{"metadata": {"vulnerability": "CVE-2026-42880", "count": 96, "kinds": {"milestone": 17, "sighting": 11, "kev": 0, "other": 68}}, "data": [{"timestamp": "2026-03-20T22:23:32.147Z", "date_only": false, "value": "2026-03-20T22:23:32.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-03-20T23:02:27.802Z", "date_only": false, "value": "2026-03-20T23:02:27.802640+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-03-26T17:17:51.101Z", "date_only": false, "value": "2026-03-26T17:17:51.101000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2026-03-26T18:02:32.278Z", "date_only": false, "value": "2026-03-26T18:02:32.278778+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2026-03-31T19:25:55.987Z", "date_only": false, "value": "2026-03-31T19:25:55.987000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-03-31T20:01:21.918Z", "date_only": false, "value": "2026-03-31T20:01:21.918257+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-30T18:49:06.711Z", "date_only": false, "value": "2026-04-30T18:49:06.711Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-42880", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-01T01:44:55Z", "date_only": false, "value": "2026-05-01T01:44:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "6b559086-c1e1-404f-8922-42b4fb62be88", "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-05T22:00:00Z", "date_only": false, "value": "2026-05-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1383", "record": "WID-SEC-W-2026-1383", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-05T22:00:00Z", "date_only": false, "value": "2026-05-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1383", "record": "WID-SEC-W-2026-1383", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-05T22:00:00Z", "date_only": false, "value": "2026-05-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1383", "record": "WID-SEC-W-2026-1383", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T01:56:53Z", "date_only": false, "value": "2026-05-07T01:56:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3V3M-WC6V-X4X3", "record": "GHSA-3V3M-WC6V-X4X3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T22:00:00Z", "date_only": false, "value": "2026-05-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1383", "record": "WID-SEC-W-2026-1383", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-05-07T22:00:00Z", "date_only": false, "value": "2026-05-07T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1383", "record": "WID-SEC-W-2026-1383", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42880", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42880", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.4.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42880", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-05-07T22:20:39.506Z", "date_only": false, "value": "2026-05-07T22:20:39.506Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-42880", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T23:00:58.796Z", "date_only": false, "value": "2026-05-07T23:00:58.796407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T23:00:58.796Z", "date_only": false, "value": "2026-05-07T23:00:58.796407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.4.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T23:00:58.796Z", "date_only": false, "value": "2026-05-07T23:00:58.796407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.2.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T23:00:58.796Z", "date_only": false, "value": "2026-05-07T23:00:58.796Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42880", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-05-07T23:16:32Z", "date_only": false, "value": "2026-05-07T23:16:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3V3M-WC6V-X4X3", "record": "GHSA-3V3M-WC6V-X4X3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-07T23:16:32.450Z", "date_only": false, "value": "2026-05-07T23:16:32.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42880", "record": "FKIE_CVE-2026-42880", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-07T23:36:15.296Z", "date_only": false, "value": "2026-05-07T23:36:15.296489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcezjrqkd2f", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "c782a7f9-6e04-426a-85ac-dddec5a7892c", "content": "\ud83d\udd34 CVE-2026-42880 - Critical (9.6)\n\nArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42880/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcezjrqkd2f"}, {"timestamp": "2026-05-08T00:00:42.122Z", "date_only": false, "value": "2026-05-08T00:00:42.122975Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlcgfala2l2j", "record": "cve-2026-42880", "field": "creation_timestamp", "uuid": "6f2b2e13-30f5-4ce7-8b6f-aadc654869fe", "content": "CRITICAL: Argo CD flaw exposes plaintext Kubernetes Secrets to read-only users. Affects 3.2.0 \u2013 3.2.10, 3.3.0 \u2013 3.3.8. Patch to 3.2.11/3.3.9+ now! \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-42880-cwe-200-exposure-of-sensitive-infor-40029159 #OffSeq #ArgoCD #Kubernetes", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mlcgfala2l2j"}, {"timestamp": "2026-05-08T00:00:45.515Z", "date_only": false, "value": "2026-05-08T00:00:45.515917Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116536012920122031", "record": "cve-2026-42880", "field": "creation_timestamp", "uuid": "55238b9d-3978-4c60-8bda-26fc4c114d43", "content": "\ud83d\udea8 CRITICAL: CVE-2026-42880 in Argo CD (v3.2.0 \u2013 3.2.10, 3.3.0 \u2013 3.3.8) allows attackers with read-only access to extract plaintext Kubernetes Secrets via the ServerSideDiff endpoint. Patch to 3.2.11/3.3.9+ now! https://radar.offseq.com/threat/cve-2026-42880-cwe-200-exposure-of-sensitive-infor-40029159 #OffSeq #ArgoCD #Kubernetes #CVE202642880", "url": "https://infosec.exchange/users/offseq/statuses/116536012920122031"}, {"timestamp": "2026-05-08T01:13:25.378Z", "date_only": false, "value": "2026-05-08T01:13:25.378085Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlckh7hc242t", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "2948cdd9-cb22-4a22-b113-292a88da1af0", "content": "CVE-2026-42880 - ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction\nCVE ID : CVE-2026-42880\n \n Published : May 7, 2026, 11:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlckh7hc242t"}, {"timestamp": "2026-05-08T10:01:27.301Z", "date_only": false, "value": "2026-05-08T10:01:27.301+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1383", "record": "WID-SEC-W-2026-1383", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-11T13:30:01Z", "date_only": false, "value": "2026-05-11T13:30:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3V3M-WC6V-X4X3", "record": "GHSA-3V3M-WC6V-X4X3", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-11T20:07:07.397Z", "date_only": false, "value": "2026-05-11T20:07:07.397314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlm37bcfgz2v", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "590a6bfc-be2c-45f0-a1f0-f3862c23d9e4", "content": "\ud83d\udccc CVE-2026-42880 - Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a m... https://www.cyberhub.blog/cves/CVE-2026-42880", "url": "https://bsky.app/profile/cyberhub.blog/post/3mlm37bcfgz2v"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42880", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42880", "record": "FKIE_CVE-2026-42880", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-13T14:46:52Z", "date_only": false, "value": "2026-05-13T14:46:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3158", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "72737ea6-ba96-48f1-9ca7-2cce931e3f6b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u043a\u043b\u0430\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 GitOps \u0434\u043b\u044f Kubernetes Argo CD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043c\u0435\u0436\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e\n\nBDU:2026-06624\nCVE-2026-42880\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "url": "https://t.me/bdufstecru/3158"}, {"timestamp": "2026-05-14T03:56:28.920Z", "date_only": false, "value": "2026-05-14T03:56:28.920Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42880", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-15T15:00:22.015Z", "date_only": false, "value": "2026-05-15T15:00:22.015511Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devops-daily.com/post/3mlvlwg55vz2d", "record": "cve-2026-42880", "field": "creation_timestamp", "uuid": "6b99fb12-8f89-4aec-9da3-b088242db19e", "content": "\ud83d\udcdd Argo CD CVE-2026-42880: When Read-Only Means Read-Everything-Including-Secrets\n\nA critical Argo CD bug (CVSS 9.6, disclosed May 7) lets any authenticated user pull plaintext Kubernetes Secrets out of any Application that has...\n\nRead here: https://devops-daily.com/posts/argocd-cve-2026-42880-s...", "url": "https://bsky.app/profile/devops-daily.com/post/3mlvlwg55vz2d"}, {"timestamp": "2026-05-19T20:08:41.080Z", "date_only": false, "value": "2026-05-19T20:08:41.080725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mma6zfqzlk2w", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "f35f8766-4d3d-49f2-8e3e-e4457aaafb67", "content": "\u300cArgo CD\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30c8\u30fc\u30af\u30f3\u3084API\u30ad\u30fc\u6f0f\u6d29\u306e\u304a\u305d\u308c\n\n\u300cKubernetes\u300d\u5411\u3051\u306e\u7d99\u7d9a\u7684\u30c7\u30ea\u30d0\u30ea\u30c4\u30fc\u30eb\u300cArgo