{"metadata": {"vulnerability": "CVE-2026-110686", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-110686", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-14T13:26:57.076Z", "date_only": false, "value": "2026-10-14T13:26:57.076Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110686", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T18:12:19.804Z", "date_only": false, "value": "2026-10-19T18:12:19.804Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110686", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-19T18:12:19.804Z", "date_only": false, "value": "2026-10-19T18:12:19.804Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110686", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-19T18:12:19.804Z", "date_only": false, "value": "2026-10-19T18:12:19.804Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-110686", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T18:37:26.040Z", "date_only": false, "value": "2026-10-19T18:37:26.040888Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117469023147798202", "record": "CVE-2026-110686", "field": "creation_timestamp", "uuid": "1599ba9a-cb8c-4b68-8595-188a87b176b0", "content": "CVE-2026-110686 Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv.\nA decode copies the parser's filter_json_object and filter_json_single_key_object callbacks without taking references to them. A filter callback that removes the last single-key filter frees the callback table while the decode in progress still uses it. The next object is dispatched through freed memory and can crash the process.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110686https://github.com/rurban/Cpanel-JSON-XS/commit/c3e7e3c5b0b72d82b072c6a7cfb8c34cec4c7ea2.patchhttps://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes#CVE_2026_110686#bot", "url": "https://infosec.exchange/users/cve/statuses/117469023147798202"}, {"timestamp": "2026-10-19T19:17:22Z", "date_only": false, "value": "2026-10-19T19:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q5QQ-6RC9-83RG", "record": "GHSA-Q5QQ-6RC9-83RG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-19T19:17:22.200Z", "date_only": false, "value": "2026-10-19T19:17:22.200", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110686", "record": "FKIE_CVE-2026-110686", "field": "published"}, {"timestamp": "2026-10-19T20:50:17.967Z", "date_only": false, "value": "2026-10-19T20:50:17.967", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110686", "record": "FKIE_CVE-2026-110686", "field": "lastModified"}, {"timestamp": "2026-10-19T21:36:28Z", "date_only": false, "value": "2026-10-19T21:36:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q5QQ-6RC9-83RG", "record": "GHSA-Q5QQ-6RC9-83RG", "field": "published"}, {"timestamp": "2026-10-19T21:36:28Z", "date_only": false, "value": "2026-10-19T21:36:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q5QQ-6RC9-83RG", "record": "GHSA-Q5QQ-6RC9-83RG", "field": "modified"}]}