{"metadata": {"vulnerability": "CVE-2026-113345", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-19T23:47:15.593Z", "date_only": false, "value": "2026-10-19T23:47:15.593Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-113345", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-25T20:00:00Z", "date_only": false, "value": "2026-10-25T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://jvn.jp/en/jp/JVN75668103", "record": "CVE-2026-113345", "field": "creation_timestamp", "uuid": "0f71dfe8-6af8-4f9a-af4f-e8ad77ec7a5b", "url": "https://jvn.jp/en/jp/JVN75668103"}, {"timestamp": "2026-10-26T04:43:59.645Z", "date_only": false, "value": "2026-10-26T04:43:59.645Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113345", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T04:43:59.645Z", "date_only": false, "value": "2026-10-26T04:43:59.645Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / jpcert", "record": "CVE-2026-113345", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T04:44:44.334Z", "date_only": false, "value": "2026-10-26T04:44:44.334033Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117505385016505573", "record": "CVE-2026-113345", "field": "creation_timestamp", "uuid": "558ddb2d-6680-4e42-b3e0-0d6b8be623df", "content": "CVE-2026-113345  Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.\nhttps://www.cve.org/CVERecord?id=CVE-2026-113345https://www.ysk.nilim.go.jp/cals/https://jvn.jp/en/jp/JVN75668103/#MinistryofLand,Infrastructure,TransportandTourism,Japan #ElectronicdeliveryitemInspectionSupportSystem#CVE_2026_113345#bot", "url": "https://infosec.exchange/users/cve/statuses/117505385016505573"}, {"timestamp": "2026-10-26T05:17:54Z", "date_only": false, "value": "2026-10-26T05:17:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R6VQ-M3XV-FG74", "record": "GHSA-R6VQ-M3XV-FG74", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-26T05:17:54.020Z", "date_only": false, "value": "2026-10-26T05:17:54.020", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113345", "record": "FKIE_CVE-2026-113345", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T06:00:25.416Z", "date_only": false, "value": "2026-10-26T06:00:25.416311Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117505682615103021", "record": "cve-2026-113345", "field": "creation_timestamp", "uuid": "0554af67-9200-41d7-91d3-da7c51802cdc", "content": "Incorrect default permissions (CVE-2026-113345, HIGH, CVSS 7.8) in Japan MLIT's Inspection Support System let local users alter app files, risking code execution. No patch yet \u2014 restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-113345-incorrect-default-permissions-in-ministry-of-land-infrastructure-transport-and-tourism-b1dd0c4094dd454d #OffSeq #vuln #infosec #japan", "url": "https://infosec.exchange/users/offseq/statuses/117505682615103021"}, {"timestamp": "2026-10-26T06:00:27.417Z", "date_only": false, "value": "2026-10-26T06:00:27.417254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3myr27xksvp2e", "record": "cve-2026-113345", "field": "creation_timestamp", "uuid": "d926aad9-bc4b-428d-a364-a929188e3504", "content": "HIGH severity (CVSS 7.8) vuln in Japan's MLIT Electronic delivery item Inspection Support System lets local users modify files \u2014 arbitrary code execution risk. No patch yet. Monitor for updates. https://radar.offseq.com/threat/cve-2026-113345-incorrect-default-permissions-in-ministry-of-land-infr...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3myr27xksvp2e"}, {"timestamp": "2026-10-26T06:30:24Z", "date_only": false, "value": "2026-10-26T06:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R6VQ-M3XV-FG74", "record": "GHSA-R6VQ-M3XV-FG74", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T06:30:24Z", "date_only": false, "value": "2026-10-26T06:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R6VQ-M3XV-FG74", "record": "GHSA-R6VQ-M3XV-FG74", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-26T06:45:56.974Z", "date_only": false, "value": "2026-10-26T06:45:56.974908Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7t7eilactd5u6", "record": "CVE-2026-113345", "field": "creation_timestamp", "uuid": "b5adec10-302a-4580-958c-1906ef30509d", "content": "CVE-2026-113345 - Electronic delivery item Inspection Support System Improper File Access Control Vulnerability\nCVE ID : CVE-2026-113345\n \n Published : Oct. 26, 2026, 5:17 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Electronic delivery item Inspection Support System provided...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7t7eilactd5u6"}, {"timestamp": "2026-10-26T12:51:33.773Z", "date_only": false, "value": "2026-10-26T12:51:33.773294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3myrr73xtfc22", "record": "CVE-2026-113345", "field": "creation_timestamp", "uuid": "d037cb3b-7935-4dfe-84b9-33009ebf7f42", "content": "\u56fd\u571f\u4ea4\u901a\u7701\u63d0\u4f9b\u306e\u96fb\u5b50\u7d0d\u54c1\u652f\u63f4\u30b7\u30b9\u30c6\u30e0\u306b\u4e0d\u9069\u5207\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u6a29\u306e\u8106\u5f31\u6027\u3002\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30d5\u30a9\u30eb\u30c0\u5185\u306e\u30d5\u30a1\u30a4\u30eb\u6539\u3056\u3093\u306b\u3088\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-113345 CVSS 7.8 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3myrr73xtfc22"}, {"timestamp": "2026-10-26T13:30:55.453Z", "date_only": false, "value": "2026-10-26T13:30:55.453904Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-113345", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-26T13:30:55.453Z", "date_only": false, "value": "2026-10-26T13:30:55.453904Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113345", "record": "FKIE_CVE-2026-113345", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-26T14:35:20.967Z", "date_only": false, "value": "2026-10-26T14:35:20.967Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-113345", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T14:35:20.967Z", "date_only": false, "value": "2026-10-26T14:35:20.967Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-113345", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T15:16:38.337Z", "date_only": false, "value": "2026-10-26T15:16:38.337", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-113345", "record": "FKIE_CVE-2026-113345", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T15:33:20.075Z", "anchors": {"origin": {"timestamp": "2026-10-26T04:43:59.645Z", "date_only": false, "value": "2026-10-26T04:43:59.645Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113345", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-26T04:43:59.645Z", "date_only": false, "value": "2026-10-26T04:43:59.645Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113345", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 730160.430589, "hours": 202.82234183027776, "days": 8.450930909594907, "min_seconds": 730160.430589, "max_seconds": 730160.430589, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T04:43:59.645Z", "date_only": false, "value": "2026-10-26T04:43:59.645Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-113345", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T15:33:20.075Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}