{"metadata": {"vulnerability": "CVE-2026-0776", "count": 21, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-01-08T22:50:50.092Z", "date_only": false, "value": "2026-01-08T22:50:50.092Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-0776", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-08T22:50:50.127Z", "date_only": false, "value": "2026-01-08T22:50:50.127Z", "kind": "other", "label": "Date Assigned", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.dateAssigned"}, {"timestamp": "2026-01-09T05:00:00Z", "date_only": false, "value": "2026-01-09T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-040/", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "4bacac59-635f-4d97-813a-b80a8ab80a4f", "url": "http://www.zerodayinitiative.com/advisories/ZDI-26-040/"}, {"timestamp": "2026-01-09T16:50:36.139Z", "date_only": false, "value": "2026-01-09T16:50:36.139Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-23T03:29:18.996Z", "date_only": false, "value": "2026-01-23T03:29:18.996Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-0776", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-23T03:29:18.996Z", "date_only": false, "value": "2026-01-23T03:29:18.996Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-23T04:16:04Z", "date_only": false, "value": "2026-01-23T04:16:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2PHJ-RV58-QQ6M", "record": "GHSA-2PHJ-RV58-QQ6M", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-01-23T04:16:04.933Z", "date_only": false, "value": "2026-01-23T04:16:04.933", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0776", "record": "FKIE_CVE-2026-0776", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-23T06:31:24Z", "date_only": false, "value": "2026-01-23T06:31:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2PHJ-RV58-QQ6M", "record": "GHSA-2PHJ-RV58-QQ6M", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-23T06:31:24Z", "date_only": false, "value": "2026-01-23T06:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2PHJ-RV58-QQ6M", "record": "GHSA-2PHJ-RV58-QQ6M", "field": "modified", "linked_record": true}, {"timestamp": "2026-01-24T04:55:27.401Z", "date_only": false, "value": "2026-01-24T04:55:27.401832Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0776", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-24T04:55:27.401Z", "date_only": false, "value": "2026-01-24T04:55:27.401832Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0776", "record": "FKIE_CVE-2026-0776", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-02-26T14:44:25.231Z", "date_only": false, "value": "2026-02-26T14:44:25.231Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-0776", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T14:44:25.231Z", "date_only": false, "value": "2026-02-26T14:44:25.231Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0776", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T14:18:48Z", "date_only": false, "value": "2026-04-08T14:18:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2026/4/8/nodejs-trust-falls-dangerous-module-resolution-on-windows", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "b8c9108a-c7f2-4ea2-b0ce-93d659d181f7", "url": "https://www.thezdi.com/blog/2026/4/8/nodejs-trust-falls-dangerous-module-resolution-on-windows"}, {"timestamp": "2026-06-10T19:00:12Z", "date_only": false, "value": "2026-06-10T19:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s-lekd_CMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "4f9ad46c-fcb7-418e-935d-c80a7ce94649", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T10:11:21.757Z", "date_only": false, "value": "2026-06-17T10:11:21.757", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0776", "record": "FKIE_CVE-2026-0776", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-16T19:00:20.491Z", "date_only": false, "value": "2026-07-16T19:00:20.491315Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "a43a0c5e-5ec3-412b-83bc-59ee1b992337"}, {"timestamp": "2026-07-17T00:00:36.886Z", "date_only": false, "value": "2026-07-17T00:00:36.886752Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "264a48f9-4a84-4a38-b9d8-73aa885b7a48"}, {"timestamp": "2026-07-18T00:00:23.721Z", "date_only": false, "value": "2026-07-18T00:00:23.721316Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "36b5c535-614b-4a31-801d-14f5fcbe8415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T00:00:09.165Z", "date_only": false, "value": "2026-07-21T00:00:09.165750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/94385", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "ea799300-1cee-4f84-b5b5-371fa7b6e47e", "url": "https://t.me/GithubRedTeam/94385", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T21:00:53.609Z", "anchors": {"origin": {"timestamp": "2026-01-09T16:50:36.139Z", "date_only": false, "value": "2026-01-09T16:50:36.139Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-01-09T16:50:36.139Z", "date_only": false, "value": "2026-01-09T16:50:36.139Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-06-10T19:00:12Z", "date_only": false, "value": "2026-06-10T19:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s-lekd_CMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "4f9ad46c-fcb7-418e-935d-c80a7ce94649", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 13140575.861, "hours": 3650.159961388889, "days": 152.0899983912037, "min_seconds": 13140575.861, "max_seconds": 13140575.861, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-09T16:50:36.139Z", "date_only": false, "value": "2026-01-09T16:50:36.139Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-10T19:00:12Z", "date_only": false, "value": "2026-06-10T19:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s-lekd_CMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "4f9ad46c-fcb7-418e-935d-c80a7ce94649", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 26799017.470897, "hours": 7444.171519693611, "days": 310.17381332056715, "min_seconds": 26799017.470897, "max_seconds": 26799017.470897, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-09T16:50:36.139Z", "date_only": false, "value": "2026-01-09T16:50:36.139Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-0776", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T21:00:53.609Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 13658441.609897, "hours": 3794.0115583047223, "days": 158.08381492936343, "min_seconds": 13658441.609897, "max_seconds": 13658441.609897, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-10T19:00:12Z", "date_only": false, "value": "2026-06-10T19:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s-lekd_CMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0", "record": "CVE-2026-0776", "field": "creation_timestamp", "uuid": "4f9ad46c-fcb7-418e-935d-c80a7ce94649", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T21:00:53.609Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}