{"metadata": {"vulnerability": "CVE-2026-58868", "count": 69, "kinds": {"milestone": 7, "sighting": 49, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0467", "record": "NCSC-2026-0467", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-07-02T06:02:21.466Z", "date_only": false, "value": "2026-07-02T06:02:21.466Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": true, "value": "2026-11-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1443", "record": "CERTFR-2026-AVI-1443", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-02T19:53:55.761Z", "date_only": false, "value": "2026-11-02T19:53:55.761Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-02T19:53:55.761Z", "date_only": false, "value": "2026-11-02T19:53:55.761Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "CVE-2026-58868", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-02T20:00:00Z", "date_only": false, "value": "2026-11-02T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20261103", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "5e6d1a38-0f25-4d2f-ba24-7ab9d6c21738", "url": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20261103"}, {"timestamp": "2026-11-02T20:00:00Z", "date_only": false, "value": "2026-11-02T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20261103", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "4145b947-1a79-43bb-8e83-d39b411d3490", "url": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20261103"}, {"timestamp": "2026-11-02T20:17:49Z", "date_only": false, "value": "2026-11-02T20:17:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HH8P-WXGV-XQ3R", "record": "GHSA-HH8P-WXGV-XQ3R", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-02T20:17:49.247Z", "date_only": false, "value": "2026-11-02T20:17:49.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58868", "record": "FKIE_CVE-2026-58868", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T20:54:02.210Z", "date_only": false, "value": "2026-11-02T20:54:02.210384Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117548735191560156", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "6cd1412f-eacf-4b4e-8f50-d2e5efce1693", "content": "CVE-2026-58868  In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-58868https://source.android.com/docs/security/bulletin/2026/2026-11-01#Google #Android#CVE_2026_58868#bot", "url": "https://infosec.exchange/users/cve/statuses/117548735191560156"}, {"timestamp": "2026-11-02T21:09:12.813Z", "date_only": false, "value": "2026-11-02T21:09:12.813125Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117548748051243924", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "ea501cf0-51ad-4ac9-b12a-89c5c2c6d624", "content": "\u26a0\ufe0f A severe vulnerability was disclosed for Google Android (CVE-2026-58868) https://vuldb.com/vuln/430028", "url": "https://infosec.exchange/users/vuldb/statuses/117548748051243924"}, {"timestamp": "2026-11-02T21:32:01Z", "date_only": false, "value": "2026-11-02T21:32:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HH8P-WXGV-XQ3R", "record": "GHSA-HH8P-WXGV-XQ3R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1443", "record": "CERTFR-2026-AVI-1443", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1443", "record": "CERTFR-2026-AVI-1443", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1443", "record": "CERTFR-2026-AVI-1443", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-03T01:46:31.125Z", "date_only": false, "value": "2026-11-03T01:46:31.125419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzeprbbnp72f", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "7e17307f-51ac-42a1-982e-8f6719aeddab", "content": "The November 2026 Android security update fixes 216 flaws, including zero-click remote code execution bugs CVE-2026-58868 and CVE-2026-58936.\n\n#Android #AndroidSecurity #CVE202658868 #ZeroClick #RCE #MediaTek #PatchNow #MobileSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzeprbbnp72f"}, {"timestamp": "2026-11-03T04:56:08.120Z", "date_only": false, "value": "2026-11-03T04:56:08.120869Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58868", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-03T04:56:08.120Z", "date_only": false, "value": "2026-11-03T04:56:08.120869Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58868", "record": "FKIE_CVE-2026-58868", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-03T15:03:49.357Z", "date_only": false, "value": "2026-11-03T15:03:49.357322Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mzg4cwzr2g2t", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "9ef435b4-4cb1-4d98-a645-256b1654148e", "content": "Google & Samsung's November Android update patches 200+ flaws, including a critical zero-click RCE (CVE-2026-58868) and the 'SMS of Death' bug (CVE-2026-58882). Update