{"metadata": {"vulnerability": "CVE-2026-49481", "count": 16, "kinds": {"milestone": 3, "sighting": 7, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-05-30T04:17:43.095Z", "date_only": false, "value": "2026-05-30T04:17:43.095Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-49481", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-12T23:08:45.158Z", "date_only": false, "value": "2026-08-12T23:08:45.158Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49481", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-12T23:08:45.158Z", "date_only": false, "value": "2026-08-12T23:08:45.158Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-49481", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T23:17:21.363Z", "date_only": false, "value": "2026-08-12T23:17:21.363", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49481", "record": "FKIE_CVE-2026-49481", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-12T23:30:05.061Z", "date_only": false, "value": "2026-08-12T23:30:05.061994Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mswbvswyae2m", "record": "CVE-2026-49481", "field": "creation_timestamp", "uuid": "fc85a57c-611b-4a69-b2fe-799f31342e89", "content": "CVE-2026-49481 - upsnap\nUpSnap's device management feature allows a low-privileged user to execute arbitrary system commands on the server hosting UpSnap, potentially leading to unauthorized access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#upsnap #seriousm4x #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mswbvswyae2m"}, {"timestamp": "2026-08-13T00:00:44.749Z", "date_only": false, "value": "2026-08-13T00:00:44.749222Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mswdmmrvnt2b", "record": "CVE-2026-49481", "field": "creation_timestamp", "uuid": "d4b70e3b-cdd4-485e-bbd3-0b1fcf31b1a8", "content": "\ud83d\udd34 CVE-2026-49481 - Critical (9.6)\n\nUpSnap is a wake on lan web app. Versions prior to 5.4.0 have an OS command injection vulnerabili...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49481/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mswdmmrvnt2b"}, {"timestamp": "2026-08-13T00:19:27.497Z", "date_only": false, "value": "2026-08-13T00:19:27.497515Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c434tu5fhzto5", "record": "CVE-2026-49481", "field": "creation_timestamp", "uuid": "71c9cd43-4b0e-4f1f-8324-3431242d22ae", "content": "CVE-2026-49481 - UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmd\nCVE ID : CVE-2026-49481\n \n Published : Aug. 12, 2026, 11:17 p.m. | 32\u00a0minutes ago\n \n Description : UpSnap is a wake on lan web app. Versions prior to 5.4.0 have...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/c434tu5fhzto5"}, {"timestamp": "2026-08-13T06:00:25.796Z", "date_only": false, "value": "2026-08-13T06:00:25.796614Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117086671667126696", "record": "cve-2026-49481", "field": "creation_timestamp", "uuid": "9baaa10d-d06b-4c18-8534-695ae90979ef", "content": "CVE-2026-49481 | UpSnap (<5.4.0) has a CRITICAL OS command injection flaw (CVSS 9.6). Authenticated low-priv users can execute arbitrary commands on the server. Patch: upgrade to 5.4.0. Details: https://radar.offseq.com/threat/cve-2026-49481-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-772a6e1ae64fad76 #OffSeq #infosec #CVE202649481 #remotecodeexecution", "url": "https://infosec.exchange/users/offseq/statuses/117086671667126696"}, {"timestamp": "2026-08-13T06:00:27.864Z", "date_only": false, "value": "2026-08-13T06:00:27.864796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mswxptt55g2c", "record": "cve-2026-49481", "field": "creation_timestamp", "uuid": "8b4307a6-8525-4057-9f6d-2a9a8826376d", "content": "CRITICAL OS command injection in UpSnap (<5.4.0) enables low-privileged users to run arbitrary commands on the server. Upgrade to 5.4.0 ASAP. https://radar.offseq.com/threat/cve-2026-49481-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-772a6e1ae64fad76 #OffSeq...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mswxptt55g2c"}, {"timestamp": "2026-08-13T17:50:36.206Z", "date_only": false, "value": "2026-08-13T17:50:36.206615Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49481", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-13T17:50:36.206Z", "date_only": false, "value": "2026-08-13T17:50:36.206615Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49481", "record": "FKIE_CVE-2026-49481", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-13T17:53:11.259Z", "date_only": false, "value": "2026-08-13T17:53:11.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-49481", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-13T17:53:11.259Z", "date_only": false, "value": "2026-08-13T17:53:11.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49481", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-03T22:52:16.414Z", "date_only": false, "value": "2026-09-03T22:52:16.414823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3munk2hkfel2m", "record": "CVE-2026-49481", "field": "creation_timestamp", "uuid": "f7b58d1a-c45c-4d0c-ac17-4581c4a523f7", "content": "The latest update for #getastra includes \"CVE-2026-49481: Vulnerability in UpSnap\" and \"Autonomous #Pentesting for #SaaS Companies in 2026: The Complete Guide\".\n \n#cybersecurity #webprotection https://opsmtrs.com/3KjMi92", "url": "https://bsky.app/profile/opsmatters.com/post/3munk2hkfel2m"}, {"timestamp": "2026-09-08T03:48:26.645Z", "date_only": false, "value": "2026-09-08T03:48:26.645645Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muy4hqcitr24", "record": "CVE-2026-49481", "field": "creation_timestamp", "uuid": "43e0587e-c16e-42f2-8bda-046320dca8fe", "content": "The latest update for #getastra includes \"Autonomous Pentest Findings: Unauthenticated Kill Switch\" and \"CVE-2026-49481: Vulnerability in UpSnap\".\n \n#cybersecurity #webprotection #pentesting https://opsmtrs.com/3KjMi92", "url": "https://bsky.app/profile/opsmatters.com/post/3muy4hqcitr24"}, {"timestamp": "2026-10-24T16:10:00.153Z", "date_only": false, "value": "2026-10-24T16:10:00.153", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49481", "record": "FKIE_CVE-2026-49481", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T08:39:21.620Z", "anchors": {"origin": {"timestamp": "2026-08-12T23:08:45.158Z", "date_only": false, "value": "2026-08-12T23:08:45.158Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49481", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-12T23:08:45.158Z", "date_only": false, "value": "2026-08-12T23:08:45.158Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49481", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 7896636.462842, "hours": 2193.510128567222, "days": 91.39625535696759, "min_seconds": 7896636.462842, "max_seconds": 7896636.462842, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-12T23:08:45.158Z", "date_only": false, "value": "2026-08-12T23:08:45.158Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49481", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T08:39:21.620Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}