{"metadata": {"vulnerability": "CVE-2026-19410", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-10T09:07:34.906Z", "date_only": false, "value": "2026-08-10T09:07:34.906Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-19410", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-31T08:14:52.377Z", "date_only": false, "value": "2026-08-31T08:14:52.377Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19410", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-31T08:14:52.377Z", "date_only": false, "value": "2026-08-31T08:14:52.377Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GoogleCloud", "record": "CVE-2026-19410", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-31T09:17:03Z", "date_only": false, "value": "2026-08-31T09:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q4WW-HVH7-426W", "record": "GHSA-Q4WW-HVH7-426W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-31T09:17:03.130Z", "date_only": false, "value": "2026-08-31T09:17:03.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19410", "record": "FKIE_CVE-2026-19410", "field": "published"}, {"timestamp": "2026-08-31T09:30:04.608Z", "date_only": false, "value": "2026-08-31T09:30:04.608795Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueltayv7f2e", "record": "CVE-2026-19410", "field": "creation_timestamp", "uuid": "ff46ed62-523c-45ef-9e75-3de67b9c41fb", "content": "CVE-2026-19410 - google cloud build\nGoogle Cloud Build's GitHub trigger feature could let an attacker run code without review by suppressing webhook checks. This could let malicious code execute in your build\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#googlecloud #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mueltayv7f2e"}, {"timestamp": "2026-08-31T09:30:29Z", "date_only": false, "value": "2026-08-31T09:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q4WW-HVH7-426W", "record": "GHSA-Q4WW-HVH7-426W", "field": "published"}, {"timestamp": "2026-08-31T09:30:29Z", "date_only": false, "value": "2026-08-31T09:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q4WW-HVH7-426W", "record": "GHSA-Q4WW-HVH7-426W", "field": "modified"}, {"timestamp": "2026-08-31T10:07:14.412Z", "date_only": false, "value": "2026-08-31T10:07:14.412017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvpcwff2p", "record": "CVE-2026-19410", "field": "creation_timestamp", "uuid": "d5b9149e-66a2-46dd-802f-8c8db0f46129", "content": "\ud83d\udea8 CVE-2026-19410 \u2014 CVSS 9.4 CRITICAL\n\nAn Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19410\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvpcwff2p"}, {"timestamp": "2026-08-31T11:11:06.763Z", "date_only": false, "value": "2026-08-31T11:11:06.763492Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19410", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-31T11:11:06.763Z", "date_only": false, "value": "2026-08-31T11:11:06.763492Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19410", "record": "FKIE_CVE-2026-19410", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-31T11:18:20.587Z", "date_only": false, "value": "2026-08-31T11:18:20.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-19410", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-31T11:18:20.587Z", "date_only": false, "value": "2026-08-31T11:18:20.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19410", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-31T18:50:00.053Z", "date_only": false, "value": "2026-08-31T18:50:00.053", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19410", "record": "FKIE_CVE-2026-19410", "field": "lastModified"}, {"timestamp": "2026-09-26T03:56:28.074Z", "date_only": false, "value": "2026-09-26T03:56:28.074855Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwffclyps222", "record": "CVE-2026-19410", "field": "creation_timestamp", "uuid": "1b605686-7102-48f4-b4df-686eca556aba", "content": "\u300cGoogle Cloud Build\u300d\u306bRCE\u8106\u5f31\u6027 - 6\u6708\u306b\u4fee\u6b63\u6e08\u307f\n\nGoogle Cloud\u4e0a\u3067\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u30d3\u30eb\u30c9\u51e6\u7406\u304c\u884c\u3048\u308b\u30b5\u30fc\u30d3\u30b9\u300cCloud Build\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u3059\u3067\u306b\u8106\u5f31\u6027\u306f\u89e3\u6d88\u6e08\u307f\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u30b5\u30fc\u30d3\u30b9\u3067\u306f\u3001GitHub\u3068\u306e\u9023\u643a\u6a5f\u80fd\u300cGitHub Trigger Comment Control\u300d\u3092\u5099\u3048\u3066\u3044\u308b\u304c\u3001\u8a8d\u53ef\u4e0d\u5099\u306e\u8106\u5f31\u6027\u300cCVE-2026-19410\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u30028\u670824\u65e5\u4ed8\u3051\u306e\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u3067\u516c\u8868\u3057\u305f\u3002\n\n\u540c\u6a5f\u80fd\u3067\u306fGitHub\u4e0a\u306e\u64cd\u4f5c\u3092\u30c8\u30ea\u30ac\u30fc\u3068\u3057\u3066\u30d3\u30eb\u30c9\u3092\u5236\u5fa1\u3067\u304d\u308b\u304c\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u672a\u30ec\u30d3\u30e5\u30fc\u306e\u30b3\u30fc\u30c9\u3092\u30d3\u30eb\u30c9\u74b0\u5883\u3067\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwffclyps222"}]}