{"metadata": {"vulnerability": "CVE-2026-111472", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-16T07:22:21.861Z", "date_only": false, "value": "2026-10-16T07:22:21.861Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111472", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T08:28:00Z", "date_only": false, "value": "2026-10-16T08:28:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "CVE-2026-111472", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T08:37:34.959Z", "date_only": false, "value": "2026-10-16T08:37:34.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111472", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T08:37:34.959Z", "date_only": false, "value": "2026-10-16T08:37:34.959Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / INCIBE", "record": "CVE-2026-111472", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T08:53:38.582Z", "date_only": false, "value": "2026-10-16T08:53:38.582949Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117449740644404948", "record": "CVE-2026-111472", "field": "creation_timestamp", "uuid": "b1e2d7b8-1b6b-4fc6-88a7-f9edc8daf849", "content": "CVE-2026-111472 SQL injection in TSG Profleet An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the \u2018Identificaci\u00f3n\u2019 parameter of the \u2018/cgi-bin/index.php\u2019 endpoint.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111472https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-tsg-profleet#TSG #Profleet#CVE_2026_111472#bot", "url": "https://infosec.exchange/users/cve/statuses/117449740644404948"}, {"timestamp": "2026-10-16T09:17:04Z", "date_only": false, "value": "2026-10-16T09:17:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JH7X-4H8H-JQ6W", "record": "GHSA-JH7X-4H8H-JQ6W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T09:17:04.410Z", "date_only": false, "value": "2026-10-16T09:17:04.410", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111472", "record": "FKIE_CVE-2026-111472", "field": "published"}, {"timestamp": "2026-10-16T09:30:30Z", "date_only": false, "value": "2026-10-16T09:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JH7X-4H8H-JQ6W", "record": "GHSA-JH7X-4H8H-JQ6W", "field": "published"}, {"timestamp": "2026-10-16T09:30:30Z", "date_only": false, "value": "2026-10-16T09:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JH7X-4H8H-JQ6W", "record": "GHSA-JH7X-4H8H-JQ6W", "field": "modified"}, {"timestamp": "2026-10-16T09:54:17.842Z", "date_only": false, "value": "2026-10-16T09:54:17.842660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4plwrpvqww6xq", "record": "CVE-2026-111472", "field": "creation_timestamp", "uuid": "84187217-01fa-45d7-bafc-4e50945bb6a1", "content": "CVE-2026-111472 - SQL injection in TSG Profleet\nCVE ID : CVE-2026-111472\n \n Published : Oct. 16, 2026, 9:17 a.m. | 17\u00a0minutes ago\n \n Description : An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create,...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4plwrpvqww6xq"}, {"timestamp": "2026-10-16T10:07:44.327Z", "date_only": false, "value": "2026-10-16T10:07:44.327893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxydexdflp24", "record": "CVE-2026-111472", "field": "creation_timestamp", "uuid": "82621840-5695-4c19-88df-23dd0957ba5b", "content": "\ud83d\udea8 CVE-2026-111472 \u2014 CVSS 9.3 CRITICAL\n\nAn SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attack...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111472\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxydexdflp24"}, {"timestamp": "2026-10-16T10:10:05.741Z", "date_only": false, "value": "2026-10-16T10:10:05.741003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxydj6a6fu2w", "record": "CVE-2026-111472", "field": "creation_timestamp", "uuid": "a90827c5-aca7-4642-908c-ca77ba20e5ba", "content": "CVE-2026-111472 - profleet\nThe web page in TSG Profleet accepts a parameter that can be tricked into running database commands. This could let an unauthorized person view, add, change, or delete your fleet\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#profleet #tsg #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxydj6a6fu2w"}, {"timestamp": "2026-10-16T11:23:06.378Z", "date_only": false, "value": "2026-10-16T11:23:06.378644Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111472", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T11:23:06.378Z", "date_only": false, "value": "2026-10-16T11:23:06.378644Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111472", "record": "FKIE_CVE-2026-111472", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T11:23:16.889Z", "date_only": false, "value": "2026-10-16T11:23:16.889Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111472", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T11:23:16.889Z", "date_only": false, "value": "2026-10-16T11:23:16.889Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111472", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T13:30:29.408Z", "date_only": false, "value": "2026-10-16T13:30:29.408149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxyophm3y42l", "record": "cve-2026-111472", "field": "creation_timestamp", "uuid": "4711a274-89fa-48bf-8b75-cb08e1f360f4", "content": "TSG Profleet hit by CRITICAL SQL injection (CVSS 9.3). Attackers can alter database via the \u2018Identificaci\u00f3n\u2019 parameter. Restrict access & use WAF rules until patched. https://radar.offseq.com/threat/cve-2026-111472-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-b09e...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxyophm3y42l"}, {"timestamp": "2026-10-16T13:30:30.564Z", "date_only": false, "value": "2026-10-16T13:30:30.564372Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117450829081265376", "record": "cve-2026-111472", "field": "creation_timestamp", "uuid": "91669f6e-2b6f-4d02-b32e-57b189741e37", "content": "TSG Profleet CRITICAL SQL injection (CVE-2026-111472, CVSS 9.3): Unauthenticated attackers can manipulate DB via \u2018Identificaci\u00f3n\u2019 in /cgi-bin/index.php. Restrict access, deploy WAF. https://radar.offseq.com/threat/cve-2026-111472-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-b09ea35526b07e08 #OffSeq #infosec #vuln #sqlinjection", "url": "https://infosec.exchange/users/offseq/statuses/117450829081265376"}, {"timestamp": "2026-10-16T15:19:36.177Z", "date_only": false, "value": "2026-10-16T15:19:36.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111472", "record": "FKIE_CVE-2026-111472", "field": "lastModified"}]}