{"metadata": {"vulnerability": "CVE-2026-46447", "count": 26, "kinds": {"milestone": 9, "sighting": 4, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-46447", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-46447", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-03T17:19:58.036Z", "date_only": false, "value": "2026-06-03T17:19:58.036194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfmlk5tff2h", "record": "CVE-2026-46447", "field": "creation_timestamp", "uuid": "15bb3041-c9ed-43b5-b9a9-08809a7e4f0e", "content": "[OSSA-2026-017] Ironic: Script injection during node boot via linux command line override (CVE-2026-46447)", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfmlk5tff2h"}, {"timestamp": "2026-06-03T22:16:00Z", "date_only": false, "value": "2026-06-03T22:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-46447", "record": "UBUNTU-CVE-2026-46447", "field": "published"}, {"timestamp": "2026-06-03T22:16:34Z", "date_only": false, "value": "2026-06-03T22:16:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JRH2-F5JC-XPGR", "record": "GHSA-JRH2-F5JC-XPGR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-03T22:16:34.793Z", "date_only": false, "value": "2026-06-03T22:16:34.793", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-46447", "record": "FKIE_CVE-2026-46447", "field": "published"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": true, "value": "2026-06-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0746", "record": "CERTFR-2026-AVI-0746", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-06-04T00:30:25Z", "date_only": false, "value": "2026-06-04T00:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JRH2-F5JC-XPGR", "record": "GHSA-JRH2-F5JC-XPGR", "field": "published"}, {"timestamp": "2026-06-04T01:01:41.071Z", "date_only": false, "value": "2026-06-04T01:01:41.071056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnggf5vdix2f", "record": "CVE-2026-46447", "field": "creation_timestamp", "uuid": "ae20b9fb-08bb-4e10-9804-a9659806f065", "content": "CVE-2026-46447 - OpenStack Ironic Boot Script Injection\nCVE ID : CVE-2026-46447\n \n Published : June 3, 2026, 10:16 p.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : OpenStack Ironic through 35.0.x allows Boot Script Injection.\n \n Severity: 0.0 | NA\n \n Visit the link for more det...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnggf5vdix2f"}, {"timestamp": "2026-06-04T03:18:40.368Z", "date_only": false, "value": "2026-06-04T03:18:40.368Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-46447", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-04T15:15:09.125Z", "date_only": false, "value": "2026-06-04T15:15:09.125776Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-46447", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-04T15:15:09.125Z", "date_only": false, "value": "2026-06-04T15:15:09.125776Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-46447", "record": "FKIE_CVE-2026-46447", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-04T15:17:37.440Z", "date_only": false, "value": "2026-06-04T15:17:37.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-46447", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": true, "value": "2026-06-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0746", "record": "CERTFR-2026-AVI-0746", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0746", "record": "CERTFR-2026-AVI-0746", "field": "last_revision_date"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0746", "record": "CERTFR-2026-AVI-0746", "field": "initial_release_date"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0746", "record": "CERTFR-2026-AVI-0746", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-15T22:19:06.750Z", "date_only": false, "value": "2026-06-15T22:19:06.750788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moecviubun2j", "record": "CVE-2026-46447", "field": "creation_timestamp", "uuid": "bcb616d5-cbcd-4c83-8c8c-8e1a2f15bf14", "content": "[OSSA-2026-017] Errata 1: Ironic: Script injection during node boot via linux command line override (CVE-2026-46447)", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moecviubun2j"}, {"timestamp": "2026-06-15T22:40:19.590Z", "date_only": false, "value": "2026-06-15T22:40:19.590Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-46447", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-15T22:40:19.590Z", "date_only": false, "value": "2026-06-15T22:40:19.590Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-46447", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-16T16:09:48.658Z", "date_only": false, "value": "2026-06-16T16:09:48.658558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/canartuc.com/post/3mog6pyk4j32w", "record": "CVE-2026-46447", "field": "creation_timestamp", "uuid": "1a0047d9-b6c8-4f9b-bfda-33d94278fc1a", "content": "OpenStack Ironic shipped an errata for CVE-2026-46447 because the original patches broke valid URL-encoded kernel parameters. The bug let a user with node edit rights inject iPXE scripts during boot. Both rounds are needed across Ironic 17.0.0 to 35.0.1. Patched your bare-metal fleet?\n#OpenStack", "url": "https://bsky.app/profile/canartuc.com/post/3mog6pyk4j32w"}, {"timestamp": "2026-07-14T19:35:21Z", "date_only": false, "value": "2026-07-14T19:35:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JRH2-F5JC-XPGR", "record": "GHSA-JRH2-F5JC-XPGR", "field": "modified"}, {"timestamp": "2026-07-22T20:10:00.127Z", "date_only": false, "value": "2026-07-22T20:10:00.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-46447", "record": "FKIE_CVE-2026-46447", "field": "lastModified"}, {"timestamp": "2026-07-23T11:41:37.984Z", "date_only": false, "value": "2026-07-23T11:41:37.984855Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3471", "record": "PYSEC-2026-3471", "field": "published"}, {"timestamp": "2026-07-23T14:31:19.914Z", "date_only": false, "value": "2026-07-23T14:31:19.914769Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3471", "record": "PYSEC-2026-3471", "field": "modified"}, {"timestamp": "2026-10-17T09:44:04Z", "date_only": false, "value": "2026-10-17T09:44:04Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-46447", "record": "UBUNTU-CVE-2026-46447", "field": "modified"}]}