{"metadata": {"vulnerability": "CVE-2026-115485", "count": 12, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-115485", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-115485", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-22T15:15:31.504Z", "date_only": false, "value": "2026-10-22T15:15:31.504Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-115485", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T00:16:30.006Z", "date_only": false, "value": "2026-10-23T00:16:30.006Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115485", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-23T00:16:30.006Z", "date_only": false, "value": "2026-10-23T00:16:30.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-115485", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T00:16:30.006Z", "date_only": false, "value": "2026-10-23T00:16:30.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-115485", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T00:40:02.263Z", "date_only": false, "value": "2026-10-23T00:40:02.263881Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117487435891893797", "record": "CVE-2026-115485", "field": "creation_timestamp", "uuid": "1d6fb952-c881-4230-99fe-a175376d05b7", "content": "CVE-2026-115485 Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the iSCSI initiator name. An attacker on the same network segment can trigger this by sending a crafted DHCPv6 Advertise message.\nhttps://www.cve.org/CVERecord?id=CVE-2026-115485https://access.redhat.com/security/cve/CVE-2026-115485https://bugzilla.redhat.com/show_bug.cgi?id=2556266#RedHat #RedHatEnterpriseLinux10 #RedHatEnterpriseLinux6 #RedHatEnterpriseLinux7 #RedHatEnterpriseLinux8 #RedHatEnterpriseLinux9#CVE_2026_115485#bot", "url": "https://infosec.exchange/users/cve/statuses/117487435891893797"}, {"timestamp": "2026-10-23T01:16:53Z", "date_only": false, "value": "2026-10-23T01:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-37X9-3CR5-W6M4", "record": "GHSA-37X9-3CR5-W6M4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T01:16:53.817Z", "date_only": false, "value": "2026-10-23T01:16:53.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115485", "record": "FKIE_CVE-2026-115485", "field": "published"}, {"timestamp": "2026-10-23T03:30:21Z", "date_only": false, "value": "2026-10-23T03:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-37X9-3CR5-W6M4", "record": "GHSA-37X9-3CR5-W6M4", "field": "published"}, {"timestamp": "2026-10-23T03:30:21Z", "date_only": false, "value": "2026-10-23T03:30:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-37X9-3CR5-W6M4", "record": "GHSA-37X9-3CR5-W6M4", "field": "modified"}, {"timestamp": "2026-10-23T16:44:17.950Z", "date_only": false, "value": "2026-10-23T16:44:17.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115485", "record": "FKIE_CVE-2026-115485", "field": "lastModified"}]}