{"metadata": {"vulnerability": "CVE-2026-16884", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-24T04:54:38.847Z", "date_only": false, "value": "2026-07-24T04:54:38.847Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-16884", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:31:32.122Z", "date_only": false, "value": "2026-11-07T04:31:32.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16884", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:31:32.122Z", "date_only": false, "value": "2026-11-07T04:31:32.122Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-16884", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:51:06.285Z", "date_only": false, "value": "2026-11-07T04:51:06.285855Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573357789317869", "record": "CVE-2026-16884", "field": "creation_timestamp", "uuid": "426db269-dd06-470a-a8b5-c577f4d236e2", "content": "CVE-2026-16884 Multiple Vulnerabilities in IBM API Connect IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection.\nhttps://www.cve.org/CVERecord?id=CVE-2026-16884https://www.ibm.com/support/pages/node/7295635#ibm #IBM #APIConnect#CVE_2026_16884#bot", "url": "https://infosec.exchange/users/cve/statuses/117573357789317869"}, {"timestamp": "2026-11-07T05:00:03.188Z", "date_only": false, "value": "2026-11-07T05:00:03.188042Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp4gzg34m2n", "record": "CVE-2026-16884", "field": "creation_timestamp", "uuid": "2bd27aa9-e098-4f0e-b09e-b401e98110c2", "content": "CVE-2026-16884 - api connect\nVersions 12.1.0.0 through 12.1.1.2 of IBM API Connect can be tricked into reading internal files when processing specially crafted XML messages. This could let an outside attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp4gzg34m2n"}, {"timestamp": "2026-11-07T05:18:22Z", "date_only": false, "value": "2026-11-07T05:18:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XJXQ-VMWG-XQ8V", "record": "GHSA-XJXQ-VMWG-XQ8V", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:22.440Z", "date_only": false, "value": "2026-11-07T05:18:22.440", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16884", "record": "FKIE_CVE-2026-16884", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:07:43.715Z", "date_only": false, "value": "2026-11-07T06:07:43.715387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpa7zwmkb2w", "record": "CVE-2026-16884", "field": "creation_timestamp", "uuid": "5bd8c44b-8804-44ba-8dd8-aa933a18dd02", "content": "\ud83d\udea8 CVE-2026-16884 \u2014 CVSS 9.9 CRITICAL\n\nIBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16884\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpa7zwmkb2w"}, {"timestamp": "2026-11-07T06:31:15Z", "date_only": false, "value": "2026-11-07T06:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XJXQ-VMWG-XQ8V", "record": "GHSA-XJXQ-VMWG-XQ8V", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:15Z", "date_only": false, "value": "2026-11-07T06:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XJXQ-VMWG-XQ8V", "record": "GHSA-XJXQ-VMWG-XQ8V", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T08:30:49.711Z", "date_only": false, "value": "2026-11-07T08:30:49.711406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzpi7w2lkd2j", "record": "CVE-2026-16884", "field": "creation_timestamp", "uuid": "1092d3e6-b8ce-42fe-9e9f-7b601e075f3e", "content": "Don't miss this new critical IBM API Connect XXE. CVE-2026-16884 \u2014 CVSS 9.9.\n\nIBM API Connect 12.1.0.0\u201312.1.1.2: remote XXE injection can let an attacker obtain sensitive information.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-16884/\n\n#fcvulns #IBM", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzpi7w2lkd2j"}, {"timestamp": "2026-11-11T03:40:15.819Z", "date_only": false, "value": "2026-11-11T03:40:15.819637Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16884", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-11T03:40:15.819Z", "date_only": false, "value": "2026-11-11T03:40:15.819637Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16884", "record": "FKIE_CVE-2026-16884", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-11T03:40:26.186Z", "date_only": false, "value": "2026-11-11T03:40:26.186Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-16884", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-11T03:40:26.186Z", "date_only": false, "value": "2026-11-11T03:40:26.186Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16884", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-11T05:19:38.523Z", "date_only": false, "value": "2026-11-11T05:19:38.523", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16884", "record": "FKIE_CVE-2026-16884", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T06:37:07.861Z", "date_only": false, "value": "2026-11-11T06:37:07.861906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mzzdqbgcnh2u", "record": "CVE-2026-16884", "field": "creation_timestamp", "uuid": "612429cd-0968-441e-85f9-18982ea78145", "content": "\ud83d\udccc CVE-2026-16884 - IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to an XML external entity (XXE) injection. https://www.cyberhub.blog/cves/CVE-2026-16884", "url": "https://bsky.app/profile/cyberhub.blog/post/3mzzdqbgcnh2u"}], "metrics": {"as_of": "2026-11-13T05:02:48.246Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:31:32.122Z", "date_only": false, "value": "2026-11-07T04:31:32.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16884", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:31:32.122Z", "date_only": false, "value": "2026-11-07T04:31:32.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16884", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 520276.124325, "hours": 144.52114564583331, "days": 6.021714401909722, "min_seconds": 520276.124325, "max_seconds": 520276.124325, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:31:32.122Z", "date_only": false, "value": "2026-11-07T04:31:32.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16884", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T05:02:48.246Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}