{"metadata": {"vulnerability": "CVE-2026-114409", "count": 18, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-10-21T12:08:15.318Z", "date_only": false, "value": "2026-10-21T12:08:15.318Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-114409", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1401", "record": "CERTFR-2026-AVI-1401", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-27T12:25:57.894Z", "date_only": false, "value": "2026-10-27T12:25:57.894Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T12:25:57.894Z", "date_only": false, "value": "2026-10-27T12:25:57.894Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Docker", "record": "CVE-2026-114409", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T12:33:33.137Z", "date_only": false, "value": "2026-10-27T12:33:33.137746Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117512890786900390", "record": "CVE-2026-114409", "field": "creation_timestamp", "uuid": "df36aaf5-94b6-4ef2-ba90-cdfcb7d61948", "content": "CVE-2026-114409 Docker Desktop logs can expose stored third-party credentials Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these files could obtain the credentials. These OAuth tokens are not Docker account tokens. Docker Desktop 4.94.0 and 4.95.0 addressed the known logging paths, but logs containing credentials can remain after upgrading. Docker Desktop 4.97.0 fixes the issue and includes cleanup of existing host logs and crash dumps.\nhttps://www.cve.org/CVERecord?id=CVE-2026-114409https://docs.docker.com/desktop/release-notes/#4970https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#check-the-logs#docker #Docker #DockerDesktop#CVE_2026_114409#bot", "url": "https://infosec.exchange/users/cve/statuses/117512890786900390"}, {"timestamp": "2026-10-27T12:46:35.517Z", "date_only": false, "value": "2026-10-27T12:46:35.517343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3myubf4wacj2p", "record": "CVE-2026-114409", "field": "creation_timestamp", "uuid": "1b3f9c16-593a-4e0e-b9e7-4123e74b23d3", "content": "CVE-2026-114409: Docker Desktop from 4.39.0 and before 4.97.0 can write third-party API keys and OAuth tokens in cleartext to local logs and diagnostics bundles. No exploitation confirmed. Docker fixed it in 4.97.0, which also cleans up existing logs.", "url": "https://bsky.app/profile/suriq.io/post/3myubf4wacj2p"}, {"timestamp": "2026-10-27T13:16:56Z", "date_only": false, "value": "2026-10-27T13:16:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VQW9-M2FJ-XFWX", "record": "GHSA-VQW9-M2FJ-XFWX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-27T13:16:56.717Z", "date_only": false, "value": "2026-10-27T13:16:56.717", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114409", "record": "FKIE_CVE-2026-114409", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T15:32:42Z", "date_only": false, "value": "2026-10-27T15:32:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VQW9-M2FJ-XFWX", "record": "GHSA-VQW9-M2FJ-XFWX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T15:32:42Z", "date_only": false, "value": "2026-10-27T15:32:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VQW9-M2FJ-XFWX", "record": "GHSA-VQW9-M2FJ-XFWX", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1401", "record": "CERTFR-2026-AVI-1401", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1401", "record": "CERTFR-2026-AVI-1401", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1401", "record": "CERTFR-2026-AVI-1401", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-04T18:42:45.967Z", "date_only": false, "value": "2026-11-04T18:42:45.967622Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-114409", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-04T18:42:45.967Z", "date_only": false, "value": "2026-11-04T18:42:45.967622Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114409", "record": "FKIE_CVE-2026-114409", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-04T20:28:50.246Z", "date_only": false, "value": "2026-11-04T20:28:50.246Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-114409", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T20:28:50.246Z", "date_only": false, "value": "2026-11-04T20:28:50.246Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-114409", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T21:17:50.210Z", "date_only": false, "value": "2026-11-04T21:17:50.210", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114409", "record": "FKIE_CVE-2026-114409", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-09T19:13:10.229Z", "anchors": {"origin": {"timestamp": "2026-10-27T12:25:57.894Z", "date_only": false, "value": "2026-10-27T12:25:57.894Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T12:25:57.894Z", "date_only": false, "value": "2026-10-27T12:25:57.894Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1147632.335997, "hours": 318.7867599991667, "days": 13.282781666631946, "min_seconds": 1147632.335997, "max_seconds": 1147632.335997, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T12:25:57.894Z", "date_only": false, "value": "2026-10-27T12:25:57.894Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114409", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T19:13:10.229Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}