{"metadata": {"vulnerability": "CVE-2026-109596", "count": 33, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 26}}, "data": [{"timestamp": "2024-03-05T00:00:00Z", "date_only": false, "value": "2024-03-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-03-06T00:00:00Z", "date_only": false, "value": "2024-03-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109596", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T08:50:13Z", "date_only": false, "value": "2026-10-12T08:50:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-12T08:50:13Z", "date_only": false, "value": "2026-10-12T08:50:13+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-12T08:50:13Z", "date_only": false, "value": "2026-10-12T08:50:13+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-12T20:59:18.909Z", "date_only": false, "value": "2026-10-12T20:59:18.909Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109596", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T22:21:50.021Z", "date_only": false, "value": "2026-10-12T22:21:50.021000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-12T22:21:50.696Z", "date_only": false, "value": "2026-10-12T22:21:50.696000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-12T22:21:51.306Z", "date_only": false, "value": "2026-10-12T22:21:51.306Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109596", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T22:21:51.306Z", "date_only": false, "value": "2026-10-12T22:21:51.306000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-12T22:21:51.306Z", "date_only": false, "value": "2026-10-12T22:21:51.306Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-109596", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T22:21:51.941Z", "date_only": false, "value": "2026-10-12T22:21:51.941000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-12T22:42:32.705Z", "date_only": false, "value": "2026-10-12T22:42:32.705352+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-12T22:48:32.616Z", "date_only": false, "value": "2026-10-12T22:48:32.616851+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-12T22:50:51.636Z", "date_only": false, "value": "2026-10-12T22:50:51.636878Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430383485204010", "record": "CVE-2026-109596", "field": "creation_timestamp", "uuid": "14894e53-84e3-4f86-8239-6f29ddfb0dfd", "content": "CVE-2026-109596 Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory, causing resources.Match to list and publish local files during builds.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109596https://github.com/gohugoio/hugo/security/advisories/GHSA-6c8w-mpp8-9w47https://www.vulncheck.com/advisories/hugo-from-0.162.0-before-0.167.0-symlink-file-disclosure-via-nested-mount-ancestor#gohugoio #hugo#CVE_2026_109596#bot", "url": "https://infosec.exchange/users/cve/statuses/117430383485204010"}, {"timestamp": "2026-10-12T22:51:06.211Z", "date_only": false, "value": "2026-10-12T22:51:06.211059+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-12T22:55:09.510Z", "date_only": false, "value": "2026-10-12T22:55:09.510542+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-12T23:17:00Z", "date_only": false, "value": "2026-10-12T23:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-109596", "record": "UBUNTU-CVE-2026-109596", "field": "published"}, {"timestamp": "2026-10-12T23:17:00Z", "date_only": false, "value": "2026-10-12T23:17:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-109596", "record": "UBUNTU-CVE-2026-109596", "field": "modified"}, {"timestamp": "2026-10-12T23:17:23Z", "date_only": false, "value": "2026-10-12T23:17:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-38R7-H6RH-GJV9", "record": "GHSA-38R7-H6RH-GJV9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T23:17:23.033Z", "date_only": false, "value": "2026-10-12T23:17:23.033", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109596", "record": "FKIE_CVE-2026-109596", "field": "published"}, {"timestamp": "2026-10-13T00:31:21Z", "date_only": false, "value": "2026-10-13T00:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-38R7-H6RH-GJV9", "record": "GHSA-38R7-H6RH-GJV9", "field": "published"}, {"timestamp": "2026-10-13T00:31:21Z", "date_only": false, "value": "2026-10-13T00:31:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-38R7-H6RH-GJV9", "record": "GHSA-38R7-H6RH-GJV9", "field": "modified"}, {"timestamp": "2026-10-13T00:57:50Z", "date_only": false, "value": "2026-10-13T00:57:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-14T12:04:35.108Z", "date_only": false, "value": "2026-10-14T12:04:35.108374Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109596", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T12:04:35.108Z", "date_only": false, "value": "2026-10-14T12:04:35.108374Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109596", "record": "FKIE_CVE-2026-109596", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T12:07:23.109Z", "date_only": false, "value": "2026-10-14T12:07:23.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109596", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T12:07:23.109Z", "date_only": false, "value": "2026-10-14T12:07:23.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109596", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:15:07.947Z", "date_only": false, "value": "2026-10-16T19:15:07.947", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109596", "record": "FKIE_CVE-2026-109596", "field": "lastModified"}, {"timestamp": "2026-10-24T06:39:28Z", "date_only": false, "value": "2026-10-24T06:39:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-24T06:39:28Z", "date_only": false, "value": "2026-10-24T06:39:28+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-24T06:39:28Z", "date_only": false, "value": "2026-10-24T06:39:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:80677", "record": "RHSA-2026:80677", "field": "document.tracking.current_release_date"}]}