{"metadata": {"vulnerability": "CVE-2026-111386", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111386", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T21:55:44.537Z", "date_only": false, "value": "2026-10-15T21:55:44.537Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111386", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T01:17:54.995Z", "date_only": false, "value": "2026-10-16T01:17:54.995Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111386", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T01:17:54.995Z", "date_only": false, "value": "2026-10-16T01:17:54.995Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111386", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T01:42:18.128Z", "date_only": false, "value": "2026-10-16T01:42:18.128522Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117448044550690854", "record": "CVE-2026-111386", "field": "creation_timestamp", "uuid": "7e860fbc-f24d-47d1-bdd7-429e9966e8a1", "content": "CVE-2026-111386 Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerate other tenants' server IDs through differential responses. Attackers can sweep sequential IDs against getServerConfig and setServerConfig, distinguishing 'permission denied' from success payloads to map other users' servers.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111386https://github.com/nezhahq/nezha/security/advisories/GHSA-228w-p4h4-6rvwhttps://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0fhttps://www.vulncheck.com/advisories/nezha-1.7.0-before-2.3.15-cross-tenant-server-id-enumeration-via-getserverconfig#nezhahq #nezha#CVE_2026_111386#bot", "url": "https://infosec.exchange/users/cve/statuses/117448044550690854"}, {"timestamp": "2026-10-16T03:18:06Z", "date_only": false, "value": "2026-10-16T03:18:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XPXC-2HWP-CV47", "record": "GHSA-XPXC-2HWP-CV47", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T03:18:06.057Z", "date_only": false, "value": "2026-10-16T03:18:06.057", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111386", "record": "FKIE_CVE-2026-111386", "field": "published"}, {"timestamp": "2026-10-16T03:30:28Z", "date_only": false, "value": "2026-10-16T03:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XPXC-2HWP-CV47", "record": "GHSA-XPXC-2HWP-CV47", "field": "published"}, {"timestamp": "2026-10-16T03:30:28Z", "date_only": false, "value": "2026-10-16T03:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XPXC-2HWP-CV47", "record": "GHSA-XPXC-2HWP-CV47", "field": "modified"}, {"timestamp": "2026-10-16T13:55:14.194Z", "date_only": false, "value": "2026-10-16T13:55:14.194577Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111386", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T13:55:14.194Z", "date_only": false, "value": "2026-10-16T13:55:14.194577Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111386", "record": "FKIE_CVE-2026-111386", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T13:56:01.330Z", "date_only": false, "value": "2026-10-16T13:56:01.330Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111386", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T13:56:01.330Z", "date_only": false, "value": "2026-10-16T13:56:01.330Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111386", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:17:23.163Z", "date_only": false, "value": "2026-10-16T14:17:23.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111386", "record": "FKIE_CVE-2026-111386", "field": "lastModified"}]}