{"metadata": {"vulnerability": "CVE-2026-44182", "count": 19, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-05T14:39:34.924Z", "date_only": false, "value": "2026-05-05T14:39:34.924Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-44182", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-03T02:54:53Z", "date_only": false, "value": "2026-06-03T02:54:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-cfw7-6c5v-2wjq", "record": "CVE-2026-44182", "field": "creation_timestamp", "uuid": "a884bf8c-3911-4360-9084-317a56254d76", "url": "https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-cfw7-6c5v-2wjq"}, {"timestamp": "2026-06-03T21:37:16Z", "date_only": false, "value": "2026-06-03T21:37:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CFW7-6C5V-2WJQ", "record": "GHSA-CFW7-6C5V-2WJQ", "field": "published"}, {"timestamp": "2026-06-03T21:37:16Z", "date_only": false, "value": "2026-06-03T21:37:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CFW7-6C5V-2WJQ", "record": "GHSA-CFW7-6C5V-2WJQ", "field": "modified"}, {"timestamp": "2026-06-10T17:25:03.417Z", "date_only": false, "value": "2026-06-10T17:25:03.417577Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116726974749666744", "record": "CVE-2026-44182", "field": "creation_timestamp", "uuid": "b9372aaf-d324-4234-953a-3f23fb0f0003", "content": "Posted yesterday.\nThis relates to CVE-2026-44182, CVE-2026-44181, and CVE-2026-44180.\nOrca: Critical Jupyter Enterprise Gateway Vulnerabilities Enable Full Kubernetes Cluster Takeover https://orca.security/resources/blog/jupyter-enterprise-gateway-vulnerabilities/ #Kubernetes #infosec #vulnerability #opensource", "url": "https://infosec.exchange/users/AAKL/statuses/116726974749666744"}, {"timestamp": "2026-06-29T11:50:52.747Z", "date_only": false, "value": "2026-06-29T11:50:52.747336Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-362", "record": "PYSEC-2026-362", "field": "published"}, {"timestamp": "2026-07-01T20:22:54.803Z", "date_only": false, "value": "2026-07-01T20:22:54.803627Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-362", "record": "PYSEC-2026-362", "field": "modified"}, {"timestamp": "2026-07-16T22:05:09.576Z", "date_only": false, "value": "2026-07-16T22:05:09.576Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44182", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-16T22:05:09.576Z", "date_only": false, "value": "2026-07-16T22:05:09.576Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-44182", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-16T23:16:16.590Z", "date_only": false, "value": "2026-07-16T23:16:16.590", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44182", "record": "FKIE_CVE-2026-44182", "field": "published"}, {"timestamp": "2026-07-16T23:22:06.672Z", "date_only": false, "value": "2026-07-16T23:22:06.672017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqseuovgok2l", "record": "CVE-2026-44182", "field": "creation_timestamp", "uuid": "dc30a78e-cb57-4c0f-a6c6-61eb8b229fe9", "content": "CVE-2026-44182 - jupyter_enterprise_gateway\nAttackers can inject malicious data into Kubernetes manifests, potentially creating unauthorized resources like privileged pods. This is possible because Jupyter\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jupyterserver #pip #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqseuovgok2l"}, {"timestamp": "2026-07-17T00:34:41.356Z", "date_only": false, "value": "2026-07-17T00:34:41.356264Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsiwhveh32n", "record": "CVE-2026-44182", "field": "creation_timestamp", "uuid": "1ec89252-9df1-449b-8de0-973c34e13358", "content": "CVE-2026-44182 - Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering\nCVE ID : CVE-2026-44182\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels ac...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsiwhveh32n"}, {"timestamp": "2026-07-17T04:30:25.986Z", "date_only": false, "value": "2026-07-17T04:30:25.986752Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116933435409691310", "record": "cve-2026-44182", "field": "creation_timestamp", "uuid": "e58caf69-d4ba-4559-81c9-cb76adb54516", "content": "CVE-2026-44182: CRITICAL YAML injection in jupyter-server enterprise_gateway <3.3.0 \ud83d\udea8 Untrusted env vars in manifests can let attackers create/modify Kubernetes resources, incl. privileged pods. Upgrade to 3.3.0+ ASAP. https://radar.offseq.com/threat/cve-2026-44182-cwe-74-improper-neutralization-of-s-6b0aef4923a88d9e #OffSeq #CVE202644182 #Kubernetes", "url": "https://infosec.exchange/users/offseq/statuses/116933435409691310"}, {"timestamp": "2026-07-17T04:30:27.691Z", "date_only": false, "value": "2026-07-17T04:30:27.691187Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsw42qojn2c", "record": "cve-2026-44182", "field": "creation_timestamp", "uuid": "cfdb3c5b-a9ce-41f7-8c50-b300f45483bc", "content": "jupyter-server enterprise_gateway <3.3.0 hit by CRITICAL YAML injection (CVE-2026-44182). Attackers can create privileged Kubernetes pods. Upgrade to 3.3.0+ now. https://radar.offseq.com/threat/cve-2026-44182-cwe-74-improper-neutralization-of-s-6b0aef4923a88d9e #OffSeq #CVE202644182 #Kubernetes", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mqsw42qojn2c"}, {"timestamp": "2026-07-17T15:04:35.101Z", "date_only": false, "value": "2026-07-17T15:04:35.101845Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-44182", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-17T15:04:35.101Z", "date_only": false, "value": "2026-07-17T15:04:35.101845Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44182", "record": "FKIE_CVE-2026-44182", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-17T15:04:51.068Z", "date_only": false, "value": "2026-07-17T15:04:51.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-44182", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-17T15:04:51.068Z", "date_only": false, "value": "2026-07-17T15:04:51.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-44182", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-05T15:53:43.210Z", "date_only": false, "value": "2026-08-05T15:53:43.210", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44182", "record": "FKIE_CVE-2026-44182", "field": "lastModified"}]}