{"metadata": {"vulnerability": "CVE-2026-14191", "count": 40, "kinds": {"milestone": 7, "sighting": 15, "kev": 0, "other": 18}}, "data": [{"timestamp": "2026-06-03T02:08:00Z", "date_only": false, "value": "2026-06-03T02:08:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-14191", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-06-03T20:01:00Z", "date_only": false, "value": "2026-06-03T20:01:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-14191", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": false, "value": "2026-06-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-14191", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2026-06-30T07:51:00Z", "date_only": false, "value": "2026-06-30T07:51:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / securin", "record": "CVE-2026-14191", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-06-30T08:32:07.249Z", "date_only": false, "value": "2026-06-30T08:32:07.249Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14191", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-01T02:41:39.316Z", "date_only": false, "value": "2026-07-01T02:41:39.316Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14191", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-01T04:16:00Z", "date_only": false, "value": "2026-07-01T04:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-14191", "record": "UBUNTU-CVE-2026-14191", "field": "published"}, {"timestamp": "2026-07-01T04:16:58Z", "date_only": false, "value": "2026-07-01T04:16:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5HJJ-FVQ6-8J36", "record": "GHSA-5HJJ-FVQ6-8J36", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-01T04:16:58.647Z", "date_only": false, "value": "2026-07-01T04:16:58.647", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14191", "record": "FKIE_CVE-2026-14191", "field": "published"}, {"timestamp": "2026-07-01T05:01:30.646Z", "date_only": false, "value": "2026-07-01T05:01:30.646833Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpkqeufzqj27", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "9447de36-c04c-4f71-ad49-07638c618d8a", "content": "CVE-2026-14191 - OOB heap write in WinRAR RAR5 .rev parser. CVSS 7.8. Attackers can corrupt memory via crafted .rev files. Update immediately. #CVE #WinRAR #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-14191/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpkqeufzqj27"}, {"timestamp": "2026-07-01T06:31:31Z", "date_only": false, "value": "2026-07-01T06:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5HJJ-FVQ6-8J36", "record": "GHSA-5HJJ-FVQ6-8J36", "field": "published"}, {"timestamp": "2026-07-01T13:07:23.906Z", "date_only": false, "value": "2026-07-01T13:07:23.906784Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14191", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-01T13:07:23.906Z", "date_only": false, "value": "2026-07-01T13:07:23.906784Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14191", "record": "FKIE_CVE-2026-14191", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-01T13:07:52.685Z", "date_only": false, "value": "2026-07-01T13:07:52.685Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14191", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": false, "value": "2026-07-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-14191", "record": "MSRC_CVE-2026-14191", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-02T01:05:20.085Z", "date_only": false, "value": "2026-07-02T01:05:20.085027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmtnhgzbd2h", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "56ad4449-f4c0-4eec-b38b-d2ee92dfa1d9", "content": "A WinRAR vulnerability (CVE-2026-14191) causes a heap overflow via crafted .rev recovery files. Update WinRAR and UnRAR to version 7.23 now.\n\n#WinRAR #UnRAR #CVE202614191 #HeapOverflow #RAR5 #RARLAB #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmtnhgzbd2h"}, {"timestamp": "2026-07-02T13:09:39.844Z", "date_only": false, "value": "2026-07-02T13:09:39.844635Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpo44j3kmfa2", "record": "cve-2026-14191", "field": "creation_timestamp", "uuid": "5df57b4e-149a-424a-9c53-99afbce7cc13", "content": "WinRAR flaw could allow attackers to take control of your computer A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch. Rarlab has relea...