{"metadata": {"vulnerability": "CVE-2026-44935", "count": 25, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-05-08T12:29:48.967Z", "date_only": false, "value": "2026-05-08T12:29:48.967Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-44935", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-28T11:45:32.727Z", "date_only": false, "value": "2026-05-28T11:45:32.727+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-28T15:26:00Z", "date_only": false, "value": "2026-05-28T15:26:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / suse", "record": "CVE-2026-44935", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T20:45:39Z", "date_only": false, "value": "2026-07-01T20:45:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XR65-5CPM-G36X", "record": "GHSA-XR65-5CPM-G36X", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-01T20:45:39Z", "date_only": false, "value": "2026-07-01T20:45:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XR65-5CPM-G36X", "record": "GHSA-XR65-5CPM-G36X", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": false, "value": "2026-07-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-44935", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": false, "value": "2026-07-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44935", "record": "FKIE_CVE-2026-44935", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-02T16:00:06.751Z", "date_only": false, "value": "2026-07-02T16:00:06.751Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-44935", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-02T16:01:11.745Z", "date_only": false, "value": "2026-07-02T16:01:11.745Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / suse", "record": "CVE-2026-44935", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-02T17:16:59.667Z", "date_only": false, "value": "2026-07-02T17:16:59.667", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44935", "record": "FKIE_CVE-2026-44935", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-02T18:00:22.737Z", "date_only": false, "value": "2026-07-02T18:00:22.737848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpomehucbl2t", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "62e1bd33-1a18-4ef8-aaa7-6b4cc4702f80", "content": "\ud83d\udd34 CVE-2026-44935 - Critical (9.9)\n\nMissing validation of \"valuesFrom\" references in Helm Deployer of SUSE Rancher Fleet 0.15 before ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpomehucbl2t"}, {"timestamp": "2026-07-02T19:40:57.652Z", "date_only": false, "value": "2026-07-02T19:40:57.652751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mporyehyhq2b", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "62456a19-3e3f-4a98-8b14-934adaafef05", "content": "CVE-2026-44935 - Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer\nCVE ID : CVE-2026-44935\n \n Published : July 2, 2026, 4 p.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : Missing validation of \"valuesFrom\" ref...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mporyehyhq2b"}, {"timestamp": "2026-07-03T03:56:15.397Z", "date_only": false, "value": "2026-07-03T03:56:15.397Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-44935", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-03T03:56:15.397Z", "date_only": false, "value": "2026-07-03T03:56:15.397Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-44935", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-03T08:42:38.303Z", "date_only": false, "value": "2026-07-03T08:42:38.303627Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5o4f2qk26", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "594d3746-cfa8-44ae-ad7b-52c51a83e362", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44935 \u0432 Helm Deployer SUSE Rancher: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/647C96F4-CDCC-44D6-AFD1-464E3A0D6B5D", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5o4f2qk26"}, {"timestamp": "2026-07-03T09:29:56.355Z", "date_only": false, "value": "2026-07-03T09:29:56.355218Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqacowpdj2b", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "1f34ea97-633a-449e-8825-5479e72623d8", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44935 \u0432 SUSE Rancher: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/07CED34B-6A47-41E5-8357-8C260CEC28B4", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqacowpdj2b"}, {"timestamp": "2026-07-03T10:40:20.287Z", "date_only": false, "value": "2026-07-03T10:40:20.287157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqeal2g522f", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "42d7a82f-a47f-40c7-8fc0-6f6dc30db129", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44935 \u0432 Helm Deployer SUSE Rancher: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0E01B8E5-1509-469C-96CD-670AA658633A", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqeal2g522f"}, {"timestamp": "2026-07-03T20:07:35.885Z", "date_only": false, "value": "2026-07-03T20:07:35.885945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprdww7mfa2k", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "e9e29949-822c-4fb0-9ac7-81d088e3c28f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44935 \u0432 Helm Deployer SUSE Rancher: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3834B446-CECC-42F8-83F0-ED3F79D696A3", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprdww7mfa2k"}, {"timestamp": "2026-07-03T21:42:04.767Z", "date_only": false, "value": "2026-07-03T21:42:04.767393Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprj7uclmn2z", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "dc17e14a-022c-4f95-a5d1-2bcc3241915e", "content": "CVE-2026-44935 - rancher\nFleet, a tool used in Rancher Manager, has a security flaw that allows unauthorized access to sensitive data in multi-tenant environments. This means that one tenant could access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rancher #Golang #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mprj7uclmn2z"}, {"timestamp": "2026-07-07T02:07:07.357Z", "date_only": false, "value": "2026-07-07T02:07:07.357349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpzjgkfo2f2n", "record": "CVE-2026-44935", "field": "creation_timestamp", "uuid": "16a79cba-d0d2-403f-b486-bfe2ff3262e1", "content": "\ud83d\udccc CVE-2026-44935 - Missing validation of \"valuesFrom\" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0... https://www.cyberhub.blog/cves/CVE-2026-44935", "url": "https://bsky.app/profile/cyberhub.blog/post/3mpzjgkfo2f2n"}, {"timestamp": "2026-10-25T21:10:00.770Z", "date_only": false, "value": "2026-10-25T21:10:00.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-44935", "record": "FKIE_CVE-2026-44935", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-06T03:50:20.233Z", "anchors": {"origin": {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 14017820.233066, "hours": 3893.8389536294444, "days": 162.2432897345602, "min_seconds": 14017820.233066, "max_seconds": 14017820.233066, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-27T22:00:00Z", "date_only": false, "value": "2026-05-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1715", "record": "WID-SEC-W-2026-1715", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-06T03:50:20.233Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}