{"metadata": {"vulnerability": "CVE-2026-111700", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111700", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T14:31:21.722Z", "date_only": false, "value": "2026-10-16T14:31:21.722Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111700", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T17:39:53.721Z", "date_only": false, "value": "2026-10-16T17:39:53.721Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111700", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T17:39:53.721Z", "date_only": false, "value": "2026-10-16T17:39:53.721Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111700", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:53Z", "date_only": false, "value": "2026-10-16T18:17:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5HXH-2P25-4HXP", "record": "GHSA-5HXH-2P25-4HXP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T18:17:53.780Z", "date_only": false, "value": "2026-10-16T18:17:53.780", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111700", "record": "FKIE_CVE-2026-111700", "field": "published"}, {"timestamp": "2026-10-16T18:34:53Z", "date_only": false, "value": "2026-10-16T18:34:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5HXH-2P25-4HXP", "record": "GHSA-5HXH-2P25-4HXP", "field": "published"}, {"timestamp": "2026-10-16T18:34:53Z", "date_only": false, "value": "2026-10-16T18:34:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5HXH-2P25-4HXP", "record": "GHSA-5HXH-2P25-4HXP", "field": "modified"}, {"timestamp": "2026-10-16T18:53:42.863Z", "date_only": false, "value": "2026-10-16T18:53:42.863982Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117452100232172360", "record": "CVE-2026-111700", "field": "creation_timestamp", "uuid": "6a4ba397-1424-45ff-afc8-9f7bf5336830", "content": "CVE-2026-111700 WebVella ERP through 1.8.8 SQL Injection via EQL Query API WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping the unsanitized EqlBuilder SQL interpolation to read unauthorized entities, including user and role tables.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111700https://hackmd.io/@hieuPenguinnn/webvella-erp-eql-text-literal-sql-injectionhttps://github.com/WebVella/WebVella-ERP/blob/10315fe844198b8620494f716ed75410cd54bfe6/WebVella.Erp/Eql/EqlBuilder.Sql.cs#L580-L581https://github.com/WebVella/WebVella-ERP/blob/10315fe844198b8620494f716ed75410cd54bfe6/WebVella.Erp.Web/Controllers/WebApiController.cs#L64-L74https://www.nuget.org/packages/WebVella.Erp/1.8.8https://www.vulncheck.com/advisories/webvella-erp-through-1.8.8-sql-injection-via-eql-query-api#WebVella #WebVella-ERP#CVE_2026_111700#bot", "url": "https://infosec.exchange/users/cve/statuses/117452100232172360"}, {"timestamp": "2026-10-19T13:38:16.652Z", "date_only": false, "value": "2026-10-19T13:38:16.652199Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111700", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-19T13:38:16.652Z", "date_only": false, "value": "2026-10-19T13:38:16.652199Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111700", "record": "FKIE_CVE-2026-111700", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-19T13:40:04.709Z", "date_only": false, "value": "2026-10-19T13:40:04.709Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111700", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-19T13:40:04.709Z", "date_only": false, "value": "2026-10-19T13:40:04.709Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111700", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T14:16:59.903Z", "date_only": false, "value": "2026-10-19T14:16:59.903", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111700", "record": "FKIE_CVE-2026-111700", "field": "lastModified"}]}