{"metadata": {"vulnerability": "CVE-2026-40412", "count": 28, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 17}, "linked_omitted": 0}, "data": [{"timestamp": "2026-04-13T00:27:50.798Z", "date_only": false, "value": "2026-04-13T00:27:50.798Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-40412", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-21T07:00:00Z", "date_only": false, "value": "2026-05-21T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-21T07:00:00Z", "date_only": false, "value": "2026-05-21T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-21T14:00:00Z", "date_only": false, "value": "2026-05-21T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-40412", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1649", "record": "WID-SEC-W-2026-1649", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1649", "record": "WID-SEC-W-2026-1649", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1649", "record": "WID-SEC-W-2026-1649", "field": "vulnerabilities.4.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-22T01:25:43.826Z", "date_only": false, "value": "2026-05-22T01:25:43.826Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-22T22:03:03.939Z", "date_only": false, "value": "2026-05-22T22:03:03.939Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-40412", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-22T23:16:51Z", "date_only": false, "value": "2026-05-22T23:16:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-46M7-MPP9-R4V3", "record": "GHSA-46M7-MPP9-R4V3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-22T23:16:51.363Z", "date_only": false, "value": "2026-05-22T23:16:51.363", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40412", "record": "FKIE_CVE-2026-40412", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-23T17:00:12.881Z", "date_only": false, "value": "2026-05-23T17:00:12.881868Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116624956555372744", "record": "cve-2026-40412", "field": "creation_timestamp", "uuid": "5d01fc3c-3021-4e83-9084-704d9e8710f6", "content": "\u26a0\ufe0f CRITICAL: CVE-2026-40412 in Azure Orbital Spatio lets attackers upload dangerous files and execute code remotely. Cloud users should ensure Microsoft\u2019s official fix is applied. Full details: https://radar.offseq.com/threat/cve-2026-40412-cwe-434-unrestricted-upload-of-file-473eb82a #OffSeq #Azure #Vuln #CloudSecurity", "url": "https://infosec.exchange/users/offseq/statuses/116624956555372744"}, {"timestamp": "2026-05-25T22:00:00Z", "date_only": false, "value": "2026-05-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1649", "record": "WID-SEC-W-2026-1649", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-05-25T22:00:00Z", "date_only": false, "value": "2026-05-25T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1649", "record": "WID-SEC-W-2026-1649", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-26T10:36:27.305Z", "date_only": false, "value": "2026-05-26T10:36:27.305507Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40412", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-26T10:36:27.305Z", "date_only": false, "value": "2026-05-26T10:36:27.305507Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40412", "record": "FKIE_CVE-2026-40412", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-26T10:56:26.336Z", "date_only": false, "value": "2026-05-26T10:56:26.336Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40412", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-26T12:17:53.859Z", "date_only": false, "value": "2026-05-26T12:17:53.859+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1649", "record": "WID-SEC-W-2026-1649", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-26T13:30:22Z", "date_only": false, "value": "2026-05-26T13:30:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-46M7-MPP9-R4V3", "record": "GHSA-46M7-MPP9-R4V3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T13:30:22Z", "date_only": false, "value": "2026-05-26T13:30:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-46M7-MPP9-R4V3", "record": "GHSA-46M7-MPP9-R4V3", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-27T18:37:07.969Z", "date_only": false, "value": "2026-05-27T18:37:07.969252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmu5n3fhnp2p", "record": "CVE-2026-40412", "field": "creation_timestamp", "uuid": "c294fc82-230f-4d64-8617-1f46ab0b7dd1", "content": "\ud83d\udccc CVE-2026-40412 - Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-40412", "url": "https://bsky.app/profile/cyberhub.blog/post/3mmu5n3fhnp2p"}, {"timestamp": "2026-05-31T09:00:42.894Z", "date_only": false, "value": "2026-05-31T09:00:42.894473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mn57byqwvb27", "record": "cve-2026-40412", "field": "creation_timestamp", "uuid": "0022da20-10fd-46f5-981a-0be7d5c89a38", "content": "\ud83d\udea8 Krytyczna luka RCE w Azure Orbital Spatio (CVE-2026-40412)\n\nMicrosoft za\u0142ata\u0142 krytyczn\u0105 luk\u0119 RCE w us\u0142udze Azure Orbital Spatio, ocenion\u0105 na 10.0 w skali CVSS. Atak nie wymaga\u0142 uwierzytelnienia\n\nhttps://cyberowi.pl/krytyczna-luka-rce-w-azure-orbital-spatio-cve-2026-40412/\n\n#cyberbezpieczenstwo", "url": "https://bsky.app/profile/cyberowi.pl/post/3mn57byqwvb27"}, {"timestamp": "2026-06-17T21:03:45.084Z", "date_only": false, "value": "2026-06-17T21:03:45.084284Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7mlvpli25", "record": "CVE-2026-40412", "field": "creation_timestamp", "uuid": "7642ac26-9b18-4b56-b6aa-806b40b301d0", "content": "\ud83d\udea8 HIGH: CVE-2026-40412\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nUnrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Orbital Spatio\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: unknown vector\nImpact: varies\n\n\u2705 WHA", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7mlvpli25"}, {"timestamp": "2026-06-22T00:36:01.545Z", "date_only": false, "value": "2026-06-22T00:36:01.545202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnduakch2f", "record": "CVE-2026-40412", "field": "creation_timestamp", "uuid": "289fa4be-a9d3-4435-a2de-79503be90d82", "content": "\ud83d\udea8  ALERT: CVE-2026-40412\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nUnrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Orbital Spatio\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnduakch2f"}, {"timestamp": "2026-07-23T11:10:00.120Z", "date_only": false, "value": "2026-07-23T11:10:00.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40412", "record": "FKIE_CVE-2026-40412", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-10T15:12:26.882Z", "date_only": false, "value": "2026-08-10T15:12:26.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-40412", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:12:26.882Z", "date_only": false, "value": "2026-08-10T15:12:26.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-40412", "field": "containers.cna.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-11-13T03:19:33.202Z", "anchors": {"origin": {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 15970773.202377, "hours": 4436.325889549167, "days": 184.84691206454863, "min_seconds": 15970773.202377, "max_seconds": 15970773.202377, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-12T07:00:00Z", "date_only": false, "value": "2026-05-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40412", "record": "MSRC_CVE-2026-40412", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-13T03:19:33.202Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}