{"metadata": {"vulnerability": "CVE-2026-110116", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110116", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T16:23:07.101Z", "date_only": false, "value": "2026-10-13T16:23:07.101Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110116", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T16:53:14.032Z", "date_only": false, "value": "2026-10-13T16:53:14.032Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110116", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T16:53:14.032Z", "date_only": false, "value": "2026-10-13T16:53:14.032Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110116", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:16:24.974Z", "date_only": false, "value": "2026-10-13T17:16:24.974600Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434730702354564", "record": "CVE-2026-110116", "field": "creation_timestamp", "uuid": "7510524e-7bdf-4e85-b554-c461d7c194bf", "content": "CVE-2026-110116 Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files, potentially achieving code execution.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110116https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rwhttps://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java#L168-L182https://www.vulncheck.com/advisories/digital-infrastructure-9.6.5-through-9.6.11-path-traversal-via-filemanager-storefile#risesoft-y9 #Digital-Infrastructure#CVE_2026_110116#bot", "url": "https://infosec.exchange/users/cve/statuses/117434730702354564"}, {"timestamp": "2026-10-13T17:17:35Z", "date_only": false, "value": "2026-10-13T17:17:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-384W-QHXP-J99V", "record": "GHSA-384W-QHXP-J99V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T17:17:35.843Z", "date_only": false, "value": "2026-10-13T17:17:35.843", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110116", "record": "FKIE_CVE-2026-110116", "field": "published"}, {"timestamp": "2026-10-13T17:19:18.319Z", "date_only": false, "value": "2026-10-13T17:19:18.319290Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110116", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T17:19:18.319Z", "date_only": false, "value": "2026-10-13T17:19:18.319290Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110116", "record": "FKIE_CVE-2026-110116", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T17:19:36.502Z", "date_only": false, "value": "2026-10-13T17:19:36.502Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110116", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:19:36.502Z", "date_only": false, "value": "2026-10-13T17:19:36.502Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110116", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T18:17:22.700Z", "date_only": false, "value": "2026-10-13T18:17:22.700", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110116", "record": "FKIE_CVE-2026-110116", "field": "lastModified"}, {"timestamp": "2026-10-13T18:30:55Z", "date_only": false, "value": "2026-10-13T18:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-384W-QHXP-J99V", "record": "GHSA-384W-QHXP-J99V", "field": "published"}, {"timestamp": "2026-10-13T18:30:55Z", "date_only": false, "value": "2026-10-13T18:30:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-384W-QHXP-J99V", "record": "GHSA-384W-QHXP-J99V", "field": "modified"}, {"timestamp": "2026-10-14T04:30:04.185Z", "date_only": false, "value": "2026-10-14T04:30:04.185812Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsplcjkmi2z", "record": "CVE-2026-110116", "field": "creation_timestamp", "uuid": "3d49f90d-d8de-4ba4-9b75-8262b7e9533f", "content": "CVE-2026-110116 - digital-infrastructure\nVersions 9.6.5 to 9.6.11 of Risesoft Y9 Digital Infrastructure let anyone send specially crafted requests to the file manager and create or replace files on the server.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#risesofty9 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsplcjkmi2z"}]}