{"metadata": {"vulnerability": "CVE-2026-48611", "count": 39, "kinds": {"milestone": 4, "sighting": 22, "kev": 5, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-05-22T15:00:09.276Z", "date_only": false, "value": "2026-05-22T15:00:09.276Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2026-48611", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-12T04:17:08Z", "date_only": false, "value": "2026-06-12T04:17:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-24PR-8GGP-H88C", "record": "GHSA-24PR-8GGP-H88C", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-12T04:17:08.180Z", "date_only": false, "value": "2026-06-12T04:17:08.180", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48611", "record": "FKIE_CVE-2026-48611", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-12T05:00:25.771Z", "date_only": false, "value": "2026-06-12T05:00:25.771993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xhfwjef24", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "7a52740a-98bb-4653-834b-90d8105a51f3", "content": "\ud83d\udd34 CVE-2026-48611 - Critical (9.8)\n\nImproper authentication checks in the OAuth implementation allow account hijacking even when OAut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48611/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xhfwjef24"}, {"timestamp": "2026-06-12T05:36:39.457Z", "date_only": false, "value": "2026-06-12T05:36:39.457402Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2zi7lj7g2b", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "35ca5189-c5fd-459b-9810-306d1bc3f230", "content": "CVE-2026-48611 - Google OAuth Account Hijacking Vulnerability\nCVE ID : CVE-2026-48611\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2zi7lj7g2b"}, {"timestamp": "2026-06-12T06:33:20Z", "date_only": false, "value": "2026-06-12T06:33:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-24PR-8GGP-H88C", "record": "GHSA-24PR-8GGP-H88C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-12T06:33:20Z", "date_only": false, "value": "2026-06-12T06:33:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-24PR-8GGP-H88C", "record": "GHSA-24PR-8GGP-H88C", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-12T12:55:10.819Z", "date_only": false, "value": "2026-06-12T12:55:10.819942Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48611", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-12T12:55:10.819Z", "date_only": false, "value": "2026-06-12T12:55:10.819942Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48611", "record": "FKIE_CVE-2026-48611", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-12T12:55:19.663Z", "date_only": false, "value": "2026-06-12T12:55:19.663Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-12T12:55:19.663Z", "date_only": false, "value": "2026-06-12T12:55:19.663Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48611", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-12T18:51:21.894Z", "date_only": false, "value": "2026-06-12T18:51:21.894384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ROllerozxa.hachyderm.io.ap.brid.gy/post/3mo4fv2jki6o2", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "eafd2b2b-58c3-452a-8809-b3c12bc6ed8f", "content": "Apparently there is a critical #phpBB vulnerability (CVE-2026-48611) that allows anyone to hijack user accounts on any forum with a vulnerable version that has mostly flown under the radar. Someone on a forum I frequent managed to log into the admin account to demonstrate it.\n\nThe fix seems to [\u2026]", "url": "https://bsky.app/profile/ROllerozxa.hachyderm.io.ap.brid.gy/post/3mo4fv2jki6o2"}, {"timestamp": "2026-06-17T10:55:09.423Z", "date_only": false, "value": "2026-06-17T10:55:09.423", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48611", "record": "FKIE_CVE-2026-48611", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-03T04:00:54.957Z", "date_only": false, "value": "2026-07-03T04:00:54.957519Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b2af75be-7bee-4ddc-aada-4b258ec4f3fa", "url": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-04T09:29:28.358Z", "date_only": false, "value": "2026-07-04T09:29:28.358277Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqmdovk2k", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "8a20348a-ba0c-4101-ac56-1389b9d5abb4", "content": "\ud83d\udc49 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist.\n\nAND", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqmdovk2k"}, {"timestamp": "2026-07-04T09:29:29.216Z", "date_only": false, "value": "2026-07-04T09:29:29.216939Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqogfo22k", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "058122fe-b188-49bb-bda8-a9844b365d0e", "content": "\ud83d\udc49 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist.\n\nAND", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqogfo22k"}, {"timestamp": "2026-07-04T09:29:30.084Z", "date_only": false, "value": "2026-07-04T09:29:30.084249Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqpiqcc2k", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "195ee082-8598-46f1-948a-8df61571c3dc", "content": "\ud83d\udc49 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist.\n\nAND", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqpiqcc2k"}, {"timestamp": "2026-07-04T12:04:19.673Z", "date_only": false, "value": "2026-07-04T12:04:19.673743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3mpszfmkkxc2i", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "3d1ba36a-7ec6-48e9-8255-014c82f4c1a4", "content": "phpBB PTT-2026-004 (CVE-2026-48611) requires a single unauthenticated HTTP request and works on default phpBB installations. PTT-2026-005 (CVE-2026-48612) requires phpBB to have OAuth configured", "url": "https://bsky.app/profile/netalexx.bsky.social/post/3mpszfmkkxc2i"}, {"timestamp": "2026-07-06T06:00:04.593Z", "date_only": false, "value": "2026-07-06T06:00:04.593147Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48611.yaml", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "4c736185-ebc7-4bd4-9f7a-9f5628b956fb", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-48611.yaml"}, {"timestamp": "2026-07-09T14:34:10.372Z", "date_only": false, "value": "2026-07-09T14:34:10.372998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mq7u47666s2y", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b60ff761-28a5-4cdc-b90f-10db91b86c11", "content": "\ud83c\udf10 Our research team found two authentication flaws in phpBB, one buried in the code for over a decade. There's a working PoC for each, and the Network Scanner now detects the most critical one - CVE-2026-48611 (9.4).", "url": "https://bsky.app/profile/pentest-tools.com/post/3mq7u47666s2y"}, {"timestamp": "2026-07-13T22:00:22.894Z", "date_only": false, "value": "2026-07-13T22:00:22.894918Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/89613", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b44aef4e-89c9-4ffd-8aa0-99e1bf9e7ea5", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48611-EXPLOIT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Diznev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 