{"metadata": {"vulnerability": "CVE-2026-42496", "count": 126, "kinds": {"milestone": 43, "sighting": 7, "kev": 0, "other": 76}, "linked_omitted": 0}, "data": [{"timestamp": "2026-04-12T00:00:00Z", "date_only": false, "value": "2026-04-12T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-42496", "field": "containers.cna.timeline.0.time", "text": "Issue reported."}, {"timestamp": "2026-04-27T18:34:48.417Z", "date_only": false, "value": "2026-04-27T18:34:48.417Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-42496", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-42496", "field": "containers.cna.timeline.1.time", "text": "Version 3.08 released."}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42496", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42496", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42496", "field": "containers.adp.1.timeline.1.time", "text": "Made public."}, {"timestamp": "2026-05-26T00:17:19.110Z", "date_only": false, "value": "2026-05-26T00:17:19.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-42496", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42496", "field": "containers.adp.1.timeline.0.time", "text": "Reported to Red Hat."}, {"timestamp": "2026-05-26T02:16:00Z", "date_only": false, "value": "2026-05-26T02:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-42496", "record": "UBUNTU-CVE-2026-42496", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T02:16:40Z", "date_only": false, "value": "2026-05-26T02:16:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8P37-Q9QQ-HGX8", "record": "GHSA-8P37-Q9QQ-HGX8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-26T02:16:40.130Z", "date_only": false, "value": "2026-05-26T02:16:40.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42496", "record": "FKIE_CVE-2026-42496", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T06:00:37.352Z", "date_only": false, "value": "2026-05-26T06:00:37.352053Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmqcvf2y2s26", "record": "cve-2026-42496", "field": "creation_timestamp", "uuid": "b038f35c-275c-4c63-8aa6-5ea7d6628d66", "content": "Symlink vuln (HIGH) in BINGOS Archive::Tar <3.08: attackers can escape extraction dirs for unauthorized file access. No patch yet \u2014 avoid untrusted tar files. Full details: https://radar.offseq.com/threat/cve-2026-42496-cwe-59-improper-link-resolution-bef-ae924259 #OffSeq #vuln #infosec", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mmqcvf2y2s26"}, {"timestamp": "2026-05-26T08:49:40.075Z", "date_only": false, "value": "2026-05-26T08:49:40.075365Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmdp566n25", "record": "CVE-2026-42496", "field": "creation_timestamp", "uuid": "1842dca3-967f-48d4-90bf-aa52d7960cd5", "content": "CVE-2026-42496: Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmdp566n25"}, {"timestamp": "2026-05-26T13:30:53Z", "date_only": false, "value": "2026-05-26T13:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8P37-Q9QQ-HGX8", "record": "GHSA-8P37-Q9QQ-HGX8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": true, "value": "2026-05-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.46.published_at", "linked_record": true}, {"timestamp": "2026-05-27T03:12:38.974Z", "date_only": false, "value": "2026-05-27T03:12:38.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-05-27T04:01:00.966Z", "date_only": false, "value": "2026-05-27T04:01:00.966244+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": true, "value": "2026-05-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-05-28T06:11:40.496Z", "date_only": false, "value": "2026-05-28T06:11:40.496848Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-42496", "record": "BELL-CVE-2026-42496", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-28T13:08:28.377Z", "date_only": false, "value": "2026-05-28T13:08:28.377579Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42496", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-05-28T13:08:28.377Z", "date_only": false, "value": "2026-05-28T13:08:28.377579Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42496", "record": "FKIE_CVE-2026-42496", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-28T13:08:37.326Z", "date_only": false, "value": "2026-05-28T13:08:37.326Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42496", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": true, "value": "2026-05-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-05-29T01:08:01Z", "date_only": false, "value": "2026-05-29T01:08:01.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-29T01:08:01Z", "date_only": false, "value": "2026-05-29T01:08:01.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": true, "value": "2026-05-31", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.25.published_at", "linked_record": true}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": true, "value": "2026-06-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.78.published_at", "linked_record": true}, {"timestamp": "2026-06-03T06:09:10.849Z", "date_only": false, "value": "2026-06-03T06:09:10.849648Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-42496", "record": "BELL-CVE-2026-42496", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": true, "value": "2026-06-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.227.published_at", "linked_record": true}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": true, "value": "2026-06-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.154.published_at", "linked_record": true}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": true, "value": "2026-06-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.148.published_at", "linked_record": true}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.10.published_at", "linked_record": true}, {"timestamp": "2026-06-09T01:43:56Z", "date_only": false, "value": "2026-06-09T01:43:56.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-06-09T01:43:56Z", "date_only": false, "value": "2026-06-09T01:43:56.