{"metadata": {"vulnerability": "CVE-2026-10795", "count": 48, "kinds": {"milestone": 4, "sighting": 29, "kev": 5, "other": 10}, "linked_omitted": 0}, "data": [{"timestamp": "2026-06-03T21:07:44.434Z", "date_only": false, "value": "2026-06-03T21:07:44.434Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-03T21:23:51Z", "date_only": false, "value": "2026-06-03T21:23:51.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-10795", "field": "containers.cna.timeline.0.time", "text": "Vendor Notified"}, {"timestamp": "2026-06-10T16:41:29Z", "date_only": false, "value": "2026-06-10T16:41:29.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-10795", "field": "containers.cna.timeline.1.time", "text": "Disclosed"}, {"timestamp": "2026-06-10T18:53:36.555Z", "date_only": false, "value": "2026-06-10T18:53:36.555280Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/responsive-uk.bsky.social/post/3mnxf3bkwjk23", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "6a927ff7-2015-4749-9801-7bf7dc1c53d6", "content": "Critical vulnerability (CVE-2026-10795) patched in UpdraftPlus WordPress plugin! Unauthenticated auth bypass could lead to remote code execution & full site compromise.\n\nEnsure you are updated to Version 1.26.5 immediately.\n\n#WordPress #Cybersecurity #Infosec\n\nwww.wordfence.com/blog/2026/06...", "url": "https://bsky.app/profile/responsive-uk.bsky.social/post/3mnxf3bkwjk23"}, {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-10795", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-11T07:16:26Z", "date_only": false, "value": "2026-06-11T07:16:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HC7F-QWFJ-7FCF", "record": "GHSA-HC7F-QWFJ-7FCF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-11T07:16:26.713Z", "date_only": false, "value": "2026-06-11T07:16:26.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10795", "record": "FKIE_CVE-2026-10795", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-10795", "field": "status.status_updated_at", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-11T07:20:32.076Z", "date_only": false, "value": "2026-06-11T07:20:32.076Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-10795", "field": "evidence.0.details.added_date", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-11T07:29:28.120Z", "date_only": false, "value": "2026-06-11T07:29:28.120044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnypcydait2v", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "9834cb94-dbaf-4391-a959-c6e37d7ab913", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3UpdraftPlus\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u7ba1\u7406\u8005\u306e\u6a29\u9650\u3067\u60aa\u610f\u306e\u3042\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u30fb\u5b9f\u884c\u3067\u304d\u308b\u3002\nCVE-2026-10795 CVSS 8.1 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mnypcydait2v"}, {"timestamp": "2026-06-11T07:30:29.108Z", "date_only": false, "value": "2026-06-11T07:30:29.108871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnyperghfa25", "record": "cve-2026-10795", "field": "creation_timestamp", "uuid": "d0ddb552-31e2-42c2-88ed-73a8ad4ed118", "content": "UpdraftPlus WP Backup & Migration Plugin (\u22641.26.4): HIGH severity auth bypass lets attackers gain admin access & execute code. Restrict plugin access & monitor for suspicious remote activity. Await vendor patch. https://radar.offseq.com/threat/cve-2026-10795-cwe-347-improper-verification-of-cr-8f...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mnyperghfa25"}, {"timestamp": "2026-06-11T07:30:33.881Z", "date_only": false, "value": "2026-06-11T07:30:33.881391Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116730299994175631", "record": "cve-2026-10795", "field": "creation_timestamp", "uuid": "92fc9bcd-4b96-4b55-a3f2-21cafee285fa", "content": "\u26a0\ufe0f HIGH severity: UpdraftPlus WP Backup & Migration Plugin (\u22641.26.4) vulnerable to auth bypass (CVE-2026-10795). Attackers can forge RPC commands & achieve RCE. Restrict access & monitor logs until a patch is available. https://radar.offseq.com/threat/cve-2026-10795-cwe-347-improper-verification-of-cr-8f1c77cc #OffSeq #WordPress #Vuln", "url": "https://infosec.exchange/users/offseq/statuses/116730299994175631"}, {"timestamp": "2026-06-11T08:20:34.148Z", "date_only": false, "value": "2026-06-11T08:20:34.148122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnys6ewjgy2w", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "34206210-5794-47c3-bbaf-cd0693e9937a", "content": "CVE-2026-10795: bypass cr\u00edtico en UpdraftPlus (3M sitios)\n\n\u00bfTen\u00e9s UpdraftPlus activo? CVE-2026-10795 es un wordpress critical unauthenticated authentication bypass que expone 3M de sitios. Actualiz\u00e1 ya a 1.26.5\n\n#cve202610795 #updraftplus #authenticationbypass #wordpresssecurity #parcheurgente", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnys6ewjgy2w"}, {"timestamp": "2026-06-11T09:31:55Z", "date_only": false, "value": "2026-06-11T09:31:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HC7F-QWFJ-7FCF", "record": "GHSA-HC7F-QWFJ-7FCF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-11T09:31:55Z", "date_only": false, "value": "2026-06-11T09:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HC7F-QWFJ-7FCF", "record": "GHSA-HC7F-QWFJ-7FCF", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-11T09:36:39.171Z", "date_only": false, "value": "2026-06-11T09:36:39.171683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnywggso4j2y", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "d7b237f8-b2a9-40d2-afbc-0648c6c437a7", "content": "CVE-2026-10795 - UpdraftPlus: WP Backup & Migration Plugin\nCVE ID : CVE-2026-10795\n \n Published : June 11, 2026, 7:16 a.m. | 1\u00a0hour, 47\u00a0minutes ago\n \n Description : The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnywggso4j2y"}, {"timestamp": "2026-06-11T11:00:12Z", "date_only": false, "value": "2026-06-11T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "24ec3193-6341-428d-b6d8-9e2265d5db74", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-11T11:01:11.012Z", "date_only": false, "value": "2026-06-11T11:01:11.012062Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnz35knkmi2n", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "2adf6c81-f349-45fb-b13c-feca9696bd66", "content": "\ud83d\udfe0 CVE-2026-10795 - High (8.1)\n\nThe UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authenticatio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10795/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnz35knkmi2n"}, {"timestamp": "2026-06-11T12:00:17.135Z", "date_only": false, "value": "2026-06-11T12:00:17.135208Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnz6hbl2ed2n", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "55117bcf-e9f7-44bf-a545-202529fa8e68", "content": "UpdraftPlus backup plugin leaks everything: backups, configs, databases. Auth bypass in all versions through 1.26.4. CVE-2026-10795, CVSS 8.1. Update immediately. Scan your WordPress site: pulse-wp.com\n#WordPress #RCE #CyberSecurity", "url": "https://bsky.app/profile/pulse-wp.com/post/3mnz6hbl2ed2n"}, {"timestamp": "2026-06-11T14:37:25.695Z", "date_only": false, "value": "2026-06-11T14:37:25.695215Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10795", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-11T14:37:25.695Z", "date_only": false, "value": "2026-06-11T14:37:25.695215Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10795", "record": "FKIE_CVE-2026-10795", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-11T14:37:38.538Z", "date_only": false, "value": "2026-06-11T14:37:38.538Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-11T14:37:38.538Z", "date_only": false, "value": "2026-06-11T14:37:38.538Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10795", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-11T15:00:06Z", "date_only": false, "value": "2026-06-11T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/P4OAF6tyxAIVXey_izy-TP1JEXG6oDmgsdsL3rMnBYotsT0", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "562497c5-b23e-42e6-9d20-5142a13e60f5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-11T15:00:13Z", "date_only": false, "value": "2026-06-11T15:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qE6f29_aVOJA4ORgQTQStDqLz7TqoxzfPbinGVmKV8o4EU8", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "60e7898e-2f00-4570-adb2-faa74856cb70", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-11T23:00:06Z", "date_only": false, "value": "2026-06-11T23:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fCG7WKzSZ3J5MxWk4q33cwgoeWrsZeYEI50sN5k5RlUMOc4", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "607d7208-5cfb-4699-8070-ec4becf366e9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-12T00:16:07.144Z", "date_only": false, "value": "2026-06-12T00:16:07.144002Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo2hl2aa5v26", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "b6fa068c-be91-40a4-8fa7-8bc997ee076f", "content": "CVE-2026-10795 updraftplus (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #updraftplus", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo2hl2aa5v26"}, {"timestamp": "2026-06-15T12:00:48.912Z", "date_only": false, "value": "2026-06-15T12:00:48.912357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3modadvsxiy2p", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "5a8ed900-56b2-4c00-b336-c10686b72527", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-10795\n\n\u2022 CVE ID: CVE-2026-10795\n\u2022 