{"metadata": {"vulnerability": "CVE-2026-3836", "count": 18, "kinds": {"milestone": 2, "sighting": 1, "kev": 6, "other": 9}}, "data": [{"timestamp": "2026-03-09T12:34:00Z", "date_only": false, "value": "2026-03-09T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-03-09T14:39:13.177Z", "date_only": false, "value": "2026-03-09T14:39:13.177000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-3836", "record": "UBUNTU-CVE-2026-3836", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-22T18:07:51Z", "date_only": false, "value": "2026-04-22T18:07:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-07-31T22:07:41Z", "date_only": false, "value": "2026-07-31T22:07:41+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-31T22:07:41Z", "date_only": false, "value": "2026-07-31T22:07:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-02T01:00:32.003Z", "date_only": false, "value": "2026-08-02T01:00:32.003916Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa22a55-3ac8-46bc-bb9d-e1411808358a", "record": "CVE-2026-3836", "field": "creation_timestamp", "uuid": "1a985ca4-36e1-4ad1-812a-64eea0d8bbde", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa22a55-3ac8-46bc-bb9d-e1411808358a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-05T18:26:59Z", "date_only": false, "value": "2026-10-05T18:26:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-05T18:26:59Z", "date_only": false, "value": "2026-10-05T18:26:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-05T18:26:59Z", "date_only": false, "value": "2026-10-05T18:26:59+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T09:37:49Z", "date_only": false, "value": "2026-10-17T09:37:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-3836", "record": "UBUNTU-CVE-2026-3836", "field": "modified"}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.last_seen_at", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": true, "value": "2026-10-29", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-3836", "field": "evidence.0.details.observation_date", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-3836", "field": "status.status_updated_at", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T01:00:02Z", "date_only": false, "value": "2026-10-31T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-10-31T19:55:13.987Z", "anchors": {"origin": {"timestamp": "2026-03-09T14:39:13.177Z", "date_only": false, "value": "2026-03-09T14:39:13.177000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-03-09T14:39:13.177Z", "date_only": false, "value": "2026-03-09T14:39:13.177000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-03-09T12:34:00Z", "date_only": false, "value": "2026-03-09T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2026-07-31T22:07:41Z", "date_only": false, "value": "2026-07-31T22:07:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 12468507.823, "hours": 3463.474395277778, "days": 144.3114331365741, "min_seconds": 12468507.823, "max_seconds": 12468507.823, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-09T14:39:13.177Z", "date_only": false, "value": "2026-03-09T14:39:13.177000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-31T22:07:41Z", "date_only": false, "value": "2026-07-31T22:07:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 12476021.0, "hours": 3465.561388888889, "days": 144.3983912037037, "min_seconds": 12476021.0, "max_seconds": 12476021.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-09T12:34:00Z", "date_only": false, "value": "2026-03-09T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-31T22:07:41Z", "date_only": false, "value": "2026-07-31T22:07:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 2696734.823, "hours": 749.0930063888889, "days": 31.212208599537036, "min_seconds": 2696734.823, "max_seconds": 2696734.823, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-09T14:39:13.177Z", "date_only": false, "value": "2026-03-09T14:39:13.177000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 2704248.0, "hours": 751.18, "days": 31.299166666666668, "min_seconds": 2704248.0, "max_seconds": 2704248.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-09T12:34:00Z", "date_only": false, "value": "2026-03-09T12:34:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 2696734.823, "hours": 749.0930063888889, "days": 31.212208599537036, "min_seconds": 2696734.823, "max_seconds": 2696734.823, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-09T14:39:13.177Z", "date_only": false, "value": "2026-03-09T14:39:13.177000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": true, "seconds": -9771773.0, "hours": -2714.381388888889, "days": -113.09922453703703, "min_seconds": -9771773.0, "max_seconds": -9771773.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-07-31T22:07:41Z", "date_only": false, "value": "2026-07-31T22:07:41+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-3836", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "cfa22a55-3ac8-46bc-bb9d-e1411808358a", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-04-09T19:44:48Z", "date_only": false, "value": "2026-04-09T19:44:48+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:7349", "record": "RHSA-2026:7349", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}