{"metadata": {"vulnerability": "CVE-2026-41877", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-04-22T11:32:15.204Z", "date_only": false, "value": "2026-04-22T11:32:15.204Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-41877", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-10T09:05:07.927Z", "date_only": false, "value": "2026-07-10T09:05:07.927Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-10T09:05:07.927Z", "date_only": false, "value": "2026-07-10T09:05:07.927Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-41877", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-10T10:16:23Z", "date_only": false, "value": "2026-07-10T10:16:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C9PH-5J66-3J9F", "record": "GHSA-C9PH-5J66-3J9F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-10T10:16:23.847Z", "date_only": false, "value": "2026-07-10T10:16:23.847", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41877", "record": "FKIE_CVE-2026-41877", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-10T10:56:33.511Z", "date_only": false, "value": "2026-07-10T10:56:33.511506Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41877", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-10T10:56:33.511Z", "date_only": false, "value": "2026-07-10T10:56:33.511506Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41877", "record": "FKIE_CVE-2026-41877", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-10T10:56:50.110Z", "date_only": false, "value": "2026-07-10T10:56:50.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-41877", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-10T10:56:50.110Z", "date_only": false, "value": "2026-07-10T10:56:50.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-41877", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-10T12:19:11.334Z", "date_only": false, "value": "2026-07-10T12:19:11.334799Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4zrjog72z", "record": "CVE-2026-41877", "field": "creation_timestamp", "uuid": "c8bf1b78-ef61-4e74-bee4-22499ed31d17", "content": "CVE-2026-41877 - Stored XSS in R-SOFT DMS\nCVE ID : CVE-2026-41877\n \n Published : July 10, 2026, 10:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacker can inject arbitrary HTML and JS int...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4zrjog72z"}, {"timestamp": "2026-07-10T12:31:42Z", "date_only": false, "value": "2026-07-10T12:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C9PH-5J66-3J9F", "record": "GHSA-C9PH-5J66-3J9F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-10T12:31:43Z", "date_only": false, "value": "2026-07-10T12:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C9PH-5J66-3J9F", "record": "GHSA-C9PH-5J66-3J9F", "field": "modified"}, {"timestamp": "2026-07-10T14:17:53.078Z", "date_only": false, "value": "2026-07-10T14:17:53.078698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqcdnxnpgv26", "record": "CVE-2026-41877", "field": "creation_timestamp", "uuid": "48c83f27-08d0-4c21-98df-45ac27407bf3", "content": "\u6df1\u5ea6\u89e3\u6790R-SOFT DMS\u6587\u4ef6\u4e0a\u4f20\u529f\u80fd\u4e2d\u7684\u5b58\u50a8\u578bXSS\u6f0f\u6d1e(CVE-2026-41877)\n\n\n\nhttps://qian.cx/posts/D4C1AE48-C239-49D1-88AB-987B469D605D", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3mqcdnxnpgv26"}, {"timestamp": "2026-07-10T14:21:14.939Z", "date_only": false, "value": "2026-07-10T14:21:14.939808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcdu24ttj26", "record": "CVE-2026-41877", "field": "creation_timestamp", "uuid": "80c76b73-f3b5-473f-af88-3e8291cd221d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-41877 \u0432 R-SOFT DMS: \u0443\u0433\u0440\u043e\u0437\u0430 Stored XSS \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/7C78AFC7-A2FA-4502-8100-B5345908777E", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcdu24ttj26"}, {"timestamp": "2026-07-10T16:45:02.507Z", "date_only": false, "value": "2026-07-10T16:45:02.507775Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-41876", "record": "CVE-2026-41877", "field": "creation_timestamp", "uuid": "2d1a3ccb-75d8-466a-b1ad-69706b0ba4f2", "url": "https://cert.pl/en/posts/2026/07/CVE-2026-41876"}, {"timestamp": "2026-07-10T21:19:53.654Z", "date_only": false, "value": "2026-07-10T21:19:53.654227Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqd3amyxuh27", "record": "CVE-2026-41877", "field": "creation_timestamp", "uuid": "815f0d0f-0d69-406a-ac1c-ac838faee744", "content": "\u6df1\u5ea6\u89e3\u6790R-SOFT DMS\u6587\u4ef6\u4e0a\u4f20\u529f\u80fd\u4e2d\u7684\u5b58\u50a8\u578bXSS\u6f0f\u6d1e(CVE-2026-41877)\n\n\n\nhttps://qian.cx/posts/87E7451C-398E-430A-B8D6-B977B7441485", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3mqd3amyxuh27"}, {"timestamp": "2026-07-10T21:19:54.691Z", "date_only": false, "value": "2026-07-10T21:19:54.691890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3ao52f422", "record": "CVE-2026-41877", "field": "creation_timestamp", "uuid": "2d2bf4bd-b06a-4191-9bbc-fdaf7962c723", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-41877 \u0432 R-SOFT DMS: \u0443\u0433\u0440\u043e\u0437\u0430 Stored XSS \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/FC9523BA-CADD-439B-8463-B6CC1171E06A", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3ao52f422"}, {"timestamp": "2026-10-25T15:10:00.147Z", "date_only": false, "value": "2026-10-25T15:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-41877", "record": "FKIE_CVE-2026-41877", "field": "lastModified"}], "metrics": {"as_of": "2026-11-01T01:18:56.205Z", "anchors": {"origin": {"timestamp": "2026-07-10T09:05:07.927Z", "date_only": false, "value": "2026-07-10T09:05:07.927Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-10T09:05:07.927Z", "date_only": false, "value": "2026-07-10T09:05:07.927Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9821628.278498, "hours": 2728.2300773605552, "days": 113.67625322335648, "min_seconds": 9821628.278498, "max_seconds": 9821628.278498, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-10T09:05:07.927Z", "date_only": false, "value": "2026-07-10T09:05:07.927Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-41877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T01:18:56.205Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}