{"metadata": {"vulnerability": "CVE-2026-17399", "count": 12, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-25T04:52:36.415Z", "date_only": false, "value": "2026-07-25T04:52:36.415Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-17399", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:34:23.731Z", "date_only": false, "value": "2026-11-07T04:34:23.731Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17399", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:34:23.731Z", "date_only": false, "value": "2026-11-07T04:34:23.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-17399", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T04:34:23.731Z", "date_only": false, "value": "2026-11-07T04:34:23.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-17399", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:18:55Z", "date_only": false, "value": "2026-11-07T05:18:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F8HP-RFXW-4RGF", "record": "GHSA-F8HP-RFXW-4RGF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:55.790Z", "date_only": false, "value": "2026-11-07T05:18:55.790", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17399", "record": "FKIE_CVE-2026-17399", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:18:55.963Z", "date_only": false, "value": "2026-11-07T05:18:55.963", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-17399", "record": "FKIE_CVE-2026-17399", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T06:13:25.312Z", "date_only": false, "value": "2026-11-07T06:13:25.312072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpak7kvso2c", "record": "CVE-2026-17399", "field": "creation_timestamp", "uuid": "817297d8-789b-4471-a80e-8665a4803f41", "content": "\ud83d\udea8 CVE-2026-17399 \u2014 CVSS 9.9 CRITICAL\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-17399\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpak7kvso2c"}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F8HP-RFXW-4RGF", "record": "GHSA-F8HP-RFXW-4RGF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F8HP-RFXW-4RGF", "record": "GHSA-F8HP-RFXW-4RGF", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T06:39:35.349Z", "date_only": false, "value": "2026-11-07T06:39:35.349377Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573784297985412", "record": "CVE-2026-17399", "field": "creation_timestamp", "uuid": "342be785-5167-4f9e-bd0d-aa22f836d7d6", "content": "CVE-2026-17399 Multiple Vulnerabilities in IBM API Connect IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-17399https://www.ibm.com/support/pages/node/7295635https://www.ibm.com/support/pages/node/7295637#ibm #IBM #APIConnect#CVE_2026_17399#bot", "url": "https://infosec.exchange/users/cve/statuses/117573784297985412"}, {"timestamp": "2026-11-07T08:10:05.215Z", "date_only": false, "value": "2026-11-07T08:10:05.215520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzph2t5hly2u", "record": "CVE-2026-17399", "field": "creation_timestamp", "uuid": "92549ce0-fc60-4266-bcd3-bf99824766dd", "content": "CVE-2026-17399 - api connect\nVersions 10.0.8.0\u201112.0.8.12 and 12.1.0.0\u201112.1.1.2 of IBM API Connect do not properly check files that users upload. An attacker who can log in could place malicious content that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzph2t5hly2u"}], "metrics": {"as_of": "2026-11-07T23:12:16.713Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:34:23.731Z", "date_only": false, "value": "2026-11-07T04:34:23.731Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17399", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:34:23.731Z", "date_only": false, "value": "2026-11-07T04:34:23.731Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17399", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 67072.982379, "hours": 18.631383994166665, "days": 0.776307666423611, "min_seconds": 67072.982379, "max_seconds": 67072.982379, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:34:23.731Z", "date_only": false, "value": "2026-11-07T04:34:23.731Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-17399", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T23:12:16.713Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}