{"metadata": {"vulnerability": "CVE-2026-48853", "count": 23, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-05-25T20:44:10.696Z", "date_only": false, "value": "2026-05-25T20:44:10.696Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48853", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-15T21:56:15Z", "date_only": false, "value": "2026-06-15T21:56:15.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / EEF", "record": "CVE-2026-48853", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-15T21:56:15.262Z", "date_only": false, "value": "2026-06-15T21:56:15.262Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48853", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-15T23:16:00Z", "date_only": false, "value": "2026-06-15T23:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-48853", "record": "UBUNTU-CVE-2026-48853", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-15T23:16:45Z", "date_only": false, "value": "2026-06-15T23:16:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GRP7-V8XH-RJ7H", "record": "GHSA-GRP7-V8XH-RJ7H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-15T23:16:45.663Z", "date_only": false, "value": "2026-06-15T23:16:45.663", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48853", "record": "FKIE_CVE-2026-48853", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-16T00:00:37.182Z", "date_only": false, "value": "2026-06-16T00:00:37.182218Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moeikz22zn2e", "record": "cve-2026-48853", "field": "creation_timestamp", "uuid": "908ab7b0-bf69-491f-8b32-568c5d59100f", "content": "CRITICAL: elixir-grpc grpc (<1.0.0) flaw lets attackers crash BEAM VM or gain RCE via unsafe deserialization. Block risky Content-Type inputs & await vendor patch. https://radar.offseq.com/threat/cve-2026-48853-cwe-502-deserialization-of-untruste-dc5cfe73 #OffSeq #elixir #CVE202648853", "url": "https://bsky.app/profile/offseq.bsky.social/post/3moeikz22zn2e"}, {"timestamp": "2026-06-16T00:00:42.686Z", "date_only": false, "value": "2026-06-16T00:00:42.686433Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116756842721787890", "record": "cve-2026-48853", "field": "creation_timestamp", "uuid": "127e24ef-a0e1-4d1a-b935-d5dc3a1021fd", "content": "\ud83d\udea8 CRITICAL: elixir-grpc grpc (0.4.0-<1.0.0) vulnerable to unauthenticated RCE & DoS via unsafe :erlang.binary_to_term/1 use. Patch status pending \u2014 restrict 'application/grpc+erlpack' inputs now! CVE-2026-48853 https://radar.offseq.com/threat/cve-2026-48853-cwe-502-deserialization-of-untruste-dc5cfe73 #OffSeq #elixir #CVE202648853 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/116756842721787890"}, {"timestamp": "2026-06-16T00:23:17.509Z", "date_only": false, "value": "2026-06-16T00:23:17.509801Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moejtklbs22p", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "ded17b34-a746-4f4b-b106-1cf230bf9b2c", "content": "CVE-2026-48853 - Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc\nCVE ID : CVE-2026-48853\n \n Published : June 15, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data and Allocation of Resour...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3moejtklbs22p"}, {"timestamp": "2026-06-16T14:44:19.175Z", "date_only": false, "value": "2026-06-16T14:44:19.175606Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48853", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-16T14:44:19.175Z", "date_only": false, "value": "2026-06-16T14:44:19.175606Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48853", "record": "FKIE_CVE-2026-48853", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-16T14:45:02.196Z", "date_only": false, "value": "2026-06-16T14:45:02.196Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48853", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-14T01:00:06.307Z", "date_only": false, "value": "2026-07-14T01:00:06.307613Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3248", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "85e15560-1aff-4d16-ae8d-c5b7e927e6a2", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "url": "https://t.me/bdufstecru/3248"}, {"timestamp": "2026-07-15T00:00:34.140Z", "date_only": false, "value": "2026-07-15T00:00:34.140141Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3248", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "1aef5f34-c7e3-4018-8e81-9812c0200f77", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "url": "https://t.me/bdufstecru/3248", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-25T18:09:53Z", "date_only": false, "value": "2026-08-25T18:09:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GRP7-V8XH-RJ7H", "record": "GHSA-GRP7-V8XH-RJ7H", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-25T18:09:53Z", "date_only": false, "value": "2026-08-25T18:09:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GRP7-V8XH-RJ7H", "record": "GHSA-GRP7-V8XH-RJ7H", "field": "modified"}, {"timestamp": "2026-08-25T18:20:04.314Z", "date_only": false, "value": "2026-08-25T18:20:04.314290Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwgngkcbk25", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "0988c7ea-6d42-40c0-b219-ceed9d73a40b", "content": "CVE-2026-48853 - grpc\nElixir gRPC versions 0.4.0 to 1.0.0 are vulnerable to unauthenticated code execution and denial of service attacks. An attacker can crash the server by exhausting its atom table or execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grpc #Hex #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwgngkcbk25"}, {"timestamp": "2026-08-25T20:35:30.552Z", "date_only": false, "value": "2026-08-25T20:35:30.552873Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "2a92c422-8625-4028-b91a-9cca43164dbe", "url": "https://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-26T11:32:18.733Z", "date_only": false, "value": "2026-08-26T11:32:18.733166Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/50a574f48857c34c0cb9ded8ce78e9b5", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "9b03d3fe-4de1-442e-8123-7ec66194be4d", "content": "# CVE-2026-48853: CVE-2026-48853: Remote Code Execution and Denial of Service in elixir-grpc via Erlpack Deserialization\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48853\n\n## Summary\nA critical vulnerability exists in the elixir-grpc library's Erlpack codec, where the unsafe deserialization of Erlang External Term Format (ETF) payloads allows unauthenticated remote attackers to cause a Denial of Service through atom table exhaustion or execute arbitrary code on the host server.