{"metadata": {"vulnerability": "CVE-2026-116540", "count": 24, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 16}}, "data": [{"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-116540", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T14:30:57.662Z", "date_only": false, "value": "2026-10-26T14:30:57.662Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-116540", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T14:59:40.154Z", "date_only": false, "value": "2026-10-26T14:59:40.154Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-116540", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T14:59:40.154Z", "date_only": false, "value": "2026-10-26T14:59:40.154Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-116540", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T15:34:12.712Z", "date_only": false, "value": "2026-10-26T15:34:12.712589Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117507938859637414", "record": "CVE-2026-116540", "field": "creation_timestamp", "uuid": "34c83108-ea45-4f80-b737-321a9b2f4407", "content": "CVE-2026-116540 netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.\nhttps://www.cve.org/CVERecord?id=CVE-2026-116540https://github.com/netty/netty-tcnative/security/advisories/GHSA-mmc8-vg2v-fvvwhttps://github.com/netty/netty-tcnative/commit/59662a8b07a9a7623ae1bc472f5751f31c81a118https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/sslcontext.c#L1365https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Finalhttps://github.com/netty/netty-tcnativehttps://www.vulncheck.com/advisories/netty-tcnative-2.0.66-final-before-2.0.84-final-use-after-free-in-session-ticket-callback#netty #netty-tcnative#CVE_2026_116540#bot", "url": "https://infosec.exchange/users/cve/statuses/117507938859637414"}, {"timestamp": "2026-10-26T15:38:07.789Z", "date_only": false, "value": "2026-10-26T15:38:07.789293Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-116540", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-26T15:38:07.789Z", "date_only": false, "value": "2026-10-26T15:38:07.789293Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-116540", "record": "FKIE_CVE-2026-116540", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-26T16:15:16.184Z", "date_only": false, "value": "2026-10-26T16:15:16.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-116540", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T16:15:16.184Z", "date_only": false, "value": "2026-10-26T16:15:16.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-116540", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T16:17:00Z", "date_only": false, "value": "2026-10-26T16:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-116540", "record": "UBUNTU-CVE-2026-116540", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T16:17:19Z", "date_only": false, "value": "2026-10-26T16:17:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FGCJ-53J7-R6VQ", "record": "GHSA-FGCJ-53J7-R6VQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-26T16:17:19.377Z", "date_only": false, "value": "2026-10-26T16:17:19.377", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-116540", "record": "FKIE_CVE-2026-116540", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T17:17:27.187Z", "date_only": false, "value": "2026-10-26T17:17:27.187", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-116540", "record": "FKIE_CVE-2026-116540", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-26T18:32:58Z", "date_only": false, "value": "2026-10-26T18:32:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FGCJ-53J7-R6VQ", "record": "GHSA-FGCJ-53J7-R6VQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T18:32:58Z", "date_only": false, "value": "2026-10-26T18:32:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FGCJ-53J7-R6VQ", "record": "GHSA-FGCJ-53J7-R6VQ", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T17:50:38Z", "date_only": false, "value": "2026-10-28T17:50:38Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-116540", "record": "UBUNTU-CVE-2026-116540", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12403-1", "record": "OPENSUSE-SU-2026:12403-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12403-1", "record": "OPENSUSE-SU-2026:12403-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12403-1", "record": "OPENSUSE-SU-2026:12403-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12403-1", "record": "OPENSUSE-SU-2026:12403-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T21:57:38Z", "date_only": false, "value": "2026-11-04T21:57:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12403-1", "record": "OPENSUSE-SU-2026:12403-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-04T21:57:38Z", "date_only": false, "value": "2026-11-04T21:57:38Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12403-1", "record": "OPENSUSE-SU-2026:12403-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T17:41:33Z", "date_only": false, "value": "2026-11-06T17:41:33Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-HT89664", "record": "CLEANSTART-2026-HT89664", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T00:36:52.722Z", "date_only": false, "value": "2026-11-07T00:36:52.722447Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-HT89664", "record": "CLEANSTART-2026-HT89664", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}], "metrics": {"as_of": "2026-11-07T08:18:02.892Z", "anchors": {"origin": {"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-116540", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-116540", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 8065082.892616, "hours": 2240.3008035044445, "days": 93.34586681268519, "min_seconds": 7978682.892616, "max_seconds": 8065082.892616, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-116540", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T08:18:02.892Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}