\n\n#Bugs #News #cve-2026-14191 #unrar #winRAR\n\nOrigin | Interest | Match", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpo44j3kmfa2"}, {"timestamp": "2026-07-03T11:58:01.208Z", "date_only": false, "value": "2026-07-03T11:58:01.208588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqili4rou2c", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "6fa19569-55c3-4c25-bfcf-7df9082cc12a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14191: \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0435 RAR5 recovery-volume (.rev) \u0432 Windows\n\n\n\nhttps://kripta.biz/posts/3FF598E9-3BAF-4188-9A51-2C79747DA15C", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqili4rou2c"}, {"timestamp": "2026-07-04T06:04:30.916Z", "date_only": false, "value": "2026-07-04T06:04:30.916190Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-14191", "record": "BELL-CVE-2026-14191", "field": "published"}, {"timestamp": "2026-07-04T20:01:18.136Z", "date_only": false, "value": "2026-07-04T20:01:18.136273Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mptu2krefs2o", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "0ce2fd22-320f-45e3-bed1-c2c9c8aa7337", "content": "WinRAR 723 Emergency Patch: CVE-2026-14191 Heap Overflow Opens Door to Remote Code Execution\u2014Are You Protected? +\u00a0Video\n\nIntroduction: A critical heap overflow vulnerability in WinRAR\u2019s RAR5 recovery volume processing code, tracked as CVE-2026-14191, threatens hundreds of millions of systems\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mptu2krefs2o"}, {"timestamp": "2026-07-09T01:02:39Z", "date_only": false, "value": "2026-07-09T01:02:39.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-14191", "record": "MSRC_CVE-2026-14191", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-09T01:02:39Z", "date_only": false, "value": "2026-07-09T01:02:39.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-14191", "record": "MSRC_CVE-2026-14191", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-09T01:02:39Z", "date_only": false, "value": "2026-07-09T01:02:39.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-14191", "record": "MSRC_CVE-2026-14191", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-09T04:47:54.319Z", "date_only": false, "value": "2026-07-09T04:47:54.319Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14191", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T04:47:54.319Z", "date_only": false, "value": "2026-07-09T04:47:54.319Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / securin", "record": "CVE-2026-14191", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T06:16:18.380Z", "date_only": false, "value": "2026-07-09T06:16:18.380", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14191", "record": "FKIE_CVE-2026-14191", "field": "lastModified"}, {"timestamp": "2026-07-09T06:31:59Z", "date_only": false, "value": "2026-07-09T06:31:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5HJJ-FVQ6-8J36", "record": "GHSA-5HJJ-FVQ6-8J36", "field": "modified"}, {"timestamp": "2026-07-09T07:36:40.074Z", "date_only": false, "value": "2026-07-09T07:36:40.074Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-14191", "record": "MSRC_CVE-2026-14191", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-09T11:56:03.809Z", "date_only": false, "value": "2026-07-09T11:56:03.809944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7lbhnl622x", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "c1f23143-019d-40f8-b1cd-cbcbb07f6682", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14191: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0435 RAR5 recovery-volume\n\n\n\nhttps://kripta.biz/posts/7790673A-C8BF-4D3F-85F9-9E43EC5A4C89", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7lbhnl622x"}, {"timestamp": "2026-07-15T15:00:04.414Z", "date_only": false, "value": "2026-07-15T15:00:04.414266Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3315", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "8138262a-e288-465a-ade9-1c2514c647f3", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043c\u043e\u0432 RAR5 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430 WinRAR \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 UnRAR \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0430\u0441\u0441\u0438\u0432\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09733\nCVE-2026-14191\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.rarlab.com/download.htm", "url": "https://t.me/bdufstecru/3315"}, {"timestamp": "2026-07-16T17:15:50.412Z", "date_only": false, "value": "2026-07-16T17:15:50.412473Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-14191", "record": "BELL-CVE-2026-14191", "field": "modified"}, {"timestamp": "2026-07-16T19:00:18.708Z", "date_only": false, "value": "2026-07-16T19:00:18.708546Z", "kind": "sighting", "label": "Seen", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "5e77c79a-db69-4758-9129-ca70cc69c46f"}, {"timestamp": "2026-07-16T19:00:18.873Z", "date_only": false, "value": "2026-07-16T19:00:18.873374Z", "kind": "sighting", "label": "Seen", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "d81bc85f-f994-4029-8498-ad674e76d57f"}, {"timestamp": "2026-07-18T00:00:24.626Z", "date_only": false, "value": "2026-07-18T00:00:24.626189Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "ff05203f-93c5-4cb8-9358-4159cda87aca"}, {"timestamp": "2026-07-18T00:00:24.932Z", "date_only": false, "value": "2026-07-18T00:00:24.932039Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "489c4160-f2b1-404a-acf1-b2d7ad8f7d9e"}, {"timestamp": "2026-08-01T23:45:22.944Z", "date_only": false, "value": "2026-08-01T23:45:22.944440Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2nmytenk2o", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "83e60eb3-525f-4d56-910e-2580b321e573", "content": "\u300cWinRAR\u300d\u306b\u8106\u5f31\u6027\u3001\u904e\u53bb\u306e\u554f\u984c\u306b\u985e\u4f3c - \u4fee\u6b63\u7248\u3092\u30ea\u30ea\u30fc\u30b9\n\n\u30d5\u30a1\u30a4\u30eb\u30a2\u30fc\u30ab\u30a4\u30d6\u30bd\u30d5\u30c8\u300cWinRAR\u300d\u306b\u3042\u3089\u305f\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3001\u73fe\u5730\u6642\u95932026\u5e746\u670830\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u3002\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30e9\u30a4\u30d6\u30e9\u30ea\u306e\u66f4\u65b0\u3082\u884c\u3063\u3066\u3044\u308b\u3002\n\n\u300cCVE-2026-14191\u300d\u306f\u3001\u300cRAR5\u300d\u306b\u304a\u3051\u308b\u300c\u5fa9\u65e7\u30dc\u30ea\u30e5\u30fc\u30e0\u30d5\u30a1\u30a4\u30eb\uff08.rev\uff09\u300d\u306e\u89e3\u6790\u51e6\u7406\u306b\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u3002\u904e\u53bb\u306b\u4fee\u6b63\u3055\u308c\u305f\u300cCVE-2023-40477\u300d\u3068\u985e\u4f3c\u3057\u305f\u554f\u984c\u3060\u3068\u3044\u3046\u3002\n\n\u5fa9\u65e7\u3084\u30c6\u30b9\u30c8\u51e6\u7406\u306b\u304a\u3044\u3066\u3001\u8907\u6570\u306e\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u51e6\u7406\u3059\u308b\u3068\u3001\u57df\u5916\u306b\u66f8\u304d\u8fbc\u307f\u3092\u884c\u3044\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u304c\u751f\u3058\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u300cWinRAR...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2nmytenk2o"}, {"timestamp": "2026-08-09T07:15:48.988Z", "date_only": false, "value": "2026-08-09T07:15:48.988146Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/capoexplains.bsky.social/post/3msn22wmsc22f", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "f39f2cc3-7f1c-44ca-a20d-dc4f5237e72a", "content": "I saw this in a small private Discord a few days ago and left it at that but I'm realizing this may not be widely known so...\n\nI've seen evidence that a WinRAR vulnerability, I suspect CVE-2026-14191, is being successfully leveraged to steal discord accounts.\n\nThe latest WinRAR update fixes this.", "url": "https://bsky.app/profile/capoexplains.bsky.social/post/3msn22wmsc22f"}, {"timestamp": "2026-08-09T07:15:49.457Z", "date_only": false, "value": "2026-08-09T07:15:49.457399Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/capoexplains.bsky.social/post/3msn22wnmns2f", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "46f1d0a4-e032-4a3e-9f20-f3f9dfa48d06", "content": "I saw this in a small private Discord a few days ago and left it at that but I'm realizing this may not be widely known so...\n\nI've seen evidence that a WinRAR vulnerability, I suspect CVE-2026-14191, is being successfully leveraged to steal discord accounts.\n\nThe latest WinRAR update fixes this.", "url": "https://bsky.app/profile/capoexplains.bsky.social/post/3msn22wnmns2f"}, {"timestamp": "2026-09-06T15:33:05.569Z", "date_only": false, "value": "2026-09-06T15:33:05.569813Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3muucvv6sk22l", "record": "CVE-2026-14191", "field": "creation_timestamp", "uuid": "aec17bdb-8351-4d5b-bf69-9d932110cde9", "content": "[Backport release-26.05] unrar: 7.2.6 -> 7.2.7, fix CVE-2026-14191\n\nhttps://github.com/NixOS/nixpkgs/pull/560373\n\n#security", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3muucvv6sk22l"}, {"timestamp": "2026-10-17T09:38:01Z", "date_only": false, "value": "2026-10-17T09:38:01Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-14191", "record": "UBUNTU-CVE-2026-14191", "field": "modified"}]}