{"metadata": {"vulnerability": "CVE-2026-109186", "count": 13, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109186", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T12:57:38.482Z", "date_only": false, "value": "2026-10-12T12:57:38.482Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109186", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T13:10:45.663Z", "date_only": false, "value": "2026-10-12T13:10:45.663Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109186", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T13:10:45.663Z", "date_only": false, "value": "2026-10-12T13:10:45.663Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109186", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T13:10:45.663Z", "date_only": false, "value": "2026-10-12T13:10:45.663Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109186", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T13:17:32Z", "date_only": false, "value": "2026-10-12T13:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q6MX-RRWP-P348", "record": "GHSA-Q6MX-RRWP-P348", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T13:17:32.003Z", "date_only": false, "value": "2026-10-12T13:17:32.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109186", "record": "FKIE_CVE-2026-109186", "field": "published"}, {"timestamp": "2026-10-12T13:17:32.127Z", "date_only": false, "value": "2026-10-12T13:17:32.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109186", "record": "FKIE_CVE-2026-109186", "field": "lastModified"}, {"timestamp": "2026-10-12T13:30:25.454Z", "date_only": false, "value": "2026-10-12T13:30:25.454507Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428179751898467", "record": "CVE-2026-109186", "field": "creation_timestamp", "uuid": "f6a6b96c-31a5-4aab-9bfc-48bec4e6f54b", "content": "CVE-2026-109186 jshERP through 3.6 Mass Assignment via PUT /user/update jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwrite other users' password hashes for account takeover.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109186https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/jshERP/poc_identity_privilege_write.pyhttps://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/controller/UserController.java#L97-L103https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java#L176-L192https://www.vulncheck.com/advisories/jsherp-through-3.6-mass-assignment-via-put-user-update#jishenghua #jshERP#CVE_2026_109186#bot", "url": "https://infosec.exchange/users/cve/statuses/117428179751898467"}, {"timestamp": "2026-10-12T14:05:11.710Z", "date_only": false, "value": "2026-10-12T14:05:11.710254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hr55qrmrafugv", "record": "CVE-2026-109186", "field": "creation_timestamp", "uuid": "0dc448df-7ff4-42dc-8301-8244a93d89f6", "content": "CVE-2026-109186 - jshERP through 3.6 Mass Assignment via PUT /user/update\nCVE ID : CVE-2026-109186\n \n Published : Oct. 12, 2026, 1:10 p.m. | 13\u00a0minutes ago\n \n Description : jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that al...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/hr55qrmrafugv"}, {"timestamp": "2026-10-12T15:32:15Z", "date_only": false, "value": "2026-10-12T15:32:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q6MX-RRWP-P348", "record": "GHSA-Q6MX-RRWP-P348", "field": "published"}, {"timestamp": "2026-10-12T15:32:15Z", "date_only": false, "value": "2026-10-12T15:32:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q6MX-RRWP-P348", "record": "GHSA-Q6MX-RRWP-P348", "field": "modified"}, {"timestamp": "2026-10-13T04:00:07.927Z", "date_only": false, "value": "2026-10-13T04:00:07.927264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxq5gtyw5p2l", "record": "CVE-2026-109186", "field": "creation_timestamp", "uuid": "580c867f-4e5e-4c5b-9b14-5ff2c9afd8e8", "content": "CVE-2026-109186 - jsherp\nThe jshERP system (versions up to 3.6) lets anyone who is logged in modify internal fields that should be locked, such as the tenant identifier and user passwords. By sending a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsherp #jishenghua #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxq5gtyw5p2l"}]}