{"metadata": {"vulnerability": "CVE-2026-57124", "count": 16, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-18T13:58:14Z", "date_only": false, "value": "2026-06-18T13:58:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P75F-6FP4-P57W", "record": "GHSA-P75F-6FP4-P57W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-24T00:33:17.707Z", "date_only": false, "value": "2026-06-24T00:33:17.707Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-57124", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-20T21:25:16Z", "date_only": false, "value": "2026-07-20T21:25:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P75F-6FP4-P57W", "record": "GHSA-P75F-6FP4-P57W", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-20T22:36:31.354Z", "date_only": false, "value": "2026-07-20T22:36:31.354220Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "record": "CVE-2026-57124", "field": "creation_timestamp", "uuid": "0175fbcb-1b57-4769-942e-5e08036ab650", "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-23T11:41:42.480Z", "date_only": false, "value": "2026-07-23T11:41:42.480874Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3517", "record": "PYSEC-2026-3517", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-23T14:32:31.798Z", "date_only": false, "value": "2026-07-23T14:32:31.798054Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3517", "record": "PYSEC-2026-3517", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-23T17:02:03.749Z", "date_only": false, "value": "2026-07-23T17:02:03.749337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r", "record": "CVE-2026-57124", "field": "creation_timestamp", "uuid": "f70d8e2e-692b-4e9f-aec0-0613ca14c40e", "content": "CVE-2026-57124 - praisonai\nPraisonAI's UI management API is accessible without authentication, allowing remote attackers to execute local commands as the PraisonAI UI service user. This issue affects PraisonAI\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvkwlge2r"}, {"timestamp": "2026-09-14T15:04:54.198Z", "date_only": false, "value": "2026-09-14T15:04:54.198Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-57124", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-14T15:04:54.198Z", "date_only": false, "value": "2026-09-14T15:04:54.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-57124", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-14T16:17:13.417Z", "date_only": false, "value": "2026-09-14T16:17:13.417", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-57124", "record": "FKIE_CVE-2026-57124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-14T18:07:47.167Z", "date_only": false, "value": "2026-09-14T18:07:47.167500Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipbsoeoz24", "record": "CVE-2026-57124", "field": "creation_timestamp", "uuid": "ed576d0f-c60b-40fe-8030-17a82f982a16", "content": "\ud83d\udea8 CVE-2026-57124 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57124\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipbsoeoz24"}, {"timestamp": "2026-09-14T19:02:29.151Z", "date_only": false, "value": "2026-09-14T19:02:29.151503Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-57124", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-14T19:02:29.151Z", "date_only": false, "value": "2026-09-14T19:02:29.151503Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-57124", "record": "FKIE_CVE-2026-57124", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-14T19:02:35.012Z", "date_only": false, "value": "2026-09-14T19:02:35.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-57124", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-14T19:02:35.012Z", "date_only": false, "value": "2026-09-14T19:02:35.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-57124", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-15T14:45:28.563Z", "date_only": false, "value": "2026-09-15T14:45:28.563", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-57124", "record": "FKIE_CVE-2026-57124", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-06T16:54:34.818Z", "anchors": {"origin": {"timestamp": "2026-06-18T13:58:14Z", "date_only": false, "value": "2026-06-18T13:58:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P75F-6FP4-P57W", "record": "GHSA-P75F-6FP4-P57W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-18T13:58:14Z", "date_only": false, "value": "2026-06-18T13:58:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P75F-6FP4-P57W", "record": "GHSA-P75F-6FP4-P57W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-07-20T22:36:31.354Z", "date_only": false, "value": "2026-07-20T22:36:31.354220Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "record": "CVE-2026-57124", "field": "creation_timestamp", "uuid": "0175fbcb-1b57-4769-942e-5e08036ab650", "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2795897.354, "hours": 776.6381538888888, "days": 32.3599230787037, "min_seconds": 2795897.354, "max_seconds": 2795897.354, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-18T13:58:14Z", "date_only": false, "value": "2026-06-18T13:58:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P75F-6FP4-P57W", "record": "GHSA-P75F-6FP4-P57W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-07-20T22:36:31.354Z", "date_only": false, "value": "2026-07-20T22:36:31.354220Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "record": "CVE-2026-57124", "field": "creation_timestamp", "uuid": "0175fbcb-1b57-4769-942e-5e08036ab650", "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 12192980.818589, "hours": 3386.9391162747224, "days": 141.12246317811343, "min_seconds": 12192980.818589, "max_seconds": 12192980.818589, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-18T13:58:14Z", "date_only": false, "value": "2026-06-18T13:58:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P75F-6FP4-P57W", "record": "GHSA-P75F-6FP4-P57W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-06T16:54:34.818Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 9397083.464589, "hours": 2610.3009623858334, "days": 108.76254009940972, "min_seconds": 9397083.464589, "max_seconds": 9397083.464589, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-20T22:36:31.354Z", "date_only": false, "value": "2026-07-20T22:36:31.354220Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "record": "CVE-2026-57124", "field": "creation_timestamp", "uuid": "0175fbcb-1b57-4769-942e-5e08036ab650", "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p75f-6fp4-p57w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-06T16:54:34.818Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}