{"metadata": {"vulnerability": "CVE-2026-40217", "count": 120, "kinds": {"milestone": 21, "sighting": 8, "kev": 0, "other": 91}}, "data": [{"timestamp": "2026-01-16T19:03:36.442Z", "date_only": false, "value": "2026-01-16T19:03:36.442000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-01-16T20:03:33.790Z", "date_only": false, "value": "2026-01-16T20:03:33.790513+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-03-20T20:22:59.090Z", "date_only": false, "value": "2026-03-20T20:22:59.090000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-03-20T21:01:35.498Z", "date_only": false, "value": "2026-03-20T21:01:35.498935+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-03-26T18:59:38Z", "date_only": false, "value": "2026-03-26T18:59:38+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-03-26T20:03:28.427Z", "date_only": false, "value": "2026-03-26T20:03:28.427630+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-04-06T16:35:28.974Z", "date_only": false, "value": "2026-04-06T16:35:28.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-06T16:47:02.065Z", "date_only": false, "value": "2026-04-06T16:47:02.065000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-04-06T17:01:57.502Z", "date_only": false, "value": "2026-04-06T17:01:57.502231+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-04-06T18:01:07.517Z", "date_only": false, "value": "2026-04-06T18:01:07.517951+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-04-07T19:10:44.916Z", "date_only": false, "value": "2026-04-07T19:10:44.916000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-07T19:12:47.577Z", "date_only": false, "value": "2026-04-07T19:12:47.577000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-04-07T20:02:11.316Z", "date_only": false, "value": "2026-04-07T20:02:11.316801+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-04-07T22:00:54.172Z", "date_only": false, "value": "2026-04-07T22:00:54.172000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-07T23:01:18.313Z", "date_only": false, "value": "2026-04-07T23:01:18.313921+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T20:49:41.967Z", "date_only": false, "value": "2026-04-08T20:49:41.967000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-04-08T22:00:59.416Z", "date_only": false, "value": "2026-04-08T22:00:59.416053+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-04-09T14:31:46.067Z", "date_only": false, "value": "2026-04-09T14:31:46.067000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-09T15:01:48.111Z", "date_only": false, "value": "2026-04-09T15:01:48.111177+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-04-10T13:43:22.641Z", "date_only": false, "value": "2026-04-10T13:43:22.641Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-40217", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40217", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-40217", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40217", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-40217", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-10T14:16:36Z", "date_only": false, "value": "2026-04-10T14:16:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3926-2JVF-FG29", "record": "GHSA-3926-2JVF-FG29", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-10T14:16:36.307Z", "date_only": false, "value": "2026-04-10T14:16:36.307", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40217", "record": "FKIE_CVE-2026-40217", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40217", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-04-10T15:17:37Z", "date_only": false, "value": "2026-04-10T15:17:37.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BHjpIBo0iRlJvCTjCc1tWATK3ONpTPYFFDHwGYF-bIOT41U", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "fcd3a608-5d5c-41f7-8d3d-ccbdfd3d5da7"}, {"timestamp": "2026-04-10T15:31:57Z", "date_only": false, "value": "2026-04-10T15:31:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3926-2JVF-FG29", "record": "GHSA-3926-2JVF-FG29", "field": "published"}, {"timestamp": "2026-04-10T15:37:09.730Z", "date_only": false, "value": "2026-04-10T15:37:09.730534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5nnyqjgd2j", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "17b887a5-7c47-4bba-b246-41756975b683", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5nnyqjgd2j"}, {"timestamp": "2026-04-11T10:00:21.433Z", "date_only": false, "value": "2026-04-11T10:00:21.433893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7lcnmbmh2w", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "65e9e1d3-5451-4159-a24a-c41a41e7c142", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7lcnmbmh2w"}, {"timestamp": "2026-04-15T22:53:56.147Z", "date_only": false, "value": "2026-04-15T22:53:56.