{"metadata": {"vulnerability": "CVE-2026-102692", "count": 13, "kinds": {"milestone": 3, "sighting": 4, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-29T16:10:04.076Z", "date_only": false, "value": "2026-09-29T16:10:04.076Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-102692", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T16:48:35.776Z", "date_only": false, "value": "2026-10-16T16:48:35.776Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102692", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T16:48:35.776Z", "date_only": false, "value": "2026-10-16T16:48:35.776Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-102692", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:57:59.776Z", "date_only": false, "value": "2026-10-16T16:57:59.776225Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451645207327343", "record": "CVE-2026-102692", "field": "creation_timestamp", "uuid": "6b091e47-18d3-4fc0-8740-3c8ce719d664", "content": "CVE-2026-102692 RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoAP Block2 option values without enforcing the 20-bit maximum block number, allowing block offset multiplication to overflow on 32-bit targets. The affected master baseline is commit aeeae69e; the verified fix is later on master and remains unreleased. The oversized value passes from coap_get_blockopt() to coap_block_slicer_init(). A remote CoAP client can send a malformed Block2 option that produces an invalid slice range and can cause out-of-bounds memory access, denial of service, or memory corruption. This vulnerability is fixed in 2026.07.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102692https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8365-gj33-rgpfhttps://github.com/RIOT-OS/RIOT/commit/6b283ace3565d931b3edff7e115d4f79339253b8https://github.com/RIOT-OS/RIOT/commit/ee1fa0ef91874494823d476392572aeefdbc6b74https://github.com/RIOT-OS/RIOT/releases/tag/2026.07#RIOT-OS #RIOT#CVE_2026_102692#bot", "url": "https://infosec.exchange/users/cve/statuses/117451645207327343"}, {"timestamp": "2026-10-16T17:17:16.980Z", "date_only": false, "value": "2026-10-16T17:17:16.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102692", "record": "FKIE_CVE-2026-102692", "field": "published"}, {"timestamp": "2026-10-16T18:07:30.983Z", "date_only": false, "value": "2026-10-16T18:07:30.983511Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxz66uf4yk2x", "record": "CVE-2026-102692", "field": "creation_timestamp", "uuid": "77aa81f8-a642-4d3b-8e34-cc0f00521296", "content": "\ud83d\udea8 CVE-2026-102692 \u2014 CVSS 9.1 CRITICAL\n\nRIOT is an open-source microcontroller operating system designed for Internet of Things devices and other e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102692\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxz66uf4yk2x"}, {"timestamp": "2026-10-16T19:20:04.509Z", "date_only": false, "value": "2026-10-16T19:20:04.509381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzcalzsfy2z", "record": "CVE-2026-102692", "field": "creation_timestamp", "uuid": "65c2d00c-1b0a-4c81-91d9-45e33e28a2b9", "content": "CVE-2026-102692 - riot\nThe nanocoap component in RIOT OS can be tricked by a specially crafted network request into reading outside its memory space, which may cause the device to freeze or behave unpredictably.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#riot #riotos #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzcalzsfy2z"}, {"timestamp": "2026-10-16T20:52:34.763Z", "date_only": false, "value": "2026-10-16T20:52:34.763359Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102692", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T20:52:34.763Z", "date_only": false, "value": "2026-10-16T20:52:34.763359Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102692", "record": "FKIE_CVE-2026-102692", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T21:01:49.670Z", "date_only": false, "value": "2026-10-16T21:01:49.670106Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxzhwkfr6s22", "record": "CVE-2026-102692", "field": "creation_timestamp", "uuid": "c0dd0e94-72ed-4661-9c79-a1034f161705", "content": "RIOT 2026.07\u672a\u6e80\u306enanocoap\u306b\u8106\u5f31\u6027\u3002CoAP Block2\u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u904e\u5927\u5024\u306732\u30d3\u30c3\u30c8\u30bf\u30fc\u30b2\u30c3\u30c8\u306e\u30d6\u30ed\u30c3\u30af\u30aa\u30d5\u30bb\u30c3\u30c8\u4e57\u7b97\u304c\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u9818\u57df\u5916\u30e1\u30e2\u30ea\u30a2\u30af\u30bb\u30b9\u3001\u30b5\u30fc\u2026\nCVE-2026-102692 CVSS 9.1 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxzhwkfr6s22"}, {"timestamp": "2026-10-16T21:20:02.887Z", "date_only": false, "value": "2026-10-16T21:20:02.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-102692", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:20:02.887Z", "date_only": false, "value": "2026-10-16T21:20:02.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102692", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T22:17:08.800Z", "date_only": false, "value": "2026-10-16T22:17:08.800", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102692", "record": "FKIE_CVE-2026-102692", "field": "lastModified"}]}