CVSS Score: 8.1 (High)\n\u2022 Affected: Popular WordPress \n\nhttps://securitycyber.uk", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3modadvsxiy2p"}, {"timestamp": "2026-06-19T08:00:58Z", "date_only": false, "value": "2026-06-19T08:00:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gnanet/0b305a2d339361a4d762a8fe497845be", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "e64d4daa-c4b5-43d9-b8a5-7e7a13bef673", "content": "Having faced a mystery, where wordpress/woocommerce shops went nuts, i found out i was  hit by the CVE-2026-10795\n\nIOC were:\n\n- Found an \"undeletable\" mu-plugin: `mu-plugins/turbo-watcher-x.php`\n- 2 plugins got lost: `w3-total-cache` and `woocommerce-german-market`\n- Found a new user admin_{HASH},or adm_{HASH} \n- any administrator who logged in, got automatically the same `session_tokens` additionally to it's own login\n\nSecondary IOC was inside `options` table\n\n```\nSELECT * FROM wp_options WHERE (LENGTH(option_name) = 12 AND option_name REGEXP '^[0-9a-f]+$') OR option_name like 'sc\\_%'\n```\n\nOne option_value was the key to above SQL conditions: `3.1.0|php.x-rehctaw-obrut`\n\nand an interesting option_key `sc_last_rpc` , with option_value `https://0xrpc.io/eth`\n\n\nI wanted to analyse the dropped PHP, tried lot online deobfuscators, but the biggest initial help was\n[reverse-php-malware](https://github.com/bediger4000/reverse-php-malware)\n\nIt helped me to undestand how the token collection was interpreted, how it choose values function names etc.\n\nI attached `dict-test.php` which contains an original string from the dropped-php in the comments, but running it is safe, because the re-write below the comments will only print out the obfuscated tokens/words/etc in cleartext.", "url": "https://gist.github.com/gnanet/0b305a2d339361a4d762a8fe497845be"}, {"timestamp": "2026-06-19T12:45:07.332Z", "date_only": false, "value": "2026-06-19T12:45:07.332041Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/013f12c2-9644-4cbd-a79b-77116751fe2c", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "1760aece-cfa7-4269-bb27-6945bedac911", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/013f12c2-9644-4cbd-a79b-77116751fe2c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:02:58.084Z", "date_only": false, "value": "2026-06-23T14:02:58.084721Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "8ac37ab8-022b-4402-b558-11bfc32093fb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T07:00:05.043Z", "date_only": false, "value": "2026-07-12T07:00:05.043341Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/88363", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "3a170747-8a13-48ae-a593-17a743c9f032", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10795-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 14:30:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-10795 The UpdraftPlus POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88363", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-23T09:10:00.113Z", "date_only": false, "value": "2026-07-23T09:10:00.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10795", "record": "FKIE_CVE-2026-10795", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-06T19:54:31.497Z", "date_only": false, "value": "2026-09-06T19:54:31.497452Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3muurjetpoe24", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "ca040c29-7e84-44b9-a9f4-c3e4710b6337", "content": "UpdraftPlus: PHP backdoor delivery attempts via CVE-2026-10795", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3muurjetpoe24"}, {"timestamp": "2026-09-09T04:00:36.969Z", "date_only": false, "value": "2026-09-09T04:00:36.969956Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "4c65e626-f61f-4a9d-adc2-caf225cee372"}, {"timestamp": "2026-09-10T00:00:23.917Z", "date_only": false, "value": "2026-09-10T00:00:23.917826Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "3782ce0c-6d56-4682-9726-bc5490029f61", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T15:00:18Z", "date_only": false, "value": "2026-10-29T15:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/m81q50hCYsurK0otEMtuHsm9ylXUX6fvuqu-t-SLW_l-wYM", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "7e922720-e2a3-4df5-8958-afec6a4dd33b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T15:00:18Z", "date_only": false, "value": "2026-10-29T15:00:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/m81q50hCYsurK0otEMtuHsm9ylXUX6fvuqu-t-SLW_l-wYM", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "8585cf3a-91ff-426a-a8c7-c21cf85fb4df"}, {"timestamp": "2026-11-04T10:00:08Z", "date_only": false, "value": "2026-11-04T10:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/108970", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "fbe3c2cc-2e06-4157-86f3-1699a7b86f9a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10795_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a