{"metadata": {"vulnerability": "CVE-2026-107656", "count": 38, "kinds": {"milestone": 7, "sighting": 18, "kev": 0, "other": 13}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0428", "record": "NCSC-2026-0428", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-08T14:34:01.864Z", "date_only": false, "value": "2026-10-08T14:34:01.864Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-107656", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-13T18:12:18.715Z", "date_only": false, "value": "2026-10-13T18:12:18.715314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mxrn2nluda2m", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "7d57a5eb-d6c3-4710-bcb1-f223b8e7d1b4", "content": "FortiSandbox GUI auth bypass (CVE-2026-107656) hits 4.4.x & 5.0.x. Update to fixed versions now. #Fortinet #Cybersecurity #AuthBypass #CVE2026 #NetworkSecurity #Vulnerability thedailytechfeed.com/critical-for...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mxrn2nluda2m"}, {"timestamp": "2026-10-13T18:12:27.642Z", "date_only": false, "value": "2026-10-13T18:12:27.642573Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117434946407622795", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "c84d631a-55ff-42fb-b4a3-065cd7611682", "content": "Fortinet has around 11 advisories.Stand outs are \n\nCVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE \nCVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI \nNo exploitation\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-180https://fortiguard.fortinet.com/psirt/FG-IR-26-185\n#fortinet #CVE #PatchTuesday", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117434946407622795"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-14T03:19:05Z", "date_only": false, "value": "2026-10-14T03:19:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-fortinet-1", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "9ca9416e-defb-43eb-8c6c-eeefa3a45a46", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-fortinet-1"}, {"timestamp": "2026-10-14T07:31:17Z", "date_only": false, "value": "2026-10-14T07:31:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0428", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "a133b728-6683-4eef-b2e6-30fc64002357", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0428"}, {"timestamp": "2026-10-14T14:31:17.598Z", "date_only": false, "value": "2026-10-14T14:31:17.598695Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0428", "record": "NCSC-2026-0428", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-14T14:31:17.598Z", "date_only": false, "value": "2026-10-14T14:31:17.598695Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0428", "record": "NCSC-2026-0428", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-14T14:31:17.598Z", "date_only": false, "value": "2026-10-14T14:31:17.598695Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0428", "record": "NCSC-2026-0428", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-14T23:02:34.160Z", "date_only": false, "value": "2026-10-14T23:02:34.160432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxunqkkjdk2m", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "8b7ac70f-a27c-4f8c-b178-bebe987286f9", "content": "FortiSandbox\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u91cd\u5927\u8106\u5f31\u6027\u3001\u672a\u8a8d\u8a3c\u3067\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306e\u304a\u305d\u308c\uff08CVE-2026-107656\uff09 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxunqkkjdk2m"}, {"timestamp": "2026-10-15T10:15:33.370Z", "date_only": false, "value": "2026-10-15T10:15:33.370720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxvte2izl22h", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "aedf4551-89e0-48d9-86c5-36e2bef4294e", "content": "#Fortinet #FortiSandbox Schwachstelle CVE-2026-107656 patchen\n\nborncity.com/blog/2026/10...", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mxvte2izl22h"}, {"timestamp": "2026-10-15T10:15:36.011Z", "date_only": false, "value": "2026-10-15T10:15:36.011456Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/117444400605722055", "record": "cve-2026-107656", "field": "creation_timestamp", "uuid": "b7432dc6-101e-4351-a2be-622583372fac", "content": "#Fortinet #FortiSandbox Schwachstelle CVE-2026-107656 patchen\nhttps://borncity.com/blog/2026/10/15/fortinet-patcht-cve-2026-107656-in-fortisandbox/", "url": "https://social.tchncs.de/users/gborn/statuses/117444400605722055"}, {"timestamp": "2026-10-16T10:55:04Z", "date_only": false, "value": "2026-10-16T10:55:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mowexC2lHYuOLz33z24obXp0SUAwyOPrG2oe4rRgyhR9hL0", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "caa3a004-4a87-4d37-8bb0-7d32038feaa6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T19:04:30Z", "date_only": false, "value": "2026-10-25T19:04:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107251", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "45d78c5b-e079-410b-a84c-98bef5dd77a8", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fortinet #CVE #RCE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fortinet-Exploits-CVE-2026-39808-106173-107656\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 18:34:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107251", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T19:04:30Z", "date_only": false, "value": "2026-10-25T19:04:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107251", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "7e683c10-18d0-400e-9e5f-802a136b251d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fortinet #CVE #RCE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fortinet-Exploits-CVE-2026-39808-106173-107656\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghost-Bx1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 18:34:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107251"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-107656", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107656", "record": "FKIE_CVE-2026-107656", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-26T13:45:03.962Z", "date_only": false, "value": "2026-10-26T13:45:03.962Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-107656", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T14:01:34.893Z", "date_only": false, "value": "2026-10-26T14:01:34.893948Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117507574319422931", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "0aa2e4a1-48fb-494c-8174-569cf10e6123", "content": "CVE-2026-107656  An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests\nhttps://www.cve.org/CVERecord?id=CVE-2026-107656https://fortiguard.fortinet.com/psirt/FG-IR-26-185#fortinet #Fortinet #FortiSandbox #FortiSandboxPaaS#CVE_2026_107656#bot", "url": "https://infosec.exchange/users/cve/statuses/117507574319422931"}, {"timestamp": "2026-10-26T14:16:24Z", "date_only": false, "value": "2026-10-26T14:16:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G63Q-H893-6372", "record": "GHSA-G63Q-H893-6372", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-26T14:16:24.147Z", "date_only": false, "value": "2026-10-26T14:16:24.147", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107656", "record": "FKIE_CVE-2026-107656", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T15:00:07.339Z", "date_only": false, "value": "2026-10-26T15:00:07.339704Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myryexwqwd22", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "475e8b4e-8a39-4a53-9773-ca9fae034436", "content": "CVE-2026-107656 - fortisandbox\nVersions of FortiSandbox and FortiSandbox PaaS from 4.2 up to 5.0.6 can be tricked into letting someone skip the normal login process using specially crafted web\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fortisandbox #fortinet #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myryexwqwd22"}, {"timestamp": "2026-10-26T15:34:38Z", "date_only": false, "value": "2026-10-26T15:34:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G63Q-H893-6372", "record": "GHSA-G63Q-H893-6372", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T15:34:38Z", "date_only": false, "value": "2026-10-26T15:34:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G63Q-H893-6372", "record": "GHSA-G63Q-H893-6372", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-26T16:07:27.835Z", "date_only": false, "value": "2026-10-26T16:07:27.835059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mys45fhy522f", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "b0a11355-dcdc-4ec3-aafa-6a64dde92361", "content": "\ud83d\udea8 CVE-2026-107656 \u2014 CVSS 9.8 CRITICAL\n\nAn authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107656\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mys45fhy522f"}, {"timestamp": "2026-10-26T17:31:23.236Z", "date_only": false, "value": "2026-10-26T17:31:23.236861Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117508399580895647", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "b6d7f3ce-3dbe-449e-84b4-cdd65f15b305", "content": "New advisory from Fortinet for a critical vulnerability.\nCRITICAL: CVE-2026-107656: an authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox https://app.opencve.io/cve/CVE-2026-107656 \nYesterday:\nCRITICAL: CVE-2026-21643: FortiClientEMS 7.4.4 SQL Injection Enabling Unauthenticated Remote Code Execution https://app.opencve.io/cve/CVE-2026-21643 #Fortinet -----\nDell:\nHigh-severity, affecting multiple CVEs: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373 \nSecurity Update for Dell Client Platform BIOS for Multiple AMI BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000516289/dsa-2026-230-security-update-for-dell-client-platform-bios-for-multiple-ami-bios-vulnerabilities\nSecurity Update for Dell PowerScale OneFS Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000505684/dsa-2026-360-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities #Dell #infosec #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117508399580895647"}, {"timestamp": "2026-10-26T20:33:37.270Z", "date_only": false, "value": "2026-10-26T20:33:37.270421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3myskzd5ao42i", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "8f383996-bd58-4c5a-b47e-144fbcfa70d5", "content": "FortiSandbox 5.0.0-5.0.6\u30014.4.0-4.4.9\u30014.2\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u4e0d\u6b63\u306aHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-107656 CVSS 9.8 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3myskzd5ao42i"}, {"timestamp": "2026-10-27T03:55:29.928Z", "date_only": false, "value": "2026-10-27T03:55:29.