{"metadata": {"vulnerability": "CVE-2026-110925", "count": 46, "kinds": {"milestone": 9, "sighting": 1, "kev": 0, "other": 36}, "linked_omitted": 0}, "data": [{"timestamp": "2026-10-06T20:20:31.186Z", "date_only": false, "value": "2026-10-06T20:20:31.186000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-10-06T20:35:32.577Z", "date_only": false, "value": "2026-10-06T20:35:32.577000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-10-06T20:41:38.989Z", "date_only": false, "value": "2026-10-06T20:41:38.989493+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-10-06T20:42:04.356Z", "date_only": false, "value": "2026-10-06T20:42:04.356779+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-10-06T20:47:50.509Z", "date_only": false, "value": "2026-10-06T20:47:50.509000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-10-06T20:52:39.850Z", "date_only": false, "value": "2026-10-06T20:52:39.850000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2026-10-06T20:57:09.067Z", "date_only": false, "value": "2026-10-06T20:57:09.067000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2026-10-06T21:01:42.912Z", "date_only": false, "value": "2026-10-06T21:01:42.912475+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.4.discovery_date", "linked_record": true}, {"timestamp": "2026-10-06T21:01:44.808Z", "date_only": false, "value": "2026-10-06T21:01:44.808000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2026-10-06T21:01:45.989Z", "date_only": false, "value": "2026-10-06T21:01:45.989122+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-10-06T21:30:59.595Z", "date_only": false, "value": "2026-10-06T21:30:59.595220+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2026-10-06T23:42:14.374Z", "date_only": false, "value": "2026-10-06T23:42:14.374000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-10-06T23:50:58.683Z", "date_only": false, "value": "2026-10-06T23:50:58.683900+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-10-07T16:32:51.524Z", "date_only": false, "value": "2026-10-07T16:32:51.524818+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T03:16:14.465Z", "date_only": false, "value": "2026-10-15T03:16:14.465000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T04:13:16.313Z", "date_only": false, "value": "2026-10-15T04:13:16.313000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T04:17:08.197Z", "date_only": false, "value": "2026-10-15T04:17:08.197000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T04:20:17.064Z", "date_only": false, "value": "2026-10-15T04:20:17.064000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.10.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T04:33:31.442Z", "date_only": false, "value": "2026-10-15T04:33:31.442Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110925", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T05:25:00.811Z", "date_only": false, "value": "2026-10-15T05:25:00.811Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110925", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T05:39:59.332Z", "date_only": false, "value": "2026-10-15T05:39:59.332700Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117443316863851574", "record": "CVE-2026-110925", "field": "creation_timestamp", "uuid": "75e4aa1b-549e-4420-9f45-9c700b083461", "content": "CVE-2026-110925 Openssh: openssh: '$' and '\\' in a command-line username expand through %u A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110925https://access.redhat.com/security/cve/CVE-2026-110925https://bugzilla.redhat.com/show_bug.cgi?id=2553034#RedHat #RedHatEnterpriseLinux10 #RedHatEnterpriseLinux6 #RedHatEnterpriseLinux7 #RedHatEnterpriseLinux8 #RedHatEnterpriseLinux9 #RedHatHardenedImages #RedHatOpenShiftContainerPlatform4#CVE_2026_110925#bot", "url": "https://infosec.exchange/users/cve/statuses/117443316863851574"}, {"timestamp": "2026-10-15T06:17:00Z", "date_only": false, "value": "2026-10-15T06:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-110925", "record": "UBUNTU-CVE-2026-110925", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T06:17:01Z", "date_only": false, "value": "2026-10-15T06:17:01Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H54Q-2VM3-97QV", "record": "GHSA-H54Q-2VM3-97QV", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-15T06:17:01.243Z", "date_only": false, "value": "2026-10-15T06:17:01.243", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110925", "record": "FKIE_CVE-2026-110925", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T06:30:44Z", "date_only": false, "value": "2026-10-15T06:30:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H54Q-2VM3-97QV", "record": "GHSA-H54Q-2VM3-97QV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T13:52:13Z", "date_only": false, "value": "2026-10-15T13:52:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-15T21:35:56Z", "date_only": false, "value": "2026-10-15T21:35:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H54Q-2VM3-97QV", "record": "GHSA-H54Q-2VM3-97QV", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-16T06:05:35.694Z", "date_only": false, "value": "2026-10-16T06:05:35.694677Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-110925", "record": "BELL-CVE-2026-110925", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-21T06:01:42.888Z", "date_only": false, "value": "2026-10-21T06:01:42.888997Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-110925", "record": "BELL-CVE-2026-110925", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-21T06:01:42.888Z", "date_only": false, "value": "2026-10-21T06:01:42.888997Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-110925", "record": "BELL-CVE-2026-110925", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-21T06:47:55.382Z", "date_only": false, "value": "2026-10-21T06:47:55.382Z", "kind": "other", "label": "Rejected", "source": "cvelistv5", "record": "CVE-2026-110925", "field": "cveMetadata.dateRejected"}, {"timestamp": "2026-10-21T06:47:55.382Z", "date_only": false, "value": "2026-10-21T06:47:55.382Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110925", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-21T06:47:55.382Z", "date_only": false, "value": "2026-10-21T06:47:55.382Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-110925", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T07:17:17.537Z", "date_only": false, "value": "2026-10-21T07:17:17.537", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110925", "record": "FKIE_CVE-2026-110925", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-28T17:50:35Z", "date_only": false, "value": "2026-10-28T17:50:35Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-110925", "record": "UBUNTU-CVE-2026-110925", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-12T10:49:45Z", "date_only": false, "value": "2026-11-12T10:49:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-12T10:49:45Z", "date_only": false, "value": "2026-11-12T10:49:45+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-12T10:49:45Z", "date_only": false, "value": "2026-11-12T10:49:45+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-14T07:45:30.068Z", "anchors": {"origin": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-10-15T04:13:16.313Z", "date_only": false, "value": "2026-10-15T04:13:16.313000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": -140051.313, "hours": -38.9031425, "days": -1.6209642708333332, "min_seconds": -140051.313, "max_seconds": -140051.313, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-10-15T04:13:16.313Z", "date_only": false, "value": "2026-10-15T04:13:16.313000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-13T13:19:05Z", "date_only": false, "value": "2026-10-13T13:19:05+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:82247", "record": "RHSA-2026:82247", "field": "vulnerabilities.8.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}