{"metadata": {"vulnerability": "CVE-2026-41203", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-04-18T02:51:52.974Z", "date_only": false, "value": "2026-04-18T02:51:52.974Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-41203", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-22T17:29:58Z", "date_only": false, "value": "2026-04-22T17:29:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XV3R-VR59-95RG", "record": "GHSA-XV3R-VR59-95RG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-07T03:19:45.786Z", "date_only": false, "value": "2026-05-07T03:19:45.786Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41203", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-07T03:19:45.786Z", "date_only": false, "value": "2026-05-07T03:19:45.786Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-41203", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T04:16:27Z", "date_only": false, "value": "2026-05-07T04:16:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XV3R-VR59-95RG", "record": "GHSA-XV3R-VR59-95RG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-07T04:16:27.670Z", "date_only": false, "value": "2026-05-07T04:16:27.670", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41203", "record": "FKIE_CVE-2026-41203", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-07T05:45:13.498Z", "date_only": false, "value": "2026-05-07T05:45:13.498081Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaj6f7qlo2k", "record": "CVE-2026-41203", "field": "creation_timestamp", "uuid": "4067f22b-a36c-4e71-bb6f-cdbcc6262477", "content": "CVE-2026-41203 - ci4ms Theme::upload is vulnerable to Zip Slip leading to RCE\nCVE ID : CVE-2026-41203\n \n Published : May 7, 2026, 3:19 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architectu...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaj6f7qlo2k"}, {"timestamp": "2026-05-07T07:30:31.922Z", "date_only": false, "value": "2026-05-07T07:30:31.922745Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlap2odhxt2o", "record": "cve-2026-41203", "field": "creation_timestamp", "uuid": "bd1fbd73-ca32-46b7-8611-f98d7f2162e8", "content": "Critical ci4ms path traversal \ud83d\udee1\ufe0f (pre-0.31.5.0): Authenticated users can upload ZIPs to write files anywhere, risking RCE. Upgrade to 0.31.5.0+ now! https://radar.offseq.com/threat/cve-2026-41203-cwe-22-improper-limitation-of-a-pat-c63ffac4 #OffSeq #RCE #PatchNow", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mlap2odhxt2o"}, {"timestamp": "2026-05-07T07:30:41.075Z", "date_only": false, "value": "2026-05-07T07:30:41.075310Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116532119400079005", "record": "cve-2026-41203", "field": "creation_timestamp", "uuid": "9749e40b-da38-43f5-ba15-9dbb3d1d9e97", "content": "\ud83d\udea8 CRITICAL: CVE-2026-41203 in ci4ms (<0.31.5.0) allows authenticated users to exploit a path traversal bug and write files anywhere \u2014 including web root \u2014 for potential RCE. Patch to 0.31.5.0 ASAP! https://radar.offseq.com/threat/cve-2026-41203-cwe-22-improper-limitation-of-a-pat-c63ffac4 #OffSeq #Vuln #RCE #PathTraversal", "url": "https://infosec.exchange/users/offseq/statuses/116532119400079005"}, {"timestamp": "2026-05-07T13:49:29.498Z", "date_only": false, "value": "2026-05-07T13:49:29.498216Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41203", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-07T13:49:29.498Z", "date_only": false, "value": "2026-05-07T13:49:29.498216Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41203", "record": "FKIE_CVE-2026-41203", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-07T13:49:58.012Z", "date_only": false, "value": "2026-05-07T13:49:58.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-41203", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-07T13:49:58.012Z", "date_only": false, "value": "2026-05-07T13:49:58.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41203", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-08T19:55:25Z", "date_only": false, "value": "2026-05-08T19:55:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XV3R-VR59-95RG", "record": "GHSA-XV3R-VR59-95RG", "field": "modified"}, {"timestamp": "2026-10-26T19:10:00.163Z", "date_only": false, "value": "2026-10-26T19:10:00.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41203", "record": "FKIE_CVE-2026-41203", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T04:05:13.743Z", "anchors": {"origin": {"timestamp": "2026-04-22T17:29:58Z", "date_only": false, "value": "2026-04-22T17:29:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XV3R-VR59-95RG", "record": "GHSA-XV3R-VR59-95RG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-22T17:29:58Z", "date_only": false, "value": "2026-04-22T17:29:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XV3R-VR59-95RG", "record": "GHSA-XV3R-VR59-95RG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 16540515.743286, "hours": 4594.587706468334, "days": 191.44115443618057, "min_seconds": 16540515.743286, "max_seconds": 16540515.743286, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-22T17:29:58Z", "date_only": false, "value": "2026-04-22T17:29:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XV3R-VR59-95RG", "record": "GHSA-XV3R-VR59-95RG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T04:05:13.743Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}