{"metadata": {"vulnerability": "CVE-2026-4035", "count": 23, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-03-12T02:17:42.523Z", "date_only": false, "value": "2026-03-12T02:17:42.523Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-4035", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-03T07:18:08.512Z", "date_only": false, "value": "2026-06-03T07:18:08.512Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-4035", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-06-03T07:18:08.512Z", "date_only": false, "value": "2026-06-03T07:18:08.512Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4035", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-03T07:18:08.512Z", "date_only": false, "value": "2026-06-03T07:18:08.512Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-4035", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-06-03T07:18:08.512Z", "date_only": false, "value": "2026-06-03T07:18:08.512Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "CVE-2026-4035", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-03T09:00:55.993Z", "date_only": false, "value": "2026-06-03T09:00:55.993Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-4035", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-06-03T09:16:13Z", "date_only": false, "value": "2026-06-03T09:16:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G35P-PX32-WHV6", "record": "GHSA-G35P-PX32-WHV6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-03T09:16:13.083Z", "date_only": false, "value": "2026-06-03T09:16:13.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4035", "record": "FKIE_CVE-2026-4035", "field": "published"}, {"timestamp": "2026-06-03T09:16:13.083Z", "date_only": false, "value": "2026-06-03T09:16:13.083Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-2222", "record": "PYSEC-2026-2222", "field": "published"}, {"timestamp": "2026-06-03T09:30:28Z", "date_only": false, "value": "2026-06-03T09:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G35P-PX32-WHV6", "record": "GHSA-G35P-PX32-WHV6", "field": "published"}, {"timestamp": "2026-06-03T11:39:37.057Z", "date_only": false, "value": "2026-06-03T11:39:37.057469Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnezkx6wpd2d", "record": "CVE-2026-4035", "field": "creation_timestamp", "uuid": "c1818672-a66e-4c23-ae01-a524b41fe60b", "content": "CVE-2026-4035 - Environment Variable Resolution Vulnerability in mlflow/mlflow\nCVE ID : CVE-2026-4035\n \n Published : June 3, 2026, 9:16 a.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnezkx6wpd2d"}, {"timestamp": "2026-06-03T13:10:20.303Z", "date_only": false, "value": "2026-06-03T13:10:20.303201Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4035", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-03T13:10:20.303Z", "date_only": false, "value": "2026-06-03T13:10:20.303201Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4035", "record": "FKIE_CVE-2026-4035", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-03T13:10:24.407Z", "date_only": false, "value": "2026-06-03T13:10:24.407Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4035", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-04T05:02:33.901Z", "date_only": false, "value": "2026-06-04T05:02:33.901938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtttwgfg25", "record": "CVE-2026-4035", "field": "creation_timestamp", "uuid": "90f25511-d64c-47a0-a1fe-36e2a4619426", "content": "\ud83d\udd34 CVE-2026-4035 - Critical (9.1)\n\nA vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environmen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4035/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtttwgfg25"}, {"timestamp": "2026-06-05T08:52:23.138Z", "date_only": false, "value": "2026-06-05T08:52:23.138Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2026-4035", "record": "BIT-MLFLOW-2026-4035", "field": "published"}, {"timestamp": "2026-06-29T20:04:29.173Z", "date_only": false, "value": "2026-06-29T20:04:29.173619Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mphbvobves2f", "record": "CVE-2026-4035", "field": "creation_timestamp", "uuid": "2923e006-0807-48ff-bae9-0777aafdebc7", "content": "\u300cMLflow\u300d\u306b\u30a2\u30af\u30bb\u30b9\u30ad\u30fc\u306a\u3069\u6a5f\u5bc6\u60c5\u5831\u304c\u6d41\u51fa\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\n\n\u6a5f\u68b0\u5b66\u7fd2\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u7ba1\u7406\u30c4\u30fc\u30eb\u300cMLflow\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30af\u30bb\u30b9\u30ad\u30fc\u3001\u6697\u53f7\u5316\u9375\u306a\u3069\u91cd\u8981\u306a\u60c5\u5831\u304c\u5916\u90e8\u306b\u6d41\u51fa\u3059\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u6a5f\u5bc6\u60c5\u5831\u304c\u6f0f\u6d29\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-4035\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\u300c\u540c3.11.0\u300d\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u5916\u90e8\u304b\u3089\u300cAI Gateway\u300d\u306eAPI\u7d4c\u7531\u3067\u3001\u300cMLflow\u30b5\u30fc\u30d0\u300d\u306e\u5b9f\u884c\u30d7\u30ed\u30bb\u30b9\u306b\u308f\u305f\u3055\u308c\u305f\u74b0\u5883\u5909\u6570\u3092\u89e3\u6c7a\u3055\u305b\u3001\u653b\u6483\u8005\u304c\u6307\u5b9a\u3057\u305f\u4e0a\u6d41\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u8a8d\u8a3c\u30d8\u30c3\u30c0\u3068\u3057\u3066\u9001\u4fe1\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002\n\n\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u5927\u898f\u6a21\u8a00\u8a9e\u30e2\u30c7\u30eb\uff08LLM\uff09\u30d7...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mphbvobves2f"}, {"timestamp": "2026-07-10T19:31:54Z", "date_only": false, "value": "2026-07-10T19:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G35P-PX32-WHV6", "record": "GHSA-G35P-PX32-WHV6", "field": "modified"}, {"timestamp": "2026-07-13T05:49:59.359Z", "date_only": false, "value": "2026-07-13T05:49:59.359013Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-2222", "record": "PYSEC-2026-2222", "field": "modified"}, {"timestamp": "2026-08-14T12:04:28.457Z", "date_only": false, "value": "2026-08-14T12:04:28.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-4035", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-14T12:04:28.457Z", "date_only": false, "value": "2026-08-14T12:04:28.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-4035", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-14T13:19:00.193Z", "date_only": false, "value": "2026-08-14T13:19:00.193", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4035", "record": "FKIE_CVE-2026-4035", "field": "lastModified"}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2026-4035", "record": "BIT-MLFLOW-2026-4035", "field": "modified"}]}