your devices immediately! #Android #CyberSecurity #PatchTuesday #RCE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mzg4cwzr2g2t"}, {"timestamp": "2026-11-03T15:04:03.599Z", "date_only": false, "value": "2026-11-03T15:04:03.599445Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117553116425300345", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "7a0fd6a6-b4f6-46b0-a132-bd5954496f0c", "content": "\ud83d\udcf0 Android's November Patch Fixes Critical Zero-Click RCE, 'SMS of Death'\nGoogle & Samsung's November Android update patches 200+ flaws, including a critical zero-click RCE (CVE-2026-58868) and the 'SMS of Death' bug (CVE-2026-58882). Update your devices immediately! #Android #CyberSecurity #PatchTuesday #RCE\n\ud83d\udd17 https://cyber.netsecops.io/articles/android-november-2026-security-update-patches-critical-zero-click-rce/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117553116425300345"}, {"timestamp": "2026-11-03T16:24:10.527Z", "date_only": false, "value": "2026-11-03T16:24:10.527867Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mzgasmkeog2k", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "b1587d87-edcc-4cb2-a8d8-94541020f933", "content": "Google\u2019s November 2026 Android updates fix more than 200 vulnerabilities, including critical flaws. The most severe, CVE-2026-58868, could enable remote code execution without user interaction.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mzgasmkeog2k"}, {"timestamp": "2026-11-03T18:30:17.415Z", "date_only": false, "value": "2026-11-03T18:30:17.415817Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/chuiho.net/post/3mzghu4i7es2u", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "ee49f95d-f3fd-454b-bc9e-e25d4dc9d00d", "content": "\uff3b\u8b66\u6212\uff3dAndroid 11\u6708\u66f4\u65b0\u3001200\u4ef6\u8d85\u3092\u4fee\u6b63\u3000\u64cd\u4f5c\u306a\u3057\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u3046\u308b\u6b20\u9665\u3082\nGoogle \u306e Android \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831 2026\u5e7411\u6708\u7248\u3002Framework \u306e\u91cd\u5927\u306a\u6b20\u9665 CVE-2026-58868 \u306a\u3069200\u4ef6\u8d85\u3092\u4fee\u6b63\u3057\u305f\u3002\u5bfe\u8c61\u306f Android 14\u301c17\u3002\u30d1\u30c3\u30c1\u30ec\u30d9\u30eb 2026-11-05 \u306e\u78ba\u304b\u3081\u65b9\u3068\u3001Pixel\u30fbGalaxy \u306e\u914d\u4fe1\u72b6\u6cc1\u3092\u307e\u3068\u3081\u305f\u3002\nhttps://chuiho.net/posts/android-november-2026-security-update/ #Android #CVE202658868", "url": "https://bsky.app/profile/chuiho.net/post/3mzghu4i7es2u"}, {"timestamp": "2026-11-03T20:58:41.656Z", "date_only": false, "value": "2026-11-03T20:58:41.656507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3mzgq5imkwi2x", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "5babc4e2-8bea-41ee-9332-727d99ea2cf1", "content": "\u203c\ufe0f Google patched a critical Android flaw that could let attackers remotely run code on phones without a single tap.\n\nCVE-2026-58868 is one of 200+ fixed this month. Google has not flagged it as exploited.\n\n40%+ of Android phones run versions too old for it, Google's data shows.", "url": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3mzgq5imkwi2x"}, {"timestamp": "2026-11-03T21:30:17.744Z", "date_only": false, "value": "2026-11-03T21:30:17.744520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mzgrvz4pkp2z", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "b7442d64-1b0a-4c7a-952f-36cece427d67", "content": "android November patches fix over 200 flaws, critical zero-click Framework RCE leads | CVE-2026-58868 #infosec https://0daynews.com/articles/2026-11-03-android-november-2026-bulletin-200-flaws-framework-rce/", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mzgrvz4pkp2z"}, {"timestamp": "2026-11-03T21:41:25.486Z", "date_only": false, "value": "2026-11-03T21:41:25.486829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thelabledger.bsky.social/post/3mzgsjw4es22d", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "176ecb56-ec6b-4095-a744-4deb6e8b005e", "content": "Android's November security bulletin (Nov 2) fixes CVE-2026-58868, a critical Framework RCE needing no user interaction, on Android 14\u201317. Look for security patch level 2026-11-05 or later.\n\nsource.android.com/docs/securit...