CD\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u540c\u30c4\u30fc\u30eb\u306e\u300cServerSideDiff\u300d\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3044\u3066\u3001\u8a8d\u53ef\u51e6\u7406\u3084\u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u60c5\u5831\u306b\u5bfe\u3059\u308b\u30de\u30b9\u30ad\u30f3\u30b0\u51e6\u7406\u306b\u4e0d\u5099\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\u300cCVE-2026-42880\u300d\u304c\u5272\u308a\u5f53\u3066\u3089\u308c\u3066\u3044\u308b\u3002\n\n\u672c\u6765\u30de\u30b9\u30af\u3055\u308c\u308b\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30c8\u30fc\u30af\u30f3\u3001TLS\u8a3c\u660e\u66f8\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u8a8d\u8a3c\u60c5\u5831\u3001API\u30ad\u30fc\u306a\u3069\u300cKubernetes\u300d\u306e\u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u3092\u5e73\u6587\u3067\u5fdc\u7b54\u3059\u308b\u305f\u3081\u3001\u6761\u4ef6\u3092\u6e80\u305f\u3059\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u306f\u3001\u9650\u5b9a\u7684\u306a\u8aad\u307f\u53d6\u308a\u6a29\u9650\u306e\u307f\u4e0e\u3048\u3089\u308c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mma6zfqzlk2w"}, {"timestamp": "2026-05-25T12:05:41Z", "date_only": false, "value": "2026-05-25T12:05:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/85816", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "77c97987-cdb1-43c2-9ecf-2a23982b2cfb", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC_CVE-2026-42880\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HAERIN-L\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-25 12:04:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/85816"}, {"timestamp": "2026-05-26T14:49:30Z", "date_only": false, "value": "2026-05-26T14:49:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-26T14:49:30Z", "date_only": false, "value": "2026-05-26T14:49:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T14:49:30Z", "date_only": false, "value": "2026-05-26T14:49:30+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "vulnerabilities.4.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-26T14:55:32Z", "date_only": false, "value": "2026-05-26T14:55:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-26T14:55:32Z", "date_only": false, "value": "2026-05-26T14:55:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-26T14:55:32Z", "date_only": false, "value": "2026-05-26T14:55:32+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "vulnerabilities.2.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-08T13:09:07.642Z", "date_only": false, "value": "2026-06-08T13:09:07.642978Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-HO16255", "record": "CLEANSTART-2026-HO16255", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-08T13:10:16.642Z", "date_only": false, "value": "2026-06-08T13:10:16.642890Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-WF25734", "record": "CLEANSTART-2026-WF25734", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-13T07:11:36.622Z", "date_only": false, "value": "2026-07-13T07:11:36.622633Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KL41807", "record": "CLEANSTART-2026-KL41807", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T10:24:07.979Z", "date_only": false, "value": "2026-07-21T10:24:07.979088Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QT53274", "record": "CLEANSTART-2026-QT53274", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-21T10:34:56.524Z", "date_only": false, "value": "2026-07-21T10:34:56.524918Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EH36582", "record": "CLEANSTART-2026-EH36582", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-FP97062", "record": "CLEANSTART-2026-FP97062", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-06T03:28:02Z", "date_only": false, "value": "2026-09-06T03:28:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-09-06T03:28:02Z", "date_only": false, "value": "2026-09-06T03:28:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-06T03:28:02Z", "date_only": false, "value": "2026-09-06T03:28:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-07T12:04:55.409Z", "date_only": false, "value": "2026-09-07T12:04:55.409Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-42880", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-07T12:04:55.409Z", "date_only": false, "value": "2026-09-07T12:04:55.409Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-42880", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EH36582", "record": "CLEANSTART-2026-EH36582", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KL41807", "record": "CLEANSTART-2026-KL41807", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EH36582", "record": "CLEANSTART-2026-EH36582", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-09T10:55:12Z", "date_only": false, "value": "2026-09-09T10:55:12Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KL41807", "record": "CLEANSTART-2026-KL41807", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-12T10:00:13.001Z", "date_only": false, "value": "2026-09-12T10:00:13.001964Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shimiscyberworld/1288", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "088ac4a3-fe86-491c-932e-dc032934c543", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42880 \u2014 CVSS 9.6\nArgo CD CVE-2026-42880: Critical Data Exposure from Read-Only Access\n\nCVE-2026-42880 \u2014 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing author\n\n\ud83d\udd34 Critical\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42880 