{"metadata": {"vulnerability": "CVE-2026-49483", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-05-30T04:17:43.095Z", "date_only": false, "value": "2026-05-30T04:17:43.095Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-49483", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T21:36:10.390Z", "date_only": false, "value": "2026-10-12T21:36:10.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49483", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T21:36:10.390Z", "date_only": false, "value": "2026-10-12T21:36:10.390Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-49483", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T22:05:22.455Z", "date_only": false, "value": "2026-10-12T22:05:22.455820Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430204629242486", "record": "CVE-2026-49483", "field": "creation_timestamp", "uuid": "9d9ba1a7-2fdf-41d3-b5bb-47214e1c66d1", "content": "CVE-2026-49483 Code for IBMi: Uses IBM i components with blind check allowing arbitrary code execution Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were accepted after checking that a procedure existed without reliably verifying component integrity. Components installed with broad public permissions allow another local account to alter a program such as GETMBRINFO. A later connection can execute the altered program under the connecting account because the LONG_COMMENT marker alone does not establish integrity. This issue is fixed in version 3.0.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-49483https://github.com/codefori/vscode-ibmi/security/advisories/GHSA-rmqv-7c5v-wvjchttps://github.com/codefori/vscode-ibmi/commit/6a13990a0f6c2fb4cf71ba8fbde1cef32c808b1e#codefori #vscode-ibmi#CVE_2026_49483#bot", "url": "https://infosec.exchange/users/cve/statuses/117430204629242486"}, {"timestamp": "2026-10-12T22:17:04.320Z", "date_only": false, "value": "2026-10-12T22:17:04.320", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49483", "record": "FKIE_CVE-2026-49483", "field": "published"}, {"timestamp": "2026-10-13T20:14:17.834Z", "date_only": false, "value": "2026-10-13T20:14:17.834380Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49483", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T20:14:17.834Z", "date_only": false, "value": "2026-10-13T20:14:17.834380Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49483", "record": "FKIE_CVE-2026-49483", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T20:23:40.075Z", "date_only": false, "value": "2026-10-13T20:23:40.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-49483", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:23:40.075Z", "date_only": false, "value": "2026-10-13T20:23:40.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49483", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:30:05.796Z", "date_only": false, "value": "2026-10-14T03:30:05.796653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsma35uo62o", "record": "CVE-2026-49483", "field": "creation_timestamp", "uuid": "36ef6efe-f3f0-4dad-8ba7-655604483e70", "content": "CVE-2026-49483 - vscode-ibmi\nThe Code for IBMi extension for Visual Studio Code (versions before 3.0.1) can be tricked into running modified components that other users on the same server can change.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vscodeibmi #codefori #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsma35uo62o"}, {"timestamp": "2026-10-16T16:00:33.533Z", "date_only": false, "value": "2026-10-16T16:00:33.533", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49483", "record": "FKIE_CVE-2026-49483", "field": "lastModified"}]}