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-04-16T00:00:49.590Z", "date_only": false, "value": "2026-04-16T00:00:49.590876+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-04-20T16:25:12.302Z", "date_only": false, "value": "2026-04-20T16:25:12.302000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-04-20T17:02:18.205Z", "date_only": false, "value": "2026-04-20T17:02:18.205732+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-04-24T17:10:33.869Z", "date_only": false, "value": "2026-04-24T17:10:33.869000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-04-24T18:01:10.709Z", "date_only": false, "value": "2026-04-24T18:01:10.709072+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-04-28T00:07:07.902Z", "date_only": false, "value": "2026-04-28T00:07:07.902916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkjc3k7ttb2z", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "d999fdba-3fdb-47d4-b2c2-b4c732f8508f", "url": "https://bsky.app/profile/cyberhub.blog/post/3mkjc3k7ttb2z"}, {"timestamp": "2026-05-04T19:31:57.253Z", "date_only": false, "value": "2026-05-04T19:31:57.253000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-04T20:01:14.938Z", "date_only": false, "value": "2026-05-04T20:01:14.938426+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1408", "record": "WID-SEC-W-2026-1408", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1408", "record": "WID-SEC-W-2026-1408", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1408", "record": "WID-SEC-W-2026-1408", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-08T03:35:16.758Z", "date_only": false, "value": "2026-05-08T03:35:16.758000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-08T04:02:12.169Z", "date_only": false, "value": "2026-05-08T04:02:12.169174+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-11T16:17:14Z", "date_only": false, "value": "2026-05-11T16:17:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3926-2JVF-FG29", "record": "GHSA-3926-2JVF-FG29", "field": "modified"}, {"timestamp": "2026-05-11T16:17:14Z", "date_only": false, "value": "2026-05-11T16:17:14Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-3926-2JVF-FG29", "record": "GHSA-3926-2JVF-FG29", "field": "withdrawn"}, {"timestamp": "2026-05-11T16:17:23Z", "date_only": false, "value": "2026-05-11T16:17:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WXXX-GVQV-XP7P", "record": "GHSA-WXXX-GVQV-XP7P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-11T16:17:23Z", "date_only": false, "value": "2026-05-11T16:17:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WXXX-GVQV-XP7P", "record": "GHSA-WXXX-GVQV-XP7P", "field": "modified"}, {"timestamp": "2026-05-11T17:10:29Z", "date_only": false, "value": "2026-05-11T17:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/37ecce29751bae48629dbc52c1e489d5", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "720c1245-8d16-42c2-a2c5-4b4d8ebc0657", "content": "# CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-05-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-40217\n\n## Summary\nLiteLLM, an open-source LLM proxy, contains a critical sandbox escape vulnerability in its guardrail testing endpoint. An authenticated attacker can bypass regex-based source-code filtering by leveraging Python object hierarchy traversal and runtime bytecode manipulation, leading to arbitrary code execution as the process owner.\n\n## TL;DR\nAn authenticated RCE vulnerability exists in LiteLLM's `/guardrails/test_custom_code` endpoint. The custom Python sandbox relies on flawed regex filtering, allowing attackers to rewrite function bytecode and access restricted built-ins to execute system commands.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.8\n- **EPSS Score**: 0.0024\n- **Impact**: Remote Code Execution\n- **Exploit Status**: Proof of Concept (PoC)\n\n## Affected Systems\n\n- LiteLLM Proxy\n- LiteLLM Docker Containers\n- **LiteLLM**: <= 2026-04-08 (Fixed in: `v1.83.10-stable`)\n\n## Mitigation\n\n- Software Update\n- Network Segmentation\n- Privilege Reduction\n- URI Blocking\n\n**Remediation Steps:**\n1. Identify all running instances of the LiteLLM proxy within the infrastructure.\n2. Pull the updated Docker image for LiteLLM version v1.83.10-stable or higher.\n3. Redeploy the LiteLLM containers specifying an unprivileged user via the Docker `--user` flag.\n4. Configure the upstream reverse proxy (e.g., Nginx or Traefik) to block POST requests targeting `/guardrails/test_custom_code`.\n5. Verify that the management port (default 4000) is unreachable from the public internet.\n\n## References\n\n- [X41 D-Sec Security Advisory](https://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/)\n- [SentinelOne Vulnerability Database](https://www.sentinelone.com/vulnerability-database/cve-2026-40217/)\n- [LiteLLM Release v1.83.10-stable](https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stable)\n- [CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-40217)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-40217) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/37ecce29751bae48629dbc52c1e489d5"}, {"timestamp": "2026-05-19T21:00:04Z", "date_only": false, "value": "2026-05-19T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "93e96dba-3704-4f6c-8592-c285c6fc101c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-26T21:54:54.393Z", "date_only": false, "value": "2026-05-26T21:54:54.393000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-05-26T23:01:03.204Z", "date_only": false, "value": "2026-05-26T23:01:03.204374+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.3.threats.0.date"}, {"timestamp": "2026-06-08T12:29:23.792Z", "date_only": false, "value": "2026-06-08T12:29:23.792179Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AZ09261", "record": "CLEANSTART-2026-AZ09261", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-08T12:29:26.603Z", "date_only": false, "value": "2026-06-08T12:29:26.603264Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MR94452", "record": "CLEANSTART-2026-MR94452", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1408", "record": "WID-SEC-W-2026-1408", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1408", "record": "WID-SEC-W-2026-1408", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-10T07:36:15.922Z", "date_only": false, "value": "2026-06-10T07:36:15.922+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1408", "record": "WID-SEC-W-2026-1408", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-15T00:00:00Z", "date_only": false, "value": "2026-06-15T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40217", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-15T00:00:00Z", "date_only": false, "value": "2026-06-15T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40217", "record": "FKIE_CVE-2026-40217", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-16T03:56:08.739Z", "date_only": false, "value": "2026-06-16T03:56:08.739Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40217", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-25T18:09:56Z", "date_only": false, "value": "2026-06-25T18:09:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-25T18:09:56Z", "date_only": false, "value": "2026-06-25T18:09:56+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-25T18:09:56Z", "date_only": false, "value": "2026-06-25T18:09:56+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "vulnerabilities.2.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-09T09:57:39.854Z", "date_only": false, "value": "2026-07-09T09:57:39.854516Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WU03167", "record": "CLEANSTART-2026-WU03167", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-09T09:58:21.946Z", "date_only": false, "value": "2026-07-09T09:58:21.946418Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WQ85001", "record": "CLEANSTART-2026-WQ85001", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T06:46:17.224Z", "date_only": false, "value": "2026-07-13T06:46:17.224492Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-NL78203", "record": "CLEANSTART-2026-NL78203", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T06:46:52.849Z", "date_only": false, "value": "2026-07-13T06:46:52.849731Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IR98353", "record": "CLEANSTART-2026-IR98353", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T15:15:44.443Z", "date_only": false, "value": "2026-07-13T15:15:44.443320Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-2601", "record": "PYSEC-2026-2601", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T16:04:36.768Z", "date_only": false, "value": "2026-07-13T16:04:36.768028Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-2601", "record": "PYSEC-2026-2601", "field": "modified"}, {"timestamp": "2026-07-15T01:01:14.184Z", "date_only": false, "value": "2026-07-15T01:01:14.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-40217", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-15T01:01:14.184Z", "date_only": false, "value": "2026-07-15T01:01:14.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40217", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-21T10:36:45.569Z", "date_only": false, "value": "2026-07-21T10:36:45.569138Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-HP19968", "record": "CLEANSTART-2026-HP19968", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CW50457", "record": "CLEANSTART-2026-CW50457", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MS00856", "record": "CLEANSTART-2026-MS00856", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-13T16:35:12Z", "date_only": false, "value": "2026-08-13T16:35:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2026-40217", "record": "BREW-AIDER-CVE-2026-40217", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-13T17:32:08Z", "date_only": false, "value": "2026-08-13T17:32:08Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-RAWDOG-CVE-2026-40217", "record": "BREW-RAWDOG-CVE-2026-40217", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-22T15:00:06.125Z", "date_only": false, "value": "2026-08-22T15:00:06.125311Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "2caf64b5-1a8d-46ac-8493-cff2a2fd9d86", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml"}, {"timestamp": "2026-08-27T05:53:53.947Z", "date_only": false, "value": "2026-08-27T05:53:53.947837Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sentinelanalysis.bsky.social/post/3mu25uzaqvu2e", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "de1e78b1-e0c7-43fa-aec2-76fc21219d76", "content": "Here's the uncomfortable part: while the EU writes rules, the middleware running your agents is the new attack surface. LiteLLM CVE-2026-40217 and CVE-2026-49468 are being exploited right