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-09T07:14:50.288Z", "date_only": false, "value": "2026-06-09T07:14:50.288Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-06-12T11:11:36Z", "date_only": false, "value": "2026-06-12T11:11:36Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2678", "record": "OESA-2026-2678", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-22T00:26:01.719Z", "date_only": false, "value": "2026-06-22T00:26:01.719855Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmrathgt2r", "record": "CVE-2026-42496", "field": "creation_timestamp", "uuid": "dc876ac8-040d-47e0-85ec-708dc41d505b", "content": "\ud83d\udea8  ALERT: CVE-2026-42496\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. s", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmrathgt2r"}, {"timestamp": "2026-06-29T00:00:00Z", "date_only": false, "value": "2026-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:30851", "record": "ALSA-2026:30851", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T00:00:00Z", "date_only": false, "value": "2026-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:30852", "record": "ALSA-2026:30852", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T00:00:00Z", "date_only": false, "value": "2026-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:30856", "record": "ALSA-2026:30856", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T00:00:00Z", "date_only": false, "value": "2026-06-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:30857", "record": "ALSA-2026:30857", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T02:36:12Z", "date_only": false, "value": "2026-06-29T02:36:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-06-29T02:36:12Z", "date_only": false, "value": "2026-06-29T02:36:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T02:36:12Z", "date_only": false, "value": "2026-06-29T02:36:12+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T04:47:37Z", "date_only": false, "value": "2026-06-29T04:47:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-06-29T04:47:37Z", "date_only": false, "value": "2026-06-29T04:47:37+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T04:47:37Z", "date_only": false, "value": "2026-06-29T04:47:37+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T04:49:17Z", "date_only": false, "value": "2026-06-29T04:49:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-06-29T04:49:17Z", "date_only": false, "value": "2026-06-29T04:49:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T04:49:17Z", "date_only": false, "value": "2026-06-29T04:49:17+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T10:29:37Z", "date_only": false, "value": "2026-06-29T10:29:37Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:30852", "record": "ALSA-2026:30852", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-29T12:01:04.278Z", "date_only": false, "value": "2026-06-29T12:01:04.278141Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:30851", "record": "RLSA-2026:30851", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T18:19:19Z", "date_only": false, "value": "2026-06-29T18:19:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-06-29T18:19:19Z", "date_only": false, "value": "2026-06-29T18:19:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-29T18:19:19Z", "date_only": false, "value": "2026-06-29T18:19:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-30T10:38:03Z", "date_only": false, "value": "2026-06-30T10:38:03Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:30856", "record": "ALSA-2026:30856", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-30T10:44:29Z", "date_only": false, "value": "2026-06-30T10:44:29Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:30857", "record": "ALSA-2026:30857", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-30T11:11:50Z", "date_only": false, "value": "2026-06-30T11:11:50Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:30851", "record": "ALSA-2026:30851", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-01T12:03:26.775Z", "date_only": false, "value": "2026-07-01T12:03:26.775911Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:30856", "record": "RLSA-2026:30856", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-01T16:33:05Z", "date_only": false, "value": "2026-07-01T16:33:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-42496", "record": "UBUNTU-CVE-2026-42496", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-05T12:05:09.130Z", "date_only": false, "value": "2026-07-05T12:05:09.130757Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:30857", "record": "RLSA-2026:30857", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-06T20:34:05.614Z", "date_only": false, "value": "2026-07-06T20:34:05.614362Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywt27xh32s", "record": "CVE-2026-42496", "field": "creation_timestamp", "uuid": "a33dd92f-4f07-4ac5-ad7c-944d0de44976", "content": "CVE-2026-42496 - rootio-perl\nThe rootio-perl package in Debian 12 had a security issue that allowed unauthorized access to sensitive information. This has been fixed by Root in a recent update, and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootioperl #RootDebian12 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywt27xh32s"}, {"timestamp": "2026-07-13T12:06:45.922Z", "date_only": false, "value": "2026-07-13T12:06:45.922051Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:30851", "record": "RLSA-2026:30851", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-15T00:57:33.692Z", "date_only": false, "value": "2026-07-15T00:57:33.692Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42496", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T12:07:41.827Z", "date_only": false, "value": "2026-07-15T12:07:41.827408Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:30856", "record": "RLSA-2026:30856", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-15T16:40:08.394Z", "date_only": false, "value": "2026-07-15T16:40:08.394683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5ww6arr2m", "record": "CVE-2026-42496", "field": "creation_timestamp", "uuid": "521a123e-7f0b-45d2-b77d-87e58f235cad", "content": "Yes Critical (9.1) CVE-2026-39831 Yes Yes Yes Yes Critical (9.1) CVE-2026-39832 Yes Yes Yes Yes Critical (9.1) CVE-2026-39833 Yes Yes Yes Yes Critical (9.1) CVE-2026-39834 Yes Yes Yes Yes Critical (9.1) CVE-2026-42496 Yes Yes No Yes Medium (9.1) CVE-2026-42508 Yes Yes Yes", "url": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5ww6arr2m"}, {"timestamp": "2026-07-16T13:38:03.450Z", "date_only": false, "value": "2026-07-16T13:38:03.450985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqreadi3ts2w", "record": "CVE-2026-42496", "field": "creation_timestamp", "uuid": "f9156fcc-f2a3-4fb9-b70a-84b19ec45bef", "content": "CVE-2026-42496 - rootio-perl\nA security patch has been released for the rootio-perl package on Root:Debian:13. This patch addresses a vulnerability that could allow unauthorized access to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootioperl #RootDebian13 