{"metadata": {"vulnerability": "CVE-2026-4052", "count": 20, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-03-12T15:04:40.532Z", "date_only": false, "value": "2026-03-12T15:04:40.532Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-4052", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-03T08:02:33.735Z", "date_only": false, "value": "2026-11-03T08:02:33.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4052", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T08:02:33.735Z", "date_only": false, "value": "2026-11-03T08:02:33.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WSO2", "record": "CVE-2026-4052", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T08:05:13.620Z", "date_only": false, "value": "2026-11-03T08:05:13.620861Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117551471849588225", "record": "CVE-2026-4052", "field": "creation_timestamp", "uuid": "cf8d7a93-28a2-4da7-9862-28d2318a1ca3", "content": "CVE-2026-4052 Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.\nhttps://www.cve.org/CVERecord?id=CVE-2026-4052https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/#wso2 #WSO2 #WSO2APIManager #WSO2APIControlPlane #WSO2IdentityServerKeyManagerConnector(apim-km-wso2is)#CVE_2026_4052#bot", "url": "https://infosec.exchange/users/cve/statuses/117551471849588225"}, {"timestamp": "2026-11-03T08:17:15Z", "date_only": false, "value": "2026-11-03T08:17:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W63Q-QMF7-22JW", "record": "GHSA-W63Q-QMF7-22JW", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T08:17:15.530Z", "date_only": false, "value": "2026-11-03T08:17:15.530", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4052", "record": "FKIE_CVE-2026-4052", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T08:32:42.910Z", "date_only": false, "value": "2026-11-03T08:32:42.910311Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzfghlqkbt27", "record": "CVE-2026-4052", "field": "creation_timestamp", "uuid": "82d0563e-b64e-449e-8751-34b337d8d2c6", "content": "\ud83d\udd34 CVE-2026-4052 - Critical (9.8)\n\nThis issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Ma...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4052/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzfghlqkbt27"}, {"timestamp": "2026-11-03T09:00:04.325Z", "date_only": false, "value": "2026-11-03T09:00:04.325648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzfhyjlecd2y", "record": "CVE-2026-4052", "field": "creation_timestamp", "uuid": "2f47fcd5-4e1f-4198-9941-5a21486ef89d", "content": "CVE-2026-4052 - wso2 api manager\nWhen WSO2 Identity Server is used as the key manager and shares its database with the API Manager, a user who registers themselves can obtain a token from the Identity Server and then\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wso2 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzfhyjlecd2y"}, {"timestamp": "2026-11-03T09:00:36.023Z", "date_only": false, "value": "2026-11-03T09:00:36.023445Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117551689582727363", "record": "cve-2026-4052", "field": "creation_timestamp", "uuid": "df4678c7-cff6-44fb-b276-ed5644fd0202", "content": "CVE-2026-4052 (CRITICAL): WSO2 API Manager (4.1.0 \u2013 4.6.0, <1.8.8) has missing authorization \u2014 self-registered users can access System REST APIs if Identity Server is a Resident Key Manager. Upgrade to 1.8.8. https://radar.offseq.com/threat/cve-2026-4052-cwe-862-missing-authorization-in-wso2-wso2-api-manager-d1eaf36f3e90a714 #OffSeq #CVE #WSO2 #APIsecurity", "url": "https://infosec.exchange/users/offseq/statuses/117551689582727363"}, {"timestamp": "2026-11-03T09:00:37.901Z", "date_only": false, "value": "2026-11-03T09:00:37.901774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mzfhzj4b2t23", "record": "cve-2026-4052", "field": "creation_timestamp", "uuid": "9b94cd49-58bf-405d-90dd-af353cde56bd", "content": "CRITICAL: WSO2 API Manager (4.1.0 \u2013 4.6.0, <1.8.8) missing authorization bug lets self-registered users access System REST APIs. Patch to 1.8.8 now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-4052-cwe-862-missing-authorization-in-wso2-wso2-api-manager-d1eaf36f3e90a714 #OffSeq #CVE #APIsecurity", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mzfhzj4b2t23"}, {"timestamp": "2026-11-03T09:20:22.199Z", "date_only": false, "value": "2026-11-03T09:20:22.199133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6glvth2wrnuw", "record": "CVE-2026-4052", "field": "creation_timestamp", "uuid": "5d3688e5-f04f-4407-8167-102dc89cc537", "content": "CVE-2026-4052 - Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)\nCVE ID : CVE-2026-4052\n \n Published : Nov. 3, 2026, 8:17 a.m. | 47\u00a0minutes ago\n \n Description : This issue only impacts deployments where WSO2 Identity Server is c...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/d6glvth2wrnuw"}, {"timestamp": "2026-11-03T09:31:43Z", "date_only": false, "value": "2026-11-03T09:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W63Q-QMF7-22JW", "record": "GHSA-W63Q-QMF7-22JW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T09:31:43Z", "date_only": false, "value": "2026-11-03T09:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W63Q-QMF7-22JW", "record": "GHSA-W63Q-QMF7-22JW", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T10:07:22.409Z", "date_only": false, "value": "2026-11-03T10:07:22.409252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzflqujyv22p", "record": "CVE-2026-4052", "field": "creation_timestamp", "uuid": "e29f03a3-93db-459f-a326-b785da2cfb5b", "content": "\ud83d\udea8 CVE-2026-4052 \u2014 CVSS 9.8 CRITICAL\n\nThis issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-4052\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzflqujyv22p"}, {"timestamp": "2026-11-03T19:59:36.657Z", "date_only": false, "value": "2026-11-03T19:59:36.657454Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3zs6i5qwr66j3", "record": "CVE-2026-4052", "field": "creation_timestamp", "uuid": "7ddd9a8d-13f0-42a8-895b-5ad0ceb64529", "content": "\ud83d\udea8 CVE-2026-4052\nCVSS 9.8 / EPSS 0.36% / KEV: No\nTL;DR: This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered\u2026\nhttps://cvesentinel.com/report/CVE-2026-4052\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3zs6i5qwr66j3"}, {"timestamp": "2026-11-03T20:08:03.683Z", "date_only": false, "value": "2026-11-03T20:08:03.683649Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4052", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-03T20:08:03.683Z", "date_only": false, "value": "2026-11-03T20:08:03.683649Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4052", "record": "FKIE_CVE-2026-4052", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-03T20:08:17.165Z", "date_only": false, "value": "2026-11-03T20:08:17.165Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-4052", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-03T20:08:17.165Z", "date_only": false, "value": "2026-11-03T20:08:17.165Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4052", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T20:18:14.127Z", "date_only": false, "value": "2026-11-03T20:18:14.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4052", "record": "FKIE_CVE-2026-4052", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T13:20:10.998Z", "anchors": {"origin": {"timestamp": "2026-11-03T08:02:33.735Z", "date_only": false, "value": "2026-11-03T08:02:33.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4052", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T08:02:33.735Z", "date_only": false, "value": "2026-11-03T08:02:33.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4052", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 191857.263187, "hours": 53.29368421861111, "days": 2.220570175775463, "min_seconds": 191857.263187, "max_seconds": 191857.263187, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T08:02:33.735Z", "date_only": false, "value": "2026-11-03T08:02:33.735Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4052", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T13:20:10.998Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}