{"metadata": {"vulnerability": "cve-2026-22182", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-01-06T16:47:17.182Z", "date_only": false, "value": "2026-01-06T16:47:17.182Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-22182", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-22182", "field": "containers.cna.datePublic"}, {"timestamp": "2026-03-13T01:17:59.272Z", "date_only": false, "value": "2026-03-13T01:17:59.272Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-22182", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-13T01:17:59.272Z", "date_only": false, "value": "2026-03-13T01:17:59.272Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-22182", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-13T14:47:07.556Z", "date_only": false, "value": "2026-03-13T14:47:07.556545Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-22182", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-13T14:47:07.556Z", "date_only": false, "value": "2026-03-13T14:47:07.556545Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22182", "record": "FKIE_CVE-2026-22182", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-13T14:47:20.700Z", "date_only": false, "value": "2026-03-13T14:47:20.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-22182", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-13T14:47:20.700Z", "date_only": false, "value": "2026-03-13T14:47:20.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-22182", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-13T19:54:07Z", "date_only": false, "value": "2026-03-13T19:54:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PXX3-V286-JCRQ", "record": "GHSA-PXX3-V286-JCRQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-13T19:54:07.480Z", "date_only": false, "value": "2026-03-13T19:54:07.480", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22182", "record": "FKIE_CVE-2026-22182", "field": "published"}, {"timestamp": "2026-03-13T21:31:46Z", "date_only": false, "value": "2026-03-13T21:31:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PXX3-V286-JCRQ", "record": "GHSA-PXX3-V286-JCRQ", "field": "published"}, {"timestamp": "2026-03-13T21:31:46Z", "date_only": false, "value": "2026-03-13T21:31:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PXX3-V286-JCRQ", "record": "GHSA-PXX3-V286-JCRQ", "field": "modified"}, {"timestamp": "2026-03-18T06:20:09.502Z", "date_only": false, "value": "2026-03-18T06:20:09.502860Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhctssbx4f2m", "record": "CVE-2026-22182", "field": "creation_timestamp", "uuid": "c8737764-e919-4bd5-b96d-312c8d41daea", "url": "https://bsky.app/profile/cyberhub.blog/post/3mhctssbx4f2m"}, {"timestamp": "2026-06-17T10:19:29.867Z", "date_only": false, "value": "2026-06-17T10:19:29.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22182", "record": "FKIE_CVE-2026-22182", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:05.872Z", "date_only": false, "value": "2026-07-09T03:00:05.872422Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2511", "record": "CVE-2026-22182", "field": "creation_timestamp", "uuid": "d4b4d743-b5a1-4be9-8bba-29f1de3a4dd7", "content": "Hey Hunter's,\nDarkShadow is here back again!\n\nOpenCode RCE POC (CVE-2026-22182)\n\nin this CVE the interesting part is, you can execute arbitrary command on the Ai agent but not using any traditional prompting just pure command injection in json\ud83d\udc80\n\nSo guy's if you really enjoy to read POCs then show your love in react \u2764\ufe0f\n\n#bugbountytips #rce #cve", "url": "https://t.me/brutsecurity/2511"}, {"timestamp": "2026-07-11T11:00:05.070Z", "date_only": false, "value": "2026-07-11T11:00:05.070385Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/2511", "record": "CVE-2026-22182", "field": "creation_timestamp", "uuid": "325f3db0-418a-4fd7-97f1-1525158bfa77", "content": "Hey Hunter's,\nDarkShadow is here back again!\n\nOpenCode RCE POC (CVE-2026-22182)\n\nin this CVE the interesting part is, you can execute arbitrary command on the Ai agent but not using any traditional prompting just pure command injection in json\ud83d\udc80\n\nSo guy's if you really enjoy to read POCs then show your love in react \u2764\ufe0f\n\n#bugbountytips #rce #cve", "url": "https://t.me/brutsecurity/2511"}]}