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqreadi3ts2w"}, {"timestamp": "2026-07-17T13:10:04.063Z", "date_only": false, "value": "2026-07-17T13:10:04.063620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqtt56zgi62l", "record": "CVE-2026-42496", "field": "creation_timestamp", "uuid": "b3aaaa6f-fe30-4d0a-aadc-56fab3805c1a", "content": "CVE-2026-42496 - rootio-perl\nA security patch has been released for the rootio-perl package in Root:Debian:11. This patch fixes a vulnerability that could allow unauthorized access to the system if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootioperl #RootDebian11 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqtt56zgi62l"}, {"timestamp": "2026-07-19T12:07:29.018Z", "date_only": false, "value": "2026-07-19T12:07:29.018101Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:30857", "record": "RLSA-2026:30857", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-29T18:00:52.390Z", "date_only": false, "value": "2026-07-29T18:00:52.390223Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:30852", "record": "RLSA-2026:30852", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T00:00:00Z", "date_only": true, "value": "2026-07-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.5.published_at", "linked_record": true}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": true, "value": "2026-07-31", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-08-02T00:00:00Z", "date_only": true, "value": "2026-08-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.16.published_at", "linked_record": true}, {"timestamp": "2026-08-03T00:00:00Z", "date_only": true, "value": "2026-08-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-08-04T00:00:00Z", "date_only": true, "value": "2026-08-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2026-08-05T00:00:00Z", "date_only": true, "value": "2026-08-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "vendor_advisories.8.published_at", "linked_record": true}, {"timestamp": "2026-08-06T11:11:36Z", "date_only": false, "value": "2026-08-06T11:11:36Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2678", "record": "OESA-2026-2678", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": true, "value": "2026-08-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0986", "record": "CERTFR-2026-AVI-0986", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-08-07T10:00:00Z", "date_only": false, "value": "2026-08-07T10:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-088", "record": "VDE-2026-088", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-12T18:09:29.336Z", "date_only": false, "value": "2026-08-12T18:09:29.336013Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:30852", "record": "RLSA-2026:30852", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-20T10:00:00Z", "date_only": false, "value": "2026-08-20T10:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-088", "record": "VDE-2026-088", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-07T10:14:19.998Z", "date_only": false, "value": "2026-09-07T10:14:19.998Z", "kind": "other", "label": "Document generated", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-088", "record": "VDE-2026-088", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-10T10:00:00Z", "date_only": false, "value": "2026-09-10T10:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-088", "record": "VDE-2026-088", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-10T10:00:00Z", "date_only": false, "value": "2026-09-10T10:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_mettlertoledogmbh \u00b7 VDE-2026-088", "record": "VDE-2026-088", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:30852", "record": "RHSA-2026:30852", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:30856", "record": "RHSA-2026:30856", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T20:52:00Z", "date_only": false, "value": "2026-11-05T20:52:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:30857", "record": "RHSA-2026:30857", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1486", "record": "CERTFR-2026-AVI-1486", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1486", "record": "CERTFR-2026-AVI-1486", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1486", "record": "CERTFR-2026-AVI-1486", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1486", "record": "CERTFR-2026-AVI-1486", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-10T12:45:55.887Z", "date_only": false, "value": "2026-11-10T12:45:55.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-42496", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T12:45:55.887Z", "date_only": false, "value": "2026-11-10T12:45:55.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2026-42496", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T13:19:07.123Z", "date_only": false, "value": "2026-11-10T13:19:07.123", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42496", "record": "FKIE_CVE-2026-42496", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-10T15:32:39Z", "date_only": false, "value": "2026-11-10T15:32:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8P37-Q9QQ-HGX8", "record": "GHSA-8P37-Q9QQ-HGX8", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T19:33:09.290Z", "anchors": {"origin": {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-05-29T01:08:01Z", "date_only": false, "value": "2026-05-29T01:08:01.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 256028.586, "hours": 71.11905166666666, "days": 2.9632938194444445, "min_seconds": 256028.586, "max_seconds": 256028.586, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-26T02:00:52.414Z", "date_only": false, "value": "2026-05-26T02:00:52.414462+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:30851", "record": "RHSA-2026:30851", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-05-29T01:08:01Z", "date_only": false, "value": "2026-05-29T01:08:01.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 2336881.0, "hours": 649.1336111111111, "days": 27.047233796296297, "min_seconds": 2250481.0, "max_seconds": 2336881.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-05-29T01:08:01Z", "date_only": false, "value": "2026-05-29T01:08:01.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 2336881.0, "hours": 649.1336111111111, "days": 27.047233796296297, "min_seconds": 2250481.0, "max_seconds": 2336881.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-05-29T01:08:01Z", "date_only": false, "value": "2026-05-29T01:08:01.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-42496", "record": "MSRC_CVE-2026-42496", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}