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:49:46Z", "date_only": false, "value": "2026-10-13T11:49:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423", "record": "CVE-2026-85809", "field": "creation_timestamp", "uuid": "8b036e29-4193-4401-a066-89ee174cab14", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-85809", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T19:00:06.193Z", "date_only": false, "value": "2026-10-13T19:00:06.193Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85809", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:21:05Z", "date_only": false, "value": "2026-10-13T19:21:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RW6C-W8VC-9P9J", "record": "GHSA-RW6C-W8VC-9P9J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T19:21:05.287Z", "date_only": false, "value": "2026-10-13T19:21:05.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85809", "record": "FKIE_CVE-2026-85809", "field": "published"}, {"timestamp": "2026-10-13T21:35:49Z", "date_only": false, "value": "2026-10-13T21:35:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RW6C-W8VC-9P9J", "record": "GHSA-RW6C-W8VC-9P9J", "field": "published"}, {"timestamp": "2026-10-13T21:35:49Z", "date_only": false, "value": "2026-10-13T21:35:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RW6C-W8VC-9P9J", "record": "GHSA-RW6C-W8VC-9P9J", "field": "modified"}, {"timestamp": "2026-10-13T22:11:01.817Z", "date_only": false, "value": "2026-10-13T22:11:01.817522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2fjop4x2n", "record": "CVE-2026-85809", "field": "creation_timestamp", "uuid": "8b8f1160-57d6-4af2-9d36-38c47a546a6b", "content": "\ud83d\udea8 CVE-2026-85809 \u2014 CVSS 9.8 CRITICAL\n\nRemote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85809\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2fjop4x2n"}, {"timestamp": "2026-10-13T23:20:05.245Z", "date_only": false, "value": "2026-10-13T23:20:05.245039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxs6azfpuj2r", "record": "CVE-2026-85809", "field": "creation_timestamp", "uuid": "5d4d7028-dbba-44fa-9a38-02c86ed8cc77", "content": "CVE-2026-85809 - windows 10 version 1607\nThe Remote Access Service in Windows 10 (versions 1607, 1809, 21H2, 22H2) and Windows 11 (version 23H2) can be tricked into running malicious programs. This could give an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxs6azfpuj2r"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-85809", "field": "creation_timestamp", "uuid": "82a39f60-ef6c-436c-bde2-45fa1e7d9c7a", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T03:57:34.591Z", "date_only": false, "value": "2026-10-14T03:57:34.591Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85809", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T07:10:08.252Z", "date_only": false, "value": "2026-10-14T07:10:08.252299Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117438009032415501", "record": "CVE-2026-85809", "field": "creation_timestamp", "uuid": "4b9b6bb7-1bc5-45e1-86ee-8f345a80e8af", "content": "CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine\nhttps://www.cve.org/CVERecord?id=CVE-2026-85809https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85809#Microsoft #Windows10Version1607 #Windows10Version1809 #Windows10Version21H2 #Windows10Version22H2 #Windows11version23H2 #Windows11Version23H2 #Windows11Version24H2 #Windows11Version25H2 #Windows11version26H1 #Windows11Version26H2 #WindowsServer2012 #WindowsServer2012(ServerCoreinstallation) #WindowsServer2012R2 #WindowsServer2012R2(ServerCoreinstallation) #WindowsServer2016 #WindowsServer2016(ServerCoreinstallation) #WindowsServer2019 #WindowsServer2019(ServerCoreinstallation) #WindowsServer2022 #WindowsServer2025 #WindowsServer2025(ServerCoreinstallation)#CVE_2026_85809#bot", "url": "https://infosec.exchange/users/cve/statuses/117438009032415501"}, {"timestamp": "2026-10-16T19:38:42.970Z", "date_only": false, "value": "2026-10-16T19:38:42.970", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85809", "record": "FKIE_CVE-2026-85809", "field": "lastModified"}, {"timestamp": "2026-10-17T09:37:06.622Z", "date_only": false, "value": "2026-10-17T09:37:06.622663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3my2s543a6i22", "record": "CVE-2026-85809", "field": "creation_timestamp", "uuid": "fae6b764-0b6d-49f4-8b8b-b2e940957a8f", "content": "\ud83d\udccc CVE-2026-85809 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine https://www.cyberhub.blog/cves/CVE-2026-85809", "url": "https://bsky.app/profile/cyberhub.blog/post/3my2s543a6i22"}, {"timestamp": "2026-10-20T18:36:40.089Z", "date_only": false, "value": "2026-10-20T18:36:40.089Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85809", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T18:36:40.089Z", "date_only": false, "value": "2026-10-20T18:36:40.089Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-85809", "field": "containers.cna.providerMetadata.dateUpdated"}]}