{"metadata": {"vulnerability": "CVE-2026-15266", "count": 20, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-09T14:11:49.491Z", "date_only": false, "value": "2026-07-09T14:11:49.491Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-08T17:34:54.696Z", "date_only": false, "value": "2026-11-08T17:34:54.696Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-08T17:34:54.696Z", "date_only": false, "value": "2026-11-08T17:34:54.696Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-15266", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-08T17:43:21.089Z", "date_only": false, "value": "2026-11-08T17:43:21.089113Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117582056687489465", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "b17a2def-1372-4b7b-8ed8-691b39eb0b45", "content": "CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.\nhttps://www.cve.org/CVERecord?id=CVE-2026-15266https://www.ibm.com/support/pages/node/7294607#ibm #IBM #Concert#CVE_2026_15266#bot", "url": "https://infosec.exchange/users/cve/statuses/117582056687489465"}, {"timestamp": "2026-11-08T18:06:56.329Z", "date_only": false, "value": "2026-11-08T18:06:56.329138Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117582149445373075", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "3fbfa522-8cc3-4b87-83bf-c8c07fb007f8", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting IBM Concert (CVE-2026-15266) https://vuldb.com/vuln/432959", "url": "https://infosec.exchange/users/vuldb/statuses/117582149445373075"}, {"timestamp": "2026-11-08T18:17:02Z", "date_only": false, "value": "2026-11-08T18:17:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WHQC-5QPC-XMVJ", "record": "GHSA-WHQC-5QPC-XMVJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-08T18:17:02.450Z", "date_only": false, "value": "2026-11-08T18:17:02.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15266", "record": "FKIE_CVE-2026-15266", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T18:30:06.334Z", "date_only": false, "value": "2026-11-08T18:30:06.334944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzt26e5s3p24", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "89c5fcf0-ae97-4b70-9da2-ad9336674e30", "content": "CVE-2026-15266 - concert\nVersions 1.0 through 3.0.1.1 of IBM Concert contain code that can execute commands on the server without proper checks. An attacker who exploits this could run any command they choose,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concert #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzt26e5s3p24"}, {"timestamp": "2026-11-08T18:30:26Z", "date_only": false, "value": "2026-11-08T18:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WHQC-5QPC-XMVJ", "record": "GHSA-WHQC-5QPC-XMVJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T18:30:26Z", "date_only": false, "value": "2026-11-08T18:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WHQC-5QPC-XMVJ", "record": "GHSA-WHQC-5QPC-XMVJ", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-08T20:08:00.201Z", "date_only": false, "value": "2026-11-08T20:08:00.201283Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzt7nht45c24", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "20a8adcb-8a8e-467b-a8ab-d268d540602e", "content": "\ud83d\udea8 CVE-2026-15266 \u2014 CVSS 9.8 CRITICAL\n\nIBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15266\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzt7nht45c24"}, {"timestamp": "2026-11-08T23:00:16Z", "date_only": false, "value": "2026-11-08T23:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/otbiHr51mSYcshx_w-bMWVVofIbC5HZOS_mqc2vvRNMiupE", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "04afe140-b953-456b-b611-c597b4e580db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-08T23:00:16Z", "date_only": false, "value": "2026-11-08T23:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/otbiHr51mSYcshx_w-bMWVVofIbC5HZOS_mqc2vvRNMiupE", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "6307af98-1ed9-48d7-b26a-792dbf7ad385"}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15266", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15266", "record": "FKIE_CVE-2026-15266", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-09T00:00:38.438Z", "date_only": false, "value": "2026-11-09T00:00:38.438504Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117583540129486471", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "efb6a331-40f3-4b2b-8bcc-ce94f89261b5", "content": "CVE-2026-15266 in IBM Concert 1.0 \u2013 3.0.1.1 (CRITICAL, CVSS 9.8): Remote, unauthenticated attackers can execute arbitrary system commands (CWE-78). No patch available \u2014 restrict access & monitor for abuse. https://radar.offseq.com/threat/ibm-concert-10-through-3011-contains-components-that-allow-potentially-unsafe-command-execution-which-582f933b76d9b314 #OffSeq #IBM #Vuln #CyberSec", "url": "https://infosec.exchange/users/offseq/statuses/117583540129486471"}, {"timestamp": "2026-11-09T01:02:00.812Z", "date_only": false, "value": "2026-11-09T01:02:00.812867Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mztq37lzwm22", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "f7a88039-4fb4-4786-bc66-ae7864dad0a3", "content": "\ud83d\udd34 CVE-2026-15266 - Critical (9.8)\n\nIBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command executi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15266/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mztq37lzwm22"}, {"timestamp": "2026-11-10T04:56:05.655Z", "date_only": false, "value": "2026-11-10T04:56:05.655Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T04:56:05.655Z", "date_only": false, "value": "2026-11-10T04:56:05.655Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15266", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T05:18:01.390Z", "date_only": false, "value": "2026-11-10T05:18:01.390", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15266", "record": "FKIE_CVE-2026-15266", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T11:55:15.257Z", "anchors": {"origin": {"timestamp": "2026-11-08T17:34:54.696Z", "date_only": false, "value": "2026-11-08T17:34:54.696Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-08T17:34:54.696Z", "date_only": false, "value": "2026-11-08T17:34:54.696Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-11-08T23:00:16Z", "date_only": false, "value": "2026-11-08T23:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/otbiHr51mSYcshx_w-bMWVVofIbC5HZOS_mqc2vvRNMiupE", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "04afe140-b953-456b-b611-c597b4e580db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 19521.304, "hours": 5.422584444444444, "days": 0.22594101851851853, "min_seconds": 19521.304, "max_seconds": 19521.304, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T17:34:54.696Z", "date_only": false, "value": "2026-11-08T17:34:54.696Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T23:00:16Z", "date_only": false, "value": "2026-11-08T23:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/otbiHr51mSYcshx_w-bMWVVofIbC5HZOS_mqc2vvRNMiupE", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "04afe140-b953-456b-b611-c597b4e580db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 325220.561254, "hours": 90.33904479277778, "days": 3.7641268663657406, "min_seconds": 325220.561254, "max_seconds": 325220.561254, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T17:34:54.696Z", "date_only": false, "value": "2026-11-08T17:34:54.696Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15266", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T11:55:15.257Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 305699.257254, "hours": 84.91646034833333, "days": 3.538185847847222, "min_seconds": 305699.257254, "max_seconds": 305699.257254, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T23:00:16Z", "date_only": false, "value": "2026-11-08T23:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/otbiHr51mSYcshx_w-bMWVVofIbC5HZOS_mqc2vvRNMiupE", "record": "CVE-2026-15266", "field": "creation_timestamp", "uuid": "04afe140-b953-456b-b611-c597b4e580db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T11:55:15.257Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}