{"metadata": {"vulnerability": "CVE-2026-14738", "count": 18, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-14738", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-07-04T02:00:00Z", "date_only": false, "value": "2026-07-04T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-14738", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-07-04T09:06:11.045Z", "date_only": false, "value": "2026-07-04T09:06:11.045Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14738", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-04T11:11:16Z", "date_only": false, "value": "2026-07-04T11:11:16.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-14738", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-07-05T10:15:09.187Z", "date_only": false, "value": "2026-07-05T10:15:09.187Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14738", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-05T10:15:09.187Z", "date_only": false, "value": "2026-07-05T10:15:09.187Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-14738", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-05T11:00:27.129Z", "date_only": false, "value": "2026-07-05T11:00:27.129596Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116867021281566995", "record": "cve-2026-14738", "field": "creation_timestamp", "uuid": "4d8907db-9ddc-41db-a7b9-786b2a618242", "content": "CVE-2026-14738 (MEDIUM, CVSS 6.3) impacts exo-explore exo \u22641.0.71. Weak hash in Vision Feature Cache, remote exploit released, high complexity. Patch pending. Review deployments & monitor for updates. https://radar.offseq.com/threat/cve-2026-14738-use-of-weak-hash-in-exo-explore-exo-d776a3211767a5cf #OffSeq #Vulnerability #CVE202614738 #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/116867021281566995"}, {"timestamp": "2026-07-05T11:00:29.025Z", "date_only": false, "value": "2026-07-05T11:00:29.025838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpvgcg262i25", "record": "cve-2026-14738", "field": "creation_timestamp", "uuid": "8de30fa9-5798-4f22-a527-6b5d9f584748", "content": "Vulnerability in exo-explore exo (\u22641.0.71): Weak hash in Vision Feature Cache (CVE-2026-14738, MEDIUM). Public exploit out \u2014 patch pending. Audit deployments & stay alert for updates. https://radar.offseq.com/threat/cve-2026-14738-use-of-weak-hash-in-exo-explore-exo-d776a3211767a5cf #OffSeq #Vuln...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mpvgcg262i25"}, {"timestamp": "2026-07-05T11:16:27Z", "date_only": false, "value": "2026-07-05T11:16:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QR8Q-72GC-WM4F", "record": "GHSA-QR8Q-72GC-WM4F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-05T11:16:27.197Z", "date_only": false, "value": "2026-07-05T11:16:27.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14738", "record": "FKIE_CVE-2026-14738", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-05T12:21:46.932Z", "date_only": false, "value": "2026-07-05T12:21:46.932769Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvktsttlo2v", "record": "CVE-2026-14738", "field": "creation_timestamp", "uuid": "4fd0180c-7914-4a46-b6f7-12436fbe95ed", "content": "CVE-2026-14738 - exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash\nCVE ID : CVE-2026-14738\n \n Published : July 5, 2026, 10:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvktsttlo2v"}, {"timestamp": "2026-07-05T12:30:24Z", "date_only": false, "value": "2026-07-05T12:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QR8Q-72GC-WM4F", "record": "GHSA-QR8Q-72GC-WM4F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-05T12:30:25Z", "date_only": false, "value": "2026-07-05T12:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QR8Q-72GC-WM4F", "record": "GHSA-QR8Q-72GC-WM4F", "field": "modified"}, {"timestamp": "2026-07-06T13:33:25.251Z", "date_only": false, "value": "2026-07-06T13:33:25.251146Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14738", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-06T13:33:25.251Z", "date_only": false, "value": "2026-07-06T13:33:25.251146Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14738", "record": "FKIE_CVE-2026-14738", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-06T13:33:34.713Z", "date_only": false, "value": "2026-07-06T13:33:34.713Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14738", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-06T13:33:34.713Z", "date_only": false, "value": "2026-07-06T13:33:34.713Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14738", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-25T15:10:00.147Z", "date_only": false, "value": "2026-10-25T15:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14738", "record": "FKIE_CVE-2026-14738", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T17:13:20.478Z", "anchors": {"origin": {"timestamp": "2026-07-05T10:15:09.187Z", "date_only": false, "value": "2026-07-05T10:15:09.187Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14738", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-05T10:15:09.187Z", "date_only": false, "value": "2026-07-05T10:15:09.187Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14738", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 10220291.291612, "hours": 2838.9698032255556, "days": 118.29040846773147, "min_seconds": 10220291.291612, "max_seconds": 10220291.291612, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-05T10:15:09.187Z", "date_only": false, "value": "2026-07-05T10:15:09.187Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14738", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T17:13:20.478Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}