{"metadata": {"vulnerability": "CVE-2026-107350", "count": 37, "kinds": {"milestone": 8, "sighting": 2, "kev": 0, "other": 27}}, "data": [{"timestamp": "2026-10-07T19:13:32.963Z", "date_only": false, "value": "2026-10-07T19:13:32.963Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-107350", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T17:34:29.838Z", "date_only": false, "value": "2026-10-14T17:34:29.838000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-14T17:34:33.785Z", "date_only": false, "value": "2026-10-14T17:34:33.785000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-14T17:34:39.009Z", "date_only": false, "value": "2026-10-14T17:34:39.009Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-107350", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T17:34:39.009Z", "date_only": false, "value": "2026-10-14T17:34:39.009000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-14T17:34:39.009Z", "date_only": false, "value": "2026-10-14T17:34:39.009Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / PostgreSQL", "record": "CVE-2026-107350", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T17:51:41.881Z", "date_only": false, "value": "2026-10-14T17:51:41.881021+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-14T17:51:59.764Z", "date_only": false, "value": "2026-10-14T17:51:59.764551+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-14T17:54:19.360Z", "date_only": false, "value": "2026-10-14T17:54:19.360346+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-14T18:17:25Z", "date_only": false, "value": "2026-10-14T18:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QCXP-3CX5-3F3G", "record": "GHSA-QCXP-3CX5-3F3G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T18:17:25.670Z", "date_only": false, "value": "2026-10-14T18:17:25.670", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107350", "record": "FKIE_CVE-2026-107350", "field": "published"}, {"timestamp": "2026-10-14T18:32:29Z", "date_only": false, "value": "2026-10-14T18:32:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QCXP-3CX5-3F3G", "record": "GHSA-QCXP-3CX5-3F3G", "field": "published"}, {"timestamp": "2026-10-14T18:32:29Z", "date_only": false, "value": "2026-10-14T18:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QCXP-3CX5-3F3G", "record": "GHSA-QCXP-3CX5-3F3G", "field": "modified"}, {"timestamp": "2026-10-14T23:14:14.300Z", "date_only": false, "value": "2026-10-14T23:14:14.300459Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441800023706672", "record": "CVE-2026-107350", "field": "creation_timestamp", "uuid": "68f207b8-e715-4cc9-8bae-3e0a5630cad8", "content": "CVE-2026-107350 Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.\nhttps://www.cve.org/CVERecord?id=CVE-2026-107350https://www.pgbouncer.org/changelog.html#pgbouncer#CVE_2026_107350#bot", "url": "https://infosec.exchange/users/cve/statuses/117441800023706672"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-107350", "record": "UBUNTU-CVE-2026-107350", "field": "published"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-107350", "record": "UBUNTU-CVE-2026-107350", "field": "modified"}, {"timestamp": "2026-10-16T01:05:51Z", "date_only": false, "value": "2026-10-16T01:05:51.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-107350", "record": "MSRC_CVE-2026-107350", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T01:05:51Z", "date_only": false, "value": "2026-10-16T01:05:51.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-107350", "record": "MSRC_CVE-2026-107350", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-16T01:05:51Z", "date_only": false, "value": "2026-10-16T01:05:51.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-107350", "record": "MSRC_CVE-2026-107350", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T03:56:50.467Z", "date_only": false, "value": "2026-10-16T03:56:50.467564Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-107350", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T03:56:50.467Z", "date_only": false, "value": "2026-10-16T03:56:50.467564Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107350", "record": "FKIE_CVE-2026-107350", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T14:18:50.053Z", "date_only": false, "value": "2026-10-16T14:18:50.053Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-107350", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:18:50.053Z", "date_only": false, "value": "2026-10-16T14:18:50.053Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-107350", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:17:04.897Z", "date_only": false, "value": "2026-10-16T15:17:04.897", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107350", "record": "FKIE_CVE-2026-107350", "field": "lastModified"}, {"timestamp": "2026-10-16T17:07:04.553Z", "date_only": false, "value": "2026-10-16T17:07:04.553690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mxz2srphev2z", "record": "CVE-2026-107350", "field": "creation_timestamp", "uuid": "68590c85-b55e-4b9a-9003-4a3c8f4074f9", "content": "PgBouncer 1.26.1 fixes CVE-2026-107350: a client that knows one SCRAM user's password can authenticate as any other SCRAM user, including admins and backend superusers.\n\nwww.postgresql.org/about/news/p...\npgexperts.com\n\n#PostgreSQL", "url": "https://bsky.app/profile/pgexperts.bsky.social/post/3mxz2srphev2z"}, {"timestamp": "2026-10-16T20:27:54Z", "date_only": false, "value": "2026-10-16T20:27:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T20:27:54Z", "date_only": false, "value": "2026-10-16T20:27:54+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-16T20:27:54Z", "date_only": false, "value": "2026-10-16T20:27:54+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T21:08:39Z", "date_only": false, "value": "2026-10-16T21:08:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T01:48:53Z", "date_only": false, "value": "2026-10-17T01:48:53.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-107350", "record": "MSRC_CVE-2026-107350", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T01:48:53Z", "date_only": false, "value": "2026-10-17T01:48:53.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-107350", "record": "MSRC_CVE-2026-107350", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T07:00:38.107Z", "date_only": false, "value": "2026-10-17T07:00:38.107Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-107350", "record": "MSRC_CVE-2026-107350", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T10:58:20Z", "date_only": false, "value": "2026-10-17T10:58:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-17T10:58:20Z", "date_only": false, "value": "2026-10-17T10:58:20+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T10:58:20Z", "date_only": false, "value": "2026-10-17T10:58:20+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:83843", "record": "RHSA-2026:83843", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-21T08:55:11.420Z", "date_only": false, "value": "2026-10-21T08:55:11.420Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGBOUNCER-2026-107350", "record": "BIT-PGBOUNCER-2026-107350", "field": "published"}, {"timestamp": "2026-10-21T09:15:38.550Z", "date_only": false, "value": "2026-10-21T09:15:38.550Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PGBOUNCER-2026-107350", "record": "BIT-PGBOUNCER-2026-107350", "field": "modified"}]}