{"metadata": {"vulnerability": "CVE-2026-111455", "count": 18, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 11}, "linked_omitted": 0}, "data": [{"timestamp": "2026-10-16T04:01:39.077Z", "date_only": false, "value": "2026-10-16T04:01:39.077Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111455", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "vulnerabilities.7.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-09T08:11:48.756Z", "date_only": false, "value": "2026-11-09T08:11:48.756372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4ns32zc74rgc3", "record": "CVE-2026-111455", "field": "creation_timestamp", "uuid": "b5b9d0c2-71ea-47fd-929e-a171d4dc3b8a", "content": "CVE-2026-111455: Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/4ns32zc74rgc3"}, {"timestamp": "2026-11-09T09:06:33.573Z", "date_only": false, "value": "2026-11-09T09:06:33.573Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111455", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-09T09:06:33.573Z", "date_only": false, "value": "2026-11-09T09:06:33.573Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-111455", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T09:07:20.025Z", "date_only": false, "value": "2026-11-09T09:07:20.025Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111455", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-09T09:07:20.025Z", "date_only": false, "value": "2026-11-09T09:07:20.025Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-111455", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T09:28:04.837Z", "date_only": false, "value": "2026-11-09T09:28:04.837995Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117585771512245652", "record": "CVE-2026-111455", "field": "creation_timestamp", "uuid": "232cc4a6-55d8-4e6b-b62b-153b4021b250", "content": "CVE-2026-111455 Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit Apache Airflow's asynchronous connection test checked permissions when the test was queued \u2014 only create permission when the connection ID did not exist yet \u2014 but, when the test completed with `commit_on_success`, wrote the tested connection under that ID. A user allowed to create but not edit connections could overwrite a connection someone else had created in the meantime. Only deployments that enable the non-default `[core] test_connection` setting are affected. Users are advised to upgrade to apache-airflow 3.4.0 or later.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111455https://github.com/apache/airflow/pull/74837https://lists.apache.org/thread.html/j3tqo8wd53mcyvkkw4z5pnt9tckks0j2#apache #ApacheSoftwareFoundation #ApacheAirflow#CVE_2026_111455#bot", "url": "https://infosec.exchange/users/cve/statuses/117585771512245652"}, {"timestamp": "2026-11-09T10:17:05Z", "date_only": false, "value": "2026-11-09T10:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F43C-9RWR-7MFG", "record": "GHSA-F43C-9RWR-7MFG", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-09T10:17:05.133Z", "date_only": false, "value": "2026-11-09T10:17:05.133", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111455", "record": "FKIE_CVE-2026-111455", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T10:17:05.133Z", "date_only": false, "value": "2026-11-09T10:17:05.133", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111455", "record": "FKIE_CVE-2026-111455", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-09T12:31:39Z", "date_only": false, "value": "2026-11-09T12:31:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F43C-9RWR-7MFG", "record": "GHSA-F43C-9RWR-7MFG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T12:31:39Z", "date_only": false, "value": "2026-11-09T12:31:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F43C-9RWR-7MFG", "record": "GHSA-F43C-9RWR-7MFG", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-10T10:14:01.543Z", "date_only": false, "value": "2026-11-10T10:14:01.543+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-10T19:34:38.894Z", "anchors": {"origin": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 160478.894436, "hours": 44.577470676666664, "days": 1.8573946115277777, "min_seconds": 160478.894436, "max_seconds": 160478.894436, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-10T19:34:38.894Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}