{"metadata": {"vulnerability": "CVE-2026-50204", "count": 17, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-06-04T00:06:16.496Z", "date_only": false, "value": "2026-06-04T00:06:16.496Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-50204", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "vulnerabilities.11.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-09T09:54:44.137Z", "date_only": false, "value": "2026-11-09T09:54:44.137616Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117585876327000117", "record": "CVE-2026-50204", "field": "creation_timestamp", "uuid": "69c63cd7-a706-4d09-81ad-06112cc481bb", "content": "CVE-2026-86468 Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logs Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command shapes leave secrets in cleartext, for example a trailing `--description` on Variable commands, `--conn-extra`, and the inline `--password` of `airflow keycloak-auth-manager` commands. A user who can read audit events but is denied Variable and Connection access can retrieve those values through the event-log API.\nUsers of apache-airflow are recommended to upgrade to 3.4.0 or later. Audit-log entries written before the upgrade keep the cleartext values: purge the affected entries and rotate the secrets they contain.\nhttps://www.cve.org/CVERecord?id=CVE-2026-86468https://github.com/apache/airflow/pull/72650https://www.cve.org/CVERecord?id=CVE-2026-50204https://lists.apache.org/thread.html/yl4dlhvstlnc1qogcw3n4bx216cjsmoo#apache #ApacheSoftwareFoundation #ApacheAirflow#CVE_2026_86468#bot", "url": "https://infosec.exchange/users/cve/statuses/117585876327000117"}, {"timestamp": "2026-11-09T09:57:52.924Z", "date_only": false, "value": "2026-11-09T09:57:52.924Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-50204", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-09T09:59:04.841Z", "date_only": false, "value": "2026-11-09T09:59:04.841944Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117585893411781077", "record": "CVE-2026-50204", "field": "creation_timestamp", "uuid": "a774144f-6f4a-476a-8946-c403769f805b", "content": "CVE-2026-50204 Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the secrets masker matched only on configured sensitive key names. An authenticated low-privilege user with read access to the event-log / audit API \u2014 with no prior access to the affected connection or variable \u2014 could read those rows and recover the credentials verbatim. Users should upgrade to apache-airflow 3.4.0 or later, which masks these values and restricts the affected audit rows to authorized users.\nhttps://www.cve.org/CVERecord?id=CVE-2026-50204https://github.com/apache/airflow/pull/68049https://github.com/apache/airflow/pull/70759https://lists.apache.org/thread.html/1rfswowf30yck0ql4nhnc5vlk854s8jy#apache #ApacheSoftwareFoundation #ApacheAirflow#CVE_2026_50204#bot", "url": "https://infosec.exchange/users/cve/statuses/117585893411781077"}, {"timestamp": "2026-11-09T10:12:39.031Z", "date_only": false, "value": "2026-11-09T10:12:39.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-50204", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T10:17:10Z", "date_only": false, "value": "2026-11-09T10:17:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J7HG-FFG5-7MFR", "record": "GHSA-J7HG-FFG5-7MFR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-09T10:17:10.207Z", "date_only": false, "value": "2026-11-09T10:17:10.207", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-50204", "record": "FKIE_CVE-2026-50204", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T11:38:20.283Z", "date_only": false, "value": "2026-11-09T11:38:20.283+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-09T12:31:41Z", "date_only": false, "value": "2026-11-09T12:31:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J7HG-FFG5-7MFR", "record": "GHSA-J7HG-FFG5-7MFR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T13:03:51.065Z", "date_only": false, "value": "2026-11-09T13:03:51.065Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-50204", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-09T13:03:51.065Z", "date_only": false, "value": "2026-11-09T13:03:51.065Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-50204", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T13:17:08.503Z", "date_only": false, "value": "2026-11-09T13:17:08.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-50204", "record": "FKIE_CVE-2026-50204", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-09T15:32:07Z", "date_only": false, "value": "2026-11-09T15:32:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J7HG-FFG5-7MFR", "record": "GHSA-J7HG-FFG5-7MFR", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-09T17:18:19.835Z", "anchors": {"origin": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 65899.835508, "hours": 18.305509863333334, "days": 0.7627295776388889, "min_seconds": 65899.835508, "max_seconds": 65899.835508, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-08T23:00:00Z", "date_only": false, "value": "2026-11-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4401", "record": "WID-SEC-W-2026-4401", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-09T17:18:19.835Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}