{"metadata": {"vulnerability": "CVE-2026-100176", "count": 17, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-25T13:29:00Z", "date_only": false, "value": "2026-09-25T13:29:00.000Z", "kind": "milestone", "label": "Published", "source": "gna-1 \u00b7 GCVE-1-2026-20279", "record": "GCVE-1-2026-20279", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-25T13:29:00Z", "date_only": false, "value": "2026-09-25T13:29:00.000Z", "kind": "milestone", "label": "Reserved", "source": "gna-1 \u00b7 GCVE-1-2026-20279", "record": "GCVE-1-2026-20279", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-25T13:29:14.017Z", "date_only": false, "value": "2026-09-25T13:29:14.017Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-100176", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-25T13:29:17.333Z", "date_only": false, "value": "2026-09-25T13:29:17.333Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-100176", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-25T13:29:17.333Z", "date_only": false, "value": "2026-09-25T13:29:17.333Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CIRCL", "record": "CVE-2026-100176", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-25T13:55:11.866Z", "date_only": false, "value": "2026-09-25T13:55:11.866831Z", "kind": "other", "label": "Updated", "source": "gna-1 \u00b7 GCVE-1-2026-20279", "record": "GCVE-1-2026-20279", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-25T14:17:17Z", "date_only": false, "value": "2026-09-25T14:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GR26-VJ67-V262", "record": "GHSA-GR26-VJ67-V262", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-25T14:17:17.020Z", "date_only": false, "value": "2026-09-25T14:17:17.020", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100176", "record": "FKIE_CVE-2026-100176", "field": "published"}, {"timestamp": "2026-09-25T14:19:00.423Z", "date_only": false, "value": "2026-09-25T14:19:00.423380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ko367vm4dkqi", "record": "CVE-2026-100176", "field": "creation_timestamp", "uuid": "1a817ff2-11bf-4d15-b6d9-084e0c4001c8", "content": "CVE-2026-100176 - Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip\nCVE ID : CVE-2026-100176\n \n Published : Sept. 25, 2026, 1:29 p.m. | 16\u00a0minutes ago\n \n Description : The AIL Framework's username timeline feature is vulnerable to stored cross-site s...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ko367vm4dkqi"}, {"timestamp": "2026-09-25T14:56:38.970Z", "date_only": false, "value": "2026-09-25T14:56:38.970855Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100176", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-25T14:56:38.970Z", "date_only": false, "value": "2026-09-25T14:56:38.970855Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100176", "record": "FKIE_CVE-2026-100176", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-25T14:59:28.644Z", "date_only": false, "value": "2026-09-25T14:59:28.644Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-100176", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-25T14:59:28.644Z", "date_only": false, "value": "2026-09-25T14:59:28.644Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100176", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-25T15:17:52.300Z", "date_only": false, "value": "2026-09-25T15:17:52.300", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100176", "record": "FKIE_CVE-2026-100176", "field": "lastModified"}, {"timestamp": "2026-09-25T15:31:46Z", "date_only": false, "value": "2026-09-25T15:31:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GR26-VJ67-V262", "record": "GHSA-GR26-VJ67-V262", "field": "published"}, {"timestamp": "2026-09-25T15:31:46Z", "date_only": false, "value": "2026-09-25T15:31:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GR26-VJ67-V262", "record": "GHSA-GR26-VJ67-V262", "field": "modified"}, {"timestamp": "2026-09-27T04:20:04.399Z", "date_only": false, "value": "2026-09-27T04:20:04.399425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhx3rrkxq2f", "record": "CVE-2026-100176", "field": "creation_timestamp", "uuid": "1d272ec6-46f1-4228-91a2-77a8b2fb9719", "content": "CVE-2026-100176 - ail framework\nThe AIL Framework\u2019s username timeline stores usernames without filtering them. If a malicious username contains hidden code, it can run in the browser of any analyst\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ailframework #ailproject #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhx3rrkxq2f"}]}