{"metadata": {"vulnerability": "CVE-2026-10109", "count": 45, "kinds": {"milestone": 22, "sighting": 6, "kev": 0, "other": 17}}, "data": [{"timestamp": "2026-05-29T16:58:35.341Z", "date_only": false, "value": "2026-05-29T16:58:35.341Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-10109", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": true, "value": "2026-06-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "vendor_advisories.14.published_at", "linked_record": true}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": true, "value": "2026-06-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2026-06-24T00:00:00Z", "date_only": true, "value": "2026-06-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": true, "value": "2026-06-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "vendor_advisories.3.published_at", "linked_record": true}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": false, "value": "2026-06-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": true, "value": "2026-06-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": false, "value": "2026-06-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-06-30T20:02:13.026Z", "date_only": false, "value": "2026-06-30T20:02:13.026Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10109", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-30T20:02:13.026Z", "date_only": false, "value": "2026-06-30T20:02:13.026Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-10109", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-30T20:17:26Z", "date_only": false, "value": "2026-06-30T20:17:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FQ2G-WJ3X-6HC2", "record": "GHSA-FQ2G-WJ3X-6HC2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-30T20:17:26.603Z", "date_only": false, "value": "2026-06-30T20:17:26.603", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10109", "record": "FKIE_CVE-2026-10109", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-30T21:31:43Z", "date_only": false, "value": "2026-06-30T21:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FQ2G-WJ3X-6HC2", "record": "GHSA-FQ2G-WJ3X-6HC2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-30T21:31:43Z", "date_only": false, "value": "2026-06-30T21:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FQ2G-WJ3X-6HC2", "record": "GHSA-FQ2G-WJ3X-6HC2", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-30T22:14:45.047Z", "date_only": false, "value": "2026-06-30T22:14:45.047445Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpjzniyuv52w", "record": "CVE-2026-10109", "field": "creation_timestamp", "uuid": "730c9c34-6185-467c-8547-d95d7754d05b", "content": "\u5bfe\u8c61\u88fd\u54c1\u540d\u3068\u30d0\u30fc\u30b8\u30e7\u30f3\uff1a\u8a18\u8f09\u306a\u3057 \u8106\u5f31\u6027\u306e\u5185\u5bb9\uff1aPDF\u30d5\u30a1\u30a4\u30eb\u51e6\u7406\u306b\u304a\u3051\u308b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u53ef\u80fd\u6027 \u5f71\u97ff\u3092\u53d7\u3051\u308b\u5bfe\u8c61\uff1aPDF\u30d5\u30a1\u30a4\u30eb\u95b2\u89a7\u6a5f\u80fd \u653b\u6483\u8005\u304c\u53ef\u80fd\u306b\u306a\u308b\u884c\u70ba\uff1a\u30b5\u30fc\u30d3\u30b9\u904b\u7528\u59a8\u5bb3\u306e\u53ef\u80fd\u6027\u304c\u2026\nCVE-2026-10109 CVSS 9.8 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mpjzniyuv52w"}, {"timestamp": "2026-07-01T03:56:04.853Z", "date_only": false, "value": "2026-07-01T03:56:04.853789Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10109", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-01T03:56:04.853Z", "date_only": false, "value": "2026-07-01T03:56:04.853789Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10109", "record": "FKIE_CVE-2026-10109", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-01T17:27:00.915Z", "date_only": false, "value": "2026-07-01T17:27:00.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-10109", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-01T17:27:00.915Z", "date_only": false, "value": "2026-07-01T17:27:00.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10109", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-02T02:40:21.810Z", "date_only": false, "value": "2026-07-02T02:40:21.810567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmyxdq5ub2v", "record": "CVE-2026-10109", "field": "creation_timestamp", "uuid": "8958a224-f8ff-4e1d-88c4-7948963dadad", "content": "A critical IBM Db2 RCE flaw (CVE-2026-10109) allows pre-auth code execution. IBM patched it plus two other Db2 bugs. Update 11.5 and 12.1 now.", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmyxdq5ub2v"}, {"timestamp": "2026-07-03T05:07:07.073Z", "date_only": false, "value": "2026-07-03T05:07:07.073203Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpprmq5bvu2l", "record": "CVE-2026-10109", "field": "creation_timestamp", "uuid": "0c2de432-0c55-4b5e-b963-cc64428285cf", "content": "\ud83d\udccc CVE-2026-10109 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling. https://www.cyberhub.blog/cves/CVE-2026-10109", "url": "https://bsky.app/profile/cyberhub.blog/post/3mpprmq5bvu2l"}, {"timestamp": "2026-07-03T07:29:23.804Z", "date_only": false, "value": "2026-07-03T07:29:23.804902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzl5imjd2d", "record": "CVE-2026-10109", "field": "creation_timestamp", "uuid": "eef32475-7f73-42b2-b531-c128fdd8d987", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10109 \u0432 IBM