{"metadata": {"vulnerability": "CVE-2021-20028", "count": 79, "kinds": {"milestone": 5, "sighting": 40, "kev": 17, "other": 17}}, "data": [{"timestamp": "2020-12-17T00:00:00Z", "date_only": false, "value": "2020-12-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-20028", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-07-15T00:00:00Z", "date_only": false, "value": "2021-07-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-524", "record": "CERTFR-2021-AVI-524", "field": "revisions.0.revision_date"}, {"timestamp": "2021-08-04T19:10:09Z", "date_only": false, "value": "2021-08-04T19:10:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-20028", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-08-04T19:10:09Z", "date_only": false, "value": "2021-08-04T19:10:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sonicwall", "record": "CVE-2021-20028", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-04T19:15:00Z", "date_only": false, "value": "2021-08-04T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2GF8-X72H-G57R", "record": "GHSA-2GF8-X72H-G57R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-08-04T19:15:08.247Z", "date_only": false, "value": "2021-08-04T19:15:08.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20028", "record": "FKIE_CVE-2021-20028", "field": "published"}, {"timestamp": "2021-08-04T19:15:08.247Z", "date_only": false, "value": "2021-08-04T19:15:08.247", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-20028", "record": "GSD-2021-20028", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-08-04T23:23:38Z", "date_only": false, "value": "2021-08-04T23:23:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/26843", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "53a3442a-a9de-4331-8448-f13b57b64fa6", "content": "\u203c CVE-2021-20028 \u203c\n\n** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/26843"}, {"timestamp": "2021-08-19T00:00:00Z", "date_only": false, "value": "2021-08-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-524", "record": "CERTFR-2021-AVI-524", "field": "revisions.1.revision_date"}, {"timestamp": "2022-01-26T18:54:27Z", "date_only": false, "value": "2022-01-26T18:54:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvin_club/5154", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "45f34ed1-43ce-464a-9979-c607a2c8db2a", "content": "\u0627\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2021-20028 \u062f\u0631 \u0648\u06cc \u067e\u06cc \u0627\u0646 \u0634\u0631\u06a9\u062a\u06cc sonicwall \u06a9\u0647 \u062f\u0631 \u0641\u0631\u0648\u0645 Ramp \u0641\u0631\u0648\u062e\u062a\u0647 \u0645\u06cc\u0634\u062f \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\nhttps://twitter.com/vxunderground/status/1486074974486020105?s=20", "url": "https://t.me/arvin_club/5154"}, {"timestamp": "2022-02-13T11:48:22Z", "date_only": false, "value": "2022-02-13T11:48:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/45993", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "4adc9470-0a57-4a63-b3aa-042c19501246", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"RaidForums\",\n  \"Threat Actor\": \"WICK1\",\n  \"Content\": \"SonicWall SSL-VPN Exploit (CVE-2021-20028)\u201d,\n  \"Detection Date\": \u201c13 Feb 2022 11:44\u201d,\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/45993"}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-20028", "field": "timestamps.asserted_at", "uuid": "379199fc-7758-4b6d-ad81-d800954cb401", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-20028", "field": "timestamps.asserted_at", "uuid": "53d03fe9-123c-4faa-9c2c-6554b367611d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": true, "value": "2022-03-28", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20028", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": true, "value": "2022-03-28", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-20028", "record": "GSD-2021-20028", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-20028", "field": "evidence.0.details.added_date", "uuid": "53d03fe9-123c-4faa-9c2c-6554b367611d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": true, "value": "2022-03-28", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-20028", "field": "evidence.0.details.date_added", "uuid": "379199fc-7758-4b6d-ad81-d800954cb401", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-20028", "field": "timestamps.first_seen_at", "uuid": "379199fc-7758-4b6d-ad81-d800954cb401", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-20028", "field": "timestamps.first_seen_at", "uuid": "53d03fe9-123c-4faa-9c2c-6554b367611d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-20028", "field": "status.status_updated_at", "uuid": "379199fc-7758-4b6d-ad81-d800954cb401", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-20028", "field": "status.status_updated_at", "uuid": "53d03fe9-123c-4faa-9c2c-6554b367611d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-28T00:00:00Z", "date_only": false, "value": "2022-03-28T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20028", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-18T00:00:00Z", "date_only": true, "value": "2022-04-18", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-20028", "field": "evidence.0.details.due_date", "uuid": "379199fc-7758-4b6d-ad81-d800954cb401", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-18T00:00:00Z", "date_only": true, "value": "2022-04-18", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-20028", "record": "GSD-2021-20028", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T19:09:54Z", "date_only": false, "value": "2022-05-24T19:09:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GF8-X72H-G57R", "record": "GHSA-2GF8-X72H-G57R", "field": "published"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "9381b94f-754f-4dea-842c-d914a6a9968a"}, {"timestamp": "2023-12-13T01:23:12.793Z", "date_only": false, "value": "2023-12-13T01:23:12.793622Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-20028", "record": "GSD-2021-20028", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-11T01:09:58.057Z", "date_only": false, "value": "2024-04-11T01:09:58.057", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-20028", "record": "GSD-2021-20028", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-08-03T17:30:07.639Z", "date_only": false, "value": "2024-08-03T17:30:07.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-20028", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T08:44:02Z", "date_only": false, "value": "2024-09-16T08:44:02+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-20028", "field": "timestamps.asserted_at", "uuid": "25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T08:44:02Z", "date_only": false, "value": "2024-09-16T08:44:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-20028", "field": "timestamps.first_seen_at", "uuid": "25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-09T02:12:00Z", "date_only": false, "value": "2024-11-09T02:12:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/club31337/873", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "6befb8d4-fe66-43a3-becf-4eda956d4482", "content": "SonicWall SSLVPN SQLi CVE-2021-20028 exploit code publicized by wazawaka aka boriselcin aka Orange (from RAMP) aka Mikhail Pavlovich Matveev", "url": "https://t.me/club31337/873"}, {"timestamp": "2024-12-24T20:29:57.084Z", "date_only": false, "value": "2024-12-24T20:29:57.084589Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971481", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "a64282ad-5eb4-4345-a331-c14d88e04bb0", "url": "https://feedsin.space/feed/CISAKevBot/items/2971481"}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "36dc9dfc-40e6-49b8-a1c5-bea8760cbff8"}, {"timestamp": "2024-12-28T00:00:00Z", "date_only": false, "value": "2024-12-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-28)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "3754ad5e-8266-41e0-9a1f-d5e919ff7f1d"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-14)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "99da93ef-e2b6-49cb-bab8-6821b828422f"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "ef6949bc-9e48-4774-b865-38a3db691b29"}, {"timestamp": "2025-02-04T14:52:57.423Z", "date_only": false, "value": "2025-02-04T14:52:57.423481Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20028", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T14:52:57.423Z", "date_only": false, "value": "2025-02-04T14:52:57.423481Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20028", "record": "FKIE_CVE-2021-20028", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "0b7c0b71-d3bc-425b-8418-70f452fbfa35"}, {"timestamp": "2025-02-23T02:10:28Z", "date_only": false, "value": "2025-02-23T02:10:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "8155ae8d-c0a0-4075-bc38-e66e0abc7cba"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "2c5aed7a-1e49-4e7c-a176-6d476ed92c88"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "cbc843af-e380-4518-b145-818278f31b71"}, {"timestamp": "2025-08-30T00:00:00Z", "date_only": false, "value": "2025-08-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-30)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "72902f8d-e776-428f-a054-f02a0c05c66e"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-30)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "19297710-e957-4e77-a21c-95f20e6b5f3c"}, {"timestamp": "2025-10-21T23:25:38.930Z", "date_only": false, "value": "2025-10-21T23:25:38.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-20028", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:38.930Z", "date_only": false, "value": "2025-10-21T23:25:38.