{"metadata": {"vulnerability": "CVE-2026-58114", "count": 25, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 15}, "linked_omitted": 0}, "data": [{"timestamp": "2026-06-29T12:59:54.794Z", "date_only": false, "value": "2026-06-29T12:59:54.794Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-58114", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-970803", "record": "SSA-970803", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1495", "record": "CERTFR-2026-AVI-1495", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": true, "value": "2026-11-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1495", "record": "CERTFR-2026-AVI-1495", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-970803", "record": "SSA-970803", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1495", "record": "CERTFR-2026-AVI-1495", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-970803", "record": "SSA-970803", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-10T08:32:39Z", "date_only": false, "value": "2026-11-10T08:32:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-siemens", "record": "CVE-2026-58114", "field": "creation_timestamp", "uuid": "6f3603a0-0069-4c4b-9837-6f5c0a1c4b1b", "url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-siemens"}, {"timestamp": "2026-11-10T11:30:33.284Z", "date_only": false, "value": "2026-11-10T11:30:33.284Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58114", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T11:30:33.284Z", "date_only": false, "value": "2026-11-10T11:30:33.284Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-58114", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T11:41:59.706Z", "date_only": false, "value": "2026-11-10T11:41:59.706979Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117591960388045329", "record": "CVE-2026-58114", "field": "creation_timestamp", "uuid": "ea37ea20-4e6d-4e97-bacb-5f7dac1020c7", "content": "CVE-2026-58114  A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V17 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC Runtime Professional V20 (All versions), SIMATIC WinCC Runtime Professional V21 (All versions), SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected systems do not properly secure their remote user authentication with the deprecated NTLM protocol. This could allow unauthenticated remote attackers, who have achieved a machine in the middle position, to relay NTLM authentication and impersonate a legitimate user. The potential impact depends on the services that are accessible, e.g. a SQL server used by WinCC.\nhttps://www.cve.org/CVERecord?id=CVE-2026-58114https://cert-portal.siemens.com/productcert/html/ssa-970803.html#Siemens #SIMATICBATCHV9.1 #SIMATICInformationServer2020 #SIMATICInformationServer2022 #SIMATICPCS7V9.1 #SIMATICProcessHistorian2020 #SIMATICProcessHistorian2022 #SIMATICWinCCRuntimeProfessionalV17 #SIMATICWinCCRuntimeProfessionalV18 #SIMATICWinCCRuntimeProfessionalV19 #SIMATICWinCCRuntimeProfessionalV20 #SIMATICWinCCRuntimeProfessionalV21 #SIMATICWinCCV7.5 #SIMATICWinCCV8.0 #SIMATICWinCCV8.1#CVE_2026_58114#bot", "url": "https://infosec.exchange/users/cve/statuses/117591960388045329"}, {"timestamp": "2026-11-10T12:17:20Z", "date_only": false, "value": "2026-11-10T12:17:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HJVW-F7FG-X3R9", "record": "GHSA-HJVW-F7FG-X3R9", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-10T12:17:20.160Z", "date_only": false, "value": "2026-11-10T12:17:20.160", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58114", "record": "FKIE_CVE-2026-58114", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T12:17:20.160Z", "date_only": false, "value": "2026-11-10T12:17:20.160", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58114", "record": "FKIE_CVE-2026-58114", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-10T12:31:50Z", "date_only": false, "value": "2026-11-10T12:31:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HJVW-F7FG-X3R9", "record": "GHSA-HJVW-F7FG-X3R9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T12:31:50Z", "date_only": false, "value": "2026-11-10T12:31:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HJVW-F7FG-X3R9", "record": "GHSA-HJVW-F7FG-X3R9", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T12:45:36.947Z", "date_only": false, "value": "2026-11-10T12:45:36.947320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzxhua7gbg2t", "record": "CVE-2026-58114", "field": "creation_timestamp", "uuid": "dcc14f17-ef84-42e7-823d-b3c6c09b82e4", "content": "\ud83d\udfe0 CVE-2026-58114 - High (7.5)\n\nA vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Ser...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-58114/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzxhua7gbg2t"}, {"timestamp": "2026-11-10T13:12:11.458Z", "date_only": false, "value": "2026-11-10T13:12:11.458+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-10T19:02:23.765Z", "date_only": false, "value": "2026-11-10T19:02:23.765824Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58114", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-10T19:04:48.646Z", "date_only": false, "value": "2026-11-10T19:04:48.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-58114", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T19:04:48.646Z", "date_only": false, "value": "2026-11-10T19:04:48.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58114", "field": "containers.adp.0.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-11-10T20:41:13.849Z", "anchors": {"origin": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 78073.849485, "hours": 21.6871804125, "days": 0.9036325171875, "min_seconds": 78073.849485, "max_seconds": 78073.849485, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4441", "record": "WID-SEC-W-2026-4441", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-10T20:41:13.849Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}