{"metadata": {"vulnerability": "CVE-2026-111708", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111708", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T14:31:22.817Z", "date_only": false, "value": "2026-10-16T14:31:22.817Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111708", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T17:39:59.242Z", "date_only": false, "value": "2026-10-16T17:39:59.242Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111708", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T17:39:59.242Z", "date_only": false, "value": "2026-10-16T17:39:59.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111708", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:54Z", "date_only": false, "value": "2026-10-16T18:17:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6XW5-H4C8-WW5J", "record": "GHSA-6XW5-H4C8-WW5J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T18:17:54.933Z", "date_only": false, "value": "2026-10-16T18:17:54.933", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111708", "record": "FKIE_CVE-2026-111708", "field": "published"}, {"timestamp": "2026-10-16T18:34:55Z", "date_only": false, "value": "2026-10-16T18:34:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6XW5-H4C8-WW5J", "record": "GHSA-6XW5-H4C8-WW5J", "field": "published"}, {"timestamp": "2026-10-16T18:34:55Z", "date_only": false, "value": "2026-10-16T18:34:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6XW5-H4C8-WW5J", "record": "GHSA-6XW5-H4C8-WW5J", "field": "modified"}, {"timestamp": "2026-10-16T18:59:05.757Z", "date_only": false, "value": "2026-10-16T18:59:05.757861Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117452121388363791", "record": "CVE-2026-111708", "field": "creation_timestamp", "uuid": "bcc03ad9-7026-49e5-a860-2ad8a370f23d", "content": "CVE-2026-111708 WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111708https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idorhttps://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/services/UserServices/CreateUserService.ts#L23-L65https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/controllers/UserController.ts#L29-L48https://github.com/canove/whaticket-communityhttps://www.vulncheck.com/advisories/whaticket-community-through-commit-cf04795-admin-self-registration-via-auth-signup#canove #whaticket-community#CVE_2026_111708#bot", "url": "https://infosec.exchange/users/cve/statuses/117452121388363791"}, {"timestamp": "2026-10-16T19:45:23.016Z", "date_only": false, "value": "2026-10-16T19:45:23.016825Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111708", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T19:45:23.016Z", "date_only": false, "value": "2026-10-16T19:45:23.016825Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111708", "record": "FKIE_CVE-2026-111708", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T19:45:36.979Z", "date_only": false, "value": "2026-10-16T19:45:36.979Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111708", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:45:36.979Z", "date_only": false, "value": "2026-10-16T19:45:36.979Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111708", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:10:08.486Z", "date_only": false, "value": "2026-10-16T20:10:08.486782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzf24yiyo2x", "record": "CVE-2026-111708", "field": "creation_timestamp", "uuid": "977b4ea8-5702-483e-ad8b-c1a00ffcd117", "content": "\ud83d\udea8 CVE-2026-111708 \u2014 CVSS 9.3 CRITICAL\n\nWhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unau...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111708\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzf24yiyo2x"}, {"timestamp": "2026-10-16T20:17:22.847Z", "date_only": false, "value": "2026-10-16T20:17:22.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111708", "record": "FKIE_CVE-2026-111708", "field": "lastModified"}, {"timestamp": "2026-10-16T20:30:04.543Z", "date_only": false, "value": "2026-10-16T20:30:04.543748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzg5rgoob2z", "record": "CVE-2026-111708", "field": "creation_timestamp", "uuid": "c5adfd0e-dacd-4521-92a6-45dd79000014", "content": "CVE-2026-111708 - whaticket-community\nThe Whaticket Community software lets anyone create an account and claim admin rights by sending a specially crafted signup request. This gives the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#whaticketcommunity #canove #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzg5rgoob2z"}]}