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-20028", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:18Z", "date_only": false, "value": "2025-10-22T00:32:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2GF8-X72H-G57R", "record": "GHSA-2GF8-X72H-G57R", "field": "modified"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "f9a753d0-f447-429d-903f-4f0be573a649"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "a0c376bf-d91e-4d8e-8a9e-d7fe03144b93"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-20028", "field": "timestamps.recorded_at", "uuid": "379199fc-7758-4b6d-ad81-d800954cb401", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:55.568Z", "date_only": false, "value": "2026-02-02T12:27:55.568695Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/379199fc-7758-4b6d-ad81-d800954cb401", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "afa04b58-37b9-466d-b76c-ae19fdc79583", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/379199fc-7758-4b6d-ad81-d800954cb401"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-24)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "e44a6bd3-854c-43b6-8485-b151d4f9b573"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "c9e9a92b-f195-4276-850d-9b640be84954"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "f6502e34-ff61-46a5-bf82-3a1b05efeee5"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "ac3069bd-e757-4d09-9d58-a465c72238f0"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-05)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "bfedc75b-89ac-4db2-86bd-676c44d87ed7"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-13)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "a6eeacb1-9b7a-4064-8071-83925758dc94"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "ad1fea98-0148-409f-b6ed-0cfb4d080fd5"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-22)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "9222f013-d26c-40c5-99b9-811ba36ea881"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "eff8c487-bd6d-487b-93d3-13d18925a3f5"}, {"timestamp": "2026-06-07T00:00:00Z", "date_only": false, "value": "2026-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "0f68135a-3c22-45a7-9c96-eb9be2d05565"}, {"timestamp": "2026-06-17T03:33:10.393Z", "date_only": false, "value": "2026-06-17T03:33:10.393", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20028", "record": "FKIE_CVE-2021-20028", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:21.285Z", "date_only": false, "value": "2026-06-19T12:47:21.285604Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/74454286-d84e-4158-81a1-13ce62e09faf", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "6ddc067c-4a7b-4ec0-b886-27c6807dc99c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/74454286-d84e-4158-81a1-13ce62e09faf"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-20028", "field": "timestamps.recorded_at", "uuid": "53d03fe9-123c-4faa-9c2c-6554b367611d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:15.942Z", "date_only": false, "value": "2026-06-23T14:05:15.942416Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53d03fe9-123c-4faa-9c2c-6554b367611d", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "1073386e-4631-4348-bd9f-9334e3dc386d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53d03fe9-123c-4faa-9c2c-6554b367611d"}, {"timestamp": "2026-06-30T09:22:52.331Z", "date_only": false, "value": "2026-06-30T09:22:52.331784Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "1adef1fd-542c-476d-897b-6b3fb9213b22", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25dfd85a-a721-4ab3-a6c6-ec9f2d159862"}, {"timestamp": "2026-07-11T10:15:12.625Z", "date_only": false, "value": "2026-07-11T10:15:12.625589Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "31659a6b-9c31-4fd8-9569-f3fbd11cbf09"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-20028", "field": "timestamps.last_seen_at", "uuid": "25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-20028", "field": "evidence.0.details.observation_date", "uuid": "25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-20028", "field": "status.status_updated_at", "uuid": "25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T10:15:06.841Z", "date_only": false, "value": "2026-07-20T10:15:06.841217Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "c1c3c755-0804-461b-80d7-c0c7d95920c5"}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-20028", "field": "timestamps.recorded_at", "uuid": "25dfd85a-a721-4ab3-a6c6-ec9f2d159862", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-07T11:00:22.347Z", "date_only": false, "value": "2026-08-07T11:00:22.347591Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "bb24c8c7-008b-45be-9a14-c29dfac5cedf"}, {"timestamp": "2026-08-10T10:15:10.297Z", "date_only": false, "value": "2026-08-10T10:15:10.297098Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "4eded794-f30a-420d-a2e1-137c08ff6de3"}, {"timestamp": "2026-08-13T10:15:10.877Z", "date_only": false, "value": "2026-08-13T10:15:10.877796Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "3f89577e-ab8c-45c8-960a-d908bb687c39"}, {"timestamp": "2026-09-11T10:15:41.230Z", "date_only": false, "value": "2026-09-11T10:15:41.230393Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "46d4cdc6-5061-42e1-829a-c025e9234802"}, {"timestamp": "2026-09-22T10:15:09.358Z", "date_only": false, "value": "2026-09-22T10:15:09.358916Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-21)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "6072e7aa-2fc6-4cf9-aeff-b03dadd244ee"}, {"timestamp": "2026-09-26T00:00:00Z", "date_only": false, "value": "2026-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-26)", "record": "CVE-2021-20028", "field": "creation_timestamp", "uuid": "b1949866-5318-4c26-b7c8-2ea398f948ad"}]}