{"metadata": {"vulnerability": "CVE-2026-108981", "count": 15, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-12T02:27:14.593Z", "date_only": false, "value": "2026-10-12T02:27:14.593Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-108981", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T02:27:15.378Z", "date_only": false, "value": "2026-10-12T02:27:15.378Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-108981", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T02:27:15.378Z", "date_only": false, "value": "2026-10-12T02:27:15.378Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-108981", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T02:50:35.334Z", "date_only": false, "value": "2026-10-12T02:50:35.334701Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117425663823817738", "record": "CVE-2026-108981", "field": "creation_timestamp", "uuid": "4409b8e7-cf7e-45ff-baf4-9a1e1091f5f2", "content": "CVE-2026-108981  ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker must be able to create a symlink inside the cache path. Version 3.0.4 fixes this for the case of a symlink created at an arbitrary earlier time, but does not resolve an applicable TOCTOU race condition. (The ngx_cache_purge module follows symlinks while walking the cache directory tree during purge operations. The module relies on nginx's ngx_walk_tree(), which relies on stat() and therefore follows symlinks.)\nhttps://www.cve.org/CVERecord?id=CVE-2026-108981https://github.com/nginx-modules/ngx_cache_purge/pull/72https://github.com/nginx-modules/ngx_cache_purge/commit/a6da1352f52a8a02dd6828e88c39ed42fddcee96https://github.com/nginx-modules/ngx_cache_purge/releases/tag/3.0.4#denji #ngx_cache_purge#CVE_2026_108981#bot", "url": "https://infosec.exchange/users/cve/statuses/117425663823817738"}, {"timestamp": "2026-10-12T03:17:00Z", "date_only": false, "value": "2026-10-12T03:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-108981", "record": "UBUNTU-CVE-2026-108981", "field": "published"}, {"timestamp": "2026-10-12T03:17:18Z", "date_only": false, "value": "2026-10-12T03:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5FHQ-3M7H-FQV8", "record": "GHSA-5FHQ-3M7H-FQV8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T03:17:18.503Z", "date_only": false, "value": "2026-10-12T03:17:18.503", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108981", "record": "FKIE_CVE-2026-108981", "field": "published"}, {"timestamp": "2026-10-12T03:32:56Z", "date_only": false, "value": "2026-10-12T03:32:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5FHQ-3M7H-FQV8", "record": "GHSA-5FHQ-3M7H-FQV8", "field": "published"}, {"timestamp": "2026-10-12T03:32:56Z", "date_only": false, "value": "2026-10-12T03:32:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5FHQ-3M7H-FQV8", "record": "GHSA-5FHQ-3M7H-FQV8", "field": "modified"}, {"timestamp": "2026-10-14T17:17:47.968Z", "date_only": false, "value": "2026-10-14T17:17:47.968041Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108981", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T17:17:47.968Z", "date_only": false, "value": "2026-10-14T17:17:47.968041Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108981", "record": "FKIE_CVE-2026-108981", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T17:18:00.208Z", "date_only": false, "value": "2026-10-14T17:18:00.208Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-108981", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T17:18:00.208Z", "date_only": false, "value": "2026-10-14T17:18:00.208Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108981", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:56:15.773Z", "date_only": false, "value": "2026-10-16T19:56:15.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108981", "record": "FKIE_CVE-2026-108981", "field": "lastModified"}, {"timestamp": "2026-10-17T10:01:22Z", "date_only": false, "value": "2026-10-17T10:01:22Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-108981", "record": "UBUNTU-CVE-2026-108981", "field": "modified"}]}