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1288"}, {"timestamp": "2026-09-18T09:58:47.751Z", "date_only": false, "value": "2026-09-18T09:58:47.751373Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MB60182", "record": "CLEANSTART-2026-MB60182", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-FP97062", "record": "CLEANSTART-2026-FP97062", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-HO16255", "record": "CLEANSTART-2026-HO16255", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QT53274", "record": "CLEANSTART-2026-QT53274", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-WF25734", "record": "CLEANSTART-2026-WF25734", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-FP97062", "record": "CLEANSTART-2026-FP97062", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-HO16255", "record": "CLEANSTART-2026-HO16255", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-QT53274", "record": "CLEANSTART-2026-QT53274", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-WF25734", "record": "CLEANSTART-2026-WF25734", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-09T03:45:10Z", "date_only": false, "value": "2026-10-09T03:45:10Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MB60182", "record": "CLEANSTART-2026-MB60182", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-14T12:16:46Z", "date_only": false, "value": "2026-10-14T12:16:46Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UI24589", "record": "CLEANSTART-2026-UI24589", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-22T09:55:12Z", "date_only": false, "value": "2026-10-22T09:55:12Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QR94523", "record": "CLEANSTART-2026-QR94523", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-23T00:36:46.918Z", "date_only": false, "value": "2026-10-23T00:36:46.918549Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QR94523", "record": "CLEANSTART-2026-QR94523", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-26T20:10:00.160Z", "date_only": false, "value": "2026-10-26T20:10:00.160", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42880", "record": "FKIE_CVE-2026-42880", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T10:26:40.299Z", "date_only": false, "value": "2026-10-30T10:26:40.299492Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UI24589", "record": "CLEANSTART-2026-UI24589", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T15:59:27Z", "date_only": false, "value": "2026-11-04T15:59:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T15:59:27Z", "date_only": false, "value": "2026-11-04T15:59:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T15:59:27Z", "date_only": false, "value": "2026-11-04T15:59:27+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-04T15:59:27Z", "date_only": false, "value": "2026-11-04T15:59:27+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-04T15:59:27Z", "date_only": false, "value": "2026-11-04T15:59:27+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:20943", "record": "RHSA-2026:20943", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-04T15:59:27Z", "date_only": false, "value": "2026-11-04T15:59:27+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:20947", "record": "RHSA-2026:20947", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-04T18:17:25.015Z", "anchors": {"origin": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-05-07T23:00:58.796Z", "date_only": false, "value": "2026-05-07T23:00:58.796407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-05-01T01:44:55Z", "date_only": false, "value": "2026-05-01T01:44:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "6b559086-c1e1-404f-8922-42b4fb62be88", "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 29067.0, "hours": 8.074166666666667, "days": 0.33642361111111113, "min_seconds": 29067.0, "max_seconds": 29067.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-05-01T01:44:55Z", "date_only": false, "value": "2026-05-01T01:44:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "6b559086-c1e1-404f-8922-42b4fb62be88", "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": -624030.796, "hours": -173.34188777777777, "days": -7.222578657407407, "min_seconds": -624030.796, "max_seconds": -624030.796, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-05-07T23:00:58.796Z", "date_only": false, "value": "2026-05-07T23:00:58.796407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -29067.0, "hours": -8.074166666666667, "days": -0.33642361111111113, "min_seconds": -29067.0, "max_seconds": -29067.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-05-01T01:44:55Z", "date_only": false, "value": "2026-05-01T01:44:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "record": "CVE-2026-42880", "field": "creation_timestamp", "uuid": "6b559086-c1e1-404f-8922-42b4fb62be88", "url": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-04-30T17:40:28Z", "date_only": false, "value": "2026-04-30T17:40:28+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHBA-2026:12433", "record": "RHBA-2026:12433", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}