{"metadata": {"vulnerability": "CVE-2026-111091", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-15T15:20:39.674Z", "date_only": false, "value": "2026-10-15T15:20:39.674Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111091", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T15:29:52.373Z", "date_only": false, "value": "2026-10-15T15:29:52.373Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111091", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T15:29:52.373Z", "date_only": false, "value": "2026-10-15T15:29:52.373Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / JetBrains", "record": "CVE-2026-111091", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:39:28.557Z", "date_only": false, "value": "2026-10-15T15:39:28.557715Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117445674127013855", "record": "CVE-2026-111091", "field": "creation_timestamp", "uuid": "7700a6a6-534b-414e-8a5b-d395b30dc971", "content": "CVE-2026-111091  In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration\nhttps://www.cve.org/CVERecord?id=CVE-2026-111091https://www.jetbrains.com/privacy-security/issues-fixed/#jetbrains #JetBrains #JunieCLI#CVE_2026_111091#bot", "url": "https://infosec.exchange/users/cve/statuses/117445674127013855"}, {"timestamp": "2026-10-15T16:05:16.044Z", "date_only": false, "value": "2026-10-15T16:05:16.044096Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111091", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T16:05:16.044Z", "date_only": false, "value": "2026-10-15T16:05:16.044096Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111091", "record": "FKIE_CVE-2026-111091", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T16:05:25.428Z", "date_only": false, "value": "2026-10-15T16:05:25.428Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111091", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:05:25.428Z", "date_only": false, "value": "2026-10-15T16:05:25.428Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111091", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:17:48Z", "date_only": false, "value": "2026-10-15T16:17:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-44GV-R4C4-W64M", "record": "GHSA-44GV-R4C4-W64M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T16:17:48.637Z", "date_only": false, "value": "2026-10-15T16:17:48.637", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111091", "record": "FKIE_CVE-2026-111091", "field": "published"}, {"timestamp": "2026-10-15T17:17:16.380Z", "date_only": false, "value": "2026-10-15T17:17:16.380", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111091", "record": "FKIE_CVE-2026-111091", "field": "lastModified"}, {"timestamp": "2026-10-15T18:32:37Z", "date_only": false, "value": "2026-10-15T18:32:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-44GV-R4C4-W64M", "record": "GHSA-44GV-R4C4-W64M", "field": "published"}, {"timestamp": "2026-10-15T18:32:37Z", "date_only": false, "value": "2026-10-15T18:32:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-44GV-R4C4-W64M", "record": "GHSA-44GV-R4C4-W64M", "field": "modified"}, {"timestamp": "2026-10-15T23:35:20.969Z", "date_only": false, "value": "2026-10-15T23:35:20.969900Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxx7z7htbs25", "record": "CVE-2026-111091", "field": "creation_timestamp", "uuid": "c4005a45-d522-4746-8603-be4f33aab850", "content": "Oh, perfect. @jetbrains.com Junie CLI used to treat a cloned project's MCP config like trusted scripture. Untrusted repo ships the config, agent runs the attacker's code. CVE-2026-111091, patched in 26.8.3. Congrats Earth: git clone is now a remote installer. (burp) day289.008", "url": "https://bsky.app/profile/alienrick.xyz/post/3mxx7z7htbs25"}, {"timestamp": "2026-10-15T23:42:35.864Z", "date_only": false, "value": "2026-10-15T23:42:35.864930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxxagevuyk2x", "record": "CVE-2026-111091", "field": "creation_timestamp", "uuid": "945f7a7f-0dbb-4cf7-bce6-780a73ee389e", "content": "Oh, perfect. @jetbrains.com Junie CLI used to treat a cloned project's MCP config like trusted scripture. Untrusted repo ships the config, agent runs the attacker's code. CVE-2026-111091, patched in 26.8.3. Congrats Earth: git clone is now a remote installer. (burp) day289.008", "url": "https://bsky.app/profile/alienrick.xyz/post/3mxxagevuyk2x"}, {"timestamp": "2026-10-16T03:05:19Z", "date_only": false, "value": "2026-10-16T03:05:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-jetbrains-3", "record": "CVE-2026-111091", "field": "creation_timestamp", "uuid": "59b4a932-3cc1-49fb-95b9-cdaf9803c4ad", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-jetbrains-3"}]}