{"metadata": {"vulnerability": "CVE-2026-111453", "count": 18, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-16T04:01:36.350Z", "date_only": false, "value": "2026-10-16T04:01:36.350Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111453", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "vulnerabilities.5.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-09T08:03:49.286Z", "date_only": false, "value": "2026-11-09T08:03:49.286935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/6q5ko322ij2kg", "record": "CVE-2026-111453", "field": "creation_timestamp", "uuid": "a6647911-902c-4862-b4ee-692da9230ae2", "content": "CVE-2026-111453: Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable Dag", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/6q5ko322ij2kg"}, {"timestamp": "2026-11-09T09:10:58.486Z", "date_only": false, "value": "2026-11-09T09:10:58.486Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111453", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-09T09:10:58.486Z", "date_only": false, "value": "2026-11-09T09:10:58.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-111453", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T09:26:43.976Z", "date_only": false, "value": "2026-11-09T09:26:43.976484Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117585766211055301", "record": "CVE-2026-111453", "field": "creation_timestamp", "uuid": "984347a5-426b-42ab-a95c-88b0f097308c", "content": "CVE-2026-111453 Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable Dag Apache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permission against the `dag_id` query parameter, but deleted the queued events of every Dag the caller could read. An authenticated user with edit permission on one Dag and read access to others could suppress asset-triggered runs of Dags they cannot edit. This is an incomplete fix for CVE-2026-75157: users who upgraded to apache-airflow 3.3.2 for that fix are still affected and should upgrade to apache-airflow 3.4.0 or later.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111453https://github.com/apache/airflow/pull/74839https://www.cve.org/CVERecord?id=CVE-2026-75157https://lists.apache.org/thread.html/z212137tkfobdgl0hnos7qg6w6r1mxw5#cve #apache #ApacheSoftwareFoundation #ApacheAirflow#CVE_2026_111453#bot", "url": "https://infosec.exchange/users/cve/statuses/117585766211055301"}, {"timestamp": "2026-11-09T10:17:04Z", "date_only": false, "value": "2026-11-09T10:17:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PXH2-CVX5-8H2P", "record": "GHSA-PXH2-CVX5-8H2P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-09T10:17:04.787Z", "date_only": false, "value": "2026-11-09T10:17:04.787", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111453", "record": "FKIE_CVE-2026-111453", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T10:17:04.787Z", "date_only": false, "value": "2026-11-09T10:17:04.787", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111453", "record": "FKIE_CVE-2026-111453", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-09T11:38:20.283Z", "date_only": false, "value": "2026-11-09T11:38:20.283+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-09T12:31:39Z", "date_only": false, "value": "2026-11-09T12:31:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PXH2-CVX5-8H2P", "record": "GHSA-PXH2-CVX5-8H2P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T12:31:39Z", "date_only": false, "value": "2026-11-09T12:31:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PXH2-CVX5-8H2P", "record": "GHSA-PXH2-CVX5-8H2P", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T15:19:16.010Z", "date_only": false, "value": "2026-11-09T15:19:16.010567Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111453", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-09T15:19:19.769Z", "date_only": false, "value": "2026-11-09T15:19:19.769Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111453", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-09T15:19:19.769Z", "date_only": false, "value": "2026-11-09T15:19:19.769Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111453", "field": "containers.adp.0.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-11-09T17:18:20.326Z", "anchors": {"origin": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 65900.326145, "hours": 18.30564615138889, "days": 0.7627352563078703, "min_seconds": 65900.326145, "max_seconds": 65900.326145, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-09T17:18:20.326Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}