{"metadata": {"vulnerability": "CVE-2026-12436", "count": 27, "kinds": {"milestone": 8, "sighting": 5, "kev": 0, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0270", "record": "NCSC-2026-0270", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-16T19:08:45.458Z", "date_only": false, "value": "2026-06-16T19:08:45.458Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-12436", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-29T00:00:00Z", "date_only": true, "value": "2026-07-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0946", "record": "CERTFR-2026-AVI-0946", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-07-29T19:00:36.048Z", "date_only": false, "value": "2026-07-29T19:00:36.048Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12436", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-29T19:00:36.048Z", "date_only": false, "value": "2026-07-29T19:00:36.048Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2026-12436", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-29T20:17:00Z", "date_only": false, "value": "2026-07-29T20:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-94P8-87FF-W336", "record": "GHSA-94P8-87FF-W336", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-07-29T20:17:00.417Z", "date_only": false, "value": "2026-07-29T20:17:00.417", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12436", "record": "FKIE_CVE-2026-12436", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-29T21:31:00Z", "date_only": false, "value": "2026-07-29T21:31:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-94P8-87FF-W336", "record": "GHSA-94P8-87FF-W336", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-29T21:31:00Z", "date_only": false, "value": "2026-07-29T21:31:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-94P8-87FF-W336", "record": "GHSA-94P8-87FF-W336", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-29T22:09:29.918Z", "date_only": false, "value": "2026-07-29T22:09:29.918442Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v", "record": "CVE-2026-12436", "field": "creation_timestamp", "uuid": "3eff8aae-0bf1-4437-9592-44d4387429e3", "content": "GitLab CE/EE\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u3001\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u4ed6\u30e6\u30fc\u30b6\u30fc\u306eCI/CD\u8a2d\u5b9a\u3092\u6539\u5909\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3057\u305f\u3002\nCVE-2026-12436 CVSS 8.4 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v"}, {"timestamp": "2026-07-30T00:00:00Z", "date_only": false, "value": "2026-07-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0946", "record": "CERTFR-2026-AVI-0946", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-07-30T00:00:00Z", "date_only": false, "value": "2026-07-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0946", "record": "CERTFR-2026-AVI-0946", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T00:00:00Z", "date_only": false, "value": "2026-07-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0946", "record": "CERTFR-2026-AVI-0946", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-07-30T03:55:42.557Z", "date_only": false, "value": "2026-07-30T03:55:42.557469Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12436", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-30T03:55:42.557Z", "date_only": false, "value": "2026-07-30T03:55:42.557469Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12436", "record": "FKIE_CVE-2026-12436", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-30T04:46:01.600Z", "date_only": false, "value": "2026-07-30T04:46:01.600072Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260730", "record": "CVE-2026-12436", "field": "creation_timestamp", "uuid": "b78d37f8-9dc4-4811-b1b3-ec82e6aa73e6", "url": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260730"}, {"timestamp": "2026-07-30T06:12:42.114Z", "date_only": false, "value": "2026-07-30T06:12:42.114251Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0270", "record": "NCSC-2026-0270", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-07-30T06:12:42.114Z", "date_only": false, "value": "2026-07-30T06:12:42.114251Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0270", "record": "NCSC-2026-0270", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T06:12:42.114Z", "date_only": false, "value": "2026-07-30T06:12:42.114251Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0270", "record": "NCSC-2026-0270", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-07-30T14:15:30.799Z", "date_only": false, "value": "2026-07-30T14:15:30.799176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumu73k2a2n", "record": "CVE-2026-12436", "field": "creation_timestamp", "uuid": "5ada5945-2a7c-4da8-80b5-70b369bda796", "content": "\ud83d\udd17 CVE : CVE-2025-14562, CVE-2026-12436, CVE-2026-13113, CVE-2026-14341, CVE-2026-14351, CVE-2026-15077, CVE-2026-15831, CVE-2026-15975, CVE-2026-16553, CVE-2026-3093, CVE-2026-4672, CVE-2026-6267, CVE-2026-6336", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumu73k2a2n"}, {"timestamp": "2026-07-31T14:00:04.452Z", "date_only": false, "value": "2026-07-31T14:00:04.452119Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3356", "record": "CVE-2026-12436", "field": "creation_timestamp", "uuid": "5984702b-af66-4bbd-a584-df171183fe92", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u0438\u044f\u043c\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 CI/CD-\u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u043e\u0432 Pipeline Schedule API \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 git \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043a\u043e\u0434\u043e\u043c GitLab CE/EE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u043e\u0431\u044a\u0435\u043a\u0442\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e CI/CD, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e\n\nBDU:2026-10765\nCVE-2026-12436\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 19.2.1, 19.1.3, 19.0.5:\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/", "url": "https://t.me/bdufstecru/3356"}, {"timestamp": "2026-07-31T16:10:56.005Z", "date_only": false, "value": "2026-07-31T16:10:56.005Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-12436", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-31T16:10:56.005Z", "date_only": false, "value": "2026-07-31T16:10:56.005Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12436", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-03T13:42:46.800Z", "date_only": false, "value": "2026-08-03T13:42:46.800", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12436", "record": "FKIE_CVE-2026-12436", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-05T22:37:18.398Z", "date_only": false, "value": "2026-08-05T22:37:18.398159Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mselomwcx72r", "record": "CVE-2026-12436", "field": "creation_timestamp", "uuid": "5f013197-3218-447b-9f44-6eb8be430b6a", "content": "\ud83d\udccc CVE-2026-12436 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under c... https://www.cyberhub.blog/cves/CVE-2026-12436", "url": "https://bsky.app/profile/cyberhub.blog/post/3mselomwcx72r"}, {"timestamp": "2026-08-17T06:06:24.880Z", "date_only": false, "value": "2026-08-17T06:06:24.880Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2026-12436", "record": "BIT-GITLAB-2026-12436", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2026-12436", "record": "BIT-GITLAB-2026-12436", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-11T07:31:33.818Z", "anchors": {"origin": {"timestamp": "2026-07-29T19:00:36.048Z", "date_only": false, "value": "2026-07-29T19:00:36.048Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12436", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-29T19:00:36.048Z", "date_only": false, "value": "2026-07-29T19:00:36.048Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12436", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9030657.770536, "hours": 2508.516047371111, "days": 104.52150197379629, "min_seconds": 9030657.770536, "max_seconds": 9030657.770536, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-29T19:00:36.048Z", "date_only": false, "value": "2026-07-29T19:00:36.048Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12436", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T07:31:33.818Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}