{"metadata": {"vulnerability": "CVE-2026-119145", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-119145", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T14:28:41.595Z", "date_only": false, "value": "2026-10-29T14:28:41.595Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-119145", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-29T15:58:23.465Z", "date_only": false, "value": "2026-10-29T15:58:23.465Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-119145", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T15:58:23.465Z", "date_only": false, "value": "2026-10-29T15:58:23.465Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-119145", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T16:18:08Z", "date_only": false, "value": "2026-10-29T16:18:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RH56-JWHR-HC9R", "record": "GHSA-RH56-JWHR-HC9R", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-29T16:18:08.277Z", "date_only": false, "value": "2026-10-29T16:18:08.277", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-119145", "record": "FKIE_CVE-2026-119145", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T16:29:06.486Z", "date_only": false, "value": "2026-10-29T16:29:06.486688Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-119145", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-29T16:29:06.486Z", "date_only": false, "value": "2026-10-29T16:29:06.486688Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-119145", "record": "FKIE_CVE-2026-119145", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-29T16:29:58.089Z", "date_only": false, "value": "2026-10-29T16:29:58.089835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/7oku56mwsrnr6", "record": "CVE-2026-119145", "field": "creation_timestamp", "uuid": "cca42dab-c9e8-48d7-857d-a81fdb8d8de4", "content": "CVE-2026-119145\nNew critical vulnerability: CVSS 9.9.\nhttps://cvesentinel.com/report/CVE-2026-119145", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/7oku56mwsrnr6"}, {"timestamp": "2026-10-29T17:14:19.218Z", "date_only": false, "value": "2026-10-29T17:14:19.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-119145", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T17:14:19.218Z", "date_only": false, "value": "2026-10-29T17:14:19.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-119145", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T17:16:01.786Z", "date_only": false, "value": "2026-10-29T17:16:01.786360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4gddf5tlsphr5", "record": "CVE-2026-119145", "field": "creation_timestamp", "uuid": "9fa56e6b-b58a-4009-8ca2-de68811b1cfe", "content": "CVE-2026-119145 - Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload\nCVE ID : CVE-2026-119145\n \n Published : Oct. 29, 2026, 3:58 p.m. | 26\u00a0minutes ago\n \n Description : Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulne...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4gddf5tlsphr5"}, {"timestamp": "2026-10-29T17:18:08.053Z", "date_only": false, "value": "2026-10-29T17:18:08.053", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-119145", "record": "FKIE_CVE-2026-119145", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-29T17:20:05.652Z", "date_only": false, "value": "2026-10-29T17:20:05.652756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myzrlzryis25", "record": "CVE-2026-119145", "field": "creation_timestamp", "uuid": "f88ae8ca-b0bc-47fb-9252-697684507769", "content": "CVE-2026-119145 - frappe\nVersions of the Frappe platform earlier than 15.121.0 and earlier than 16.34.0 let a signed\u2011in user place uploaded files in any folder on the server. This can let the user put malicious code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#frappe #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myzrlzryis25"}, {"timestamp": "2026-10-29T17:41:56.471Z", "date_only": false, "value": "2026-10-29T17:41:56.471285Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117525428003164745", "record": "CVE-2026-119145", "field": "creation_timestamp", "uuid": "9e8a7cb9-8844-4446-85fc-77a4268b082c", "content": "CVE-2026-119145 Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage directory to achieve remote code execution on the server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-119145https://github.com/frappe/frappe/security/advisories/GHSA-9pp9-wgp9-3p3jhttps://www.vulncheck.com/advisories/frappe-before-15.121.0-and-16-x-before-16.34.0-path-traversal-rce-via-file-upload#frappe#CVE_2026_119145#bot", "url": "https://infosec.exchange/users/cve/statuses/117525428003164745"}, {"timestamp": "2026-10-29T18:08:39.923Z", "date_only": false, "value": "2026-10-29T18:08:39.923984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myzucv4ygb2w", "record": "CVE-2026-119145", "field": "creation_timestamp", "uuid": "228a5f5f-8237-43e1-bc62-7e9d8b7d479e", "content": "\ud83d\udea8 CVE-2026-119145 \u2014 CVSS 9.4 CRITICAL\n\nFrappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-119145\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myzucv4ygb2w"}, {"timestamp": "2026-10-29T18:31:02Z", "date_only": false, "value": "2026-10-29T18:31:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RH56-JWHR-HC9R", "record": "GHSA-RH56-JWHR-HC9R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T18:31:02Z", "date_only": false, "value": "2026-10-29T18:31:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RH56-JWHR-HC9R", "record": "GHSA-RH56-JWHR-HC9R", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T18:30:32.467Z", "anchors": {"origin": {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-119145", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-119145", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 2140232.467502, "hours": 594.5090187505555, "days": 24.771209114606478, "min_seconds": 2053832.467502, "max_seconds": 2140232.467502, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-119145", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T18:30:32.467Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}