now.", "url": "https://bsky.app/profile/sentinelanalysis.bsky.social/post/3mu25uzaqvu2e"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.13.threats.0.date"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IR98353", "record": "CLEANSTART-2026-IR98353", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-NL78203", "record": "CLEANSTART-2026-NL78203", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WQ85001", "record": "CLEANSTART-2026-WQ85001", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WU03167", "record": "CLEANSTART-2026-WU03167", "field": "modified"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IR98353", "record": "CLEANSTART-2026-IR98353", "field": "withdrawn"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-NL78203", "record": "CLEANSTART-2026-NL78203", "field": "withdrawn"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-WQ85001", "record": "CLEANSTART-2026-WQ85001", "field": "withdrawn"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-WU03167", "record": "CLEANSTART-2026-WU03167", "field": "withdrawn"}, {"timestamp": "2026-09-18T09:46:06.914Z", "date_only": false, "value": "2026-09-18T09:46:06.914749Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IM10707", "record": "CLEANSTART-2026-IM10707", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AZ09261", "record": "CLEANSTART-2026-AZ09261", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CW50457", "record": "CLEANSTART-2026-CW50457", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-HP19968", "record": "CLEANSTART-2026-HP19968", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MR94452", "record": "CLEANSTART-2026-MR94452", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MS00856", "record": "CLEANSTART-2026-MS00856", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AZ09261", "record": "CLEANSTART-2026-AZ09261", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-CW50457", "record": "CLEANSTART-2026-CW50457", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-HP19968", "record": "CLEANSTART-2026-HP19968", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MR94452", "record": "CLEANSTART-2026-MR94452", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MS00856", "record": "CLEANSTART-2026-MS00856", "field": "withdrawn"}, {"timestamp": "2026-10-08T00:29:14Z", "date_only": false, "value": "2026-10-08T00:29:14Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2026-40217", "record": "BREW-AIDER-CVE-2026-40217", "field": "modified"}, {"timestamp": "2026-10-08T19:47:04Z", "date_only": false, "value": "2026-10-08T19:47:04Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IM10707", "record": "CLEANSTART-2026-IM10707", "field": "modified"}, {"timestamp": "2026-10-09T16:38:56Z", "date_only": false, "value": "2026-10-09T16:38:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-09T16:38:56Z", "date_only": false, "value": "2026-10-09T16:38:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T16:38:56Z", "date_only": false, "value": "2026-10-09T16:38:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:30056", "record": "RHSA-2026:30056", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T14:57:20Z", "date_only": false, "value": "2026-10-14T14:57:20Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-RAWDOG-CVE-2026-40217", "record": "BREW-RAWDOG-CVE-2026-40217", "field": "modified"}, {"timestamp": "2026-10-26T21:10:00.170Z", "date_only": false, "value": "2026-10-26T21:10:00.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40217", "record": "FKIE_CVE-2026-40217", "field": "lastModified"}, {"timestamp": "2026-10-30T07:47:49Z", "date_only": false, "value": "2026-10-30T07:47:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-30T07:47:49Z", "date_only": false, "value": "2026-10-30T07:47:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-30T07:47:49Z", "date_only": false, "value": "2026-10-30T07:47:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-01T08:23:21.287Z", "anchors": {"origin": {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-05-19T21:00:04Z", "date_only": false, "value": "2026-05-19T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "93e96dba-3704-4f6c-8592-c285c6fc101c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 3395800.853, "hours": 943.2780147222222, "days": 39.30325061342593, "min_seconds": 3395800.853, "max_seconds": 3395800.853, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-05-19T21:00:04Z", "date_only": false, "value": "2026-05-19T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "93e96dba-3704-4f6c-8592-c285c6fc101c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 5191694.937, "hours": 1442.1374825, "days": 60.08906177083333, "min_seconds": 5191694.937, "max_seconds": 5191694.937, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 5196380.853, "hours": 1443.4391258333333, "days": 60.143296909722224, "min_seconds": 5196380.853, "max_seconds": 5196380.853, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 5191694.937, "hours": 1442.1374825, "days": 60.08906177083333, "min_seconds": 5191694.937, "max_seconds": 5191694.937, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 1800580.0, "hours": 500.1611111111111, "days": 20.840046296296297, "min_seconds": 1800580.0, "max_seconds": 1800580.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-19T21:00:04Z", "date_only": false, "value": "2026-05-19T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "record": "CVE-2026-40217", "field": "creation_timestamp", "uuid": "93e96dba-3704-4f6c-8592-c285c6fc101c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}