{"metadata": {"vulnerability": "CVE-2026-110114", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110114", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T16:23:06.462Z", "date_only": false, "value": "2026-10-13T16:23:06.462Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110114", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T16:53:12.711Z", "date_only": false, "value": "2026-10-13T16:53:12.711Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110114", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T16:53:12.711Z", "date_only": false, "value": "2026-10-13T16:53:12.711Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110114", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:15:04.541Z", "date_only": false, "value": "2026-10-13T17:15:04.541348Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434725422317116", "record": "CVE-2026-110114", "field": "creation_timestamp", "uuid": "73be1e53-7578-4923-a724-7d923152496d", "content": "CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared goods_sku_index_01 index for all tenants and force full-table reloads, degrading search availability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110114https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/oms-erp-es-test-unauth-index-wipehttps://github.com/FJ-OMS/oms-erp/blob/14486c98280afd2e0372866f8f2345e2e2b32843/skyer-goods/src/main/java/org/skyer/goods/api/controller/v1/GoodsSkuController.java#L123-L131https://github.com/FJ-OMS/oms-erp/blob/14486c98280afd2e0372866f8f2345e2e2b32843/skyer-goods/src/main/java/org/skyer/goods/api/controller/v1/SpuController.java#L104-L111https://github.com/FJ-OMS/oms-erp/blob/14486c98280afd2e0372866f8f2345e2e2b32843/skyer-goods/src/main/java/org/skyer/goods/app/service/impl/SkuEsServiceImpl.java#L276-L301https://www.vulncheck.com/advisories/oms-erp-through-pre-missing-authentication-via-skyer-goods-es-test-endpoints#FJ-OMS #oms-erp#CVE_2026_110114#bot", "url": "https://infosec.exchange/users/cve/statuses/117434725422317116"}, {"timestamp": "2026-10-13T17:17:35Z", "date_only": false, "value": "2026-10-13T17:17:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V986-678G-75HP", "record": "GHSA-V986-678G-75HP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T17:17:35.520Z", "date_only": false, "value": "2026-10-13T17:17:35.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110114", "record": "FKIE_CVE-2026-110114", "field": "published"}, {"timestamp": "2026-10-13T18:30:55Z", "date_only": false, "value": "2026-10-13T18:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V986-678G-75HP", "record": "GHSA-V986-678G-75HP", "field": "published"}, {"timestamp": "2026-10-13T18:30:55Z", "date_only": false, "value": "2026-10-13T18:30:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V986-678G-75HP", "record": "GHSA-V986-678G-75HP", "field": "modified"}, {"timestamp": "2026-10-14T15:45:35.414Z", "date_only": false, "value": "2026-10-14T15:45:35.414634Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110114", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T15:45:35.414Z", "date_only": false, "value": "2026-10-14T15:45:35.414634Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110114", "record": "FKIE_CVE-2026-110114", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T15:46:12.426Z", "date_only": false, "value": "2026-10-14T15:46:12.426Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110114", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:46:12.426Z", "date_only": false, "value": "2026-10-14T15:46:12.426Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110114", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:52:58.417Z", "date_only": false, "value": "2026-10-16T14:52:58.417", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110114", "record": "FKIE_CVE-2026-110114", "field": "lastModified"}]}