{"metadata": {"vulnerability": "cve-2026-94101", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-20T00:00:00Z", "date_only": false, "value": "2026-09-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-94101", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-20T02:00:00Z", "date_only": false, "value": "2026-09-20T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-94101", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-20T09:19:19.199Z", "date_only": false, "value": "2026-09-20T09:19:19.199Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-94101", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-20T11:25:12Z", "date_only": false, "value": "2026-09-20T11:25:12.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-94101", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-21T00:45:11.529Z", "date_only": false, "value": "2026-09-21T00:45:11.529Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-94101", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-21T00:45:11.529Z", "date_only": false, "value": "2026-09-21T00:45:11.529Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-94101", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T02:16:53Z", "date_only": false, "value": "2026-09-21T02:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PXF5-37XW-XHX8", "record": "GHSA-PXF5-37XW-XHX8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-21T02:16:53.317Z", "date_only": false, "value": "2026-09-21T02:16:53.317", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94101", "record": "FKIE_CVE-2026-94101", "field": "published"}, {"timestamp": "2026-09-21T03:30:20Z", "date_only": false, "value": "2026-09-21T03:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PXF5-37XW-XHX8", "record": "GHSA-PXF5-37XW-XHX8", "field": "published"}, {"timestamp": "2026-09-21T03:30:21Z", "date_only": false, "value": "2026-09-21T03:30:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PXF5-37XW-XHX8", "record": "GHSA-PXF5-37XW-XHX8", "field": "modified"}, {"timestamp": "2026-09-21T08:04:42.861Z", "date_only": false, "value": "2026-09-21T08:04:42.861722Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/c888a270fbf834dd12a0076ed8bbb3e4", "record": "CVE-2026-94101", "field": "creation_timestamp", "uuid": "b834ffc6-f130-4b99-990a-3a1d496d069f", "content": "This daily threat intelligence briefing covers three key developments:\n\n\u2022 **Jade Sleet Breach:** North Korean threat group Jade Sleet compromised a small Indian IT firm by specifically targeting developers, deploying FLATROOF and ROOFDECK backdoors (reported by SentinelOne).\n\u2022 **CVE-2026-94142 (High/Local):** A write-what-where vulnerability in the BioStar Temperature Monitor Utility\u2019s driver is publicly exploitable. The vendor has not responded to early notifications.\n\u2022 **CVE-2026-94101 (Critical/Remote):** A buffer overflow in the Netcore NBR200V2 router is publicly available for exploitation, with the vendor also remaining unresponsive.\n\nBoth CVEs were published on September 21, 2026, and pose immediate risk due to publicly disclosed, functional exploits.", "url": "https://gist.github.com/ichintu/c888a270fbf834dd12a0076ed8bbb3e4"}, {"timestamp": "2026-09-21T10:37:02.087Z", "date_only": false, "value": "2026-09-21T10:37:02.087741Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-94101", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-21T10:37:02.087Z", "date_only": false, "value": "2026-09-21T10:37:02.087741Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94101", "record": "FKIE_CVE-2026-94101", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-21T10:47:46.472Z", "date_only": false, "value": "2026-09-21T10:47:46.472Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-94101", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T10:47:46.472Z", "date_only": false, "value": "2026-09-21T10:47:46.472Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-94101", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T12:00:27.380Z", "date_only": false, "value": "2026-09-21T12:00:27.380120Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117308917462367519", "record": "cve-2026-94101", "field": "creation_timestamp", "uuid": "c0c174bf-1980-4c05-88f5-5f6018f9946c", "content": "Netcore NBR200V2 (v1.3.241127.071246) hit by CRITICAL CVE-2026-94101 buffer overflow in /usr/bin/routerd. Remote code exec possible. Public exploit, no patch. Restrict remote access ASAP. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #RouterSecurity #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117308917462367519"}, {"timestamp": "2026-09-21T12:00:29.821Z", "date_only": false, "value": "2026-09-21T12:00:29.821823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvznzjtlda2z", "record": "cve-2026-94101", "field": "creation_timestamp", "uuid": "27ef08c8-9915-4946-b0b8-6dbd5f0a1e86", "content": "Netcore NBR200V2 routers (v1.3.241127.071246) face a CRITICAL buffer overflow (CVE-2026-94101). Public exploit, no patch. Restrict remote access or replace device. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #Vulnerability", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvznzjtlda2z"}, {"timestamp": "2026-09-21T12:25:43.093Z", "date_only": false, "value": "2026-09-21T12:25:43.093499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvzpgnt7e72t", "record": "CVE-2026-94101", "field": "creation_timestamp", "uuid": "2d02e609-111f-4084-941a-06896e3555ca", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94101: A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-94101\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvzpgnt7e72t"}, {"timestamp": "2026-09-21T13:33:33.387Z", "date_only": false, "value": "2026-09-21T13:33:33.387", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94101", "record": "FKIE_CVE-2026-94101", "field": "lastModified"}]}