{"metadata": {"vulnerability": "CVE-2026-111279", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111279", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T19:46:06.408Z", "date_only": false, "value": "2026-10-15T19:46:06.408Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111279", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:23.862Z", "date_only": false, "value": "2026-10-15T21:43:23.862Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111279", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:43:23.862Z", "date_only": false, "value": "2026-10-15T21:43:23.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111279", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T21:54:48.795Z", "date_only": false, "value": "2026-10-15T21:54:48.795157Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447150020783572", "record": "CVE-2026-111279", "field": "creation_timestamp", "uuid": "78076208-feed-4e93-8600-841bd0ca62c8", "content": "CVE-2026-111279 Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single command against a one-element key with a huge negative COUNT to trigger the OOM killer, terminating the instance for all clients.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111279https://github.com/dragonflydb/dragonfly/issues/8578https://github.com/dragonflydb/dragonfly/blob/8ce4bbb106586057fbd85f71ed353c60d0d5bf87/src/server/hset_family.cc#L1436-L1483https://github.com/dragonflydb/dragonfly/blob/8ce4bbb106586057fbd85f71ed353c60d0d5bf87/src/server/zset_family.cc#L1519-L1522https://github.com/dragonflydb/dragonfly/blob/8ce4bbb106586057fbd85f71ed353c60d0d5bf87/src/server/set_family.cc#L957-L984https://github.com/dragonflydb/dragonflyhttps://www.vulncheck.com/advisories/dragonfly-through-2.0.2-unbounded-memory-allocation-via-negative-count-in-hrandfield-zrandmember-and-srandmember#dragonflydb #dragonfly#CVE_2026_111279#bot", "url": "https://infosec.exchange/users/cve/statuses/117447150020783572"}, {"timestamp": "2026-10-15T22:19:29Z", "date_only": false, "value": "2026-10-15T22:19:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W5X4-FQ2Q-M366", "record": "GHSA-W5X4-FQ2Q-M366", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:29.157Z", "date_only": false, "value": "2026-10-15T22:19:29.157", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111279", "record": "FKIE_CVE-2026-111279", "field": "published"}, {"timestamp": "2026-10-15T23:18:05.091Z", "date_only": false, "value": "2026-10-15T23:18:05.091268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxx73afuit2b", "record": "CVE-2026-111279", "field": "creation_timestamp", "uuid": "795785ed-1210-450d-b520-89560d03f506", "content": "\ud83d\udfe0 CVE-2026-111279 - High (7.5)\n\nDragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-111279/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxx73afuit2b"}, {"timestamp": "2026-10-16T00:31:54Z", "date_only": false, "value": "2026-10-16T00:31:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W5X4-FQ2Q-M366", "record": "GHSA-W5X4-FQ2Q-M366", "field": "published"}, {"timestamp": "2026-10-16T00:31:54Z", "date_only": false, "value": "2026-10-16T00:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W5X4-FQ2Q-M366", "record": "GHSA-W5X4-FQ2Q-M366", "field": "modified"}, {"timestamp": "2026-10-16T19:43:16.935Z", "date_only": false, "value": "2026-10-16T19:43:16.935776Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111279", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T19:43:16.935Z", "date_only": false, "value": "2026-10-16T19:43:16.935776Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111279", "record": "FKIE_CVE-2026-111279", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T19:43:45.103Z", "date_only": false, "value": "2026-10-16T19:43:45.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111279", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:43:45.103Z", "date_only": false, "value": "2026-10-16T19:43:45.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111279", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:17:19.980Z", "date_only": false, "value": "2026-10-16T20:17:19.980", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111279", "record": "FKIE_CVE-2026-111279", "field": "lastModified"}]}