{"metadata": {"vulnerability": "CVE-2026-111692", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111692", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T14:31:20.594Z", "date_only": false, "value": "2026-10-16T14:31:20.594Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111692", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T17:39:48.239Z", "date_only": false, "value": "2026-10-16T17:39:48.239Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111692", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T17:39:48.239Z", "date_only": false, "value": "2026-10-16T17:39:48.239Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111692", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:52Z", "date_only": false, "value": "2026-10-16T18:17:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8XHF-8Q7J-9Q7Q", "record": "GHSA-8XHF-8Q7J-9Q7Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T18:17:52.633Z", "date_only": false, "value": "2026-10-16T18:17:52.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111692", "record": "FKIE_CVE-2026-111692", "field": "published"}, {"timestamp": "2026-10-16T18:34:52Z", "date_only": false, "value": "2026-10-16T18:34:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8XHF-8Q7J-9Q7Q", "record": "GHSA-8XHF-8Q7J-9Q7Q", "field": "published"}, {"timestamp": "2026-10-16T18:34:52Z", "date_only": false, "value": "2026-10-16T18:34:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8XHF-8Q7J-9Q7Q", "record": "GHSA-8XHF-8Q7J-9Q7Q", "field": "modified"}, {"timestamp": "2026-10-16T18:48:19.962Z", "date_only": false, "value": "2026-10-16T18:48:19.962381Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117452079058082076", "record": "CVE-2026-111692", "field": "creation_timestamp", "uuid": "7f9960e2-b129-4d9c-a6f2-6cc3d81e41a2", "content": "CVE-2026-111692 DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to gain full administrative access to protected /webapi routes, including the Doris SQL query API.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111692https://hackmd.io/@hieuPenguinnn/databuff-default-jwt-secret-auth-bypasshttps://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/resources/application.yml#L54-L59https://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/java/com/databuff/apm/web/config/JwtProperties.java#L8-L15https://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/java/com/databuff/apm/web/auth/JwtTokenService.java#L36-L60https://github.com/databufflabs/databuffhttps://www.vulncheck.com/advisories/databuff-ai-apm-web-through-0.1.10-authentication-bypass-via-hardcoded-hmac-secret#databufflabs #databuff#CVE_2026_111692#bot", "url": "https://infosec.exchange/users/cve/statuses/117452079058082076"}, {"timestamp": "2026-10-16T19:06:19.195Z", "date_only": false, "value": "2026-10-16T19:06:19.195700Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111692", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T19:06:19.195Z", "date_only": false, "value": "2026-10-16T19:06:19.195700Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111692", "record": "FKIE_CVE-2026-111692", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T19:06:45.355Z", "date_only": false, "value": "2026-10-16T19:06:45.355Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111692", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:06:45.355Z", "date_only": false, "value": "2026-10-16T19:06:45.355Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111692", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:59:49.516Z", "date_only": false, "value": "2026-10-16T19:59:49.516421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxzeho6icn2t", "record": "CVE-2026-111692", "field": "creation_timestamp", "uuid": "6d3e6186-37b3-4757-ab58-1de3b4485fb0", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-111692: DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-111692\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mxzeho6icn2t"}, {"timestamp": "2026-10-16T20:09:43.386Z", "date_only": false, "value": "2026-10-16T20:09:43.386830Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzezf4z6u24", "record": "CVE-2026-111692", "field": "creation_timestamp", "uuid": "96682716-cc8d-4da6-80b9-b29376da2487", "content": "\ud83d\udea8 CVE-2026-111692 \u2014 CVSS 9.3 CRITICAL\n\nDataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthentica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111692\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzezf4z6u24"}, {"timestamp": "2026-10-16T20:17:22.490Z", "date_only": false, "value": "2026-10-16T20:17:22.490", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111692", "record": "FKIE_CVE-2026-111692", "field": "lastModified"}, {"timestamp": "2026-10-16T20:20:05.786Z", "date_only": false, "value": "2026-10-16T20:20:05.786450Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzflwozuq2l", "record": "CVE-2026-111692", "field": "creation_timestamp", "uuid": "e7d15ac9-b610-43bb-b52b-5d75c634b160", "content": "CVE-2026-111692 - databuff\nThe ai-apm-web component of DataBuff (versions up to 0.1.10) uses a fixed secret key to create authentication tokens. Because the key is publicly known, anyone can create a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#databuff #databufflabs #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzflwozuq2l"}]}