{"metadata": {"vulnerability": "CVE-2026-108980", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-12T01:55:58.302Z", "date_only": false, "value": "2026-10-12T01:55:58.302Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-108980", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T01:55:59.223Z", "date_only": false, "value": "2026-10-12T01:55:59.223Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-108980", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T01:55:59.223Z", "date_only": false, "value": "2026-10-12T01:55:59.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-108980", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T02:06:30.615Z", "date_only": false, "value": "2026-10-12T02:06:30.615205Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117425490505401721", "record": "CVE-2026-108980", "field": "creation_timestamp", "uuid": "8fae9af3-2cf1-4713-b161-6fa4df083d33", "content": "CVE-2026-108980  Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user. Thus, a name containing ../ sequences writes the downloaded plugin files outside the plugins directory. Because the official Docker image runs as root, an authenticated attacker overwrites a root-owned startup file and achieves remote code execution as root. Self-registration for an account may be possible.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108980https://github.com/kashishtopi/blinko-plugin-path-traversal-rcehttps://github.com/blinkospace/blinko/blob/178e4b3538a21823a50ac2481e653d56cb1ffa86/server/routerTrpc/plugin.ts#L273https://github.com/blinkospace/blinko/blob/178e4b3538a21823a50ac2481e653d56cb1ffa86/app/src/pages/signin.tsx#L238-L243#Blinko#CVE_2026_108980#bot", "url": "https://infosec.exchange/users/cve/statuses/117425490505401721"}, {"timestamp": "2026-10-12T02:16:57Z", "date_only": false, "value": "2026-10-12T02:16:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q62G-66HR-78PQ", "record": "GHSA-Q62G-66HR-78PQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T02:16:57.297Z", "date_only": false, "value": "2026-10-12T02:16:57.297", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108980", "record": "FKIE_CVE-2026-108980", "field": "published"}, {"timestamp": "2026-10-12T03:02:51.014Z", "date_only": false, "value": "2026-10-12T03:02:51.014171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxnjrid4by2e", "record": "CVE-2026-108980", "field": "creation_timestamp", "uuid": "49dcd368-3e63-4116-b8e8-b1edd6b5a924", "content": "\ud83d\udfe0 CVE-2026-108980 - High (8.8)\n\nBlinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108980/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxnjrid4by2e"}, {"timestamp": "2026-10-12T03:32:55Z", "date_only": false, "value": "2026-10-12T03:32:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q62G-66HR-78PQ", "record": "GHSA-Q62G-66HR-78PQ", "field": "published"}, {"timestamp": "2026-10-12T03:32:55Z", "date_only": false, "value": "2026-10-12T03:32:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q62G-66HR-78PQ", "record": "GHSA-Q62G-66HR-78PQ", "field": "modified"}, {"timestamp": "2026-10-13T19:12:25.927Z", "date_only": false, "value": "2026-10-13T19:12:25.927139Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108980", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T19:12:25.927Z", "date_only": false, "value": "2026-10-13T19:12:25.927139Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108980", "record": "FKIE_CVE-2026-108980", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T19:12:39.874Z", "date_only": false, "value": "2026-10-13T19:12:39.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-108980", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T19:12:39.874Z", "date_only": false, "value": "2026-10-13T19:12:39.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108980", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:17:25.223Z", "date_only": false, "value": "2026-10-13T20:17:25.223", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108980", "record": "FKIE_CVE-2026-108980", "field": "lastModified"}]}