\n\n## TL;DR\nUnauthenticated remote attackers can crash the BEAM VM or execute arbitrary code via crafted gRPC payloads containing unsafe Erlang External Term Format (ETF) structures when using the Erlpack codec.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-502, CWE-770\n- **Attack Vector**: Network (AV:N/AC:L/AT:P/PR:N/UI:N)\n- **CVSS Score**: 9.2 (Critical)\n- **EPSS Score**: 0.00573 (44.79th percentile)\n- **Impact**: Remote Code Execution (RCE) / Denial of Service (DoS)\n- **Exploit Status**: PoC / Analysis\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- elixir-grpc/grpc\n- **grpc**: >= 0.4.0, < 1.0.0 (Fixed in: `v1.0.0`)\n\n## Mitigation\n\n- Upgrade elixir-grpc to version 1.0.0 or higher.\n- Restrict supported server codecs by removing GRPC.Codec.Erlpack from the server configuration.\n- Deploy network firewall or proxy rules to filter and drop HTTP/2 requests with the Content-Type header containing application/grpc+erlpack.\n\n**Remediation Steps:**\n1. Open the mix.exs file in your Elixir project.\n2. Locate the :grpc dependency in your deps/0 block.\n3. Update the version constraint to '~> 1.0.0' or lock it directly to '1.0.0'.\n4. Run 'mix deps.get' to fetch the secure version of the package.\n5. Rebuild and redeploy your microservices to production.\n\n## References\n\n- [Fix Commit in GitHub Repository](https://github.com/elixir-grpc/grpc/commit/272a97a5ea1b46af1819f14a831fcf35fc91f992)\n- [GitHub Security Advisory (GHSA-grp7-v8xh-rj7h)](https://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h)\n- [Official Erlef CNA Record](https://cna.erlef.org/cves/CVE-2026-48853.html)\n- [Open Source Vulnerabilities (OSV) Record](https://osv.dev/vulnerability/EEF-CVE-2026-48853)\n- [NVD CVE-2026-48853 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48853)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48853) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/50a574f48857c34c0cb9ded8ce78e9b5"}, {"timestamp": "2026-09-24T21:08:47.457Z", "date_only": false, "value": "2026-09-24T21:08:47.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48853", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T21:08:47.457Z", "date_only": false, "value": "2026-09-24T21:08:47.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / EEF", "record": "CVE-2026-48853", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-17T09:44:20Z", "date_only": false, "value": "2026-10-17T09:44:20Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-48853", "record": "UBUNTU-CVE-2026-48853", "field": "modified"}, {"timestamp": "2026-10-25T23:10:00.167Z", "date_only": false, "value": "2026-10-25T23:10:00.167", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48853", "record": "FKIE_CVE-2026-48853", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T08:41:36.946Z", "anchors": {"origin": {"timestamp": "2026-06-15T21:56:15Z", "date_only": false, "value": "2026-06-15T21:56:15.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / EEF", "record": "CVE-2026-48853", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-15T21:56:15Z", "date_only": false, "value": "2026-06-15T21:56:15.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / EEF", "record": "CVE-2026-48853", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-15T00:00:34.140Z", "date_only": false, "value": "2026-07-15T00:00:34.140141Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3248", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "1aef5f34-c7e3-4018-8e81-9812c0200f77", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "url": "https://t.me/bdufstecru/3248", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2513059.14, "hours": 698.0719833333334, "days": 29.08633263888889, "min_seconds": 2513059.14, "max_seconds": 2513059.14, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-15T21:56:15Z", "date_only": false, "value": "2026-06-15T21:56:15.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / EEF", "record": "CVE-2026-48853", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-15T00:00:34.140Z", "date_only": false, "value": "2026-07-15T00:00:34.140141Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3248", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "1aef5f34-c7e3-4018-8e81-9812c0200f77", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "url": "https://t.me/bdufstecru/3248", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 11702721.946874, "hours": 3250.756096353889, "days": 135.44817068141205, "min_seconds": 11702721.946874, "max_seconds": 11702721.946874, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-15T21:56:15Z", "date_only": false, "value": "2026-06-15T21:56:15.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / EEF", "record": "CVE-2026-48853", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T08:41:36.946Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 9189662.806874, "hours": 2552.6841130205553, "days": 106.36183804252315, "min_seconds": 9189662.806874, "max_seconds": 9189662.806874, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-15T00:00:34.140Z", "date_only": false, "value": "2026-07-15T00:00:34.140141Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3248", "record": "CVE-2026-48853", "field": "creation_timestamp", "uuid": "1aef5f34-c7e3-4018-8e81-9812c0200f77", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0435\u043a\u0430 Erlpack \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 gRPC \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Elixir grpc \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-08314\nCVE-2026-48853\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h", "url": "https://t.me/bdufstecru/3248", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T08:41:36.946Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}