{"metadata": {"vulnerability": "CVE-2026-111330", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111330", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T20:43:58.405Z", "date_only": false, "value": "2026-10-15T20:43:58.405Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111330", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:33.735Z", "date_only": false, "value": "2026-10-15T21:43:33.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111330", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:43:33.735Z", "date_only": false, "value": "2026-10-15T21:43:33.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111330", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:04:13.624Z", "date_only": false, "value": "2026-10-15T22:04:13.624799Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447187044037235", "record": "CVE-2026-111330", "field": "creation_timestamp", "uuid": "a60ca659-8bca-4fc1-ba47-0c303e53c883", "content": "CVE-2026-111330 JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1 JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go. Attackers who obtain the accounts table through database access or backups can crack console passwords using precomputed tables or GPU brute force.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111330https://hackmd.io/@hieuPenguinnn/juggleim-im-server-default-admin-credentialhttps://github.com/juggleim/imserver-console/blob/v1.0.10/services/accountservice.go#L95https://github.com/juggleim/im-server/blob/v1.8.16/sql/imserver.sql#L3-L15https://github.com/juggleim/im-serverhttps://www.vulncheck.com/advisories/juggleim-im-server-through-1.8.16-weak-password-hashing-via-unsalted-sha-1#juggleim #JuggleIM#CVE_2026_111330#bot", "url": "https://infosec.exchange/users/cve/statuses/117447187044037235"}, {"timestamp": "2026-10-15T22:19:31Z", "date_only": false, "value": "2026-10-15T22:19:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-53GF-XHQ2-C3J8", "record": "GHSA-53GF-XHQ2-C3J8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:31.210Z", "date_only": false, "value": "2026-10-15T22:19:31.210", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111330", "record": "FKIE_CVE-2026-111330", "field": "published"}, {"timestamp": "2026-10-16T00:31:56Z", "date_only": false, "value": "2026-10-16T00:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-53GF-XHQ2-C3J8", "record": "GHSA-53GF-XHQ2-C3J8", "field": "published"}, {"timestamp": "2026-10-16T00:31:56Z", "date_only": false, "value": "2026-10-16T00:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-53GF-XHQ2-C3J8", "record": "GHSA-53GF-XHQ2-C3J8", "field": "modified"}, {"timestamp": "2026-10-16T16:31:37.585Z", "date_only": false, "value": "2026-10-16T16:31:37.585998Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111330", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:31:37.585Z", "date_only": false, "value": "2026-10-16T16:31:37.585998Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111330", "record": "FKIE_CVE-2026-111330", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T17:08:47.183Z", "date_only": false, "value": "2026-10-16T17:08:47.183Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111330", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:08:47.183Z", "date_only": false, "value": "2026-10-16T17:08:47.183Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111330", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:25:45.343Z", "date_only": false, "value": "2026-10-16T18:25:45.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111330", "record": "FKIE_CVE-2026-111330", "field": "lastModified"}]}