T54R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-04 09:59:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAI amended PoC for CVE-2026-10795 - for educational purposes only - use at your own risk on labs you own ;)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/108970", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T10:00:08Z", "date_only": false, "value": "2026-11-04T10:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/108970", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "376dd5dd-35cb-429e-86c1-d404d1a0c4f6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10795_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a T54R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-04 09:59:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAI amended PoC for CVE-2026-10795 - for educational purposes only - use at your own risk on labs you own ;)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/108970"}, {"timestamp": "2026-11-04T11:00:12Z", "date_only": false, "value": "2026-11-04T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OtcG_hI8vobZUsg2OsGGTxukU3HnPvSUiMG5xH1FUF_uydE", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "fce39863-b9f0-4411-993a-ac2047b72b60", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T11:00:12Z", "date_only": false, "value": "2026-11-04T11:00:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OtcG_hI8vobZUsg2OsGGTxukU3HnPvSUiMG5xH1FUF_uydE", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "d754bb7d-d109-42b2-a8cf-1ec59c6e3fc5"}, {"timestamp": "2026-11-04T21:00:06Z", "date_only": false, "value": "2026-11-04T21:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/goi5nI3cdoywmW5sjFFrfZQSefXixafsblbj1CpREfL1GjA", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "3dfb6d11-55c4-4737-b343-8deb48a967db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T21:00:06Z", "date_only": false, "value": "2026-11-04T21:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/goi5nI3cdoywmW5sjFFrfZQSefXixafsblbj1CpREfL1GjA", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "b6546f55-62f7-43a7-b5d3-268a09b0eefb"}], "metrics": {"as_of": "2026-11-12T06:47:22.450Z", "anchors": {"origin": {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-06-11T11:00:12Z", "date_only": false, "value": "2026-06-11T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "24ec3193-6341-428d-b6d8-9e2265d5db74", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 6371.64, "hours": 1.7699, "days": 0.07374583333333334, "min_seconds": 6371.64, "max_seconds": 6371.64, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 6371.64, "hours": 1.7699, "days": 0.07374583333333334, "min_seconds": 6371.64, "max_seconds": 6371.64, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 19551.64, "hours": 5.431011111111111, "days": 0.22629212962962963, "min_seconds": 19551.64, "max_seconds": 19551.64, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-11T11:00:12Z", "date_only": false, "value": "2026-06-11T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "24ec3193-6341-428d-b6d8-9e2265d5db74", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 13309982.090001, "hours": 3697.2172472225, "days": 154.05071863427082, "min_seconds": 13309982.090001, "max_seconds": 13309982.090001, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-11T05:34:20.360Z", "date_only": false, "value": "2026-06-11T05:34:20.360Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10795", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T06:47:22.450Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 13303610.450001, "hours": 3695.4473472225, "days": 153.9769728009375, "min_seconds": 13303610.450001, "max_seconds": 13303610.450001, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-11T07:20:32Z", "date_only": false, "value": "2026-06-11T07:20:32+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-10795", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a42c5e0-8132-4a5e-addf-8b8d014ed95b", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-12T06:47:22.450Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 13290430.450001, "hours": 3691.786236111389, "days": 153.8244265046412, "min_seconds": 13290430.450001, "max_seconds": 13290430.450001, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-11T11:00:12Z", "date_only": false, "value": "2026-06-11T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "record": "CVE-2026-10795", "field": "creation_timestamp", "uuid": "24ec3193-6341-428d-b6d8-9e2265d5db74", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T06:47:22.450Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}