{"metadata": {"vulnerability": "CVE-2026-109119", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-12T09:41:09.425Z", "date_only": false, "value": "2026-10-12T09:41:09.425Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109119", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T10:27:28.149Z", "date_only": false, "value": "2026-10-16T10:27:28.149Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109119", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T10:27:28.149Z", "date_only": false, "value": "2026-10-16T10:27:28.149Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2026-109119", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T10:36:22.457Z", "date_only": false, "value": "2026-10-16T10:36:22.457688Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117450144602156838", "record": "CVE-2026-109119", "field": "creation_timestamp", "uuid": "4a3b21a6-690f-41a2-9b10-b9880639bdf2", "content": "CVE-2026-109119 Missing Authorization in rdiffweb Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109119https://gitlab.com/ikus-soft/rdiffwebhttps://gitlab.com/ikus-soft/rdiffweb/-/commit/b529adf2c13a210d10aaf56325de4d3fb2428abehttps://gitlab.com/ikus-soft/rdiffweb/-/commit/4ce35fc2d23ac1cc789186f32bf76603b2eddeb3#ikus-soft #rdiffweb#CVE_2026_109119#bot", "url": "https://infosec.exchange/users/cve/statuses/117450144602156838"}, {"timestamp": "2026-10-16T11:17:00Z", "date_only": false, "value": "2026-10-16T11:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CQ7F-C253-X96P", "record": "GHSA-CQ7F-C253-X96P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T11:17:00.927Z", "date_only": false, "value": "2026-10-16T11:17:00.927", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109119", "record": "FKIE_CVE-2026-109119", "field": "published"}, {"timestamp": "2026-10-16T12:31:22Z", "date_only": false, "value": "2026-10-16T12:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CQ7F-C253-X96P", "record": "GHSA-CQ7F-C253-X96P", "field": "published"}, {"timestamp": "2026-10-16T12:31:22Z", "date_only": false, "value": "2026-10-16T12:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CQ7F-C253-X96P", "record": "GHSA-CQ7F-C253-X96P", "field": "modified"}, {"timestamp": "2026-10-16T13:31:02.410Z", "date_only": false, "value": "2026-10-16T13:31:02.410278Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109119", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T13:31:02.410Z", "date_only": false, "value": "2026-10-16T13:31:02.410278Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109119", "record": "FKIE_CVE-2026-109119", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T13:31:33.847Z", "date_only": false, "value": "2026-10-16T13:31:33.847Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109119", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T13:31:33.847Z", "date_only": false, "value": "2026-10-16T13:31:33.847Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109119", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:37:20.756Z", "date_only": false, "value": "2026-10-16T16:37:20.756502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxyz5mowcc2x", "record": "CVE-2026-109119", "field": "creation_timestamp", "uuid": "8acaf365-b51e-4af5-940d-201c493a4f81", "content": "Rdiffweb\u306e\u30e6\u30fc\u30b6\u30fc\u7ba1\u7406API\u3067\u3001\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u30ed\u30fc\u30eb\u5909\u66f4\u306b\u3088\u308a\u7ba1\u7406\u8005\u6a29\u9650\u3092\u596a\u53d6\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-109119 CVSS 8.8 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxyz5mowcc2x"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109119", "record": "FKIE_CVE-2026-109119", "field": "lastModified"}]}