{"metadata": {"vulnerability": "CVE-2026-124693", "count": 10, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-09T10:41:42.890Z", "date_only": false, "value": "2026-11-09T10:41:42.890Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-124693", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-11T16:54:21.803Z", "date_only": false, "value": "2026-11-11T16:54:21.803Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124693", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-11T16:54:21.803Z", "date_only": false, "value": "2026-11-11T16:54:21.803Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-124693", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-11T16:54:21.803Z", "date_only": false, "value": "2026-11-11T16:54:21.803Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-124693", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-11T17:17:18Z", "date_only": false, "value": "2026-11-11T17:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H3PM-2MG5-RJM6", "record": "GHSA-H3PM-2MG5-RJM6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-11T17:17:18.370Z", "date_only": false, "value": "2026-11-11T17:17:18.370", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-124693", "record": "FKIE_CVE-2026-124693", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-11T17:17:18.483Z", "date_only": false, "value": "2026-11-11T17:17:18.483", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-124693", "record": "FKIE_CVE-2026-124693", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T18:31:38Z", "date_only": false, "value": "2026-11-11T18:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H3PM-2MG5-RJM6", "record": "GHSA-H3PM-2MG5-RJM6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-11T18:31:38Z", "date_only": false, "value": "2026-11-11T18:31:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H3PM-2MG5-RJM6", "record": "GHSA-H3PM-2MG5-RJM6", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-11T18:32:18.955Z", "date_only": false, "value": "2026-11-11T18:32:18.955388Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117599236159053485", "record": "cve-2026-124693", "field": "creation_timestamp", "uuid": "904f1783-09e8-4795-8853-35233803dfb7", "content": "CVE-2026-124693 Cross-Site Scripting in Kendo UI for jQuery PivotGrid Axis Chips In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PivotGrid and PivotConfigurator axis field names are passed to a chip template without appropriate encoding. An attacker who can influence an axis field name can cause JavaScript to execute when a user views the rendered chip. The field name can be interpreted as HTML in both attribute and element contexts. Successful exploitation may compromise the confidentiality and integrity of data available in the user's browser context. The first affected release has not been established.\nhttps://www.cve.org/CVERecord?id=CVE-2026-124693https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-kendo-pivotgrid-pivotconfigurator-axis-chip-xss-cve-2026-124693#ProgressSoftware #KendoUIforjQuery#CVE_2026_124693#bot", "url": "https://infosec.exchange/users/cve/statuses/117599236159053485"}], "metrics": {"as_of": "2026-11-11T23:08:45.850Z", "anchors": {"origin": {"timestamp": "2026-11-11T16:54:21.803Z", "date_only": false, "value": "2026-11-11T16:54:21.803Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124693", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-11T16:54:21.803Z", "date_only": false, "value": "2026-11-11T16:54:21.803Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124693", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 22464.047905, "hours": 6.240013306944444, "days": 0.2600005544560185, "min_seconds": 22464.047905, "max_seconds": 22464.047905, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-11T16:54:21.803Z", "date_only": false, "value": "2026-11-11T16:54:21.803Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124693", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T23:08:45.850Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}