{"metadata": {"vulnerability": "CVE-2026-108065", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-09T11:15:49.528Z", "date_only": false, "value": "2026-10-09T11:15:49.528Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-108065", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T13:28:00Z", "date_only": false, "value": "2026-10-14T13:28:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / rapid7", "record": "CVE-2026-108065", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T13:38:03.563Z", "date_only": false, "value": "2026-10-14T13:38:03.563Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-108065", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T13:38:03.563Z", "date_only": false, "value": "2026-10-14T13:38:03.563Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / rapid7", "record": "CVE-2026-108065", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:59:48.704Z", "date_only": false, "value": "2026-10-14T13:59:48.704720Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108065", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T13:59:48.704Z", "date_only": false, "value": "2026-10-14T13:59:48.704720Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108065", "record": "FKIE_CVE-2026-108065", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:00:16.738Z", "date_only": false, "value": "2026-10-14T14:00:16.738Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-108065", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:00:16.738Z", "date_only": false, "value": "2026-10-14T14:00:16.738Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108065", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:17:33Z", "date_only": false, "value": "2026-10-14T14:17:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GJQG-F9CH-24CR", "record": "GHSA-GJQG-F9CH-24CR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T14:17:33.813Z", "date_only": false, "value": "2026-10-14T14:17:33.813", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108065", "record": "FKIE_CVE-2026-108065", "field": "published"}, {"timestamp": "2026-10-14T14:41:54.040Z", "date_only": false, "value": "2026-10-14T14:41:54.040109Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117439785420890945", "record": "CVE-2026-108065", "field": "creation_timestamp", "uuid": "4b5b725f-9512-4997-894e-743ce5a2e0d6", "content": "New.\nRapid7: CVE-2026-108065: Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce https://www.rapid7.com/blog/post/ve-unauthenticated-sql-injection-in-channel-software-weballiance-ecommerce/ @Rapid7Official #infosec #SQL #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117439785420890945"}, {"timestamp": "2026-10-14T15:11:57.226Z", "date_only": false, "value": "2026-10-14T15:11:57.226046Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxtth2mjhn2o", "record": "CVE-2026-108065", "field": "creation_timestamp", "uuid": "a2c192de-c9d7-4516-b5bf-607fe62c8eba", "content": "CVE-2026-108065: Critical Pre-Auth SQL Injection in WebAlliance B2B E-Commerce Platform", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxtth2mjhn2o"}, {"timestamp": "2026-10-14T15:32:18Z", "date_only": false, "value": "2026-10-14T15:32:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GJQG-F9CH-24CR", "record": "GHSA-GJQG-F9CH-24CR", "field": "published"}, {"timestamp": "2026-10-14T15:32:18Z", "date_only": false, "value": "2026-10-14T15:32:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GJQG-F9CH-24CR", "record": "GHSA-GJQG-F9CH-24CR", "field": "modified"}, {"timestamp": "2026-10-14T16:07:37.311Z", "date_only": false, "value": "2026-10-14T16:07:37.311392Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwkn27on2l", "record": "CVE-2026-108065", "field": "creation_timestamp", "uuid": "e019ec63-2294-45e7-a67c-6f935ac6bf2e", "content": "\ud83d\udea8 CVE-2026-108065 \u2014 CVSS 9.8 CRITICAL\n\nSQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software Web...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108065\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwkn27on2l"}, {"timestamp": "2026-10-14T16:10:04.224Z", "date_only": false, "value": "2026-10-14T16:10:04.224848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtwoz52ye27", "record": "CVE-2026-108065", "field": "creation_timestamp", "uuid": "c07d1c10-b70f-42ae-8474-752b95b819c4", "content": "CVE-2026-108065 - weballiance ecommerce\nThe WebAlliance eCommerce system\u2019s web service endpoint lets anyone send a specially\u2011crafted request that tricks the database into running their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#weballianceecommerce #channel #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtwoz52ye27"}, {"timestamp": "2026-10-14T18:54:22.600Z", "date_only": false, "value": "2026-10-14T18:54:22.600104Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440778210148678", "record": "CVE-2026-108065", "field": "creation_timestamp", "uuid": "66903d56-3977-4775-bf41-781a832b5df8", "content": "CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION \u2014 missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108065https://www.rapid7.com/blog/post/ve-unauthenticated-sql-injection-in-channel-software-weballiance-ecommerce/#ChannelSoftware #WebAllianceeCommerce#CVE_2026_108065#bot", "url": "https://infosec.exchange/users/cve/statuses/117440778210148678"}, {"timestamp": "2026-10-16T19:56:15.773Z", "date_only": false, "value": "2026-10-16T19:56:15.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108065", "record": "FKIE_CVE-2026-108065", "field": "lastModified"}]}