{"metadata": {"vulnerability": "CVE-2026-108014", "count": 13, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-09T09:26:54.337Z", "date_only": false, "value": "2026-10-09T09:26:54.337Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-108014", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T16:36:00Z", "date_only": false, "value": "2026-10-27T16:36:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / HCL", "record": "CVE-2026-108014", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T16:36:57.891Z", "date_only": false, "value": "2026-10-27T16:36:57.891Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-108014", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T16:55:22.906Z", "date_only": false, "value": "2026-10-27T16:55:22.906240Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117513920338981942", "record": "CVE-2026-108014", "field": "creation_timestamp", "uuid": "55518de1-cf7c-4117-aa3c-4f705eeb69bb", "content": "CVE-2026-108014 eMudhra Compromised Certficate vulnerability impacts HCL Domino Server Private keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108014https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134742#HCLSoftware #DominoServer#CVE_2026_108014#bot", "url": "https://infosec.exchange/users/cve/statuses/117513920338981942"}, {"timestamp": "2026-10-27T17:16:57Z", "date_only": false, "value": "2026-10-27T17:16:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PQ6C-VP8H-PGXW", "record": "GHSA-PQ6C-VP8H-PGXW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-27T17:16:57.040Z", "date_only": false, "value": "2026-10-27T17:16:57.040", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108014", "record": "FKIE_CVE-2026-108014", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T17:50:05.769Z", "date_only": false, "value": "2026-10-27T17:50:05.769309Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myusdtohod2p", "record": "CVE-2026-108014", "field": "creation_timestamp", "uuid": "864cebd6-5149-4e0f-9497-dde10da36d67", "content": "CVE-2026-108014 - domino server\nThe private keys for several eMudhra certificates have been stolen, which means the trust those certificates provide for HCL Domino Server's outbound network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dominoserver #hclsoftware #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myusdtohod2p"}, {"timestamp": "2026-10-27T18:10:01.387Z", "date_only": false, "value": "2026-10-27T18:10:01.387841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myuthhx4te22", "record": "CVE-2026-108014", "field": "creation_timestamp", "uuid": "ca980dab-45d2-465a-bd5c-7ac53c91ce0f", "content": "\ud83d\udea8 CVE-2026-108014 \u2014 CVSS 9.1 CRITICAL\n\nPrivate keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108014\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myuthhx4te22"}, {"timestamp": "2026-10-27T18:31:40Z", "date_only": false, "value": "2026-10-27T18:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PQ6C-VP8H-PGXW", "record": "GHSA-PQ6C-VP8H-PGXW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T18:31:40Z", "date_only": false, "value": "2026-10-27T18:31:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PQ6C-VP8H-PGXW", "record": "GHSA-PQ6C-VP8H-PGXW", "field": "modified"}, {"timestamp": "2026-10-27T20:41:13.359Z", "date_only": false, "value": "2026-10-27T20:41:13.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-108014", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-27T20:41:13.359Z", "date_only": false, "value": "2026-10-27T20:41:13.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / HCL", "record": "CVE-2026-108014", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T15:21:31.673Z", "date_only": false, "value": "2026-10-28T15:21:31.673", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108014", "record": "FKIE_CVE-2026-108014", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T07:31:54.748Z", "anchors": {"origin": {"timestamp": "2026-10-27T16:36:00Z", "date_only": false, "value": "2026-10-27T16:36:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / HCL", "record": "CVE-2026-108014", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T16:36:00Z", "date_only": false, "value": "2026-10-27T16:36:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / HCL", "record": "CVE-2026-108014", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 312954.74888, "hours": 86.9318746888889, "days": 3.6221614453703705, "min_seconds": 312954.74888, "max_seconds": 312954.74888, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T16:36:00Z", "date_only": false, "value": "2026-10-27T16:36:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / HCL", "record": "CVE-2026-108014", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T07:31:54.748Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}