\n\n#Android #cybersecurity #infosec #CVE", "url": "https://bsky.app/profile/thelabledger.bsky.social/post/3mzgsjw4es22d"}, {"timestamp": "2026-11-03T22:47:56.064Z", "date_only": false, "value": "2026-11-03T22:47:56.064269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mzgwasb5z22e", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "67a2fee8-8ca3-445d-9403-1b8c9e819a95", "content": "Android\u300111\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3067216\u4ef6\u3092\u4fee\u6b63\u300023\u4ef6\u304cCritical\u3001\u64cd\u4f5c\u4e0d\u8981\u306e\u9060\u9694\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027\u3082(CVE-2026-58868\u3001CVE-2026-58876\u3001CVE-2026-58936\u3001CVE-2026-58882) \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mzgwasb5z22e"}, {"timestamp": "2026-11-03T23:10:09.769Z", "date_only": false, "value": "2026-11-03T23:10:09.769971Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117555030131046377", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "0912ad47-fe1e-4a65-aace-6a8ed63aec34", "content": "\ud83d\udea8 Critical zero-click Android RCE patched; CVE-2026-58868\nA heap buffer overflow in Android\u2019s Framework component could allow remote code execution without additional privileges or user interaction.\nThe flaw resides in the onOutputReceived function within FrameDecoder.cpp, where an out-of-bounds write can occur while processing media frames.\n\u2022 Severity: Critical\u2022 CVSS: Not yet assigned\u2022 Affected: Android 14, 15, 16, 16 QPR2 and 17\u2022 Fixed: Security patch level 2026-11-01 or later\u2022 PoC: No public exploit identified\u2022 Exploitation: No confirmed in-the-wild attacks\nAdministrators should aim for the 2026-11-05 patch level or later, which includes this fix and the remaining November security updates for kernel and hardware components.\nSource: https://source.android.com/docs/security/bulletin/2026/2026-11-01", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117555030131046377"}, {"timestamp": "2026-11-04T06:46:15Z", "date_only": false, "value": "2026-11-04T06:46:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "c99b7b9a-ce9d-48b2-8429-f13e71172e73", "content": "A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.\n\nThe flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules.\n\nAs of November 4, Google's bulletin did not report", "url": "https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html"}, {"timestamp": "2026-11-04T07:57:41.903Z", "date_only": false, "value": "2026-11-04T07:57:41.903150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mzhuxvo7mb2r", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "17251090-df9f-4b00-a4e7-f206513c01a9", "content": "Top 3 CVE for last 7 days:\nCVE-2026-98432: 621 interactions\nCVE-2026-109618: 66 interactions\nCVE-2026-111497: 66 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-98432: 59 interactions\nCVE-2026-58115: 12 interactions\nCVE-2026-58868: 11 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mzhuxvo7mb2r"}, {"timestamp": "2026-11-04T09:01:39Z", "date_only": false, "value": "2026-11-04T09:01:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/11/04/google-issues-patches-for-critical.html", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "e1a8b6d4-2dd1-47b2-859b-8c9f1b2cbce7", "content": "Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction\n\nGoogle has issued patches for a critical Android flaw, CVE-2026-58868, that could allow an attacker to run code remotely without any user interaction, The Hacker News reports. The flaw affects Android 14 through 17, and fixes are included in devices with the 2026-11-01 security patch level or later.", "url": "https://threatintel.cc/2026/11/04/google-issues-patches-for-critical.html"}, {"timestamp": "2026-11-04T09:08:07.529Z", "date_only": false, "value": "2026-11-04T09:08:07.529017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/veduis.bsky.social/post/3mzhyvst6ao2j", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "cc14bc5c-ff2f-456e-99b7-9d85902593fd", "content": "GOOGLE: November bulletin patches CVE-2026-58868, critical Android RCE with no user interaction. Android 14 through 17. Fix is patch level 2026-11-01 or later.", "url": "https://bsky.app/profile/veduis.bsky.social/post/3mzhyvst6ao2j"}, {"timestamp": "2026-11-04T09:09:29.414Z", "date_only": false, "value": "2026-11-04T09:09:29.414422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aman179102.bsky.social/post/3mzhyxmannu24", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "d5cf1221-ef90-469d-a5fc-31cf9ea90a3f", "content": "If you use Android 14 through 17, CVE-2026-58868 permits remote code execution without user action. Google says the critical heap buffer overflow requires the 2026-11-01 security patch level. Watch for updates from phone makers and carriers.\n#Security\nSource: The Hacker News \u2014 thehackernews.com", "url": "https://bsky.app/profile/aman179102.bsky.social/post/3mzhyxmannu24"}, {"timestamp": "2026-11-04T09:14:49.383Z", "date_only": false, "value": "2026-11-04T09:14:49.383387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mzhzbs4c4t2l", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "f2045949-ab26-4598-bb9b-083dcc27ec8e", "content": "CVE-2026-58868 enables remote code execution on affected Android 14\u201317 devices without user interaction, requiring security patch level 2026-11-01 or later.