{"metadata": {"vulnerability": "CVE-2026-109108", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109108", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-12T02:00:00Z", "date_only": false, "value": "2026-10-12T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109108", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-12T08:32:54.413Z", "date_only": false, "value": "2026-10-12T08:32:54.413Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109108", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T10:38:11Z", "date_only": false, "value": "2026-10-12T10:38:11.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109108", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T07:30:21.992Z", "date_only": false, "value": "2026-10-13T07:30:21.992Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109108", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T07:30:21.992Z", "date_only": false, "value": "2026-10-13T07:30:21.992Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109108", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T07:40:51.737Z", "date_only": false, "value": "2026-10-13T07:40:51.737022Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432467537598631", "record": "CVE-2026-109108", "field": "creation_timestamp", "uuid": "c756c5ef-04de-4b82-b54a-98df0ff3b01c", "content": "CVE-2026-109108 Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109108https://vuldb.com/vuln/416859https://vuldb.com/vuln/416859/ctihttps://vuldb.com/cve/CVE-2026-109108https://vuldb.com/submit/909182https://gist.github.com/Rauzk/0a61823f0033441142dc1c3f4a776e7c#Wavlink #WL-WN530BE1-A#CVE_2026_109108#bot", "url": "https://infosec.exchange/users/cve/statuses/117432467537598631"}, {"timestamp": "2026-10-13T08:00:05.732Z", "date_only": false, "value": "2026-10-13T08:00:05.732137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqktwzi7q2n", "record": "CVE-2026-109108", "field": "creation_timestamp", "uuid": "7e1d3721-7cc4-4eb0-964b-bb763caf34aa", "content": "CVE-2026-109108 - wl-wn530be1-a\nThe WL\u2011WN530BE1\u2011A router's uploadVpn.cgi page can be tricked into running arbitrary system commands. An attacker on the network could exploit this to take control of the device or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wavlink #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqktwzi7q2n"}, {"timestamp": "2026-10-13T08:16:59Z", "date_only": false, "value": "2026-10-13T08:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-643R-M5F4-V845", "record": "GHSA-643R-M5F4-V845", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T08:16:59.917Z", "date_only": false, "value": "2026-10-13T08:16:59.917", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109108", "record": "FKIE_CVE-2026-109108", "field": "published"}, {"timestamp": "2026-10-13T09:30:45Z", "date_only": false, "value": "2026-10-13T09:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-643R-M5F4-V845", "record": "GHSA-643R-M5F4-V845", "field": "published"}, {"timestamp": "2026-10-13T09:30:45Z", "date_only": false, "value": "2026-10-13T09:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-643R-M5F4-V845", "record": "GHSA-643R-M5F4-V845", "field": "modified"}, {"timestamp": "2026-10-16T21:38:36.177Z", "date_only": false, "value": "2026-10-16T21:38:36.177913Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109108", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T21:38:36.177Z", "date_only": false, "value": "2026-10-16T21:38:36.177913Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109108", "record": "FKIE_CVE-2026-109108", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T21:38:50.808Z", "date_only": false, "value": "2026-10-16T21:38:50.808Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109108", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:38:50.808Z", "date_only": false, "value": "2026-10-16T21:38:50.808Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109108", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T22:17:18.117Z", "date_only": false, "value": "2026-10-16T22:17:18.117", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109108", "record": "FKIE_CVE-2026-109108", "field": "lastModified"}]}