{"metadata": {"vulnerability": "CVE-2026-114355", "count": 10, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-10-21T08:41:14.430Z", "date_only": false, "value": "2026-10-21T08:41:14.430Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-114355", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T13:35:42.796Z", "date_only": false, "value": "2026-10-23T13:35:42.796Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114355", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-23T13:35:42.796Z", "date_only": false, "value": "2026-10-23T13:35:42.796Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-114355", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:35:42.796Z", "date_only": false, "value": "2026-10-23T13:35:42.796Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / NCSC.ch", "record": "CVE-2026-114355", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T14:17:36Z", "date_only": false, "value": "2026-10-23T14:17:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-258V-3GXG-H7W6", "record": "GHSA-258V-3GXG-H7W6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T14:17:36.323Z", "date_only": false, "value": "2026-10-23T14:17:36.323", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114355", "record": "FKIE_CVE-2026-114355", "field": "published"}, {"timestamp": "2026-10-23T15:03:31.282Z", "date_only": false, "value": "2026-10-23T15:03:31.282314Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490831235189949", "record": "CVE-2026-114355", "field": "creation_timestamp", "uuid": "00ade580-97b4-4693-852a-442227b16e86", "content": "CVE-2026-114355 DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process to execute arbitrary commands as root by writing a crafted line to the Android log (logcat), which the helper reads and passes to a shell eval.\nhttps://www.cve.org/CVERecord?id=CVE-2026-114355https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-114355#DJI #CrystalSkyZS600C#CVE_2026_114355#bot", "url": "https://infosec.exchange/users/cve/statuses/117490831235189949"}, {"timestamp": "2026-10-23T15:31:37Z", "date_only": false, "value": "2026-10-23T15:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-258V-3GXG-H7W6", "record": "GHSA-258V-3GXG-H7W6", "field": "published"}, {"timestamp": "2026-10-23T15:31:37Z", "date_only": false, "value": "2026-10-23T15:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-258V-3GXG-H7W6", "record": "GHSA-258V-3GXG-H7W6", "field": "modified"}, {"timestamp": "2026-10-23T16:28:32.357Z", "date_only": false, "value": "2026-10-23T16:28:32.357", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114355", "record": "FKIE_CVE-2026-114355", "field": "lastModified"}]}