{"metadata": {"vulnerability": "CVE-2026-10739", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-03T13:05:04.966Z", "date_only": false, "value": "2026-06-03T13:05:04.966Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-10739", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-30T11:37:50.648Z", "date_only": false, "value": "2026-09-30T11:37:50.648Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10739", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-30T11:37:50.648Z", "date_only": false, "value": "2026-09-30T11:37:50.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Cato", "record": "CVE-2026-10739", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T12:17:12Z", "date_only": false, "value": "2026-09-30T12:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CP25-QW94-53FJ", "record": "GHSA-CP25-QW94-53FJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-30T12:17:12.963Z", "date_only": false, "value": "2026-09-30T12:17:12.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10739", "record": "FKIE_CVE-2026-10739", "field": "published"}, {"timestamp": "2026-09-30T12:35:17Z", "date_only": false, "value": "2026-09-30T12:35:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CP25-QW94-53FJ", "record": "GHSA-CP25-QW94-53FJ", "field": "published"}, {"timestamp": "2026-09-30T12:35:17Z", "date_only": false, "value": "2026-09-30T12:35:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CP25-QW94-53FJ", "record": "GHSA-CP25-QW94-53FJ", "field": "modified"}, {"timestamp": "2026-09-30T14:27:45.762Z", "date_only": false, "value": "2026-09-30T14:27:45.762535Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10739", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-30T14:27:45.762Z", "date_only": false, "value": "2026-09-30T14:27:45.762535Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10739", "record": "FKIE_CVE-2026-10739", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-30T14:27:57.307Z", "date_only": false, "value": "2026-09-30T14:27:57.307Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-10739", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-30T14:27:57.307Z", "date_only": false, "value": "2026-09-30T14:27:57.307Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10739", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T19:38:27.293Z", "date_only": false, "value": "2026-09-30T19:38:27.293", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10739", "record": "FKIE_CVE-2026-10739", "field": "lastModified"}, {"timestamp": "2026-10-01T15:47:18.528Z", "date_only": false, "value": "2026-10-01T15:47:18.528565Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/quarkslab/statuses/117366432445530694", "record": "cve-2026-10739", "field": "creation_timestamp", "uuid": "be49433a-c700-4adb-ab0f-68effa3a2846", "content": "Not an antivirus product this time, but we couldn't pass it up \ud83d\ude48\n@catonetworks  said: route with split tunneling.@kaluche_  heard: root with split tunneling. \nCheck out CVE-2026-10739, a LPE vulnerability in the Cato VPN Client for Windows \n\u27a1\ufe0f https://blog.quarkslab.com/cato-vpn-client-split-tunnel-and-privilege-escalation-cve-2026-10739.html", "url": "https://infosec.exchange/users/quarkslab/statuses/117366432445530694"}, {"timestamp": "2026-10-01T15:47:43.547Z", "date_only": false, "value": "2026-10-01T15:47:43.547099Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/quarkslab.bsky.social/post/3mwt7ewvfwc2l", "record": "CVE-2026-10739", "field": "creation_timestamp", "uuid": "98ea6218-42a3-4ec8-948e-e5aaaa42eb5a", "content": "Not an antivirus product this time, but we couldn't pass it up \ud83d\ude48\n\nCato Networks said: route with split tunneling. \nkaluche_ heard: root with split tunneling. \n\nCheck out CVE-2026-10739, a LPE vulnerability in the Cato VPN Client for Windows \n\u27a1\ufe0f blog.quarkslab.com/cato-vpn-cli...", "url": "https://bsky.app/profile/quarkslab.bsky.social/post/3mwt7ewvfwc2l"}, {"timestamp": "2026-10-01T22:37:17Z", "date_only": false, "value": "2026-10-01T22:37:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n8EvNn689Q6LihHZBnNVz1wmbgHzQ0SxIXpUKy3hF6SpPe4", "record": "CVE-2026-10739", "field": "creation_timestamp", "uuid": "fcaea041-6179-4912-851a-7d31c926e20d"}, {"timestamp": "2026-10-01T22:37:17Z", "date_only": false, "value": "2026-10-01T22:37:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/n8EvNn689Q6LihHZBnNVz1wmbgHzQ0SxIXpUKy3hF6SpPe4", "record": "CVE-2026-10739", "field": "creation_timestamp", "uuid": "cf7f1ade-68b2-4009-a210-11692935abd9"}, {"timestamp": "2026-10-02T17:53:47.893Z", "date_only": false, "value": "2026-10-02T17:53:47.893723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mwvwvgnwve2g", "record": "CVE-2026-10739", "field": "creation_timestamp", "uuid": "fc4b766f-9026-4ba7-8e30-67288484051c", "content": "Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739) https://packetstorm.news/news/view/44597 #news", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mwvwvgnwve2g"}, {"timestamp": "2026-10-02T22:43:04.918Z", "date_only": false, "value": "2026-10-02T22:43:04.918974Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fei-echosphere.bsky.social/post/3mwwh2p34uo2e", "record": "cve-2026-10739", "field": "creation_timestamp", "uuid": "17f0415e-ed8d-49b6-af6d-1a1bb7ff7000", "content": "Cato VPN Client\u306e\u8106\u5f31\u6027\u3001\u79c1\u306e\u30da\u30f3\u304c\u6b62\u307e\u3063\u305f\u306e\u306f\u3053\u3053\u30e8\u3002\u5229\u7528\u8005\u304c\u6e21\u3059SID\uff08\u8b58\u5225\u5b50\uff09\u3092\u3001\u4fdd\u5b58\u5148\u306e\u30d1\u30b9\u306b\u6df7\u305c\u3066\u3044\u305f\u3002\u300c..\u300d\u304c\u901a\u308b\u3068\u4fdd\u5b58\u5148\u306e\u5916\u3078\u51fa\u3089\u308c\u308b\u30cd\u3002\n\n\u8b58\u5225\u5b50\u3092\u53d7\u3051\u53d6\u308b\u5834\u6240\u3067\u3001\u30d1\u30b9\u3082\u53d7\u3051\u53d6\u3063\u3066\u3057\u307e\u3063\u305f\u3002\u3053\u3046\u3044\u3046\u4e00\u884c\u3001\u8d64\u4e38\u3064\u3051\u305f\u304f\u306a\u308b\u30e8\u3002\nhttps://x.com/quarkslab/status/2105688576285639099\nhttps://blog.quarkslab.com/cato-vpn-client-split-tunnel-and-privilege-escalation-cve-2026-10739.html", "url": "https://bsky.app/profile/fei-echosphere.bsky.social/post/3mwwh2p34uo2e"}, {"timestamp": "2026-10-05T08:22:08.625Z", "date_only": false, "value": "2026-10-05T08:22:08.625893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mx4idyitmc2v", "record": "CVE-2026-10739", "field": "creation_timestamp", "uuid": "bf7eb346-5bbf-4756-88a0-6d5ff2a1b548", "content": "[RSS] Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)\n\n\n blog.quarkslab.com -&gt; \n\n\nOriginal-&gt;", "url": "https://bsky.app/profile/buherator.bsky.social/post/3mx4idyitmc2v"}]}
