{"metadata": {"vulnerability": "CVE-2026-103415", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-30T14:46:51.792Z", "date_only": false, "value": "2026-09-30T14:46:51.792Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-103415", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T17:36:17.620Z", "date_only": false, "value": "2026-10-14T17:36:17.620Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-103415", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T17:36:17.620Z", "date_only": false, "value": "2026-10-14T17:36:17.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / eclipse", "record": "CVE-2026-103415", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:17:19.790Z", "date_only": false, "value": "2026-10-14T18:17:19.790", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103415", "record": "FKIE_CVE-2026-103415", "field": "published"}, {"timestamp": "2026-10-14T20:10:57.913Z", "date_only": false, "value": "2026-10-14T20:10:57.913564Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxue5r6pjj2z", "record": "CVE-2026-103415", "field": "creation_timestamp", "uuid": "e61ccf04-3dc9-48b4-b73a-3d9120dcb029", "content": "\ud83d\udea8 CVE-2026-103415 \u2014 CVSS 9.3 CRITICAL\n\nWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103415\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxue5r6pjj2z"}, {"timestamp": "2026-10-14T23:11:33.214Z", "date_only": false, "value": "2026-10-14T23:11:33.214419Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441789436833030", "record": "CVE-2026-103415", "field": "creation_timestamp", "uuid": "5ad4b1c8-2721-4fd4-99b2-664526e34272", "content": "CVE-2026-103415  When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate.\nOnly the client path is affected.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103415https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-5pv3-rhf5-gwgqhttps://gitlab.eclipse.org/security/cve-assignment/-/work_items/357#EclipseFoundation #NetXDuo#CVE_2026_103415#bot", "url": "https://infosec.exchange/users/cve/statuses/117441789436833030"}, {"timestamp": "2026-10-15T04:30:05.785Z", "date_only": false, "value": "2026-10-15T04:30:05.785429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxva2bln2c2o", "record": "CVE-2026-103415", "field": "creation_timestamp", "uuid": "6fc75948-b46c-409c-a043-534c35355f09", "content": "CVE-2026-103415 - netx duo\nThe NetX Duo client may copy a server-provided cookie into a follow\u2011up TLS handshake message without checking its size. A malicious server can send an oversized cookie,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netxduo #eclipsefoundation #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxva2bln2c2o"}, {"timestamp": "2026-10-16T20:12:26.899Z", "date_only": false, "value": "2026-10-16T20:12:26.899295Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103415", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T20:12:26.899Z", "date_only": false, "value": "2026-10-16T20:12:26.899295Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103415", "record": "FKIE_CVE-2026-103415", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T20:12:39.252Z", "date_only": false, "value": "2026-10-16T20:12:39.252Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-103415", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:12:39.252Z", "date_only": false, "value": "2026-10-16T20:12:39.252Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103415", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:17:13.370Z", "date_only": false, "value": "2026-10-16T21:17:13.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103415", "record": "FKIE_CVE-2026-103415", "field": "lastModified"}]}