{"metadata": {"vulnerability": "CVE-2026-111385", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111385", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T21:55:44.537Z", "date_only": false, "value": "2026-10-15T21:55:44.537Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111385", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T01:17:54.057Z", "date_only": false, "value": "2026-10-16T01:17:54.057Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111385", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T01:17:54.057Z", "date_only": false, "value": "2026-10-16T01:17:54.057Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111385", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T01:17:54.057Z", "date_only": false, "value": "2026-10-16T01:17:54.057Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111385", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T01:41:37.711Z", "date_only": false, "value": "2026-10-16T01:41:37.711866Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117448041906651718", "record": "CVE-2026-111385", "field": "creation_timestamp", "uuid": "7f8dc14e-80ca-47d3-a0c4-19194ad2be6d", "content": "CVE-2026-111385 Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture one-time download tokens and replay them to exfiltrate files.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111385https://github.com/nezhahq/nezha/security/advisories/GHSA-rj3w-jrj7-x7c3https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0fhttps://github.com/nezhahq/nezha/commit/c726930833937a0aebb2a924064f236faea889f6https://www.vulncheck.com/advisories/nezha-2.1.0-before-2.3.15-host-header-injection-via-mcp-transfer-tools#nezhahq #nezha#CVE_2026_111385#bot", "url": "https://infosec.exchange/users/cve/statuses/117448041906651718"}, {"timestamp": "2026-10-16T03:18:05Z", "date_only": false, "value": "2026-10-16T03:18:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7FQG-H9RW-WW63", "record": "GHSA-7FQG-H9RW-WW63", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T03:18:05.893Z", "date_only": false, "value": "2026-10-16T03:18:05.893", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111385", "record": "FKIE_CVE-2026-111385", "field": "published"}, {"timestamp": "2026-10-16T03:18:06.013Z", "date_only": false, "value": "2026-10-16T03:18:06.013", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111385", "record": "FKIE_CVE-2026-111385", "field": "lastModified"}, {"timestamp": "2026-10-16T03:30:28Z", "date_only": false, "value": "2026-10-16T03:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7FQG-H9RW-WW63", "record": "GHSA-7FQG-H9RW-WW63", "field": "published"}, {"timestamp": "2026-10-16T03:30:28Z", "date_only": false, "value": "2026-10-16T03:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7FQG-H9RW-WW63", "record": "GHSA-7FQG-H9RW-WW63", "field": "modified"}]}