{"metadata": {"vulnerability": "CVE-2026-129262", "count": 12, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 7}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129262", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2026-11-13T01:00:00Z", "date_only": false, "value": "2026-11-13T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129262", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2026-11-13T20:17:55.633Z", "date_only": false, "value": "2026-11-13T20:17:55.633Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-129262", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T21:23:01Z", "date_only": false, "value": "2026-11-13T21:23:01.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129262", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2026-11-14T16:30:14.472Z", "date_only": false, "value": "2026-11-14T16:30:14.472Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129262", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-14T16:30:14.472Z", "date_only": false, "value": "2026-11-14T16:30:14.472Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-129262", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-14T16:30:14.472Z", "date_only": false, "value": "2026-11-14T16:30:14.472Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129262", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-14T16:37:27.428Z", "date_only": false, "value": "2026-11-14T16:37:27.428370Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117615771450706140", "record": "CVE-2026-129262", "field": "creation_timestamp", "uuid": "4407b955-597f-4ccc-8cbb-ce538ba2e80b", "content": "CVE-2026-129262 Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx DiyFileUpload unrestricted upload A weakness has been identified in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected by this vulnerability is the function DiyFileUpload of the file /ws.asmx. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-129262https://vuldb.com/vuln/437306https://vuldb.com/vuln/437306/ctihttps://vuldb.com/cve/CVE-2026-129262https://vuldb.com/submit/1043317https://github.com/Rookie506/CVE/issues/3#WuxiWubangSecuritySoftware #WubangFive-in-OneSafetyProductionManagementInformationSystem#CVE_2026_129262#bot", "url": "https://infosec.exchange/users/cve/statuses/117615771450706140"}, {"timestamp": "2026-11-14T17:16:52Z", "date_only": false, "value": "2026-11-14T17:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PG2P-P23V-9VJ6", "record": "GHSA-PG2P-P23V-9VJ6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-14T18:30:47Z", "date_only": false, "value": "2026-11-14T18:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PG2P-P23V-9VJ6", "record": "GHSA-PG2P-P23V-9VJ6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-14T18:30:47Z", "date_only": false, "value": "2026-11-14T18:30:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PG2P-P23V-9VJ6", "record": "GHSA-PG2P-P23V-9VJ6", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-14T20:31:56.626Z", "date_only": false, "value": "2026-11-14T20:31:56.626246Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fwykllwasvu53", "record": "CVE-2026-129262", "field": "creation_timestamp", "uuid": "d984b13c-06f3-4eb4-8cf2-9053ccb2480a", "content": "CVE-2026-129262 - Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx DiyFileUpload unrestricted upload\nCVE ID : CVE-2026-129262\n \n Published : 14 \u043d\u043e\u044f\u0431\u0440\u044f 2026 \u0433. 17:16 | 59\u00a0\u043c\u0438\u043d\u0443\u0442 ago\n \n Description : A weakness has been iden...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/fwykllwasvu53"}], "metrics": {"as_of": "2026-11-15T00:02:31.981Z", "anchors": {"origin": {"timestamp": "2026-11-14T16:30:14.472Z", "date_only": false, "value": "2026-11-14T16:30:14.472Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129262", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-14T16:30:14.472Z", "date_only": false, "value": "2026-11-14T16:30:14.472Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129262", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 27137.509666, "hours": 7.538197129444445, "days": 0.3140915470601852, "min_seconds": 27137.509666, "max_seconds": 27137.509666, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-14T16:30:14.472Z", "date_only": false, "value": "2026-11-14T16:30:14.472Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129262", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:02:31.981Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
