{"metadata": {"vulnerability": "CVE-2026-117553", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}, "linked_omitted": 0}, "data": [{"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-117553", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T11:25:13.186Z", "date_only": false, "value": "2026-10-27T11:25:13.186Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-117553", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T13:07:49.671Z", "date_only": false, "value": "2026-10-27T13:07:49.671Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-117553", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T13:07:49.671Z", "date_only": false, "value": "2026-10-27T13:07:49.671Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-117553", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T13:35:54.753Z", "date_only": false, "value": "2026-10-27T13:35:54.753941Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117513135998190063", "record": "CVE-2026-117553", "field": "creation_timestamp", "uuid": "2c70e0b4-9054-4b0c-b1a6-138e8034f62e", "content": "CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using response_mode=form_post to capture codes, then redeem them via HTTP Basic client credentials to hijack back-office sessions and execute code through Razor templates.\nhttps://www.cve.org/CVERecord?id=CVE-2026-117553https://github.com/umbraco/Umbraco-CMS/commit/490b9b27dcbb8fb3fe868a36203590968b0569d6https://github.com/umbraco/Umbraco-CMShttps://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-rpv9-qp4c-g469https://github.com/umbraco/Umbraco-CMS/blob/release-18.2.1/src/Umbraco.Cms.Api.Management/Middleware/BackOfficeAuthorizationInitializationMiddleware.cs#L74-L112https://www.vulncheck.com/advisories/umbraco-cms-before-17.7.2-and-18.2.2-account-takeover-via-host-header-poisoning#umbraco #Umbraco-CMS#CVE_2026_117553#bot", "url": "https://infosec.exchange/users/cve/statuses/117513135998190063"}, {"timestamp": "2026-10-27T14:16:35Z", "date_only": false, "value": "2026-10-27T14:16:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R8F2-FXJR-GX5R", "record": "GHSA-R8F2-FXJR-GX5R", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-27T14:16:35.840Z", "date_only": false, "value": "2026-10-27T14:16:35.840", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-117553", "record": "FKIE_CVE-2026-117553", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T15:32:43Z", "date_only": false, "value": "2026-10-27T15:32:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R8F2-FXJR-GX5R", "record": "GHSA-R8F2-FXJR-GX5R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T15:32:43Z", "date_only": false, "value": "2026-10-27T15:32:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R8F2-FXJR-GX5R", "record": "GHSA-R8F2-FXJR-GX5R", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T04:10:05.674Z", "date_only": false, "value": "2026-10-28T04:10:05.674597Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myvuyhxqcw2n", "record": "CVE-2026-117553", "field": "creation_timestamp", "uuid": "820e8ee5-59e2-4cfe-b094-a2ce356060b0", "content": "CVE-2026-117553\nVersions of Umbraco CMS earlier than 17.7.2 and 18.2.2 let anyone on the internet trick the system into trusting a malicious login URL. By doing this, they can steal the credentials of logged\u2011in staff and run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myvuyhxqcw2n"}, {"timestamp": "2026-11-04T15:56:28.268Z", "date_only": false, "value": "2026-11-04T15:56:28.268169Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-117553", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-04T15:56:28.268Z", "date_only": false, "value": "2026-11-04T15:56:28.268169Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-117553", "record": "FKIE_CVE-2026-117553", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-04T15:56:36.930Z", "date_only": false, "value": "2026-11-04T15:56:36.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-117553", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T15:56:36.930Z", "date_only": false, "value": "2026-11-04T15:56:36.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-117553", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T16:17:44.097Z", "date_only": false, "value": "2026-11-04T16:17:44.097", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-117553", "record": "FKIE_CVE-2026-117553", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T00:27:27.093Z", "anchors": {"origin": {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-117553", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-117553", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1384047.093656, "hours": 384.4575260155556, "days": 16.01906358398148, "min_seconds": 1297647.093656, "max_seconds": 1384047.093656, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-117553", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T00:27:27.093Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}