{"metadata": {"vulnerability": "CVE-2026-17299", "count": 11, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-25T00:54:34.942Z", "date_only": false, "value": "2026-07-25T00:54:34.942Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-17299", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:32:51.868Z", "date_only": false, "value": "2026-11-07T04:32:51.868Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17299", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:32:51.868Z", "date_only": false, "value": "2026-11-07T04:32:51.868Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-17299", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:32:51.868Z", "date_only": false, "value": "2026-11-07T04:32:51.868Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-17299", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:18:37Z", "date_only": false, "value": "2026-11-07T05:18:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H6RQ-G6V8-5257", "record": "GHSA-H6RQ-G6V8-5257", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:37.700Z", "date_only": false, "value": "2026-11-07T05:18:37.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17299", "record": "FKIE_CVE-2026-17299", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:18:37.863Z", "date_only": false, "value": "2026-11-07T05:18:37.863", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17299", "record": "FKIE_CVE-2026-17299", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T05:40:16.929Z", "date_only": false, "value": "2026-11-07T05:40:16.929232Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573551156726540", "record": "CVE-2026-17299", "field": "creation_timestamp", "uuid": "6c6f6abb-c6e7-41c1-8be1-e4121153f202", "content": "CVE-2026-17299 Multiple Vulnerabilities in IBM API Connect IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not sufficiently restricted when processed, and the retrieved content could be returned to the attacker.\nhttps://www.cve.org/CVERecord?id=CVE-2026-17299https://www.ibm.com/support/pages/node/7295635https://www.ibm.com/support/pages/node/7295637#ibm #IBM #APIConnect#CVE_2026_17299#bot", "url": "https://infosec.exchange/users/cve/statuses/117573551156726540"}, {"timestamp": "2026-11-07T06:31:18Z", "date_only": false, "value": "2026-11-07T06:31:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H6RQ-G6V8-5257", "record": "GHSA-H6RQ-G6V8-5257", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:18Z", "date_only": false, "value": "2026-11-07T06:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H6RQ-G6V8-5257", "record": "GHSA-H6RQ-G6V8-5257", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T06:50:02.991Z", "date_only": false, "value": "2026-11-07T06:50:02.991087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzpclpgjp32u", "record": "CVE-2026-17299", "field": "creation_timestamp", "uuid": "630dec3e-7b5f-47c3-8c49-bf3e413095d8", "content": "CVE-2026-17299 - api connect\nVersions 10.0.8.0\u201112.0.8.12 and 12.1.0.0\u201112.1.1.2 of IBM API Connect may let a user who has signed in retrieve any file on the server and cause the server to contact external\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzpclpgjp32u"}], "metrics": {"as_of": "2026-11-08T04:28:33.874Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:32:51.868Z", "date_only": false, "value": "2026-11-07T04:32:51.868Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17299", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:32:51.868Z", "date_only": false, "value": "2026-11-07T04:32:51.868Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17299", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 86142.006023, "hours": 23.928335006388888, "days": 0.997013958599537, "min_seconds": 86142.006023, "max_seconds": 86142.006023, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:32:51.868Z", "date_only": false, "value": "2026-11-07T04:32:51.868Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17299", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T04:28:33.874Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}