{"metadata": {"vulnerability": "CVE-2026-111823", "count": 18, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-10-16T23:16:28.857Z", "date_only": false, "value": "2026-10-16T23:16:28.857Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111823", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T23:16:29.244Z", "date_only": false, "value": "2026-10-16T23:16:29.244Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111823", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T23:16:29.244Z", "date_only": false, "value": "2026-10-16T23:16:29.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111823", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T23:16:29.244Z", "date_only": false, "value": "2026-10-16T23:16:29.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-111823", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T23:21:20.544Z", "date_only": false, "value": "2026-10-16T23:21:20.544972Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117453152578179025", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "dd6a6d1a-d34b-46b8-afda-59ba301a3263", "content": "CVE-2026-111823  Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111823https://github.com/mage-ai/mage-ai/pull/6204https://github.com/mage-ai/mage-ai/pull/6205https://github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4447a985710d26c0https://thecoregroup.net/category/the-core-group/#Mage #mage-ai#CVE_2026_111823#bot", "url": "https://infosec.exchange/users/cve/statuses/117453152578179025"}, {"timestamp": "2026-10-17T00:00:36.607Z", "date_only": false, "value": "2026-10-17T00:00:36.607487Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117453306958752850", "record": "cve-2026-111823", "field": "creation_timestamp", "uuid": "4bd127c6-18e4-4d2b-be1b-366e47687fdb", "content": "CVE-2026-111823 (CRITICAL, CVSS 9.8) in Mage mage-ai <=0.9.80: OAuth session creation flaw enables unauthorized access if provider is unknown. No confirmed patch \u2014 check vendor updates. Details: https://radar.offseq.com/threat/cve-2026-111823-cwe-390-detection-of-error-condition-without-action-in-mage-mage-ai-d243a1403d673a6a #OffSeq #CVE2026111823 #MageAI #OAuth #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117453306958752850"}, {"timestamp": "2026-10-17T00:00:38.108Z", "date_only": false, "value": "2026-10-17T00:00:38.108524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxzrwbi5uc2l", "record": "cve-2026-111823", "field": "creation_timestamp", "uuid": "25af1039-8d08-4449-ac94-f1b4691cbef9", "content": "Mage mage-ai <=0.9.80 hit by CRITICAL CVE-2026-111823 (CVSS 9.8). OAuth flaw enables unauthorized sessions. No patch yet \u2014 check vendor advisory and restrict access. #OffSeq #MageAI https://radar.offseq.com/threat/cve-2026-111823-cwe-390-detection-of-error-condition-without-action-in-mage-mage-ai...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxzrwbi5uc2l"}, {"timestamp": "2026-10-17T00:43:18.331Z", "date_only": false, "value": "2026-10-17T00:43:18.331404Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/abklhyxowfqed", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "cb31706e-14e1-41f3-97da-413bfe66f973", "content": "CVE-2026-111823 - Mage OSS OAuth Authentication Bypass Vulnerability\nCVE ID : CVE-2026-111823\n \n Published : Oct. 16, 2026, 11:16 p.m. | 17\u00a0minutes ago\n \n Description : Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/abklhyxowfqed"}, {"timestamp": "2026-10-17T02:17:18Z", "date_only": false, "value": "2026-10-17T02:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-93GM-R5P2-WXQ7", "record": "GHSA-93GM-R5P2-WXQ7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-17T02:17:18.470Z", "date_only": false, "value": "2026-10-17T02:17:18.470", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111823", "record": "FKIE_CVE-2026-111823", "field": "published"}, {"timestamp": "2026-10-17T02:17:18.470Z", "date_only": false, "value": "2026-10-17T02:17:18.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111823", "record": "FKIE_CVE-2026-111823", "field": "lastModified"}, {"timestamp": "2026-10-17T02:30:04.770Z", "date_only": false, "value": "2026-10-17T02:30:04.770645Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3my22bimv2n2n", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "d1c5579b-ad59-4578-891e-1f6783df6ae9", "content": "CVE-2026-111823\nMage OSS versions up to 0.9.80 may start a user session even when the OAuth login source is not recognized. This could let unauthorized users remain logged in and access the system. Upgrade to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3my22bimv2n2n"}, {"timestamp": "2026-10-17T03:30:20Z", "date_only": false, "value": "2026-10-17T03:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-93GM-R5P2-WXQ7", "record": "GHSA-93GM-R5P2-WXQ7", "field": "published"}, {"timestamp": "2026-10-17T03:30:20Z", "date_only": false, "value": "2026-10-17T03:30:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-93GM-R5P2-WXQ7", "record": "GHSA-93GM-R5P2-WXQ7", "field": "modified"}, {"timestamp": "2026-10-17T04:06:58.750Z", "date_only": false, "value": "2026-10-17T04:06:58.750155Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3my27orqs6g2p", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "d709ec27-155b-4050-82a0-df23865ca4f3", "content": "Mage OSS 0.9.80\u4ee5\u524d\u3067\u3001\u4e0d\u660e\u306aOAuth\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u3092\u51e6\u7406\u3059\u308b\u969b\u306b\u30bb\u30c3\u30b7\u30e7\u30f3\u4f5c\u6210\u306b\u9032\u3080\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u4e0d\u6b63\u306a\u30bb\u30c3\u30b7\u30e7\u30f3\u4f5c\u6210\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-111823 CVSS 9.8 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3my27orqs6g2p"}, {"timestamp": "2026-10-17T04:07:12.361Z", "date_only": false, "value": "2026-10-17T04:07:12.361751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3my27p6dgew2l", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "4631571e-4214-40de-9a11-ba03ebb0da7f", "content": "\ud83d\udea8 CVE-2026-111823 \u2014 CVSS 9.8 CRITICAL\n\nMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111823\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3my27p6dgew2l"}, {"timestamp": "2026-10-17T08:20:26.682Z", "date_only": false, "value": "2026-10-17T08:20:26.682488Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3my2ntyjowp2n", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "ef2d42d5-197a-4f81-b45a-8bf374e5f685", "content": "\ud83d\udd34 CVE-2026-111823 - Critical (9.8)\n\nMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unk...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-111823/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3my2ntyjowp2n"}, {"timestamp": "2026-10-17T21:05:34.341Z", "date_only": false, "value": "2026-10-17T21:05:34.341987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3my3ym5niqm2t", "record": "CVE-2026-111823", "field": "creation_timestamp", "uuid": "8316fb7b-4fcc-4026-83d0-0878719dd71e", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-111823: Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.\nCVSS 9.8 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-111823\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3my3ym5niqm2t"}]}