{"metadata": {"vulnerability": "CVE-2026-10757", "count": 24, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-06-03T14:47:52.723Z", "date_only": false, "value": "2026-06-03T14:47:52.723Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-10757", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T22:00:00Z", "date_only": false, "value": "2026-10-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T22:00:00Z", "date_only": false, "value": "2026-10-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-14T22:00:00Z", "date_only": false, "value": "2026-10-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10757", "record": "FKIE_CVE-2026-10757", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-26T18:05:59.365Z", "date_only": false, "value": "2026-10-26T18:05:59.365Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10757", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T18:05:59.365Z", "date_only": false, "value": "2026-10-26T18:05:59.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Esri", "record": "CVE-2026-10757", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T18:15:03.239Z", "date_only": false, "value": "2026-10-26T18:15:03.239403Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117508571315915200", "record": "CVE-2026-10757", "field": "creation_timestamp", "uuid": "e59b5eeb-b28e-41e7-814f-6d1aea8399ac", "content": "CVE-2026-10757 BUG-000187511 - ArcGIS Server has a security vulnerability. There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration \u201cpublic\u201d, include an anonymous attacker) to issue database specific functions that should not be allowed. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.1, 12.0, 11.5, 11.3, and 11.1. Other versions are in mature or retired status, which are not patch eligible. Users working with unlisted versions are advised to upgrade and apply the patch.\nhttps://www.cve.org/CVERecord?id=CVE-2026-10757https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/october-2026-arcgis-security-bulletin#esri #Esri #ArcGISServer#CVE_2026_10757#bot", "url": "https://infosec.exchange/users/cve/statuses/117508571315915200"}, {"timestamp": "2026-10-26T18:17:34Z", "date_only": false, "value": "2026-10-26T18:17:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-34QG-VWFC-F4RM", "record": "GHSA-34QG-VWFC-F4RM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-26T18:17:34.580Z", "date_only": false, "value": "2026-10-26T18:17:34.580", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10757", "record": "FKIE_CVE-2026-10757", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T18:33:01Z", "date_only": false, "value": "2026-10-26T18:33:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-34QG-VWFC-F4RM", "record": "GHSA-34QG-VWFC-F4RM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T18:33:01Z", "date_only": false, "value": "2026-10-26T18:33:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-34QG-VWFC-F4RM", "record": "GHSA-34QG-VWFC-F4RM", "field": "modified"}, {"timestamp": "2026-10-26T19:00:56.292Z", "date_only": false, "value": "2026-10-26T19:00:56.292602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iycalgshapiwl", "record": "CVE-2026-10757", "field": "creation_timestamp", "uuid": "40178638-f221-4e2f-aced-55566f41fb10", "content": "CVE-2026-10757 - BUG-000187511 - ArcGIS Server has a security vulnerability.\nCVE ID : CVE-2026-10757\n \n Published : Oct. 26, 2026, 6:05 p.m. | 17\u00a0minutes ago\n \n Description : There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/iycalgshapiwl"}, {"timestamp": "2026-10-26T19:10:05.071Z", "date_only": false, "value": "2026-10-26T19:10:05.071353Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mysgdwsl2c2p", "record": "CVE-2026-10757", "field": "creation_timestamp", "uuid": "d4da2760-49f6-41e6-bb50-c5cf8d8ab252", "content": "CVE-2026-10757 - arcgis server\nArcGIS Server versions up to 12.1 on Windows or Linux may let a user who can reach the service send specially crafted requests that execute database commands they shouldn\u2019t.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcgisserver #esri #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mysgdwsl2c2p"}, {"timestamp": "2026-10-26T19:35:45.208Z", "date_only": false, "value": "2026-10-26T19:35:45.208919Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3myshrtmouo2t", "record": "CVE-2026-10757", "field": "creation_timestamp", "uuid": "2860d266-b7ae-4929-bbf0-90fe07fd088b", "content": "New critical vulnerability in Esri ArcGIS Server: CVE-2026-10757, CVSS 9.8. There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may\u2026 No public exploit reported yet. #CVE #vulnerability\n\nthreatroundup.com/cve/cve-2026...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3myshrtmouo2t"}, {"timestamp": "2026-10-26T20:08:16.977Z", "date_only": false, "value": "2026-10-26T20:08:16.977500Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mysjlzals22v", "record": "CVE-2026-10757", "field": "creation_timestamp", "uuid": "1570acbc-af7f-4d4c-a65e-5ec29a63bb2a", "content": "\ud83d\udea8 CVE-2026-10757 \u2014 CVSS 9.8 CRITICAL\n\nThere is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-10757\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mysjlzals22v"}, {"timestamp": "2026-10-26T23:00:00Z", "date_only": false, "value": "2026-10-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T23:00:00Z", "date_only": false, "value": "2026-10-26T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-27T03:55:39.889Z", "date_only": false, "value": "2026-10-27T03:55:39.889634Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10757", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-27T04:17:42.280Z", "date_only": false, "value": "2026-10-27T04:17:42.280", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10757", "record": "FKIE_CVE-2026-10757", "field": "lastModified"}, {"timestamp": "2026-10-27T08:51:32.817Z", "date_only": false, "value": "2026-10-27T08:51:32.817+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-28T07:45:09.417Z", "date_only": false, "value": "2026-10-28T07:45:09.417261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mywaz27khc27", "record": "CVE-2026-10757", "field": "creation_timestamp", "uuid": "00e9a14f-70d2-4b1b-ad2c-9e4bbc29c454", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 3\n\u2022 HashiCorp consul-k8s (CVE-2026-110720), CVSS 9.9 (Cyberveille Esant\u00e9)\n\u2022 Esri ArcGIS Server (CVE-2026-10757), CVSS 9.8 (Cyberveille Esant\u00e9)\n\u2022 Tailscale SSH et Headscale (Cyberveille)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mywaz27khc27"}, {"timestamp": "2026-10-29T12:15:56.185Z", "date_only": false, "value": "2026-10-29T12:15:56.185Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-10757", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T12:15:56.185Z", "date_only": false, "value": "2026-10-29T12:15:56.185Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10757", "field": "containers.adp.0.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-10-30T11:50:34.447Z", "anchors": {"origin": {"timestamp": "2026-10-14T22:00:00Z", "date_only": false, "value": "2026-10-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-14T22:00:00Z", "date_only": false, "value": "2026-10-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1345834.447231, "hours": 373.84290200861113, "days": 15.57678758369213, "min_seconds": 1345834.447231, "max_seconds": 1345834.447231, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-14T22:00:00Z", "date_only": false, "value": "2026-10-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3965", "record": "WID-SEC-W-2026-3965", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T11:50:34.447Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}