{"metadata": {"vulnerability": "CVE-2026-39989", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-04-08T02:30:26.921Z", "date_only": false, "value": "2026-04-08T02:30:26.921Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-39989", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T09:30:42.076Z", "date_only": false, "value": "2026-10-15T09:30:42.076Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39989", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T09:30:42.076Z", "date_only": false, "value": "2026-10-15T09:30:42.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / qnap", "record": "CVE-2026-39989", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T09:47:14.558Z", "date_only": false, "value": "2026-10-15T09:47:14.558374Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117444289105510204", "record": "CVE-2026-39989", "field": "creation_timestamp", "uuid": "ccc5d4d6-e4a4-4df1-b917-a9be0359518d", "content": "CVE-2026-39989 SSRF in QNAP Download Station A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data.\nWe have already fixed the vulnerability in the following version:Download Station 5.10.1.312 and laterDownload Station 5.11.2.321 and later\nhttps://www.cve.org/CVERecord?id=CVE-2026-39989https://www.qnap.com/en/app_releasenotes/list.php?app_choose=DownloadStation#QNAPSystemsInc. #DownloadStation#CVE_2026_39989#bot", "url": "https://infosec.exchange/users/cve/statuses/117444289105510204"}, {"timestamp": "2026-10-15T10:17:13Z", "date_only": false, "value": "2026-10-15T10:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GXH4-V8PP-4J5F", "record": "GHSA-GXH4-V8PP-4J5F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T10:17:13.950Z", "date_only": false, "value": "2026-10-15T10:17:13.950", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39989", "record": "FKIE_CVE-2026-39989", "field": "published"}, {"timestamp": "2026-10-15T12:31:01Z", "date_only": false, "value": "2026-10-15T12:31:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GXH4-V8PP-4J5F", "record": "GHSA-GXH4-V8PP-4J5F", "field": "published"}, {"timestamp": "2026-10-15T12:31:01Z", "date_only": false, "value": "2026-10-15T12:31:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GXH4-V8PP-4J5F", "record": "GHSA-GXH4-V8PP-4J5F", "field": "modified"}, {"timestamp": "2026-10-15T13:39:44.666Z", "date_only": false, "value": "2026-10-15T13:39:44.666800Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39989", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T13:39:44.666Z", "date_only": false, "value": "2026-10-15T13:39:44.666800Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39989", "record": "FKIE_CVE-2026-39989", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T13:43:27.205Z", "date_only": false, "value": "2026-10-15T13:43:27.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-39989", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T13:43:27.205Z", "date_only": false, "value": "2026-10-15T13:43:27.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39989", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:32:39.893Z", "date_only": false, "value": "2026-10-15T16:32:39.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39989", "record": "FKIE_CVE-2026-39989", "field": "lastModified"}]}