{"metadata": {"vulnerability": "CVE-2026-111722", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111722", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T14:33:31.226Z", "date_only": false, "value": "2026-10-16T14:33:31.226Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111722", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T17:40:09.064Z", "date_only": false, "value": "2026-10-16T17:40:09.064Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111722", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T17:40:09.064Z", "date_only": false, "value": "2026-10-16T17:40:09.064Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111722", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:15:35.590Z", "date_only": false, "value": "2026-10-16T18:15:35.590797Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111722", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T18:15:35.590Z", "date_only": false, "value": "2026-10-16T18:15:35.590797Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111722", "record": "FKIE_CVE-2026-111722", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T18:17:12.430Z", "date_only": false, "value": "2026-10-16T18:17:12.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111722", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:12.430Z", "date_only": false, "value": "2026-10-16T18:17:12.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111722", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:56Z", "date_only": false, "value": "2026-10-16T18:17:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4CG4-G3G8-QXPG", "record": "GHSA-4CG4-G3G8-QXPG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T18:17:56.823Z", "date_only": false, "value": "2026-10-16T18:17:56.823", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111722", "record": "FKIE_CVE-2026-111722", "field": "published"}, {"timestamp": "2026-10-16T18:34:57Z", "date_only": false, "value": "2026-10-16T18:34:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4CG4-G3G8-QXPG", "record": "GHSA-4CG4-G3G8-QXPG", "field": "published"}, {"timestamp": "2026-10-16T18:34:57Z", "date_only": false, "value": "2026-10-16T18:34:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4CG4-G3G8-QXPG", "record": "GHSA-4CG4-G3G8-QXPG", "field": "modified"}, {"timestamp": "2026-10-16T19:08:31.187Z", "date_only": false, "value": "2026-10-16T19:08:31.187668Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117452158443096271", "record": "CVE-2026-111722", "field": "creation_timestamp", "uuid": "a1c4a317-4c68-4687-b0e4-962430c925f3", "content": "CVE-2026-111722 LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to read, overwrite, reassign or delete any user's short-drama projects.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111722https://hackmd.io/@hieuPenguinnn/lingguo-drama-broken-access-controlhttps://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/app/models/projects/projects_utils.go#L11-L14https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/app/http/controllers/admin/v1/projects_controller.go#L173-L198https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/routes/admin.go#L26-L31https://www.vulncheck.com/advisories/lingguo-drama-through-commit-8a6924a-idor-via-admin-v1-projects-id-api#LingGuoAI #LingGuo-Drama#CVE_2026_111722#bot", "url": "https://infosec.exchange/users/cve/statuses/117452158443096271"}, {"timestamp": "2026-10-16T19:17:05.570Z", "date_only": false, "value": "2026-10-16T19:17:05.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111722", "record": "FKIE_CVE-2026-111722", "field": "lastModified"}, {"timestamp": "2026-10-17T14:51:33.369Z", "date_only": false, "value": "2026-10-17T14:51:33.369639Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3my3dok2orr2a", "record": "CVE-2026-111722", "field": "creation_timestamp", "uuid": "63b521f4-ad2d-40ba-b155-f55400adfde1", "content": "\ud83d\udfe0 CVE-2026-111722 - High (8.1)\n\nLingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-111722/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3my3dok2orr2a"}]}