{"metadata": {"vulnerability": "CVE-2026-52848", "count": 19, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-08T18:41:27.724Z", "date_only": false, "value": "2026-06-08T18:41:27.724Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-52848", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0935", "record": "CERTFR-2026-AVI-0935", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": true, "value": "2026-07-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0935", "record": "CERTFR-2026-AVI-0935", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0935", "record": "CERTFR-2026-AVI-0935", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-07-27T12:40:19.681Z", "date_only": false, "value": "2026-07-27T12:40:19.681963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x", "record": "CVE-2026-52848", "field": "creation_timestamp", "uuid": "f7265e5f-2876-4569-b25d-441ae005994e", "content": "\ud83d\udd17 CVE : CVE-2026-47678, CVE-2026-47679, CVE-2026-52848, CVE-2026-53610, CVE-2026-53625, CVE-2026-53629, CVE-2026-55214, CVE-2026-57152", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x"}, {"timestamp": "2026-11-04T22:21:48.681Z", "date_only": false, "value": "2026-11-04T22:21:48.681Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-52848", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-04T22:21:48.681Z", "date_only": false, "value": "2026-11-04T22:21:48.681Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-52848", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T22:27:14.619Z", "date_only": false, "value": "2026-11-04T22:27:14.619027Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117560523761748488", "record": "CVE-2026-52848", "field": "creation_timestamp", "uuid": "7992a60c-3b44-48d6-a288-3f51487b981e", "content": "CVE-2026-52848 GLPI: MFA bypass GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to skip one-time-password verification, defeating two-factor authentication. This issue is fixed in version 11.0.8.\nhttps://www.cve.org/CVERecord?id=CVE-2026-52848https://github.com/glpi-project/glpi/security/advisories/GHSA-hgr8-qvp5-mhchhttps://github.com/glpi-project/glpi/commit/5ec327bfa78d12075e7224cfca5383b226f5babdhttps://github.com/glpi-project/glpi/releases/tag/11.0.8#glpi-project #glpi#CVE_2026_52848#bot", "url": "https://infosec.exchange/users/cve/statuses/117560523761748488"}, {"timestamp": "2026-11-04T22:39:08.868Z", "date_only": false, "value": "2026-11-04T22:39:08.868575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzjga2srn22b", "record": "CVE-2026-52848", "field": "creation_timestamp", "uuid": "14855646-b608-482d-b6d5-638d7c231849", "content": "CVE-2026-52848 CRITICAL (CVSS 9.2)\nGLPI is a free asset and IT management software package\nFix: https://patchthecve.com/cve/CVE-2026-52848.html", "url": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzjga2srn22b"}, {"timestamp": "2026-11-04T23:17:46.560Z", "date_only": false, "value": "2026-11-04T23:17:46.560", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-52848", "record": "FKIE_CVE-2026-52848", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-52848", "record": "UBUNTU-CVE-2026-52848", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-52848", "record": "UBUNTU-CVE-2026-52848", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T00:08:32.745Z", "date_only": false, "value": "2026-11-05T00:08:32.745999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzjl7w5xyv2z", "record": "CVE-2026-52848", "field": "creation_timestamp", "uuid": "00a61e30-d3a3-43fd-973d-ec6e56072b3f", "content": "\ud83d\udea8 CVE-2026-52848 \u2014 CVSS 9.2 CRITICAL\n\nGLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52848\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzjl7w5xyv2z"}, {"timestamp": "2026-11-05T00:10:03.050Z", "date_only": false, "value": "2026-11-05T00:10:03.050233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzjlcma4gn2y", "record": "CVE-2026-52848", "field": "creation_timestamp", "uuid": "92ca66e5-6d74-464d-ac73-1ce97c4435ec", "content": "CVE-2026-52848 - glpi\nThe GLPI management tool (versions 11.0.0 through 11.0.8) lets an unauthenticated user craft a special web link that skips the one\u2011time password step, bypassing two\u2011factor\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glpi #glpiproject #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzjlcma4gn2y"}, {"timestamp": "2026-11-09T21:51:16.244Z", "date_only": false, "value": "2026-11-09T21:51:16.244232Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-52848", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-09T21:51:16.244Z", "date_only": false, "value": "2026-11-09T21:51:16.244232Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-52848", "record": "FKIE_CVE-2026-52848", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-09T21:51:26.462Z", "date_only": false, "value": "2026-11-09T21:51:26.462Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-52848", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-09T21:51:26.462Z", "date_only": false, "value": "2026-11-09T21:51:26.462Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-52848", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T22:18:52.027Z", "date_only": false, "value": "2026-11-09T22:18:52.027", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-52848", "record": "FKIE_CVE-2026-52848", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T02:49:30.681Z", "anchors": {"origin": {"timestamp": "2026-07-27T00:00:00Z", "date_only": true, "value": "2026-07-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0935", "record": "CERTFR-2026-AVI-0935", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-27T00:00:00Z", "date_only": true, "value": "2026-07-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0935", "record": "CERTFR-2026-AVI-0935", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9168570.681921, "hours": 2546.8251894225, "days": 106.1177162259375, "min_seconds": 9082170.681921, "max_seconds": 9168570.681921, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T00:00:00Z", "date_only": true, "value": "2026-07-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0935", "record": "CERTFR-2026-AVI-0935", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T02:49:30.681Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}