{"metadata": {"vulnerability": "CVE-2026-112256", "count": 14, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-19T12:58:32.736Z", "date_only": false, "value": "2026-10-19T12:58:32.736Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112256", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-29T04:01:00Z", "date_only": false, "value": "2026-10-29T04:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / OpenText", "record": "CVE-2026-112256", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T15:31:18.768Z", "date_only": false, "value": "2026-10-29T15:31:18.768Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112256", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T15:31:18.768Z", "date_only": false, "value": "2026-10-29T15:31:18.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112256", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T15:31:18.768Z", "date_only": false, "value": "2026-10-29T15:31:18.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / OpenText", "record": "CVE-2026-112256", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T16:17:58Z", "date_only": false, "value": "2026-10-29T16:17:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RQJF-XHWG-FH67", "record": "GHSA-RQJF-XHWG-FH67", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-29T16:17:58.390Z", "date_only": false, "value": "2026-10-29T16:17:58.390", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112256", "record": "FKIE_CVE-2026-112256", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T16:29:56.553Z", "date_only": false, "value": "2026-10-29T16:29:56.553", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112256", "record": "FKIE_CVE-2026-112256", "field": "lastModified"}, {"timestamp": "2026-10-29T16:29:56.964Z", "date_only": false, "value": "2026-10-29T16:29:56.964492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/6n2sjwdg7dewd", "record": "CVE-2026-112256", "field": "creation_timestamp", "uuid": "a455e457-5a11-4536-9237-fa5876fba637", "content": "CVE-2026-112256\nNew critical vulnerability: CVSS 9.2.\nhttps://cvesentinel.com/report/CVE-2026-112256", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/6n2sjwdg7dewd"}, {"timestamp": "2026-10-29T16:45:56.181Z", "date_only": false, "value": "2026-10-29T16:45:56.181869Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117525207816364805", "record": "CVE-2026-112256", "field": "creation_timestamp", "uuid": "a8fdd762-cc5a-47d7-b2a0-ec06f4fedaa8", "content": "CVE-2026-112256 Logon bypass (trust of attacker-controlled completed-methods list) Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs.\nThis issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112256https://docs.microfocus.com/doc/42/26.3.1/security-improvements-662https://docs.microfocus.com/doc/2582/26.3.1/security-improvements-662https://docs.microfocus.com/doc/42/6.4.3.9/security-improvements-6439https://docs.microfocus.com/doc/42/6.5.0.11/security-improvements-65011#OpenText #AdvancedAuthenticationServer#CVE_2026_112256#bot", "url": "https://infosec.exchange/users/cve/statuses/117525207816364805"}, {"timestamp": "2026-10-29T17:10:18.240Z", "date_only": false, "value": "2026-10-29T17:10:18.240699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myzr265vyg2p", "record": "CVE-2026-112256", "field": "creation_timestamp", "uuid": "cf5efb44-806d-4531-bf44-44d0423bfb2c", "content": "CVE-2026-112256 - advanced authentication server\nThe Advanced Authentication Server versions listed can be tricked into accepting forged login data, allowing someone to get in without proper permission checks. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opentext #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myzr265vyg2p"}, {"timestamp": "2026-10-29T18:08:21.729Z", "date_only": false, "value": "2026-10-29T18:08:21.729076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myzucdrzh42n", "record": "CVE-2026-112256", "field": "creation_timestamp", "uuid": "8320f236-c881-432f-bd87-520b62be817b", "content": "\ud83d\udea8 CVE-2026-112256 \u2014 CVSS 9.2 CRITICAL\n\nAcceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-112256\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myzucdrzh42n"}, {"timestamp": "2026-10-29T18:30:53Z", "date_only": false, "value": "2026-10-29T18:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQJF-XHWG-FH67", "record": "GHSA-RQJF-XHWG-FH67", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T18:30:53Z", "date_only": false, "value": "2026-10-29T18:30:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RQJF-XHWG-FH67", "record": "GHSA-RQJF-XHWG-FH67", "field": "modified"}], "metrics": {"as_of": "2026-10-30T18:05:42.031Z", "anchors": {"origin": {"timestamp": "2026-10-29T04:01:00Z", "date_only": false, "value": "2026-10-29T04:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / OpenText", "record": "CVE-2026-112256", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-29T04:01:00Z", "date_only": false, "value": "2026-10-29T04:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / OpenText", "record": "CVE-2026-112256", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 137082.031776, "hours": 38.07834216, "days": 1.5865975899999998, "min_seconds": 137082.031776, "max_seconds": 137082.031776, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T04:01:00Z", "date_only": false, "value": "2026-10-29T04:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / OpenText", "record": "CVE-2026-112256", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T18:05:42.031Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}