{"metadata": {"vulnerability": "CVE-2026-110475", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-14T07:43:11.707Z", "date_only": false, "value": "2026-10-14T07:43:11.707Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110475", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T12:20:36.675Z", "date_only": false, "value": "2026-10-26T12:20:36.675Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110475", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T12:20:36.675Z", "date_only": false, "value": "2026-10-26T12:20:36.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-In", "record": "CVE-2026-110475", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T14:05:33.404Z", "date_only": false, "value": "2026-10-26T14:05:33.404428Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117507590256470714", "record": "CVE-2026-110475", "field": "creation_timestamp", "uuid": "b2c85216-bd9a-40ff-aa2e-9e1d92ab90e3", "content": "CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a valid authenticated session on the targeted system.\nSuccessful exploitation of this vulnerability could allow the attacker to enumerate platform users, establish sessions as arbitrary users including administrative users, access and modify sensitive information with the privileges of the impersonated user.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110475https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0523#CreditNirvana #CreditNirvanaCollectionsPlatform(CollectionWorkz)#CVE_2026_110475#bot", "url": "https://infosec.exchange/users/cve/statuses/117507590256470714"}, {"timestamp": "2026-10-26T14:16:26Z", "date_only": false, "value": "2026-10-26T14:16:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-84F2-894G-2279", "record": "GHSA-84F2-894G-2279", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-26T14:16:26.573Z", "date_only": false, "value": "2026-10-26T14:16:26.573", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110475", "record": "FKIE_CVE-2026-110475", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T15:10:03.860Z", "date_only": false, "value": "2026-10-26T15:10:03.860050Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myrywqqvwl2n", "record": "CVE-2026-110475", "field": "creation_timestamp", "uuid": "f5b854a1-7ea1-49b7-84f6-85692263a255", "content": "CVE-2026-110475\nThe login service in the CreditNirvana Collections Platform does not properly verify who is connecting, so someone on the internet can pretend to be any user, even an administrator. This could let a malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myrywqqvwl2n"}, {"timestamp": "2026-10-26T15:34:39Z", "date_only": false, "value": "2026-10-26T15:34:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-84F2-894G-2279", "record": "GHSA-84F2-894G-2279", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T15:34:39Z", "date_only": false, "value": "2026-10-26T15:34:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-84F2-894G-2279", "record": "GHSA-84F2-894G-2279", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-26T16:07:40.302Z", "date_only": false, "value": "2026-10-26T16:07:40.302406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mys45r5jof2b", "record": "CVE-2026-110475", "field": "creation_timestamp", "uuid": "f83f31b6-6008-46d4-898d-df5c43b08d7a", "content": "\ud83d\udea8 CVE-2026-110475 \u2014 CVSS 9.3 CRITICAL\n\nThis vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-110475\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mys45r5jof2b"}, {"timestamp": "2026-11-02T16:22:10.735Z", "date_only": false, "value": "2026-11-02T16:22:10.735804Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110475", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-02T16:22:10.735Z", "date_only": false, "value": "2026-11-02T16:22:10.735804Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110475", "record": "FKIE_CVE-2026-110475", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-02T16:22:24.697Z", "date_only": false, "value": "2026-11-02T16:22:24.697Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110475", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-02T16:22:24.697Z", "date_only": false, "value": "2026-11-02T16:22:24.697Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110475", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-02T17:17:35.490Z", "date_only": false, "value": "2026-11-02T17:17:35.490", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110475", "record": "FKIE_CVE-2026-110475", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T06:12:54.135Z", "anchors": {"origin": {"timestamp": "2026-10-26T12:20:36.675Z", "date_only": false, "value": "2026-10-26T12:20:36.675Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110475", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-26T12:20:36.675Z", "date_only": false, "value": "2026-10-26T12:20:36.675Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110475", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1014737.460137, "hours": 281.8715167047222, "days": 11.744646529363425, "min_seconds": 1014737.460137, "max_seconds": 1014737.460137, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T12:20:36.675Z", "date_only": false, "value": "2026-10-26T12:20:36.675Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110475", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T06:12:54.135Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}