{"metadata": {"vulnerability": "CVE-2026-75949", "count": 22, "kinds": {"milestone": 4, "sighting": 5, "kev": 5, "other": 8}}, "data": [{"timestamp": "2026-08-18T16:11:15.469Z", "date_only": false, "value": "2026-08-18T16:11:15.469Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-19T15:18:09Z", "date_only": false, "value": "2026-08-19T15:18:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QP23-QQW8-MHP6", "record": "GHSA-QP23-QQW8-MHP6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-19T15:18:09.440Z", "date_only": false, "value": "2026-08-19T15:18:09.440", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75949", "record": "FKIE_CVE-2026-75949", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-19T15:32:39Z", "date_only": false, "value": "2026-08-19T15:32:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QP23-QQW8-MHP6", "record": "GHSA-QP23-QQW8-MHP6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-19T15:32:39Z", "date_only": false, "value": "2026-08-19T15:32:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QP23-QQW8-MHP6", "record": "GHSA-QP23-QQW8-MHP6", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-19T16:11:35.967Z", "date_only": false, "value": "2026-08-19T16:11:35.967854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4o6sont2j", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "ad52bef6-cfed-4f68-8f90-c64e852a957b", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4o6sont2j"}, {"timestamp": "2026-08-19T18:50:06.632Z", "date_only": false, "value": "2026-08-19T18:50:06.632326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthfjmt5oq2b", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "f27754a1-c447-4fbc-b82d-7380ca2e5f66", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mthfjmt5oq2b"}, {"timestamp": "2026-08-20T13:00:04.065Z", "date_only": false, "value": "2026-08-20T13:00:04.065598Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "07a6d27e-0a6b-46f9-9a29-2a46fefc21e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-21T16:04:49.432Z", "date_only": false, "value": "2026-08-21T16:04:49.432135Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-75949", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-21T16:04:49.432Z", "date_only": false, "value": "2026-08-21T16:04:49.432135Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75949", "record": "FKIE_CVE-2026-75949", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-21T16:18:14.275Z", "date_only": false, "value": "2026-08-21T16:18:14.275Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-75949", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T19:16:00.768Z", "date_only": false, "value": "2026-08-21T19:16:00.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-21T19:16:00.768Z", "date_only": false, "value": "2026-08-21T19:16:00.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Joomla", "record": "CVE-2026-75949", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-26T16:36:16.990Z", "date_only": false, "value": "2026-08-26T16:36:16.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-75949", "record": "FKIE_CVE-2026-75949", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-75949", "field": "status.status_updated_at", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-22T13:50:27.661Z", "date_only": false, "value": "2026-09-22T13:50:27.661Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-75949", "field": "evidence.0.details.added_date", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T14:00:01Z", "date_only": false, "value": "2026-09-23T14:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T14:00:36.825Z", "date_only": false, "value": "2026-09-23T14:00:36.825476Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/550d42d5-c0a7-4671-80e0-1ee97a3ea93c", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "4971a62c-311c-4fad-820f-c3c3e1c0a67f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/550d42d5-c0a7-4671-80e0-1ee97a3ea93c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-23T14:00:36.855Z", "date_only": false, "value": "2026-09-23T14:00:36.855647Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7c82b26c-c84e-429f-9931-f89ff0f968fd", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "1dd37b41-699d-4f30-9207-d7b95a0f2969", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7c82b26c-c84e-429f-9931-f89ff0f968fd", "metric_role": "exploitation", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-11T04:58:36.342Z", "anchors": {"origin": {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-20T13:00:04.065Z", "date_only": false, "value": "2026-08-20T13:00:04.065598Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "07a6d27e-0a6b-46f9-9a29-2a46fefc21e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 2934584.621, "hours": 815.1623947222222, "days": 33.965099780092594, "min_seconds": 2934584.621, "max_seconds": 2934584.621, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 2934584.621, "hours": 815.1623947222222, "days": 33.965099780092594, "min_seconds": 2934584.621, "max_seconds": 2934584.621, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 80361.686, "hours": 22.322690555555557, "days": 0.9301121064814815, "min_seconds": 80361.686, "max_seconds": 80361.686, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-20T13:00:04.065Z", "date_only": false, "value": "2026-08-20T13:00:04.065598Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "07a6d27e-0a6b-46f9-9a29-2a46fefc21e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 7222673.963167, "hours": 2006.2983231019443, "days": 83.59576346258102, "min_seconds": 7222673.963167, "max_seconds": 7222673.963167, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-19T14:40:42.379Z", "date_only": false, "value": "2026-08-19T14:40:42.379Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-75949", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T04:58:36.342Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 4288089.342167, "hours": 1191.1359283797224, "days": 49.63066368248843, "min_seconds": 4288089.342167, "max_seconds": 4288089.342167, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-22T13:50:27Z", "date_only": false, "value": "2026-09-22T13:50:27+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-75949", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7c82b26c-c84e-429f-9931-f89ff0f968fd", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T04:58:36.342Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 7142312.277167, "hours": 1983.9756325463889, "days": 82.66565135609953, "min_seconds": 7142312.277167, "max_seconds": 7142312.277167, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-20T13:00:04.065Z", "date_only": false, "value": "2026-08-20T13:00:04.065598Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "record": "CVE-2026-75949", "field": "creation_timestamp", "uuid": "07a6d27e-0a6b-46f9-9a29-2a46fefc21e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T04:58:36.342Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}