{"metadata": {"vulnerability": "CVE-2026-109390", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109390", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109390", "record": "FKIE_CVE-2026-109390", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-12T14:40:09.358Z", "date_only": false, "value": "2026-10-12T14:40:09.358Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109390", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T14:40:10.223Z", "date_only": false, "value": "2026-10-12T14:40:10.223Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109390", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T14:40:10.223Z", "date_only": false, "value": "2026-10-12T14:40:10.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-109390", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T15:03:46.422Z", "date_only": false, "value": "2026-10-12T15:03:46.422619Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428546828678357", "record": "CVE-2026-109390", "field": "creation_timestamp", "uuid": "47cf6d63-2756-4182-9489-3e5dd8b8a93f", "content": "CVE-2026-109390  AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109390https://github.com/v12-security/pocs/tree/main/anydeskhttps://anydesk.com/en/changelog/linux#anydesk #AnyDesk#CVE_2026_109390#bot", "url": "https://infosec.exchange/users/cve/statuses/117428546828678357"}, {"timestamp": "2026-10-12T15:17:07Z", "date_only": false, "value": "2026-10-12T15:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P2JV-FPMF-JQJW", "record": "GHSA-P2JV-FPMF-JQJW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T15:17:07.980Z", "date_only": false, "value": "2026-10-12T15:17:07.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109390", "record": "FKIE_CVE-2026-109390", "field": "published"}, {"timestamp": "2026-10-12T15:32:22Z", "date_only": false, "value": "2026-10-12T15:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P2JV-FPMF-JQJW", "record": "GHSA-P2JV-FPMF-JQJW", "field": "published"}, {"timestamp": "2026-10-12T15:32:22Z", "date_only": false, "value": "2026-10-12T15:32:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P2JV-FPMF-JQJW", "record": "GHSA-P2JV-FPMF-JQJW", "field": "modified"}, {"timestamp": "2026-10-12T16:04:11.980Z", "date_only": false, "value": "2026-10-12T16:04:11.980460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fjpchxiaxolag", "record": "CVE-2026-109390", "field": "creation_timestamp", "uuid": "c1181660-52ec-43d6-8e75-593c0337c314", "content": "CVE-2026-109390 - AnyDesk Heap-Based Buffer Overflow Vulnerability\nCVE ID : CVE-2026-109390\n \n Published : Oct. 12, 2026, 3:17 p.m. | 14\u00a0minutes ago\n \n Description : AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/fjpchxiaxolag"}, {"timestamp": "2026-10-12T16:07:17.528Z", "date_only": false, "value": "2026-10-12T16:07:17.528313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxovm77s542z", "record": "CVE-2026-109390", "field": "creation_timestamp", "uuid": "1c74dd5a-ae0b-4407-8199-302df4d17e02", "content": "\ud83d\udea8 CVE-2026-109390 \u2014 CVSS 9.8 CRITICAL\n\nAnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buf...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-109390\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxovm77s542z"}, {"timestamp": "2026-10-12T18:20:06.493Z", "date_only": false, "value": "2026-10-12T18:20:06.493155Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxp4zozh5l2l", "record": "CVE-2026-109390", "field": "creation_timestamp", "uuid": "c3dbf052-ac47-4266-b8a4-a0d76c9480b3", "content": "CVE-2026-109390 - anydesk\nAnyDesk versions earlier than 8.0.3 contain a flaw that lets someone on the network send specially crafted data and cause the program to run any commands they choose, even without the user\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#anydesk #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxp4zozh5l2l"}, {"timestamp": "2026-10-13T01:28:01Z", "date_only": false, "value": "2026-10-13T01:28:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/anydesk-disponibile-poc-pubblico-per-la-cve-2026-109390", "record": "CVE-2026-109390", "field": "creation_timestamp", "uuid": "58c6eef6-840d-41cc-8a48-a5134acc8fe5", "url": "https://www.acn.gov.it/portale/w/anydesk-disponibile-poc-pubblico-per-la-cve-2026-109390"}, {"timestamp": "2026-10-13T03:55:34.743Z", "date_only": false, "value": "2026-10-13T03:55:34.743Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109390", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T03:55:34.743Z", "date_only": false, "value": "2026-10-13T03:55:34.743Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109390", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T04:17:13.987Z", "date_only": false, "value": "2026-10-13T04:17:13.987", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109390", "record": "FKIE_CVE-2026-109390", "field": "lastModified"}]}