{"metadata": {"vulnerability": "CVE-2026-22896", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-01-13T07:49:08.783Z", "date_only": false, "value": "2026-01-13T07:49:08.783Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-22896", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T06:58:38.222Z", "date_only": false, "value": "2026-10-15T06:58:38.222Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-22896", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T07:17:59Z", "date_only": false, "value": "2026-10-15T07:17:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WQCF-PWR4-95X6", "record": "GHSA-WQCF-PWR4-95X6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T07:17:59.303Z", "date_only": false, "value": "2026-10-15T07:17:59.303", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22896", "record": "FKIE_CVE-2026-22896", "field": "published"}, {"timestamp": "2026-10-15T07:19:11.730Z", "date_only": false, "value": "2026-10-15T07:19:11.730207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117443706965945989", "record": "CVE-2026-22896", "field": "creation_timestamp", "uuid": "6e13fbb6-1aac-4fa1-8928-0fab75fe0141", "content": "CVE-2026-22896 Stored XSS via Interface Name in Network & Virtual Switch App A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code.\nWe have already fixed the vulnerability in the following version:Network & Virtual Switch in QTS 5.1.8.2823 build 20240712 and laterNetwork & Virtual Switch in QTS 5.2.1.2930 build 20241025 and laterNetwork & Virtual Switch in QuTS cloud c5.2.4.3041 build 20250211 and laterNetwork & Virtual Switch in QuTS hero h5.1.8.2823 build 20240712 and laterNetwork & Virtual Switch in QuTS hero h5.2.1.2929 build 20241025 and later\nhttps://www.cve.org/CVERecord?id=CVE-2026-22896https://www.qnap.com/en/release-notes/qts/5.1.8.2823/20240712https://www.qnap.com/en/release-notes/qts/5.2.1.2930/20241025https://www.qnap.com/en/release-notes/qutscloud/c5.2.4.3041/20250211https://www.qnap.com/en/release-notes/quts_hero/h5.1.8.2823/20240712https://www.qnap.com/en/release-notes/quts_hero/h5.2.1.2929/20241025#QNAPSystemsInc. #Network&VirtualSwitch#CVE_2026_22896#bot", "url": "https://infosec.exchange/users/cve/statuses/117443706965945989"}, {"timestamp": "2026-10-15T07:56:30.453Z", "date_only": false, "value": "2026-10-15T07:56:30.453Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / qnap", "record": "CVE-2026-22896", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T09:30:33Z", "date_only": false, "value": "2026-10-15T09:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WQCF-PWR4-95X6", "record": "GHSA-WQCF-PWR4-95X6", "field": "published"}, {"timestamp": "2026-10-15T09:30:33Z", "date_only": false, "value": "2026-10-15T09:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WQCF-PWR4-95X6", "record": "GHSA-WQCF-PWR4-95X6", "field": "modified"}, {"timestamp": "2026-10-15T18:25:15.173Z", "date_only": false, "value": "2026-10-15T18:25:15.173148Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-22896", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T18:25:15.173Z", "date_only": false, "value": "2026-10-15T18:25:15.173148Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22896", "record": "FKIE_CVE-2026-22896", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T18:25:22.923Z", "date_only": false, "value": "2026-10-15T18:25:22.923Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-22896", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:25:22.923Z", "date_only": false, "value": "2026-10-15T18:25:22.923Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-22896", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T19:17:38.270Z", "date_only": false, "value": "2026-10-15T19:17:38.270", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-22896", "record": "FKIE_CVE-2026-22896", "field": "lastModified"}]}