{"metadata": {"vulnerability": "CVE-2026-17049", "count": 13, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-24T13:28:19.979Z", "date_only": false, "value": "2026-07-24T13:28:19.979Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-17049", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:31:36.293Z", "date_only": false, "value": "2026-11-07T04:31:36.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17049", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:31:36.293Z", "date_only": false, "value": "2026-11-07T04:31:36.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-17049", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:31:36.293Z", "date_only": false, "value": "2026-11-07T04:31:36.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-17049", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:53:47.906Z", "date_only": false, "value": "2026-11-07T04:53:47.906622Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573368373891040", "record": "CVE-2026-17049", "field": "creation_timestamp", "uuid": "4c4a5280-0d93-48b1-8ac9-98b0197ba26d", "content": "CVE-2026-17049 Multiple Vulnerabilities in IBM API Connect IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and modify arbitrary documents due to authorization bypass through user-controlled keys.\nhttps://www.cve.org/CVERecord?id=CVE-2026-17049https://www.ibm.com/support/pages/node/7295635#ibm #IBM #APIConnect#CVE_2026_17049#bot", "url": "https://infosec.exchange/users/cve/statuses/117573368373891040"}, {"timestamp": "2026-11-07T05:10:04.627Z", "date_only": false, "value": "2026-11-07T05:10:04.627406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp4yx3eqn2v", "record": "CVE-2026-17049", "field": "creation_timestamp", "uuid": "4cfb654c-d44f-47c8-b051-1b6a6a920ae3", "content": "CVE-2026-17049 - api connect\nIf someone is already signed in to IBM API Connect version 12.1.0.0 through 12.1.1.2, they could bypass normal security checks and see private information or edit any document\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp4yx3eqn2v"}, {"timestamp": "2026-11-07T05:18:23Z", "date_only": false, "value": "2026-11-07T05:18:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CGW7-HRWX-R5VX", "record": "GHSA-CGW7-HRWX-R5VX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:23.173Z", "date_only": false, "value": "2026-11-07T05:18:23.173", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17049", "record": "FKIE_CVE-2026-17049", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:18:23.310Z", "date_only": false, "value": "2026-11-07T05:18:23.310", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17049", "record": "FKIE_CVE-2026-17049", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T06:08:09.745Z", "date_only": false, "value": "2026-11-07T06:08:09.745440Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpaaskp2b2n", "record": "CVE-2026-17049", "field": "creation_timestamp", "uuid": "56c2c285-c747-4e20-a3bc-37c5755f90da", "content": "\ud83d\udea8 CVE-2026-17049 \u2014 CVSS 9.9 CRITICAL\n\nIBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-17049\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpaaskp2b2n"}, {"timestamp": "2026-11-07T06:31:15Z", "date_only": false, "value": "2026-11-07T06:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CGW7-HRWX-R5VX", "record": "GHSA-CGW7-HRWX-R5VX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:15Z", "date_only": false, "value": "2026-11-07T06:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CGW7-HRWX-R5VX", "record": "GHSA-CGW7-HRWX-R5VX", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T23:31:06.264Z", "date_only": false, "value": "2026-11-07T23:31:06.264103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzr2jq6kfu2r", "record": "CVE-2026-17049", "field": "creation_timestamp", "uuid": "ed2b15ae-c32b-471e-b6dc-3a52823b7044", "content": "Watch this new critical IBM API Connect issue. CVE-2026-17049 \u2014 CVSS 9.9.\n\nIBM API Connect 12.1.0\u201312.1.1.2: auth'd attacker can read sensitive data and modify docs via authz bypass through user-controlled keys.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-17049/\n\n#fcvulns #IBM", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzr2jq6kfu2r"}], "metrics": {"as_of": "2026-11-08T05:58:03.912Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:31:36.293Z", "date_only": false, "value": "2026-11-07T04:31:36.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17049", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:31:36.293Z", "date_only": false, "value": "2026-11-07T04:31:36.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17049", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 91587.619509, "hours": 25.441005419166665, "days": 1.0600418924652777, "min_seconds": 91587.619509, "max_seconds": 91587.619509, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:31:36.293Z", "date_only": false, "value": "2026-11-07T04:31:36.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17049", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T05:58:03.912Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}