{"metadata": {"vulnerability": "CVE-2026-110126", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110126", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T16:24:40.748Z", "date_only": false, "value": "2026-10-13T16:24:40.748Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110126", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T16:53:20.427Z", "date_only": false, "value": "2026-10-13T16:53:20.427Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110126", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T16:53:20.427Z", "date_only": false, "value": "2026-10-13T16:53:20.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110126", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:29.068Z", "date_only": false, "value": "2026-10-13T17:17:29.068513Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110126", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T17:17:29.068Z", "date_only": false, "value": "2026-10-13T17:17:29.068513Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110126", "record": "FKIE_CVE-2026-110126", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T17:17:38Z", "date_only": false, "value": "2026-10-13T17:17:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RRCP-3X9C-4QR5", "record": "GHSA-RRCP-3X9C-4QR5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T17:17:38.323Z", "date_only": false, "value": "2026-10-13T17:17:38.323", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110126", "record": "FKIE_CVE-2026-110126", "field": "published"}, {"timestamp": "2026-10-13T17:17:38.595Z", "date_only": false, "value": "2026-10-13T17:17:38.595Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110126", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:38.595Z", "date_only": false, "value": "2026-10-13T17:17:38.595Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110126", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:23:08.286Z", "date_only": false, "value": "2026-10-13T17:23:08.286377Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434757130873536", "record": "CVE-2026-110126", "field": "creation_timestamp", "uuid": "c2ae7a2d-fbf6-41cb-b44a-0e5408f3df73", "content": "CVE-2026-110126 waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE /address/{addressId} requests to overwrite or remove victims' saved addresses.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110126https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idorhttps://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/AddressController.java#L44-L67https://github.com/wayn111/waynboot-mall/commit/0ef8fa4a951fc1f6d57f3e12e37c31490e886a64https://github.com/wayn111/waynboot-mall/releases/tag/v2.0.0https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-idor-via-mobile-address-endpoints#wayn111 #waynboot-mall#CVE_2026_110126#bot", "url": "https://infosec.exchange/users/cve/statuses/117434757130873536"}, {"timestamp": "2026-10-13T18:30:56Z", "date_only": false, "value": "2026-10-13T18:30:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RRCP-3X9C-4QR5", "record": "GHSA-RRCP-3X9C-4QR5", "field": "published"}, {"timestamp": "2026-10-13T18:30:56Z", "date_only": false, "value": "2026-10-13T18:30:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RRCP-3X9C-4QR5", "record": "GHSA-RRCP-3X9C-4QR5", "field": "modified"}, {"timestamp": "2026-10-16T19:18:44.867Z", "date_only": false, "value": "2026-10-16T19:18:44.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110126", "record": "FKIE_CVE-2026-110126", "field": "lastModified"}]}