Db2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DB5F2348-2DF6-4584-A1E1-635632C413E0", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzl5imjd2d"}, {"timestamp": "2026-07-30T00:00:00Z", "date_only": true, "value": "2026-07-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.5.published_at", "linked_record": true}, {"timestamp": "2026-07-30T19:36:17.213Z", "date_only": false, "value": "2026-07-30T19:36:17.213308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrv6rsaho22t", "record": "CVE-2026-10109", "field": "creation_timestamp", "uuid": "e3ea68e7-8061-4d81-8ad2-c54f9d1cbc3b", "content": "\u300cIBM Db2\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u66ab\u5b9a\u7684\u306a\u4fee\u6b63\u3092\u63d0\u4f9b\n\nIBM\u306f\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u88fd\u54c1\u300cIBM Db2\u300d\u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u670823\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3059\u308b\u3068\u3068\u3082\u306b\u3001\u66ab\u5b9a\u7684\u306a\u5bfe\u7b56\u3092\u884c\u3063\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u306a\u304b\u3067\u3082\u300cCVE-2026-10109\u300d\u306b\u3064\u3044\u3066\u306f\u5f71\u97ff\u304c\u5927\u304d\u3044\u3002\u300cDRDA\u300d\u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u51e6\u7406\u306b\u5224\u660e\u3057\u305f\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u306f\u300c9.8\u300d\u3001\u91cd\u8981\u5ea6\u306f4\u6bb5\u968e\u4e2d\u3082\u3063\u3068...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrv6rsaho22t"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": true, "value": "2026-07-31", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-08-02T00:00:00Z", "date_only": true, "value": "2026-08-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.16.published_at", "linked_record": true}, {"timestamp": "2026-08-03T00:00:00Z", "date_only": true, "value": "2026-08-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-08-04T00:00:00Z", "date_only": true, "value": "2026-08-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2026-08-05T00:00:00Z", "date_only": true, "value": "2026-08-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.8.published_at", "linked_record": true}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": true, "value": "2026-08-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": true, "value": "2026-08-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-08-10T00:00:00Z", "date_only": true, "value": "2026-08-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "vendor_advisories.3.published_at", "linked_record": true}, {"timestamp": "2026-08-11T00:00:00Z", "date_only": true, "value": "2026-08-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-08-12T00:00:00Z", "date_only": true, "value": "2026-08-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1032", "record": "CERTFR-2026-AVI-1032", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-14T09:50:10.440Z", "date_only": false, "value": "2026-10-14T09:50:10.440Z", "kind": "other", "label": "Document generated", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-112", "record": "VDE-2026-112", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-20T08:07:23.049Z", "date_only": false, "value": "2026-10-20T08:07:23.049092Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/117472208003232051", "record": "CVE-2026-10109", "field": "creation_timestamp", "uuid": "d8d4fd12-4fa0-4186-87ea-ee1cc02eae4d", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-112METTLER TOLEDO: STARe Software DB2 vulnerable componentCVE-2026-10109\nA vulnerability identified as CVE-2026-10109 affects the external component IBM Db2 12.1.2 delivered with STARe v20.00. The vulnerability is associated with improper handling of the pre-authentication DRDA handsha\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-112/CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-112.json\n#OT #Advisory", "url": "https://infosec.exchange/users/certvde/statuses/117472208003232051"}, {"timestamp": "2026-10-20T10:00:00Z", "date_only": false, "value": "2026-10-20T10:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-112", "record": "VDE-2026-112", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-20T10:00:00Z", "date_only": false, "value": "2026-10-20T10:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-112", "record": "VDE-2026-112", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-20T10:00:00Z", "date_only": false, "value": "2026-10-20T10:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-112", "record": "VDE-2026-112", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-25T21:10:00.770Z", "date_only": false, "value": "2026-10-25T21:10:00.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10109", "record": "FKIE_CVE-2026-10109", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T19:28:18.156Z", "anchors": {"origin": {"timestamp": "2026-06-26T00:00:00Z", "date_only": true, "value": "2026-06-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-26T00:00:00Z", "date_only": true, "value": "2026-06-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 11474898.156935, "hours": 3187.4717102597224, "days": 132.81132126082176, "min_seconds": 11388498.156935, "max_seconds": 11474898.156935, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-26T00:00:00Z", "date_only": true, "value": "2026-06-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0810", "record": "CERTFR-2026-AVI-0810", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T19:28:18.156Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}