{"metadata": {"vulnerability": "CVE-2026-18535", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-31T20:31:32.104Z", "date_only": false, "value": "2026-07-31T20:31:32.104Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18535", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:56:45.212Z", "date_only": false, "value": "2026-11-07T04:56:45.212Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18535", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:56:45.212Z", "date_only": false, "value": "2026-11-07T04:56:45.212Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-18535", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:18:59Z", "date_only": false, "value": "2026-11-07T05:18:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-68PW-29W8-GP2W", "record": "GHSA-68PW-29W8-GP2W", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:59.120Z", "date_only": false, "value": "2026-11-07T05:18:59.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18535", "record": "FKIE_CVE-2026-18535", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:20:51.390Z", "date_only": false, "value": "2026-11-07T05:20:51.390660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzp5m7ks2m2e", "record": "CVE-2026-18535", "field": "creation_timestamp", "uuid": "2ff19273-e750-4e0d-9748-65d92ec237c1", "content": "\ud83d\udd34 CVE-2026-18535 - Critical (9.6)\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18535/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzp5m7ks2m2e"}, {"timestamp": "2026-11-07T06:00:04.266Z", "date_only": false, "value": "2026-11-07T06:00:04.266162Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp7sdhe6v2n", "record": "CVE-2026-18535", "field": "creation_timestamp", "uuid": "5c12b26e-f08a-4a46-b53f-0773a922d360", "content": "CVE-2026-18535 - api connect\nVersions 10.0.8.0\u201110.0.8.12 and 12.1.0.0\u201112.1.1.2 of IBM API Connect may stop working when an attacker sends specially formed data. This could make your API services unavailable\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzp7sdhe6v2n"}, {"timestamp": "2026-11-07T06:00:35.225Z", "date_only": false, "value": "2026-11-07T06:00:35.225495Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117573630893836841", "record": "cve-2026-18535", "field": "creation_timestamp", "uuid": "2dbcb6e6-2992-40b2-9a3e-28004a395816", "content": "IBM API Connect has a CRITICAL ReDoS flaw (CVE-2026-18535, CVSS 9.6) affecting 10.0.8.0 \u2013 10.0.8.12 & 12.1.0.0 \u2013 12.1.1.2. Exploitation leads to DoS via regex complexity. Restrict access & monitor for abuse. Patch status unconfirmed. https://radar.offseq.com/threat/cve-2026-18535-cwe-1333-inefficient-regular-expression-complexity-in-ibm-api-connect-bd685576100468ea #OffSeq #IBM #CVE202618535 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/117573630893836841"}, {"timestamp": "2026-11-07T06:00:37.616Z", "date_only": false, "value": "2026-11-07T06:00:37.616645Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mzp7tb3mq62z", "record": "cve-2026-18535", "field": "creation_timestamp", "uuid": "1ac4b44f-d4d7-46dc-ae40-65bb46263fa4", "content": "IBM API Connect versions 10.0.8.0 \u2013 10.0.8.12 & 12.1.0.0 \u2013 12.1.1.2 face a CRITICAL ReDoS vulnerability (CVSS 9.6). Restrict access, monitor for resource spikes. Patch status unconfirmed. https://radar.offseq.com/threat/cve-2026-18535-cwe-1333-inefficient-regular-expression-complexity-in-ibm-api-...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mzp7tb3mq62z"}, {"timestamp": "2026-11-07T06:14:09.306Z", "date_only": false, "value": "2026-11-07T06:14:09.306708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpaljdbax2u", "record": "CVE-2026-18535", "field": "creation_timestamp", "uuid": "869182e6-932c-4d09-b397-a04e11d6cb0b", "content": "\ud83d\udea8 CVE-2026-18535 \u2014 CVSS 9.6 CRITICAL\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expres...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18535\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpaljdbax2u"}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-68PW-29W8-GP2W", "record": "GHSA-68PW-29W8-GP2W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-68PW-29W8-GP2W", "record": "GHSA-68PW-29W8-GP2W", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T06:58:26.234Z", "date_only": false, "value": "2026-11-07T06:58:26.234859Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573858478753355", "record": "CVE-2026-18535", "field": "creation_timestamp", "uuid": "7cee4e1a-ea57-4779-8e74-678ce9fd366a", "content": "CVE-2026-18535 IBM API Connect Denial of Service IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and to improper neutralisation of wildcard query operators.\nhttps://www.cve.org/CVERecord?id=CVE-2026-18535https://www.ibm.com/support/pages/node/7291753https://www.ibm.com/support/pages/node/7292434#ibm #IBM #APIConnect#CVE_2026_18535#bot", "url": "https://infosec.exchange/users/cve/statuses/117573858478753355"}, {"timestamp": "2026-11-08T01:45:54.241Z", "date_only": false, "value": "2026-11-08T01:45:54.241823Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18535", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-08T01:45:54.241Z", "date_only": false, "value": "2026-11-08T01:45:54.241823Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18535", "record": "FKIE_CVE-2026-18535", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-08T01:46:03.050Z", "date_only": false, "value": "2026-11-08T01:46:03.050Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18535", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-08T01:46:03.050Z", "date_only": false, "value": "2026-11-08T01:46:03.050Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18535", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-08T02:17:04.583Z", "date_only": false, "value": "2026-11-08T02:17:04.583", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18535", "record": "FKIE_CVE-2026-18535", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T06:13:46.806Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:56:45.212Z", "date_only": false, "value": "2026-11-07T04:56:45.212Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18535", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:56:45.212Z", "date_only": false, "value": "2026-11-07T04:56:45.212Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18535", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 91021.594777, "hours": 25.283776326944444, "days": 1.053490680289352, "min_seconds": 91021.594777, "max_seconds": 91021.594777, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:56:45.212Z", "date_only": false, "value": "2026-11-07T04:56:45.212Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18535", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T06:13:46.806Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}