{"metadata": {"vulnerability": "CVE-2026-18836", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-04T14:35:26.085Z", "date_only": false, "value": "2026-08-04T14:35:26.085Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18836", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T04:34:39.221Z", "date_only": false, "value": "2026-11-07T04:34:39.221Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T04:34:39.221Z", "date_only": false, "value": "2026-11-07T04:34:39.221Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-18836", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T05:18:59Z", "date_only": false, "value": "2026-11-07T05:18:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9R3Q-V922-QCC3", "record": "GHSA-9R3Q-V922-QCC3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T05:18:59.597Z", "date_only": false, "value": "2026-11-07T05:18:59.597", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18836", "record": "FKIE_CVE-2026-18836", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T05:20:58.829Z", "date_only": false, "value": "2026-11-07T05:20:58.829678Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzp5mg3ydz2l", "record": "CVE-2026-18836", "field": "creation_timestamp", "uuid": "331cf4b5-d0ad-43f7-ac24-6feab62584ef", "content": "\ud83d\udd34 CVE-2026-18836 - Critical (9.3)\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18836/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzp5mg3ydz2l"}, {"timestamp": "2026-11-07T05:30:30.334Z", "date_only": false, "value": "2026-11-07T05:30:30.334329Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eli2vo6ltl6fv", "record": "CVE-2026-18836", "field": "creation_timestamp", "uuid": "35b3e5ba-d217-4d23-a84e-46b13a4624c6", "content": "CVE-2026-18836 - Multiple Vulnerabilities in IBM API Connect\nCVE ID : CVE-2026-18836\n \n Published : Nov. 7, 2026, 4:34 a.m. | 38\u00a0minutes ago\n \n Description : IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensit...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/eli2vo6ltl6fv"}, {"timestamp": "2026-11-07T06:14:17.908Z", "date_only": false, "value": "2026-11-07T06:14:17.908245Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpalrqob32v", "record": "CVE-2026-18836", "field": "creation_timestamp", "uuid": "a2f74560-e0d5-4071-9392-10b543225c06", "content": "\ud83d\udea8 CVE-2026-18836 \u2014 CVSS 9.3 CRITICAL\n\nIBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18836\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzpalrqob32v"}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9R3Q-V922-QCC3", "record": "GHSA-9R3Q-V922-QCC3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T06:31:22Z", "date_only": false, "value": "2026-11-07T06:31:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9R3Q-V922-QCC3", "record": "GHSA-9R3Q-V922-QCC3", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T06:49:40.331Z", "date_only": false, "value": "2026-11-07T06:49:40.331785Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117573824007523382", "record": "CVE-2026-18836", "field": "creation_timestamp", "uuid": "c97568b1-9b9a-4003-8a22-25d4cab6470e", "content": "CVE-2026-18836 Multiple Vulnerabilities in IBM API Connect IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.\nhttps://www.cve.org/CVERecord?id=CVE-2026-18836https://www.ibm.com/support/pages/node/7295635https://www.ibm.com/support/pages/node/7295637#ibm #IBM #APIConnect#CVE_2026_18836#bot", "url": "https://infosec.exchange/users/cve/statuses/117573824007523382"}, {"timestamp": "2026-11-07T08:40:04.709Z", "date_only": false, "value": "2026-11-07T08:40:04.709732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzpiqhhtvs27", "record": "CVE-2026-18836", "field": "creation_timestamp", "uuid": "42ca5265-6596-431a-88eb-e910527f0c4c", "content": "CVE-2026-18836 - api connect\nVersions 10.0.8.0\u201110.0.8.12 and 12.1.0.0\u201112.1.1.2 of IBM API Connect may let an attacker trick the server into contacting other sites and then return that information. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apiconnect #ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzpiqhhtvs27"}, {"timestamp": "2026-11-09T13:32:33.005Z", "date_only": false, "value": "2026-11-09T13:32:33.005549Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18836", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-09T13:32:33.005Z", "date_only": false, "value": "2026-11-09T13:32:33.005549Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18836", "record": "FKIE_CVE-2026-18836", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-09T13:32:41.295Z", "date_only": false, "value": "2026-11-09T13:32:41.295Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18836", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-09T13:32:41.295Z", "date_only": false, "value": "2026-11-09T13:32:41.295Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18836", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T14:17:21.207Z", "date_only": false, "value": "2026-11-09T14:17:21.207", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18836", "record": "FKIE_CVE-2026-18836", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-11T14:26:32.964Z", "anchors": {"origin": {"timestamp": "2026-11-07T04:34:39.221Z", "date_only": false, "value": "2026-11-07T04:34:39.221Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T04:34:39.221Z", "date_only": false, "value": "2026-11-07T04:34:39.221Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 381113.743863, "hours": 105.86492885083334, "days": 4.411038702118056, "min_seconds": 381113.743863, "max_seconds": 381113.743863, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T04:34:39.221Z", "date_only": false, "value": "2026-11-07T04:34:39.221Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T14:26:32.964Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}