{"metadata": {"vulnerability": "CVE-2026-44179", "count": 13, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 4}}, "data": [{"timestamp": "2026-05-05T14:39:34.924Z", "date_only": false, "value": "2026-05-05T14:39:34.924Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-44179", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-21T19:03:12Z", "date_only": false, "value": "2026-06-21T19:03:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "2f14de1e-7099-4c43-99b0-42ce55889b2b", "url": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-22T20:09:59Z", "date_only": false, "value": "2026-06-22T20:09:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W56X-9778-RPPX", "record": "GHSA-W56X-9778-RPPX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-22T20:09:59Z", "date_only": false, "value": "2026-06-22T20:09:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W56X-9778-RPPX", "record": "GHSA-W56X-9778-RPPX", "field": "modified"}, {"timestamp": "2026-10-28T15:35:45.630Z", "date_only": false, "value": "2026-10-28T15:35:45.630Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44179", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T15:35:45.630Z", "date_only": false, "value": "2026-10-28T15:35:45.630Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-44179", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T15:35:45.630Z", "date_only": false, "value": "2026-10-28T15:35:45.630Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-44179", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T15:46:11.243Z", "date_only": false, "value": "2026-10-28T15:46:11.243359Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117519310563303158", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "342f92cf-fa39-4947-8705-a9a36c503cb1", "content": "CVE-2026-44179 XWiki Pro Macros: excerpt-include title and content injection executes code XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the `excerpt-include` macro does not properly escape the included page's title and executes `excerpt` content with the macro's rights. The title handling in `xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/ExcerptInclude.xml` and the rendering of `excerpt` content into XWiki syntax both allow syntax injection. Any user able to edit a page, even without script or programming rights, can supply executable macro syntax in the title or `excerpt` and cause remote code execution when the page is included. This affects confidentiality, integrity and availability of the whole XWiki installation. This issue is fixed in version 1.14.5.\nhttps://www.cve.org/CVERecord?id=CVE-2026-44179https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppxhttps://github.com/xwikisas/xwiki-pro-macros/commit/151d4fccb62f6ec5f3c972e837869454677ab1cahttps://github.com/xwikisas/xwiki-pro-macros/releases/tag/xwiki-pro-macros-1.14.5#xwikisas #xwiki-pro-macros#CVE_2026_44179#bot", "url": "https://infosec.exchange/users/cve/statuses/117519310563303158"}, {"timestamp": "2026-10-28T16:17:07.400Z", "date_only": false, "value": "2026-10-28T16:17:07.400", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44179", "record": "FKIE_CVE-2026-44179", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T16:40:05.490Z", "date_only": false, "value": "2026-10-28T16:40:05.490649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myx6vl7mgh2w", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "8d443e11-5d65-4413-9f07-b26f94559b0a", "content": "CVE-2026-44179 - com.xwiki.pro:xwiki-pro-macros\nVersions 1.13 through 1.14.5 of the XWiki Pro Macros component let a user who can edit a page insert malicious code in a page title or excerpt. When that page is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xwiki #Java #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myx6vl7mgh2w"}, {"timestamp": "2026-10-28T18:07:36.068Z", "date_only": false, "value": "2026-10-28T18:07:36.068397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myxdrzygc522", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "b174c73a-684c-4d34-ab2f-1e88a820556e", "content": "\ud83d\udea8 CVE-2026-44179 \u2014 CVSS 9.9 CRITICAL\n\nXWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-44179\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myxdrzygc522"}, {"timestamp": "2026-10-28T20:00:59.212Z", "date_only": false, "value": "2026-10-28T20:00:59.212615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3myxk4so24o2y", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "12f61d09-dab6-4c9e-9b26-47fe7ddcb965", "content": "Don't miss this critical CVE.\n\nCVE-2026-44179 published 2026-10-28 \u2014 CVSS 9.9 v3.1.\n\nXWiki Remote Macros excerpt-include lets page editors inject syntax via titles/excerpts \u2192 RCE (CWE-95). Fixed in 1.14.5.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-44179/\n\n#fcvulns #XWiki", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3myxk4so24o2y"}, {"timestamp": "2026-10-29T16:21:34.310Z", "date_only": false, "value": "2026-10-29T16:21:34.310", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44179", "record": "FKIE_CVE-2026-44179", "field": "lastModified"}], "metrics": {"as_of": "2026-10-30T22:04:12.615Z", "anchors": {"origin": {"timestamp": "2026-06-22T20:09:59Z", "date_only": false, "value": "2026-06-22T20:09:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W56X-9778-RPPX", "record": "GHSA-W56X-9778-RPPX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-22T20:09:59Z", "date_only": false, "value": "2026-06-22T20:09:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W56X-9778-RPPX", "record": "GHSA-W56X-9778-RPPX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-06-21T19:03:12Z", "date_only": false, "value": "2026-06-21T19:03:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "2f14de1e-7099-4c43-99b0-42ce55889b2b", "url": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -90407.0, "hours": -25.113055555555555, "days": -1.0463773148148148, "min_seconds": -90407.0, "max_seconds": -90407.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-06-22T20:09:59Z", "date_only": false, "value": "2026-06-22T20:09:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W56X-9778-RPPX", "record": "GHSA-W56X-9778-RPPX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-21T19:03:12Z", "date_only": false, "value": "2026-06-21T19:03:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "2f14de1e-7099-4c43-99b0-42ce55889b2b", "url": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 11238853.615052, "hours": 3121.903781958889, "days": 130.07932424828704, "min_seconds": 11238853.615052, "max_seconds": 11238853.615052, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-22T20:09:59Z", "date_only": false, "value": "2026-06-22T20:09:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W56X-9778-RPPX", "record": "GHSA-W56X-9778-RPPX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T22:04:12.615Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 11329260.615052, "hours": 3147.0168375144444, "days": 131.12570156310184, "min_seconds": 11329260.615052, "max_seconds": 11329260.615052, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-21T19:03:12Z", "date_only": false, "value": "2026-06-21T19:03:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "record": "CVE-2026-44179", "field": "creation_timestamp", "uuid": "2f14de1e-7099-4c43-99b0-42ce55889b2b", "url": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-30T22:04:12.615Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}