{"metadata": {"vulnerability": "CVE-2026-12507", "count": 19, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 7}, "linked_omitted": 0}, "data": [{"timestamp": "2026-06-17T10:49:52.198Z", "date_only": false, "value": "2026-06-17T10:49:52.198Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-12507", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-12T06:48:54.703Z", "date_only": false, "value": "2026-11-12T06:48:54.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12507", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-12T06:48:54.703Z", "date_only": false, "value": "2026-11-12T06:48:54.703Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zohocorp", "record": "CVE-2026-12507", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T06:58:38.744Z", "date_only": false, "value": "2026-11-12T06:58:38.744565Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117602170848946936", "record": "cve-2026-12507", "field": "creation_timestamp", "uuid": "5d443a4b-610f-4de0-8ced-ec62f8fc3f5c", "content": "CVE-2026-12507 Authenticated remote code execution Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-12507https://www.manageengine.com/products/service-desk/cve-2026-12507.html#manageengine #Zohocorp #AssetExplorer #ServiceDeskPlus #ServiceDeskPlusMSP #SupportCenterPlus#CVE_2026_12507#bot", "url": "https://infosec.exchange/users/cve/statuses/117602170848946936"}, {"timestamp": "2026-11-12T07:16:46Z", "date_only": false, "value": "2026-11-12T07:16:46Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4CWF-239Q-XJFQ", "record": "GHSA-4CWF-239Q-XJFQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-12T07:16:46.750Z", "date_only": false, "value": "2026-11-12T07:16:46.750", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12507", "record": "FKIE_CVE-2026-12507", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T07:20:02.778Z", "date_only": false, "value": "2026-11-12T07:20:02.778039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n23wlx2fo42q", "record": "CVE-2026-12507", "field": "creation_timestamp", "uuid": "a264dca2-5612-4da6-89ee-f16b64a429f3", "content": "CVE-2026-12507 - assetexplorer\nVersions of AssetExplorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus older than the listed releases allow a user who can create report queries to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#assetexplorer #zohocorp #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n23wlx2fo42q"}, {"timestamp": "2026-11-12T07:49:48.504Z", "date_only": false, "value": "2026-11-12T07:49:48.504528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2qrphuq5ftj7e", "record": "CVE-2026-12507", "field": "creation_timestamp", "uuid": "198a2341-5223-4937-be6d-e335b4984031", "content": "CVE-2026-12507 - Authenticated remote code execution\nCVE ID : CVE-2026-12507\n \n Published : Nov. 12, 2026, 6:48 a.m. | 27\u00a0minutes ago\n \n Description : Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/2qrphuq5ftj7e"}, {"timestamp": "2026-11-12T08:07:11.628Z", "date_only": false, "value": "2026-11-12T08:07:11.628828Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3n23zab2x3v2o", "record": "CVE-2026-12507", "field": "creation_timestamp", "uuid": "ac03deeb-b16a-47d0-a70e-b47ae3330e97", "content": "\ud83d\udea8 CVE-2026-12507 \u2014 CVSS 9.1 CRITICAL\n\nZohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12507\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3n23zab2x3v2o"}, {"timestamp": "2026-11-12T08:33:00.376Z", "date_only": false, "value": "2026-11-12T08:33:00.376265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n242ofhjsc2p", "record": "CVE-2026-12507", "field": "creation_timestamp", "uuid": "526db5e7-3cf3-428a-ba13-81a7816ea5ef", "content": "\ud83d\udd34 CVE-2026-12507 - Critical (9.1)\n\nZohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, S...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12507/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n242ofhjsc2p"}, {"timestamp": "2026-11-12T09:32:50Z", "date_only": false, "value": "2026-11-12T09:32:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4CWF-239Q-XJFQ", "record": "GHSA-4CWF-239Q-XJFQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T09:32:50Z", "date_only": false, "value": "2026-11-12T09:32:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4CWF-239Q-XJFQ", "record": "GHSA-4CWF-239Q-XJFQ", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-12T10:23:16.003Z", "date_only": false, "value": "2026-11-12T10:23:16.003251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3n275jvxkkk3s", "record": "cve-2026-12507", "field": "creation_timestamp", "uuid": "ecaa79e7-10a5-4d10-8075-bd95e6e8bcb0", "content": "Developing: Critical Zohocorp ManageEngine AssetExplorer Vulnerability (CVE-2026-12507)\nhttps://cyber.eventmonitor.net/incident/EM-20261112-TW6W/critical-zohocorp-manageengine-assetexplorer-vulnerability-cve-2026-12507/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3n275jvxkkk3s"}, {"timestamp": "2026-11-12T17:37:52.599Z", "date_only": false, "value": "2026-11-12T17:37:52.599364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3n24z4ptezn2t", "record": "CVE-2026-12507", "field": "creation_timestamp", "uuid": "e19d658f-5b06-46f3-9b74-4a8b7b08dfcc", "content": "ManageEngine AssetExplorer\u7b49\u306b\u8a8d\u8a3c\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3002\u7279\u88fd\u30af\u30a8\u30ea\u3067\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002\nCVE-2026-12507 CVSS 9.1 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3n24z4ptezn2t"}, {"timestamp": "2026-11-12T19:02:35.830Z", "date_only": false, "value": "2026-11-12T19:02:35.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12507", "record": "FKIE_CVE-2026-12507", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12507", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-13T01:53:44.856Z", "date_only": false, "value": "2026-11-13T01:53:44.856580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3n25utfppv22g", "record": "CVE-2026-12507", "field": "creation_timestamp", "uuid": "dc897160-5074-48f6-a7d3-08d744f89d82", "content": "ManageEngine critical vulnerabilities fixed: CVE-2026-12591 (CVSS 9.9) in M365 Manager Plus, CVE-2026-12507 RCE in ServiceDesk Plus, DDI Central flaws.\n\n#ManageEngine #Zoho #ServiceDeskPlus #DDICentral #RCE #Vulnerability #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3n25utfppv22g"}, {"timestamp": "2026-11-14T04:56:54.466Z", "date_only": false, "value": "2026-11-14T04:56:54.466Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-12507", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-14T04:56:54.466Z", "date_only": false, "value": "2026-11-14T04:56:54.466Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12507", "field": "containers.adp.0.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-11-14T05:27:18.636Z", "anchors": {"origin": {"timestamp": "2026-11-12T06:48:54.703Z", "date_only": false, "value": "2026-11-12T06:48:54.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12507", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-12T06:48:54.703Z", "date_only": false, "value": "2026-11-12T06:48:54.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12507", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 167903.933435, "hours": 46.639981509722226, "days": 1.9433325629050928, "min_seconds": 167903.933435, "max_seconds": 167903.933435, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-12T06:48:54.703Z", "date_only": false, "value": "2026-11-12T06:48:54.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12507", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T05:27:18.636Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}