10:37:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48611- authentication bypass in phpBB\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89613"}, {"timestamp": "2026-07-15T00:00:17.751Z", "date_only": false, "value": "2026-07-15T00:00:17.751253Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/89613", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "593429a1-0a94-4bfb-860e-49be1e7c1df0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-48611-EXPLOIT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Diznev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 10:37:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48611- authentication bypass in phpBB\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89613", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-16T19:00:17.932Z", "date_only": false, "value": "2026-07-16T19:00:17.932429Z", "kind": "sighting", "label": "Seen", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "4fc559cc-ce48-481e-bb97-e11a588128b8"}, {"timestamp": "2026-07-16T19:00:18.135Z", "date_only": false, "value": "2026-07-16T19:00:18.135253Z", "kind": "sighting", "label": "Seen", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "d8694ba3-a082-40fd-8028-32390de57d1e"}, {"timestamp": "2026-07-18T00:00:25.414Z", "date_only": false, "value": "2026-07-18T00:00:25.414132Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "2515eec1-f4de-4b36-acbc-12152a55f4d1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-18T00:00:26.318Z", "date_only": false, "value": "2026-07-18T00:00:26.318051Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b2975b29-6d9c-4191-8f42-b1098a153641", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-48611", "field": "status.status_updated_at", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T07:57:22.068Z", "date_only": false, "value": "2026-07-20T07:57:22.068Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-48611", "field": "evidence.0.details.added_date", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T08:00:01Z", "date_only": false, "value": "2026-07-20T08:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T08:00:31.177Z", "date_only": false, "value": "2026-07-20T08:00:31.177896Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69756ecd-e976-4b99-a8b4-c786d1056cd8", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "cf63a919-d75a-446f-bba9-492d2d7dab05", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69756ecd-e976-4b99-a8b4-c786d1056cd8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-30T18:00:03.759Z", "date_only": false, "value": "2026-08-30T18:00:03.759258Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100382", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "0c58ee5c-d386-4ab2-b0af-8c38e116d7e2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a phpBB-CVE-2026-48611\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ethicalgrey\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 15:37:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAutomated PoC for CVE-2026-48611 \u2014 phpBB OAuth login_link authentication bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100382", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-02T01:00:15.162Z", "date_only": false, "value": "2026-09-02T01:00:15.162622Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "8bc08c70-333c-4f68-a9d2-1bd69b6ff39d"}, {"timestamp": "2026-09-02T01:00:17.130Z", "date_only": false, "value": "2026-09-02T01:00:17.130827Z", "kind": "sighting", "label": "Seen", "source": "Telegram/23aKnIFlZBB8r0V68doIAMfGKCLJusz1ZVEh5vrmpx1x9Pc", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "44a33c75-4105-45db-bf91-66e4e372fdac"}, {"timestamp": "2026-09-03T00:00:38.675Z", "date_only": false, "value": "2026-09-03T00:00:38.675621Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/23aKnIFlZBB8r0V68doIAMfGKCLJusz1ZVEh5vrmpx1x9Pc", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "126223b7-a6cd-430c-b354-110dd8562739", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T00:00:38.936Z", "date_only": false, "value": "2026-09-03T00:00:38.936263Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "1d620cf0-4c2c-4e03-a0e1-e52f2ddf8785", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T00:26:00.127Z", "anchors": {"origin": {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-03T04:00:54.957Z", "date_only": false, "value": "2026-07-03T04:00:54.957519Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b2af75be-7bee-4ddc-aada-4b258ec4f3fa", "url": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 3302978.649, "hours": 917.4940691666667, "days": 38.22891954861112, "min_seconds": 3302978.649, "max_seconds": 3302978.649, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 3302978.649, "hours": 917.4940691666667, "days": 38.22891954861112, "min_seconds": 3302978.649, "max_seconds": 3302978.649, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1819991.606, "hours": 505.55322388888885, "days": 21.064717662037037, "min_seconds": 1819991.606, "max_seconds": 1819991.606, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-03T04:00:54.957Z", "date_only": false, "value": "2026-07-03T04:00:54.957519Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b2af75be-7bee-4ddc-aada-4b258ec4f3fa", "url": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 13471096.776603, "hours": 3741.9713268341666, "days": 155.91547195142363, "min_seconds": 13471096.776603, "max_seconds": 13471096.776603, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-12T02:27:43.351Z", "date_only": false, "value": "2026-06-12T02:27:43.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48611", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:26:00.127Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 10168118.127603, "hours": 2824.4772576675, "days": 117.6865524028125, "min_seconds": 10168118.127603, "max_seconds": 10168118.127603, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-20T07:57:22Z", "date_only": false, "value": "2026-07-20T07:57:22+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-48611", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "69756ecd-e976-4b99-a8b4-c786d1056cd8", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T00:26:00.127Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 11651105.170603, "hours": 3236.4181029452775, "days": 134.85075428938657, "min_seconds": 11651105.170603, "max_seconds": 11651105.170603, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-03T04:00:54.957Z", "date_only": false, "value": "2026-07-03T04:00:54.957519Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "record": "CVE-2026-48611", "field": "creation_timestamp", "uuid": "b2af75be-7bee-4ddc-aada-4b258ec4f3fa", "url": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T00:26:00.127Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}