{"metadata": {"vulnerability": "CVE-2026-102911", "count": 20, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-102911", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-29T02:00:00Z", "date_only": false, "value": "2026-09-29T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-102911", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-29T18:09:27.913Z", "date_only": false, "value": "2026-09-29T18:09:27.913Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-102911", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-29T20:14:32Z", "date_only": false, "value": "2026-09-29T20:14:32.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-102911", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-30T03:45:11.640Z", "date_only": false, "value": "2026-09-30T03:45:11.640Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102911", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-30T03:45:11.640Z", "date_only": false, "value": "2026-09-30T03:45:11.640Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-102911", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T04:18:28Z", "date_only": false, "value": "2026-09-30T04:18:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JCGM-7M3G-H3CX", "record": "GHSA-JCGM-7M3G-H3CX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-30T04:18:28.580Z", "date_only": false, "value": "2026-09-30T04:18:28.580", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102911", "record": "FKIE_CVE-2026-102911", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-30T04:30:25.007Z", "date_only": false, "value": "2026-09-30T04:30:25.007619Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117358108618797914", "record": "cve-2026-102911", "field": "creation_timestamp", "uuid": "307ecdd3-22ed-42d7-a429-3b0bf552b683", "content": "CVE-2026-102911: zosmaai pi-llm-wiki (v0.11.0 \u2013 0.11.7) suffers CRITICAL OS command injection in mcp/index.ts. Public exploit available \u2014 remote code execution possible. Upgrade to 0.11.8 ASAP. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Vuln #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117358108618797914"}, {"timestamp": "2026-09-30T04:30:27.161Z", "date_only": false, "value": "2026-09-30T04:30:27.161264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwpj33jn322v", "record": "cve-2026-102911", "field": "creation_timestamp", "uuid": "45c1d565-6f41-4824-8453-8ee69082a119", "content": "CRITICAL OS command injection in zosmaai pi-llm-wiki (0.11.0 \u2013 0.11.7). Public exploit out \u2014 upgrade to 0.11.8 now to block remote control risk. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Security", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwpj33jn322v"}, {"timestamp": "2026-09-30T05:31:16.511Z", "date_only": false, "value": "2026-09-30T05:31:16.511740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwpmhtmlik27", "record": "CVE-2026-102911", "field": "creation_timestamp", "uuid": "26767a18-69c8-4259-a378-96611930f490", "content": "\ud83d\udd34 CVE-2026-102911 - Critical (9.9)\n\nA flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-102911/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwpmhtmlik27"}, {"timestamp": "2026-09-30T05:34:48.791Z", "date_only": false, "value": "2026-09-30T05:34:48.791734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g3g37yd3m2aln", "record": "CVE-2026-102911", "field": "creation_timestamp", "uuid": "3dbf54ec-a4f0-47f5-97dc-dbae90bfa716", "content": "CVE-2026-102911 - zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection\nCVE ID : CVE-2026-102911\n \n Published : Sept. 30, 2026, 4:18 a.m. | 41\u00a0minutes ago\n \n Description : A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknow...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/g3g37yd3m2aln"}, {"timestamp": "2026-09-30T06:31:34Z", "date_only": false, "value": "2026-09-30T06:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JCGM-7M3G-H3CX", "record": "GHSA-JCGM-7M3G-H3CX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-30T06:31:34Z", "date_only": false, "value": "2026-09-30T06:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JCGM-7M3G-H3CX", "record": "GHSA-JCGM-7M3G-H3CX", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-30T16:53:08.171Z", "date_only": false, "value": "2026-09-30T16:53:08.171233Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102911", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-30T16:53:08.171Z", "date_only": false, "value": "2026-09-30T16:53:08.171233Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102911", "record": "FKIE_CVE-2026-102911", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-30T16:54:01.210Z", "date_only": false, "value": "2026-09-30T16:54:01.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-102911", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-30T16:54:01.210Z", "date_only": false, "value": "2026-09-30T16:54:01.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-102911", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T17:16:41.040Z", "date_only": false, "value": "2026-09-30T17:16:41.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102911", "record": "FKIE_CVE-2026-102911", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-30T17:33:00.426Z", "date_only": false, "value": "2026-09-30T17:33:00.426574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwqusfrbvs2x", "record": "CVE-2026-102911", "field": "creation_timestamp", "uuid": "02974513-0705-4fd9-a5d4-6cc92181f127", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-102911: A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7\nCVSS 9.9 \u00b7 EPSS 1.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-102911\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mwqusfrbvs2x"}], "metrics": {"as_of": "2026-11-05T00:15:49.845Z", "anchors": {"origin": {"timestamp": "2026-09-30T03:45:11.640Z", "date_only": false, "value": "2026-09-30T03:45:11.640Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102911", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-30T03:45:11.640Z", "date_only": false, "value": "2026-09-30T03:45:11.640Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102911", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3097838.205048, "hours": 860.5106125133333, "days": 35.85460885472222, "min_seconds": 3097838.205048, "max_seconds": 3097838.205048, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-30T03:45:11.640Z", "date_only": false, "value": "2026-09-30T03:45:11.640Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-102911", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T00:15:49.845Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}