{"metadata": {"vulnerability": "CVE-2026-103572", "count": 32, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-30T20:48:29.840Z", "date_only": false, "value": "2026-09-30T20:48:29.840Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-103572", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:56:15Z", "date_only": false, "value": "2026-10-13T11:56:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "a7245dcf-e27c-4f54-9bd6-21f4fccd6641", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-103572", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T18:56:39.614Z", "date_only": false, "value": "2026-10-13T18:56:39.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-103572", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:02:50.817Z", "date_only": false, "value": "2026-10-13T19:02:50.817917Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117435149213812212", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "f9a47b1a-810f-43c8-a435-7685e5243ff6", "content": "CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103572https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572#Microsoft #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10#CVE_2026_103572#bot", "url": "https://infosec.exchange/users/cve/statuses/117435149213812212"}, {"timestamp": "2026-10-13T19:17:53Z", "date_only": false, "value": "2026-10-13T19:17:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9HQ7-R47P-V8H6", "record": "GHSA-9HQ7-R47P-V8H6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T19:17:53.293Z", "date_only": false, "value": "2026-10-13T19:17:53.293", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103572", "record": "FKIE_CVE-2026-103572", "field": "published"}, {"timestamp": "2026-10-13T21:13:16.613Z", "date_only": false, "value": "2026-10-13T21:13:16.613335Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103572", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T21:13:16.613Z", "date_only": false, "value": "2026-10-13T21:13:16.613335Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103572", "record": "FKIE_CVE-2026-103572", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T21:15:35.236Z", "date_only": false, "value": "2026-10-13T21:15:35.236Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103572", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T21:33:02Z", "date_only": false, "value": "2026-10-13T21:33:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9HQ7-R47P-V8H6", "record": "GHSA-9HQ7-R47P-V8H6", "field": "published"}, {"timestamp": "2026-10-13T21:33:02Z", "date_only": false, "value": "2026-10-13T21:33:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9HQ7-R47P-V8H6", "record": "GHSA-9HQ7-R47P-V8H6", "field": "modified"}, {"timestamp": "2026-10-13T22:17:25.633Z", "date_only": false, "value": "2026-10-13T22:17:25.633", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103572", "record": "FKIE_CVE-2026-103572", "field": "lastModified"}, {"timestamp": "2026-10-13T23:55:27.134Z", "date_only": false, "value": "2026-10-13T23:55:27.134940Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackplayers.bsky.social/post/3mxsaaau2m322", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "7e293375-8681-4de1-9ff2-1c5a831021c5", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)  https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "url": "https://bsky.app/profile/hackplayers.bsky.social/post/3mxsaaau2m322"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T00:53:28.247Z", "date_only": false, "value": "2026-10-14T00:53:28.247492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxsdhu5am2h2", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "acbd0350-c195-4abc-8fa5-7865bfa1d8a3", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "url": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxsdhu5am2h2"}, {"timestamp": "2026-10-14T00:58:25.684Z", "date_only": false, "value": "2026-10-14T00:58:25.684545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxsdqrkdll42", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "beebf140-6c30-411b-839c-120f12efdbf6", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "url": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxsdqrkdll42"}, {"timestamp": "2026-10-14T01:45:12.587Z", "date_only": false, "value": "2026-10-14T01:45:12.587375Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxsgeii6g32w", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "6ef63427-b3a4-40b0-a4b1-2e4e79d59bf0", "content": "PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.\n\n#CVE2026103572 #VisualStudio #Copilot #RCE #MicrosoftSecurity #SSMS #Cybersecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxsgeii6g32w"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "66c76775-03ad-4083-91ef-ae6ec73e0935", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T09:06:03.666Z", "date_only": false, "value": "2026-10-14T09:06:03.666327Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117438464871282824", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "ffe54389-c542-4708-8b9c-434adb253a3a", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)\nMicrosoft has shipped a patch for a remote code execution vulnerability (CVE-2026-103572) in Visual Studio Copilot and SQL Server Management Studio. The flaw let Copilot bypass a path validation check, write to its own settings and configuration files, and achieve arbitrary command execution. https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "url": "https://infosec.exchange/users/edwardk/statuses/117438464871282824"}, {"timestamp": "2026-10-14T09:06:04.621Z", "date_only": false, "value": "2026-10-14T09:06:04.621299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxt6ytoec42y", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "702c647d-7d42-4810-8e0f-d805eb938a82", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)\n\nMicrosoft has shipped a patch for a remote code execution vulnerability (CVE-2026-103572) in Visual Studio Copilot and SQL Server Management Studio. The fl... https://threatintel.cc/2026/10/14/visual-studio-copilot-and-ssms.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxt6ytoec42y"}, {"timestamp": "2026-10-15T22:19:06.240Z", "date_only": false, "value": "2026-10-15T22:19:06.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-103572", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:19:06.240Z", "date_only": false, "value": "2026-10-15T22:19:06.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-103572", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:22:37.958Z", "date_only": false, "value": "2026-10-15T22:22:37.958975Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxx3y2wgoc22", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "8802630a-0400-48d9-88fe-abc08866d1b2", "content": "Visual Studio\u3068SSMS\u306eCopilot\u306bRCE\u8106\u5f31\u6027\u300cCVE-2026-103572\u300d\u2015\u7814\u7a76\u8005\u304cPoC\u516c\u958b\u3001Microsoft\u304c\u4fee\u6b63 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxx3y2wgoc22"}, {"timestamp": "2026-10-15T22:40:22.861Z", "date_only": false, "value": "2026-10-15T22:40:22.861687Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mxx4xt5k3q2v", "record": "CVE-2026-103572", "field": "creation_timestamp", "uuid": "91362c94-44cc-413a-82a9-7ffe556d2201", "content": "Visual Studio\u3068SSMS\u306eCopilot\u306bRCE\u8106\u5f31\u6027\u300cCVE-2026-103572\u300d\u2015\u7814\u7a76\u8005\u304cPoC\u516c\u958b\u3001Microsoft\u304c\u4fee\u6b63|\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab\n\nhttps://www.yayafa.com/2911692/\n\nMicrosoft\u306f2026\u5e7410\u6708\u2026", "url": "https://bsky.app/profile/yayafa.bsky.social/post/3mxx4xt5k3q2v"}]}