{"metadata": {"vulnerability": "CVE-2026-100721", "count": 48, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 30}, "linked_omitted": 0}, "data": [{"timestamp": "2026-05-26T05:00:07.813Z", "date_only": false, "value": "2026-05-26T05:00:07.813000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-05-26T07:00:51.002Z", "date_only": false, "value": "2026-05-26T07:00:51.002449+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-09-03T18:54:25.878Z", "date_only": false, "value": "2026-09-03T18:54:25.878000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-09-03T19:02:24.629Z", "date_only": false, "value": "2026-09-03T19:02:24.629508+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-10T19:56:25.335Z", "date_only": false, "value": "2026-09-10T19:56:25.335000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-09-10T20:01:29.938Z", "date_only": false, "value": "2026-09-10T20:01:29.938454+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-09-11T11:24:55.150Z", "date_only": false, "value": "2026-09-11T11:24:55.150000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-09-11T11:40:59Z", "date_only": false, "value": "2026-09-11T11:40:59.000487+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-09-26T02:40:56.226Z", "date_only": false, "value": "2026-09-26T02:40:56.226Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-100721", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-27T01:28:28.596Z", "date_only": false, "value": "2026-09-27T01:28:28.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-100721", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-27T01:28:28.596Z", "date_only": false, "value": "2026-09-27T01:28:28.596000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-27T01:28:28.596Z", "date_only": false, "value": "2026-09-27T01:28:28.596Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-27T01:50:52.875Z", "date_only": false, "value": "2026-09-27T01:50:52.875418+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-27T02:17:17Z", "date_only": false, "value": "2026-09-27T02:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-27T02:17:17.547Z", "date_only": false, "value": "2026-09-27T02:17:17.547", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100721", "record": "FKIE_CVE-2026-100721", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-27T02:20:04.717Z", "date_only": false, "value": "2026-09-27T02:20:04.717688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhqf7qodh2i", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "54a88dac-0c0d-4bca-ab4d-11a132c29ca4", "content": "CVE-2026-100721 - vm2\nThe vm2 library version earlier than 3.12.2 can be tricked into loading code it should block, allowing code running inside a sandbox to execute on the host system. This happens when a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhqf7qodh2i"}, {"timestamp": "2026-09-27T03:31:03Z", "date_only": false, "value": "2026-09-27T03:31:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "published", "linked_record": true}, {"timestamp": "2026-09-27T04:07:06.183Z", "date_only": false, "value": "2026-09-27T04:07:06.183675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwhwellgf726", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "8664ffa5-99ac-4464-91ee-2feecdae5d30", "content": "\ud83d\udea8 CVE-2026-100721 \u2014 CVSS 9.5 CRITICAL\n\nvm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100721\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwhwellgf726"}, {"timestamp": "2026-09-27T06:00:24.304Z", "date_only": false, "value": "2026-09-27T06:00:24.304087Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117341475539176060", "record": "cve-2026-100721", "field": "creation_timestamp", "uuid": "5bb7180f-8dc7-4a2b-b308-3663268d3bde", "content": "CVE-2026-100721: CRITICAL auth bypass in vm2 <3.12.2's NodeVM external-module resolver. Sandbox escape & arbitrary code exec possible. Upgrade to 3.12.2+ ASAP. https://radar.offseq.com/threat/vm2-before-3122-contains-an-authorization-bypass-in-the-nodevm-external-module-resolver-cve-2026-100721-5c70167d00dbbf82 #OffSeq #CVE2026100721 #vm2 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/117341475539176060"}, {"timestamp": "2026-09-27T06:00:26.502Z", "date_only": false, "value": "2026-09-27T06:00:26.502810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwi4pagjcv2q", "record": "cve-2026-100721", "field": "creation_timestamp", "uuid": "4528e429-d4ff-41bc-80ed-ddfb79e3b574", "content": "vm2 <3.12.2 suffers a CRITICAL authorization bypass in NodeVM external-module resolver. Sandbox escape & code execution risk. Upgrade to 3.12.2+ immediately. https://radar.offseq.com/threat/vm2-before-3122-contains-an-authorization-bypass-in-the-nodevm-external-module-resolver-cve-2026-100721-5c7...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwi4pagjcv2q"}, {"timestamp": "2026-09-28T01:01:18.368Z", "date_only": false, "value": "2026-09-28T01:01:18.368358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4haotdp27", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "fe6019ba-bded-4969-a6bf-30f0a47e928d", "content": "\ud83d\udd34 CVE-2026-100721 - Critical (9)\n\nvm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100721/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4haotdp27"}, {"timestamp": "2026-09-28T10:00:09Z", "date_only": false, "value": "2026-09-28T10:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103628", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "a80e91ca-cecc-4f46-ad39-05267c6525d0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100721\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 09:46:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100721 PoC: vm2 <3.12.2 NodeVM external allowlist bypass \u2192 sandbox escape / host RCE. Local Node lab (evil-left-pad), remote sandbox API mass exploit, colorful CLI. PoCbit \u2014 https://pocbit.org/pocs/cve-2026-100721\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103628", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-28T11:00:13Z", "date_only": false, "value": "2026-09-28T11:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/86UKc-a8dyoVcD7Y4niyS9OxM-BpnvAATArPBShCYu67BME", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "255ac885-4ba2-4a54-89b9-9a65128b681b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-28T11:00:13Z", "date_only": false, "value": "2026-09-28T11:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/86UKc-a8dyoVcD7Y4niyS9OxM-BpnvAATArPBShCYu67BME", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "ef4998aa-9c78-43cb-a157-bb3938682fcd"}, {"timestamp": "2026-09-28T16:50:50.404Z", "date_only": false, "value": "2026-09-28T16:50:50.404410Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100721", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-28T16:50:50.404Z", "date_only": false, "value": "2026-09-28T16:50:50.404410Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100721", "record": "FKIE_CVE-2026-100721", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-28T16:51:10.611Z", "date_only": false, "value": "2026-09-28T16:51:10.611Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-100721", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-28T16:51:10.611Z", "date_only": false, "value": "2026-09-28T16:51:10.611Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100721", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T17:17:46.057Z", "date_only": false, "value": "2026-09-28T17:17:46.