{"metadata": {"vulnerability": "CVE-2026-123747", "count": 12, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 7}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-06T12:48:52.377Z", "date_only": false, "value": "2026-11-06T12:48:52.377Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.timeline.0.time", "text": "Reported to Red Hat."}, {"timestamp": "2026-11-06T12:52:36.636Z", "date_only": false, "value": "2026-11-06T12:52:36.636Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-123747", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-11T11:11:00Z", "date_only": false, "value": "2026-11-11T11:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-11T11:11:00Z", "date_only": false, "value": "2026-11-11T11:11:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.timeline.1.time", "text": "Made public."}, {"timestamp": "2026-11-11T16:46:58.544Z", "date_only": false, "value": "2026-11-11T16:46:58.544160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/a3wxcspiuzm66", "record": "CVE-2026-123747", "field": "creation_timestamp", "uuid": "fcc8259b-b579-457e-a446-28bd82203096", "content": "CVE-2026-123747 pappl-retrofit: Directory traversal in the add-ppdfiles and delete-ppdfiles actions", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/a3wxcspiuzm66"}, {"timestamp": "2026-11-11T18:31:49.765Z", "date_only": false, "value": "2026-11-11T18:31:49.765Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-123747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-11T18:31:49.765Z", "date_only": false, "value": "2026-11-11T18:31:49.765Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-11T19:05:08.251Z", "date_only": false, "value": "2026-11-11T19:05:08.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-123747", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-11T19:05:08.251Z", "date_only": false, "value": "2026-11-11T19:05:08.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-123747", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-11T19:17:30.467Z", "date_only": false, "value": "2026-11-11T19:17:30.467", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-123747", "record": "FKIE_CVE-2026-123747", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-11T19:17:30.677Z", "date_only": false, "value": "2026-11-11T19:17:30.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-123747", "record": "FKIE_CVE-2026-123747", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T19:18:07.668Z", "date_only": false, "value": "2026-11-11T19:18:07.668067Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117599416294742828", "record": "CVE-2026-123747", "field": "creation_timestamp", "uuid": "d77ee149-7f25-4e04-9fad-bdf9f611daaf", "content": "CVE-2026-123747 Pappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actions A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution.\nhttps://www.cve.org/CVERecord?id=CVE-2026-123747https://access.redhat.com/security/cve/CVE-2026-123747https://bugzilla.redhat.com/show_bug.cgi?id=2568110#OpenPrinting #pappl-retrofit #RedHat #RedHatEnterpriseLinux10#CVE_2026_123747#bot", "url": "https://infosec.exchange/users/cve/statuses/117599416294742828"}], "metrics": {"as_of": "2026-11-12T05:17:42.367Z", "anchors": {"origin": {"timestamp": "2026-11-11T11:11:00Z", "date_only": false, "value": "2026-11-11T11:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-11T11:11:00Z", "date_only": false, "value": "2026-11-11T11:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 65202.367372, "hours": 18.111768714444445, "days": 0.7546570297685186, "min_seconds": 65202.367372, "max_seconds": 65202.367372, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-11T11:11:00Z", "date_only": false, "value": "2026-11-11T11:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-123747", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T05:17:42.367Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}