{"metadata": {"vulnerability": "CVE-2026-110956", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-15T09:29:33.749Z", "date_only": false, "value": "2026-10-15T09:29:33.749Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110956", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-24T06:00:18.623Z", "date_only": false, "value": "2026-10-24T06:00:18.623Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110956", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-24T06:00:18.623Z", "date_only": false, "value": "2026-10-24T06:00:18.623Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-110956", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-24T06:09:42.482Z", "date_only": false, "value": "2026-10-24T06:09:42.482967Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117494394515428786", "record": "CVE-2026-110956", "field": "creation_timestamp", "uuid": "6e89ffec-d7b1-4499-97d0-3d8b20bdbe79", "content": "CVE-2026-110956 asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validation The asVereinbase  WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, treating an empty stored value as a match, so an unauthenticated attacker can log in as any user, including an administrator.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110956https://wpscan.com/vulnerability/95501052-9f20-4391-9171-184cd2e4a445/#CVE_2026_110956#bot", "url": "https://infosec.exchange/users/cve/statuses/117494394515428786"}, {"timestamp": "2026-10-24T06:16:36Z", "date_only": false, "value": "2026-10-24T06:16:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3838-5P3Q-5CGW", "record": "GHSA-3838-5P3Q-5CGW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-24T06:16:36.010Z", "date_only": false, "value": "2026-10-24T06:16:36.010", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110956", "record": "FKIE_CVE-2026-110956", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-24T06:30:29Z", "date_only": false, "value": "2026-10-24T06:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3838-5P3Q-5CGW", "record": "GHSA-3838-5P3Q-5CGW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-24T14:33:54.717Z", "date_only": false, "value": "2026-10-24T14:33:54.717447Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110956", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-24T14:33:54.717Z", "date_only": false, "value": "2026-10-24T14:33:54.717447Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110956", "record": "FKIE_CVE-2026-110956", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-24T14:36:54.674Z", "date_only": false, "value": "2026-10-24T14:36:54.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110956", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-24T14:36:54.674Z", "date_only": false, "value": "2026-10-24T14:36:54.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110956", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-24T15:32:52Z", "date_only": false, "value": "2026-10-24T15:32:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3838-5P3Q-5CGW", "record": "GHSA-3838-5P3Q-5CGW", "field": "modified"}, {"timestamp": "2026-10-25T00:00:14.564Z", "date_only": false, "value": "2026-10-25T00:00:14.564986Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mynvmwehku2h", "record": "CVE-2026-110956", "field": "creation_timestamp", "uuid": "f964b352-271c-4658-8d19-37b1ea86ca21", "content": "Anyone logged in as admin. CVE-2026-110956. CVSS 9.8. asVereinbase plugin before 1.1.8 accepts empty passwords. Unauthenticated attackers walk in. No patch yet. Disable it now. Scan: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "url": "https://bsky.app/profile/pulse-wp.com/post/3mynvmwehku2h"}, {"timestamp": "2026-10-25T01:19:16.839Z", "date_only": false, "value": "2026-10-25T01:19:16.839587Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3myo22b4eja2i", "record": "CVE-2026-110956", "field": "creation_timestamp", "uuid": "bbe5643f-9115-416a-9a6b-26af8c1fcce0", "content": "asVereinbase vulnerabilidad WordPress: CVE cr\u00edtica 9.8\n\n\u00bfTu WordPress corre asVereinbase? La vulnerabilidad CVE-2026-110956 deja entrar como admin sin contrase\u00f1a. Actualiz\u00e1 a 1.1.8 antes de que te toque a vos\n\n#asvereinbase #cve2026110956 #wordpress #bypassautenticaci\u00f3n #pluginswordpress", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3myo22b4eja2i"}, {"timestamp": "2026-10-26T13:50:14.083Z", "date_only": false, "value": "2026-10-26T13:50:14.083", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110956", "record": "FKIE_CVE-2026-110956", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T15:56:13.667Z", "anchors": {"origin": {"timestamp": "2026-10-24T06:00:18.623Z", "date_only": false, "value": "2026-10-24T06:00:18.623Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110956", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-24T06:00:18.623Z", "date_only": false, "value": "2026-10-24T06:00:18.623Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110956", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 381355.044808, "hours": 105.9319568911111, "days": 4.41383153712963, "min_seconds": 381355.044808, "max_seconds": 381355.044808, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-24T06:00:18.623Z", "date_only": false, "value": "2026-10-24T06:00:18.623Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110956", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T15:56:13.667Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}