{"metadata": {"vulnerability": "CVE-2026-105429", "count": 21, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-105429", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-07-15T00:00:00Z", "date_only": false, "value": "2026-07-15T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-105429", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-105429", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-105429", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-105429", "field": "containers.cna.timeline.4.time"}, {"timestamp": "2026-10-05T12:51:29.957Z", "date_only": false, "value": "2026-10-05T12:51:29.957Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105429", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T20:16:42Z", "date_only": false, "value": "2026-10-13T20:16:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-105429", "record": "CVE-2026-105429", "field": "creation_timestamp", "uuid": "6dc56150-a7d3-47d7-bcf0-9730394e7e61", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-105429"}, {"timestamp": "2026-10-14T04:33:44.856Z", "date_only": false, "value": "2026-10-14T04:33:44.856Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105429", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T04:33:44.856Z", "date_only": false, "value": "2026-10-14T04:33:44.856Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / securin", "record": "CVE-2026-105429", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T05:16:42Z", "date_only": false, "value": "2026-10-14T05:16:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2RQ5-4VW4-M3VG", "record": "GHSA-2RQ5-4VW4-M3VG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T05:16:42.487Z", "date_only": false, "value": "2026-10-14T05:16:42.487", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105429", "record": "FKIE_CVE-2026-105429", "field": "published"}, {"timestamp": "2026-10-14T05:53:14.913Z", "date_only": false, "value": "2026-10-14T05:53:14.913995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ftm2uwdh3lkj7", "record": "CVE-2026-105429", "field": "creation_timestamp", "uuid": "2b1c01eb-fb3d-444c-a0dc-db8c5650c188", "content": "CVE-2026-105429 - NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution\nCVE ID : CVE-2026-105429\n \n Published : Oct. 14, 2026, 4:33 a.m. | 52\u00a0minutes ago\n \n Description : Improper neutralization of special elements in the NetBi...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/ftm2uwdh3lkj7"}, {"timestamp": "2026-10-14T06:31:13Z", "date_only": false, "value": "2026-10-14T06:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2RQ5-4VW4-M3VG", "record": "GHSA-2RQ5-4VW4-M3VG", "field": "published"}, {"timestamp": "2026-10-14T06:31:13Z", "date_only": false, "value": "2026-10-14T06:31:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2RQ5-4VW4-M3VG", "record": "GHSA-2RQ5-4VW4-M3VG", "field": "modified"}, {"timestamp": "2026-10-14T16:47:06.915Z", "date_only": false, "value": "2026-10-14T16:47:06.915444Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440277803345290", "record": "CVE-2026-105429", "field": "creation_timestamp", "uuid": "6b7228fe-7d98-4e92-b8d9-87e0864141bb", "content": "CVE-2026-105429 NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide OpenSSH drop-in file (/etc/ssh/ssh_config.d/99-netbird.conf, or the equivalent under %PROGRAMDATA%\\ssh\\ssh_config.d on Windows) that embeds each peer FQDN or hostname inside a double-quoted Match host directive without escaping. A peer name containing a double quote breaks out of the quoted context and injects arbitrary SSH configuration directives, including exec commands, which run locally as any user on the host the next time that user runs ssh. Desktop clients on Linux, macOS, Windows and FreeBSD are affected; the Android and iOS apps are not. The issue is fixed in version 0.74.7, which accepts a peer FQDN or hostname only if it is a valid DNS name.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105429https://github.com/netbirdio/netbird/security/advisories/GHSA-xmg2-v32j-x2hfhttps://github.com/netbirdio/netbird/pull/6805https://github.com/netbirdio/netbird/releases/tag/v0.74.7#NetBird#CVE_2026_105429#bot", "url": "https://infosec.exchange/users/cve/statuses/117440277803345290"}, {"timestamp": "2026-10-15T04:00:06.636Z", "date_only": false, "value": "2026-10-15T04:00:06.636740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxv6engbnr2r", "record": "CVE-2026-105429", "field": "creation_timestamp", "uuid": "c56087ec-6e9e-4f1c-b9a3-f668e616af77", "content": "CVE-2026-105429 - netbird\nThe NetBird desktop client (Linux, macOS, Windows, FreeBSD) writes a system SSH configuration file that includes peer host names without proper checking. If a peer name contains a quote, it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netbird #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxv6engbnr2r"}, {"timestamp": "2026-10-16T15:15:22.027Z", "date_only": false, "value": "2026-10-16T15:15:22.027937Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105429", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T15:15:22.027Z", "date_only": false, "value": "2026-10-16T15:15:22.027937Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105429", "record": "FKIE_CVE-2026-105429", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T15:31:53.347Z", "date_only": false, "value": "2026-10-16T15:31:53.347Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105429", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:31:53.347Z", "date_only": false, "value": "2026-10-16T15:31:53.347Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105429", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:56:15.773Z", "date_only": false, "value": "2026-10-16T19:56:15.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105429", "record": "FKIE_CVE-2026-105429", "field": "lastModified"}]}