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-107656", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T04:17:40.280Z", "date_only": false, "value": "2026-10-27T04:17:40.280", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-107656", "record": "FKIE_CVE-2026-107656", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-27T06:54:55.555Z", "date_only": false, "value": "2026-10-27T06:54:55.555Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-107656", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-27T06:54:55.555Z", "date_only": false, "value": "2026-10-27T06:54:55.555Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2026-107656", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T13:00:12.970Z", "date_only": false, "value": "2026-10-27T13:00:12.970612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3myuc5ilcdg2j", "record": "cve-2026-107656", "field": "creation_timestamp", "uuid": "90cf2b6d-6e00-43da-8248-b8577ba47744", "content": "fortinet patches cvss 9.8 auth bypass in fortisandbox (cve-2026-107656). affects three active branches; no active exploits confirmed. #infosec https://0daynews.com/articles/2026-10-27-fortinet-fortisandbox-cve-2026-107656-auth-bypass/", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3myuc5ilcdg2j"}, {"timestamp": "2026-10-31T11:02:21Z", "date_only": false, "value": "2026-10-31T11:02:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/108316", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "c3269dc8-98d3-4f14-8c36-6dc9c7d05050", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fortinet #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107656\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mehmet-emir-eroglu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-31 10:14:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEvidence-based Python inventory detector for CVE-2026-107656 in FortiSandbox and FortiSandbox PaaS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/108316", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-31T11:02:21Z", "date_only": false, "value": "2026-10-31T11:02:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/108316", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "e24c622e-62f3-40d4-94e9-7202dcc16a74", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fortinet #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107656\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mehmet-emir-eroglu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-31 10:14:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEvidence-based Python inventory detector for CVE-2026-107656 in FortiSandbox and FortiSandbox PaaS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/108316"}], "metrics": {"as_of": "2026-11-14T01:24:41.971Z", "anchors": {"origin": {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-10-16T10:55:04Z", "date_only": false, "value": "2026-10-16T10:55:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mowexC2lHYuOLz33z24obXp0SUAwyOPrG2oe4rRgyhR9hL0", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "caa3a004-4a87-4d37-8bb0-7d32038feaa6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 212104.0, "hours": 58.91777777777778, "days": 2.4549074074074073, "min_seconds": 125704.0, "max_seconds": 212104.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-16T10:55:04Z", "date_only": false, "value": "2026-10-16T10:55:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mowexC2lHYuOLz33z24obXp0SUAwyOPrG2oe4rRgyhR9hL0", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "caa3a004-4a87-4d37-8bb0-7d32038feaa6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 2683481.971919, "hours": 745.411658866389, "days": 31.058819119432872, "min_seconds": 2597081.971919, "max_seconds": 2683481.971919, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1306", "record": "CERTFR-2026-AVI-1306", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-14T01:24:41.971Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 2471377.971919, "hours": 686.4938810886111, "days": 28.603911712025464, "min_seconds": 2471377.971919, "max_seconds": 2471377.971919, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-16T10:55:04Z", "date_only": false, "value": "2026-10-16T10:55:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mowexC2lHYuOLz33z24obXp0SUAwyOPrG2oe4rRgyhR9hL0", "record": "CVE-2026-107656", "field": "creation_timestamp", "uuid": "caa3a004-4a87-4d37-8bb0-7d32038feaa6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T01:24:41.971Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}