{"metadata": {"vulnerability": "CVE-2026-58073", "count": 31, "kinds": {"milestone": 8, "sighting": 10, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0276", "record": "NCSC-2026-0276", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T15:00:00.720Z", "date_only": false, "value": "2026-06-28T15:00:00.720Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-58073", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-29T00:00:00Z", "date_only": true, "value": "2026-07-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0968", "record": "CERTFR-2026-AVI-0968", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-04T00:00:00Z", "date_only": true, "value": "2026-08-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0968", "record": "CERTFR-2026-AVI-0968", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-08-04T00:00:00Z", "date_only": false, "value": "2026-08-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58073", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-04T00:00:00Z", "date_only": false, "value": "2026-08-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58073", "record": "FKIE_CVE-2026-58073", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-04T15:56:03.546Z", "date_only": false, "value": "2026-08-04T15:56:03.546Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58073", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-04T15:56:03.546Z", "date_only": false, "value": "2026-08-04T15:56:03.546Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2026-58073", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T17:16:56Z", "date_only": false, "value": "2026-08-04T17:16:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J78W-MW5C-PPVH", "record": "GHSA-J78W-MW5C-PPVH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-04T17:16:56.930Z", "date_only": false, "value": "2026-08-04T17:16:56.930", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58073", "record": "FKIE_CVE-2026-58073", "field": "published"}, {"timestamp": "2026-08-04T18:22:04.086Z", "date_only": false, "value": "2026-08-04T18:22:04.086636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40", "content": "CVE-2026-58073 - service provider console\nAn attacker can impersonate a managed agent in the Veeam Service Provider Console and steal its credentials without needing a login. This allows the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z"}, {"timestamp": "2026-08-04T18:31:28Z", "date_only": false, "value": "2026-08-04T18:31:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J78W-MW5C-PPVH", "record": "GHSA-J78W-MW5C-PPVH", "field": "published"}, {"timestamp": "2026-08-04T18:31:28Z", "date_only": false, "value": "2026-08-04T18:31:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J78W-MW5C-PPVH", "record": "GHSA-J78W-MW5C-PPVH", "field": "modified"}, {"timestamp": "2026-08-05T00:00:00Z", "date_only": false, "value": "2026-08-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0968", "record": "CERTFR-2026-AVI-0968", "field": "last_revision_date"}, {"timestamp": "2026-08-05T00:00:00Z", "date_only": false, "value": "2026-08-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0968", "record": "CERTFR-2026-AVI-0968", "field": "initial_release_date"}, {"timestamp": "2026-08-05T00:00:00Z", "date_only": false, "value": "2026-08-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0968", "record": "CERTFR-2026-AVI-0968", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-05T03:57:08.825Z", "date_only": false, "value": "2026-08-05T03:57:08.825Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-58073", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-05T03:57:08.825Z", "date_only": false, "value": "2026-08-05T03:57:08.825Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58073", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-05T12:45:06.550Z", "date_only": false, "value": "2026-08-05T12:45:06.550526Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "c84c5164-d104-4369-b172-c725875377c3", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1"}, {"timestamp": "2026-08-05T13:05:27.662Z", "date_only": false, "value": "2026-08-05T13:05:27.662852Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p"}, {"timestamp": "2026-08-05T15:00:06.206Z", "date_only": false, "value": "2026-08-05T15:00:06.206363Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/9717", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "f47bcd0c-2415-4b90-a714-489048296dd6", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "url": "https://t.me/thehackernews/9717"}, {"timestamp": "2026-08-05T15:32:15.759Z", "date_only": false, "value": "2026-08-05T15:32:15.759528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "3d9e6a3e-0b90-488a-abd6-c08214a3a567", "content": "CVE-2026-58073 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58073", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23"}, {"timestamp": "2026-08-05T17:21:23.547Z", "date_only": false, "value": "2026-08-05T17:21:23.547515Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0276", "record": "NCSC-2026-0276", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-05T17:21:23.547Z", "date_only": false, "value": "2026-08-05T17:21:23.547515Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0276", "record": "NCSC-2026-0276", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-05T17:21:23.547Z", "date_only": false, "value": "2026-08-05T17:21:23.547515Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0276", "record": "NCSC-2026-0276", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-27T00:00:07.283Z", "date_only": false, "value": "2026-08-27T00:00:07.283043Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SjZ5hMszdpPQGw23TUkEXQRPDwQLdSAayNXrg7MMYe68R1M", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "61686af8-f54b-421a-9377-4b323d3758c0"}, {"timestamp": "2026-08-27T12:00:10.096Z", "date_only": false, "value": "2026-08-27T12:00:10.096507Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "3fda089d-9bcb-4196-b64a-193613808de4"}, {"timestamp": "2026-08-29T00:00:16.485Z", "date_only": false, "value": "2026-08-29T00:00:16.485231Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "2547c9a3-e528-44dc-a342-d5f95219b6ca"}, {"timestamp": "2026-08-29T20:00:06.471Z", "date_only": false, "value": "2026-08-29T20:00:06.471530Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/2483", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "f1224e43-1b86-4237-9e2d-b380658d138d", "content": "Veeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.", "url": "https://t.me/CyberDispatch/2483"}, {"timestamp": "2026-09-03T17:02:54.670Z", "date_only": false, "value": "2026-09-03T17:02:54.670", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58073", "record": "FKIE_CVE-2026-58073", "field": "lastModified"}, {"timestamp": "2026-09-05T03:22:04.887Z", "date_only": false, "value": "2026-09-05T03:22:04.887648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjlsxzmc2b", "record": "CVE-2026-58073", "field": "creation_timestamp", "uuid": "d7b0efc0-b484-4158-9586-e3f8bce25ff5", "content": "Veeam\u306e\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u5411\u3051\u7ba1\u7406\u30c4\u30fc\u30eb\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u306a\u3069\u3092\u5c55\u958b\u3059\u308bVeeam Software\u304c\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u5411\u3051\u306b\u63d0\u4f9b\u3057\u3066\u3044\u308b\u7ba1\u7406\u30c4\u30fc\u30eb\u300cVeeam Service Provider Console\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u91cd\u8981\u5ea6\u304c4\u6bb5\u968e\u4e2d\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306f\u300cCVE-2026-58073\u300d\u300cCVE-2026-58072\u300d\u306e2\u4ef6\u3002\u3044\u305a\u308c\u3082\u30d0\u30b0\u30d0\u30a6\u30f3\u30c6\u30a3\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u901a\u3058\u3066\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002\n\n\u300cCVE-2026-58073\u300d\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjlsxzmc2b"}]}