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100721", "record": "FKIE_CVE-2026-100721", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-28T21:00:04Z", "date_only": false, "value": "2026-09-28T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YMUJMtIkSS3VWfyhuvlmbqaYIB_anho54ywns4AAHnWUn5M", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "c191452a-9cb9-4340-942c-6671d58e9bc5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-28T21:00:04Z", "date_only": false, "value": "2026-09-28T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YMUJMtIkSS3VWfyhuvlmbqaYIB_anho54ywns4AAHnWUn5M", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "2f2cc5fa-637a-4cee-8423-cbb4d6446d39"}, {"timestamp": "2026-09-30T16:17:39.368Z", "date_only": false, "value": "2026-09-30T16:17:39.368000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-09-30T16:41:50.203Z", "date_only": false, "value": "2026-09-30T16:41:50.203373+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-10-05T23:23:51Z", "date_only": false, "value": "2026-10-05T23:23:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-05T23:23:51Z", "date_only": false, "value": "2026-10-05T23:23:51Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-05T23:24:29Z", "date_only": false, "value": "2026-10-05T23:24:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5H3F-Q97H-CCVC", "record": "GHSA-5H3F-Q97H-CCVC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-05T23:24:29Z", "date_only": false, "value": "2026-10-05T23:24:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-5h3f-q97h-ccvc", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "20e77fbb-3cbb-47e5-8747-7f8af784a1ff", "url": "https://github.com/advisories/GHSA-5h3f-q97h-ccvc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T23:24:29Z", "date_only": false, "value": "2026-10-05T23:24:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5H3F-Q97H-CCVC", "record": "GHSA-5H3F-Q97H-CCVC", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-09T11:32:43Z", "date_only": false, "value": "2026-10-09T11:32:43Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CN31177", "record": "CLEANSTART-2026-CN31177", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-10T00:47:51.355Z", "date_only": false, "value": "2026-10-10T00:47:51.355379Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CN31177", "record": "CLEANSTART-2026-CN31177", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T12:19:53Z", "date_only": false, "value": "2026-10-22T12:19:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-11T12:32:07Z", "date_only": false, "value": "2026-11-11T12:32:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-11T12:32:07Z", "date_only": false, "value": "2026-11-11T12:32:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-11T12:32:07Z", "date_only": false, "value": "2026-11-11T12:32:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-11T14:46:07.918Z", "anchors": {"origin": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-09-27T01:50:52.875Z", "date_only": false, "value": "2026-09-27T01:50:52.875418+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-28T10:00:09Z", "date_only": false, "value": "2026-09-28T10:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103628", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "a80e91ca-cecc-4f46-ad39-05267c6525d0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100721\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 09:46:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100721 PoC: vm2 <3.12.2 NodeVM external allowlist bypass \u2192 sandbox escape / host RCE. Local Node lab (evil-left-pad), remote sandbox API mass exploit, colorful CLI. PoCbit \u2014 https://pocbit.org/pocs/cve-2026-100721\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103628", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1764009.0, "hours": 490.0025, "days": 20.416770833333334, "min_seconds": 1677609.0, "max_seconds": 1764009.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-28T10:00:09Z", "date_only": false, "value": "2026-09-28T10:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103628", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "a80e91ca-cecc-4f46-ad39-05267c6525d0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100721\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 09:46:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100721 PoC: vm2 <3.12.2 NodeVM external allowlist bypass \u2192 sandbox escape / host RCE. Local Node lab (evil-left-pad), remote sandbox API mass exploit, colorful CLI. PoCbit \u2014 https://pocbit.org/pocs/cve-2026-100721\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103628", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 2197737.125, "hours": 610.4825347222222, "days": 25.436772280092594, "min_seconds": 2197737.125, "max_seconds": 2197737.125, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-27T01:50:52.875Z", "date_only": false, "value": "2026-09-27T01:50:52.875418+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 3845990.0, "hours": 1068.3305555555555, "days": 44.51377314814815, "min_seconds": 3759590.0, "max_seconds": 3845990.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 3845990.0, "hours": 1068.3305555555555, "days": 44.51377314814815, "min_seconds": 3759590.0, "max_seconds": 3845990.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 2081981.0, "hours": 578.3280555555556, "days": 24.097002314814816, "min_seconds": 2081981.0, "max_seconds": 2081981.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-28T10:00:09Z", "date_only": false, "value": "2026-09-28T10:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103628", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "a80e91ca-cecc-4f46-ad39-05267c6525d0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100721\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 09:46:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100721 PoC: vm2 <3.12.2 NodeVM external allowlist bypass \u2192 sandbox escape / host RCE. Local Node lab (evil-left-pad), remote sandbox API mass exploit, colorful CLI. PoCbit \u2014 https://pocbit.org/pocs/cve-2026-100721\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103628", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}}}