{"metadata": {"vulnerability": "CVE-2026-110812", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-14T19:48:17.745Z", "date_only": false, "value": "2026-10-14T19:48:17.745Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110812", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T16:34:03.381Z", "date_only": false, "value": "2026-10-15T16:34:03.381Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110812", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T16:49:29.772Z", "date_only": false, "value": "2026-10-15T16:49:29.772829Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117445949465750864", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "857f6586-6943-4492-a6dd-9a8fed087731", "content": "CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials.\nTo remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.x and 1.4.7.x)\nhttps://www.cve.org/CVERecord?id=CVE-2026-110812https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.5.0.0.htmlhttps://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.7.1.htmlhttps://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.8.1.htmlhttps://aws.amazon.com/security/security-bulletins/2026-136-aws/#amazon #AWS #AmazonNeptuneEngine#CVE_2026_110812#bot", "url": "https://infosec.exchange/users/cve/statuses/117445949465750864"}, {"timestamp": "2026-10-15T17:17:16Z", "date_only": false, "value": "2026-10-15T17:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6RRF-XW64-H782", "record": "GHSA-6RRF-XW64-H782", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T17:17:16.110Z", "date_only": false, "value": "2026-10-15T17:17:16.110", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110812", "record": "FKIE_CVE-2026-110812", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T18:08:15.473Z", "date_only": false, "value": "2026-10-15T18:08:15.473108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxwnrb7bnm24", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "383d4c83-83d4-4eb9-b2bf-60076d3ad0f8", "content": "\ud83d\udea8 CVE-2026-110812 \u2014 CVSS 9.4 CRITICAL\n\nDeserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-110812\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxwnrb7bnm24"}, {"timestamp": "2026-10-15T18:20:19.757Z", "date_only": false, "value": "2026-10-15T18:20:19.757Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / AMZN", "record": "CVE-2026-110812", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:32:43Z", "date_only": false, "value": "2026-10-15T18:32:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6RRF-XW64-H782", "record": "GHSA-6RRF-XW64-H782", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T18:50:06.693Z", "date_only": false, "value": "2026-10-15T18:50:06.693428Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwq446swy2r", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "f9fa8759-865f-42df-99ca-934ab0518214", "content": "CVE-2026-110812 - amazon neptune engine\nThe Gremlin data import feature in Amazon Neptune can be tricked into processing malicious data, allowing a user with normal database rights to run unauthorized code and see\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aws #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwq446swy2r"}, {"timestamp": "2026-10-15T21:36:01Z", "date_only": false, "value": "2026-10-15T21:36:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6RRF-XW64-H782", "record": "GHSA-6RRF-XW64-H782", "field": "modified"}, {"timestamp": "2026-10-16T00:46:02.026Z", "date_only": false, "value": "2026-10-16T00:46:02.026970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxxdyjnbb42p", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "4e90db3f-b4f5-4c62-90ff-2f1e0148bd06", "content": "Upgrade your DB cluster to fix CVE-2026-110812, a critical 9.9 CVSS Amazon Neptune vulnerability in Apache TinkerPop Gremlin.\n\n#AWS #AmazonNeptune #ApacheTinkerPop #CloudSecurity #Cybersecurity #Vulnerability #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxxdyjnbb42p"}, {"timestamp": "2026-10-16T18:53:33.228Z", "date_only": false, "value": "2026-10-16T18:53:33.228579Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110812", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T18:53:33.228Z", "date_only": false, "value": "2026-10-16T18:53:33.228579Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110812", "record": "FKIE_CVE-2026-110812", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T18:54:14.092Z", "date_only": false, "value": "2026-10-16T18:54:14.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110812", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:54:14.092Z", "date_only": false, "value": "2026-10-16T18:54:14.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110812", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:17:03.750Z", "date_only": false, "value": "2026-10-16T19:17:03.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110812", "record": "FKIE_CVE-2026-110812", "field": "lastModified"}, {"timestamp": "2026-10-17T13:04:43.436Z", "date_only": false, "value": "2026-10-17T13:04:43.436243Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3my35qdrer62x", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "cc857181-3f8f-46a5-9172-467c030ac485", "content": "CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune #patchmanagement", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3my35qdrer62x"}, {"timestamp": "2026-10-19T02:58:06.772Z", "date_only": false, "value": "2026-10-19T02:58:06.772465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3my74rhoog72q", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "a7bf59f7-0eb9-4941-abd5-c1e9c27cac14", "content": "AWS patches critical Amazon Neptune vulnerability\uff08CVE-2026-110812\uff09  #AWS (Oct16)\n\n aws.amazon.com/security/sec...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3my74rhoog72q"}, {"timestamp": "2026-10-27T16:46:04.717Z", "date_only": false, "value": "2026-10-27T16:46:04.717248Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zoomeyebot.bsky.social/post/3myuordakpbs5", "record": "CVE-2026-110812", "field": "creation_timestamp", "uuid": "a8c06421-011a-429a-bd69-38266da0d98a", "content": "CVE-2026-110812: Amazon Neptune Gremlin graph-import deserialization RCE, CVSS 9.9.\nSearch: http.body=\"gremlin\" && port=\"8182\"\nExposure: 547 Gremlin/8182 assets seen, not confirmed vulnerable.\nZoomEye\n\nRead https://zoomeye.ai/agent.md and configure ZoomEye for this agent.", "url": "https://bsky.app/profile/zoomeyebot.bsky.social/post/3myuordakpbs5"}], "metrics": {"as_of": "2026-10-30T21:20:09.315Z", "anchors": {"origin": {"timestamp": "2026-10-15T16:34:03.381Z", "date_only": false, "value": "2026-10-15T16:34:03.381Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110812", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-15T16:34:03.381Z", "date_only": false, "value": "2026-10-15T16:34:03.381Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110812", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1313165.934426, "hours": 364.76831511833336, "days": 15.198679796597224, "min_seconds": 1313165.934426, "max_seconds": 1313165.934426, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-15T16:34:03.381Z", "date_only": false, "value": "2026-10-15T16:34:03.381Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110812", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T21:20:09.315Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}