{"metadata": {"vulnerability": "CVE-2026-17150", "count": 12, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-24T17:34:49.463Z", "date_only": false, "value": "2026-07-24T17:34:49.463Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-17150", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:32:02.890Z", "date_only": false, "value": "2026-11-07T04:32:02.890Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17150", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:32:02.890Z", "date_only": false, "value": "2026-11-07T04:32:02.890Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-17150", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:32:02.890Z", "date_only": false, "value": "2026-11-07T04:32:02.890Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-17150", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:09:20.943Z", "date_only": false, "value": "2026-11-07T05:09:20.943889Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573429309558304", "record": "CVE-2026-17150", "field": "creation_timestamp", "uuid": "002aca0f-df62-412e-a811-24403ae0b531", "content": "CVE-2026-17150 Multiple Vulnerabilities in IBM API Connect IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. Uploaded custom module content is not sufficiently validated before it is processed, which could allow code to run with access beyond the user's own tenant.\nhttps://www.cve.org/CVERecord?id=CVE-2026-17150https://www.ibm.com/support/pages/node/7295635https://www.ibm.com/support/pages/node/7295637#ibm #IBM #APIConnect#CVE_2026_17150#bot", "url": "https://infosec.exchange/users/cve/statuses/117573429309558304"}, {"timestamp": "2026-11-07T05:18:28Z", "date_only": false, "value": "2026-11-07T05:18:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RFJJ-GH5G-WR2C", "record": "GHSA-RFJJ-GH5G-WR2C", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:28.230Z", "date_only": false, "value": "2026-11-07T05:18:28.230", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17150", "record": "FKIE_CVE-2026-17150", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:18:28.390Z", "date_only": false, "value": "2026-11-07T05:18:28.390", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17150", "record": "FKIE_CVE-2026-17150", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T05:50:05.695Z", "date_only": false, "value": "2026-11-07T05:50:05.695934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp7ainr7u24", "record": "CVE-2026-17150", "field": "creation_timestamp", "uuid": "e25f4bb5-3fc8-46d7-aaf6-ba276164a243", "content": "CVE-2026-17150 - api connect\nVersions 10.0.8.0\u201110.0.8.12 and 12.1.0.0\u201112.1.1.2 of IBM API Connect can accept custom modules without proper checks. This may allow a logged\u2011in user to execute their own code and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp7ainr7u24"}, {"timestamp": "2026-11-07T06:09:18.076Z", "date_only": false, "value": "2026-11-07T06:09:18.076866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpactv2pz2n", "record": "CVE-2026-17150", "field": "creation_timestamp", "uuid": "75a95e37-7acc-4cbb-9376-5b62c11a69c5", "content": "\ud83d\udea8 CVE-2026-17150 \u2014 CVSS 9.9 CRITICAL\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-17150\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpactv2pz2n"}, {"timestamp": "2026-11-07T06:31:16Z", "date_only": false, "value": "2026-11-07T06:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RFJJ-GH5G-WR2C", "record": "GHSA-RFJJ-GH5G-WR2C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:16Z", "date_only": false, "value": "2026-11-07T06:31:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RFJJ-GH5G-WR2C", "record": "GHSA-RFJJ-GH5G-WR2C", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T14:19:30.483Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:32:02.890Z", "date_only": false, "value": "2026-11-07T04:32:02.890Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17150", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:32:02.890Z", "date_only": false, "value": "2026-11-07T04:32:02.890Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17150", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 121647.593824, "hours": 33.79099828444444, "days": 1.4079582618518518, "min_seconds": 121647.593824, "max_seconds": 121647.593824, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:32:02.890Z", "date_only": false, "value": "2026-11-07T04:32:02.890Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17150", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T14:19:30.483Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}