{"metadata": {"vulnerability": "CVE-2026-41252", "count": 23, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-04-18T03:47:03.136Z", "date_only": false, "value": "2026-04-18T03:47:03.136Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-41252", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-20T16:29:53.496Z", "date_only": false, "value": "2026-07-20T16:29:53.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41252", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-20T16:29:53.496Z", "date_only": false, "value": "2026-07-20T16:29:53.496Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-41252", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-20T17:17:00Z", "date_only": false, "value": "2026-07-20T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-41252", "record": "UBUNTU-CVE-2026-41252", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-20T17:17:08.310Z", "date_only": false, "value": "2026-07-20T17:17:08.310", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41252", "record": "FKIE_CVE-2026-41252", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-20T17:44:04.834Z", "date_only": false, "value": "2026-07-20T17:44:04.834338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3ttwsff42v", "record": "CVE-2026-41252", "field": "creation_timestamp", "uuid": "7a11e76c-4dc0-4b40-9cb4-59f619cce82f", "content": "CVE-2026-41252 - xrdp\nVersions of xrdp prior to 0.10.6 contain a security flaw that can be exploited by a malicious VNC server to execute unauthorized code on a remote system. This can happen before the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xrdp #neutrinolabs #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3ttwsff42v"}, {"timestamp": "2026-07-21T09:38:04.504Z", "date_only": false, "value": "2026-07-21T09:38:04.504636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr5j5suzh224", "record": "CVE-2026-41252", "field": "creation_timestamp", "uuid": "75da7736-35a3-4a2f-86d8-6720b7ed9957", "content": "CVE-2026-41252 - xrdp\nA security flaw in Debian Linux allows unauthorized users to access sensitive system files. This means an attacker could potentially gain access to important system settings and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xrdp #debian #Debian11 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mr5j5suzh224"}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": false, "value": "2026-07-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41252", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": false, "value": "2026-07-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41252", "record": "FKIE_CVE-2026-41252", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-23T03:56:20.804Z", "date_only": false, "value": "2026-07-23T03:56:20.804Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-41252", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-23T03:56:20.804Z", "date_only": false, "value": "2026-07-23T03:56:20.804Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41252", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-23T04:07:07.656Z", "date_only": false, "value": "2026-07-23T04:07:07.656765Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrbxltq7572u", "record": "CVE-2026-41252", "field": "creation_timestamp", "uuid": "09b1ca8c-2545-452a-8259-d04fa618251f", "content": "\ud83d\udccc CVE-2026-41252 - xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when op... https://www.cyberhub.blog/cves/CVE-2026-41252", "url": "https://bsky.app/profile/cyberhub.blog/post/3mrbxltq7572u"}, {"timestamp": "2026-07-23T10:46:04.445Z", "date_only": false, "value": "2026-07-23T10:46:04.445487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcnvaifnm23", "record": "CVE-2026-41252", "field": "creation_timestamp", "uuid": "aa5929ce-c446-4fe8-b897-2a0e346be1a8", "content": "CVE-2026-41252\nVersions 0.10.6 and earlier of the xrdp RDP server have a security flaw that allows a malicious VNC server to potentially execute code on the server before the user logs in. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcnvaifnm23"}, {"timestamp": "2026-08-18T00:00:00Z", "date_only": false, "value": "2026-08-18T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-18T00:00:00Z", "date_only": false, "value": "2026-08-18T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-18T00:00:00Z", "date_only": false, "value": "2026-08-18T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-08-18T00:00:00Z", "date_only": false, "value": "2026-08-18T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T20:24:18Z", "date_only": false, "value": "2026-09-16T20:24:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:26:35Z", "date_only": false, "value": "2026-09-16T21:26:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:20:11Z", "date_only": false, "value": "2026-09-17T17:20:11Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:20:11Z", "date_only": false, "value": "2026-09-17T17:20:11Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11543-1", "record": "OPENSUSE-SU-2026:11543-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-17T09:40:57Z", "date_only": false, "value": "2026-10-17T09:40:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-41252", "record": "UBUNTU-CVE-2026-41252", "field": "modified"}, {"timestamp": "2026-10-24T20:10:00.137Z", "date_only": false, "value": "2026-10-24T20:10:00.137", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41252", "record": "FKIE_CVE-2026-41252", "field": "lastModified"}], "metrics": {"as_of": "2026-11-02T16:13:14.354Z", "anchors": {"origin": {"timestamp": "2026-07-20T16:29:53.496Z", "date_only": false, "value": "2026-07-20T16:29:53.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41252", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-20T16:29:53.496Z", "date_only": false, "value": "2026-07-20T16:29:53.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41252", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9071000.858574, "hours": 2519.7224607149997, "days": 104.98843586312499, "min_seconds": 9071000.858574, "max_seconds": 9071000.858574, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-20T16:29:53.496Z", "date_only": false, "value": "2026-07-20T16:29:53.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41252", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T16:13:14.354Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}