{"metadata": {"vulnerability": "CVE-2026-41003", "count": 44, "kinds": {"milestone": 16, "sighting": 2, "kev": 0, "other": 26}}, "data": [{"timestamp": "2026-04-16T02:19:12.970Z", "date_only": false, "value": "2026-04-16T02:19:12.970Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-41003", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0719", "record": "CERTFR-2026-AVI-0719", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "vulnerabilities.2.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-09T23:46:53.683Z", "date_only": false, "value": "2026-06-09T23:46:53.683Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41003", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0719", "record": "CERTFR-2026-AVI-0719", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0719", "record": "CERTFR-2026-AVI-0719", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0719", "record": "CERTFR-2026-AVI-0719", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-06-10T00:16:50Z", "date_only": false, "value": "2026-06-10T00:16:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3PJJ-QPW6-5FCM", "record": "GHSA-3PJJ-QPW6-5FCM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-10T00:16:50.307Z", "date_only": false, "value": "2026-06-10T00:16:50.307", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41003", "record": "FKIE_CVE-2026-41003", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-10T00:31:51Z", "date_only": false, "value": "2026-06-10T00:31:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3PJJ-QPW6-5FCM", "record": "GHSA-3PJJ-QPW6-5FCM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-10T04:00:47.809Z", "date_only": false, "value": "2026-06-10T04:00:47.809658Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvt6vxdwr24", "record": "CVE-2026-41003", "field": "creation_timestamp", "uuid": "2c325f98-8a13-40fc-9b6e-41de1c9626fa", "content": "\ud83d\udfe0 CVE-2026-41003 - High (7.6)\n\nAn attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary cod...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvt6vxdwr24"}, {"timestamp": "2026-06-10T09:35:57.231Z", "date_only": false, "value": "2026-06-10T09:35:57.231+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-10T18:07:53.818Z", "date_only": false, "value": "2026-06-10T18:07:53.818849Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41003", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-10T18:07:53.818Z", "date_only": false, "value": "2026-06-10T18:07:53.818849Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41003", "record": "FKIE_CVE-2026-41003", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-10T18:08:02.284Z", "date_only": false, "value": "2026-06-10T18:08:02.284Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41003", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-19T02:11:28.280Z", "date_only": false, "value": "2026-06-19T02:11:28.280293Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mombbn42ys2n", "record": "CVE-2026-41003", "field": "creation_timestamp", "uuid": "cf4a1f6d-7693-4d76-a9ee-c13ab361ec0a", "content": "Spring Security\u3068Spring WS\u304cXSS\u30fbSSRF\u30fbXXE\u30fbBSP\u691c\u8a3c\u30d0\u30a4\u30d1\u30b9\u3092\u542b\u3080\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-41003,CVE-2026-40999)\u4ed6\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mombbn42ys2n"}, {"timestamp": "2026-06-27T21:24:40.807Z", "date_only": false, "value": "2026-06-27T21:24:40.807Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-41003", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-27T21:24:40.807Z", "date_only": false, "value": "2026-06-27T21:24:40.807Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2026-41003", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-23T09:10:00.113Z", "date_only": false, "value": "2026-07-23T09:10:00.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41003", "record": "FKIE_CVE-2026-41003", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-BQ50387", "record": "CLEANSTART-2026-BQ50387", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-OD16779", "record": "CLEANSTART-2026-OD16779", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-12T17:04:10Z", "date_only": false, "value": "2026-08-12T17:04:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3PJJ-QPW6-5FCM", "record": "GHSA-3PJJ-QPW6-5FCM", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T05:00:37Z", "date_only": false, "value": "2026-09-09T05:00:37Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WV98548", "record": "CLEANSTART-2026-WV98548", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-10T02:39:42.173Z", "date_only": false, "value": "2026-09-10T02:39:42.173830Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-AM39668", "record": "CLEANSTART-2026-AM39668", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T09:56:37.022Z", "date_only": false, "value": "2026-09-18T09:56:37.022882Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-LD95460", "record": "CLEANSTART-2026-LD95460", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-AM39668", "record": "CLEANSTART-2026-AM39668", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-BQ50387", "record": "CLEANSTART-2026-BQ50387", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-OD16779", "record": "CLEANSTART-2026-OD16779", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-AM39668", "record": "CLEANSTART-2026-AM39668", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-BQ50387", "record": "CLEANSTART-2026-BQ50387", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-OD16779", "record": "CLEANSTART-2026-OD16779", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-01T00:35:29.914Z", "date_only": false, "value": "2026-10-01T00:35:29.914311Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-RR80761", "record": "CLEANSTART-2026-RR80761", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-08T15:57:53Z", "date_only": false, "value": "2026-10-08T15:57:53Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-RR80761", "record": "CLEANSTART-2026-RR80761", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-09T03:32:23Z", "date_only": false, "value": "2026-10-09T03:32:23Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-LD95460", "record": "CLEANSTART-2026-LD95460", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-09T11:33:46Z", "date_only": false, "value": "2026-10-09T11:33:46Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CP43457", "record": "CLEANSTART-2026-CP43457", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-10T00:36:50.581Z", "date_only": false, "value": "2026-10-10T00:36:50.581960Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CP43457", "record": "CLEANSTART-2026-CP43457", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-31T11:53:26.674Z", "date_only": false, "value": "2026-10-31T11:53:26.674221Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WV98548", "record": "CLEANSTART-2026-WV98548", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}], "metrics": {"as_of": "2026-11-05T00:17:29.703Z", "anchors": {"origin": {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 12795449.703575, "hours": 3554.291584326389, "days": 148.0954826802662, "min_seconds": 12795449.703575, "max_seconds": 12795449.703575, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1869", "record": "WID-SEC-W-2026-1869", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-05T00:17:29.703Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}