{"metadata": {"vulnerability": "CVE-2026-109694", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-13T00:19:42.201Z", "date_only": false, "value": "2026-10-13T00:19:42.201Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109694", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T10:57:26Z", "date_only": false, "value": "2026-10-13T10:57:26.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-109694", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T11:00:13.754Z", "date_only": false, "value": "2026-10-15T11:00:13.754Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109694", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T11:00:13.754Z", "date_only": false, "value": "2026-10-15T11:00:13.754Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-109694", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T11:16:33.357Z", "date_only": false, "value": "2026-10-15T11:16:33.357142Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117444640263205012", "record": "CVE-2026-109694", "field": "creation_timestamp", "uuid": "863653e4-7831-4757-ba86-97f39bed2fd9", "content": "CVE-2026-109694 WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109694https://patchstack.com/database/wordpress/plugin/fluent-crm/vulnerability/wordpress-fluent-crm-plugin-3-2-5-privilege-escalation-vulnerability?_s_id=cve#WPManageNinjaLLC #FluentCRM#CVE_2026_109694#bot", "url": "https://infosec.exchange/users/cve/statuses/117444640263205012"}, {"timestamp": "2026-10-15T11:17:24Z", "date_only": false, "value": "2026-10-15T11:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4G3P-VXJX-9QR5", "record": "GHSA-4G3P-VXJX-9QR5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T11:17:24.537Z", "date_only": false, "value": "2026-10-15T11:17:24.537", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109694", "record": "FKIE_CVE-2026-109694", "field": "published"}, {"timestamp": "2026-10-15T12:00:26.595Z", "date_only": false, "value": "2026-10-15T12:00:26.595060Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117444812837904573", "record": "cve-2026-109694", "field": "creation_timestamp", "uuid": "922c11c9-c5e6-4740-a27a-b44fc3512b23", "content": "Fluent CRM <3.2.6 hit by CRITICAL CVE-2026-109694: incorrect privilege assignment enables unauth\u2019d privilege escalation (CVSS 9.8) \ud83d\udea8. Patch status TBC \u2014 restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-109694-incorrect-privilege-assignment-in-wp-manageninja-llc-fluent-crm-b55f33b4a658d6f8 #OffSeq #WordPress #Vuln #PrivilegeEscalation", "url": "https://infosec.exchange/users/offseq/statuses/117444812837904573"}, {"timestamp": "2026-10-15T12:00:28.291Z", "date_only": false, "value": "2026-10-15T12:00:28.291523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxvz7ltyaw2w", "record": "cve-2026-109694", "field": "creation_timestamp", "uuid": "40eae0d0-b595-4970-81ba-320eaec5db4e", "content": "Fluent CRM CRITICAL vuln (CVE-2026-109694) allows unauthenticated privilege escalation in all versions <3.2.6 \ud83d\udea8. Restrict plugin access & monitor closely. Patch status unknown. https://radar.offseq.com/threat/cve-2026-109694-incorrect-privilege-assignment-in-wp-manageninja-llc-fluent-crm-b55f33b4...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxvz7ltyaw2w"}, {"timestamp": "2026-10-15T12:08:19.390Z", "date_only": false, "value": "2026-10-15T12:08:19.390190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxvznnrnzo27", "record": "CVE-2026-109694", "field": "creation_timestamp", "uuid": "5099c0ee-0f29-4aa6-9fd9-2e887897eb2d", "content": "\ud83d\udea8 CVE-2026-109694 \u2014 CVSS 9.8 CRITICAL\n\nIncorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege E...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-109694\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxvznnrnzo27"}, {"timestamp": "2026-10-15T12:31:02Z", "date_only": false, "value": "2026-10-15T12:31:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4G3P-VXJX-9QR5", "record": "GHSA-4G3P-VXJX-9QR5", "field": "published"}, {"timestamp": "2026-10-15T12:31:02Z", "date_only": false, "value": "2026-10-15T12:31:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4G3P-VXJX-9QR5", "record": "GHSA-4G3P-VXJX-9QR5", "field": "modified"}, {"timestamp": "2026-10-15T14:37:38.933Z", "date_only": false, "value": "2026-10-15T14:37:38.933093Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109694", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T14:37:38.933Z", "date_only": false, "value": "2026-10-15T14:37:38.933093Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109694", "record": "FKIE_CVE-2026-109694", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T14:37:51.972Z", "date_only": false, "value": "2026-10-15T14:37:51.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109694", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T14:37:51.972Z", "date_only": false, "value": "2026-10-15T14:37:51.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109694", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:17:27.977Z", "date_only": false, "value": "2026-10-15T15:17:27.977", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109694", "record": "FKIE_CVE-2026-109694", "field": "lastModified"}, {"timestamp": "2026-10-15T17:50:05.800Z", "date_only": false, "value": "2026-10-15T17:50:05.800508Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwmqs64zh22", "record": "CVE-2026-109694", "field": "creation_timestamp", "uuid": "dbb33025-ef29-4503-88c2-d3335f5b7e0e", "content": "CVE-2026-109694 - fluent crm\nThe Fluent CRM extension for WordPress may wrongly assign user permissions, allowing a regular user to act as an administrator. This could let an attacker change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fluentcrm #wpmanageninja #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwmqs64zh22"}]}