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mzhzbs4c4t2l"}, {"timestamp": "2026-11-04T09:14:50.513Z", "date_only": false, "value": "2026-11-04T09:14:50.513522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mzhzbtnqbl2q", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "2a388144-9c99-4b5c-98d3-58ef67bb2624", "content": "CVE-2026-58868 enables remote code execution on affected Android 14\u201317 devices without user interaction, requiring security patch level 2026-11-01 or later.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mzhzbtnqbl2q"}, {"timestamp": "2026-11-04T09:45:02Z", "date_only": false, "value": "2026-11-04T09:45:02.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1_3XbfiBRK07fKum41sIrfGA9Yw9NCF9dw3ulNZK1zCi9Q", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "167228d1-9bb3-4042-9f02-9def86c22a17"}, {"timestamp": "2026-11-04T09:56:00.994Z", "date_only": false, "value": "2026-11-04T09:56:00.994356Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mzi3li4hbe2c", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "31de0991-56f5-44ed-be6a-55c31fba363b", "content": "\ud83e\udd16 CVE-2026-58868 (Critical): OOB write in Android's FrameDecoder.cpp \u2014 remote RCE with no user interaction, affects Android 14-17. Patched at level 2026-11-01+. Not exploited in the wild yet.\nhttps://thehackernews.com/2026/11/google-patches-critical-android-flaw.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mzi3li4hbe2c"}, {"timestamp": "2026-11-04T10:01:57.971Z", "date_only": false, "value": "2026-11-04T10:01:57.971359Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mzi3w47wc32l", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "dc8ad700-0570-4e78-b3d4-e2f0cdc0e380", "content": "Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction\n\nGoogle has issued patches for a critical Android flaw, CVE-2026-58868, that could allow an attacker to run code remotely without... https://threatintel.cc/2026/11/04/google-issues-patches-for-critical.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mzi3w47wc32l"}, {"timestamp": "2026-11-04T10:01:58.584Z", "date_only": false, "value": "2026-11-04T10:01:58.584255Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117557593136948951", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "202dd5dc-7f45-46a0-bce0-c8a11126ef05", "content": "Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction\nGoogle has issued patches for a critical Android flaw, CVE-2026-58868, that could allow an attacker to run code remotely without any user interaction, The Hacker News reports. The flaw affects Android 14 through 17, and fixes are included in devices with the 2026-11-01 security patch level or later. https://thehackernews.com/2026/11/google-patches-critical-android-flaw.html", "url": "https://infosec.exchange/users/edwardk/statuses/117557593136948951"}, {"timestamp": "2026-11-04T10:54:27.234Z", "date_only": false, "value": "2026-11-04T10:54:27.234296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fd4dbdevlrrj5", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "607e33ed-2ff0-4166-9d39-57010ec34604", "content": "CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/fd4dbdevlrrj5"}, {"timestamp": "2026-11-04T11:31:06.219Z", "date_only": false, "value": "2026-11-04T11:31:06.219790Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-69a9e0c0-fe9b02ef3fdbf759", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "604d017c-48f3-4fba-b3b8-fae0a30d265c", "content": "Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulnerability affecting versions 14 through 17. The flaw is a critical Android vulnerability caused by a heap buffer overflow in the onOutputReceived function of FrameDecoder.cpp. The flaw can trigger [\u2026]CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code - Security Affairs", "url": "https://poliverso.org/objects/0477a01e-69a9e0c0-fe9b02ef3fdbf759"}, {"timestamp": "2026-11-04T11:31:11.566Z", "date_only": false, "value": "2026-11-04T11:31:11.566617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mziavno2mv52", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "ef2a8834-9a1c-4d3a-8689-1c721e892ec8", "content": "Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulnerability affecting versions 14 through 17. The flaw is a critical Android vulnerability caused by a [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mziavno2mv52"}, {"timestamp": "2026-11-04T12:41:33.469Z", "date_only": false, "value": "2026-11-04T12:41:33.469880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mzieth5c7c2g", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "16a5fa9d-144c-4c3b-a12f-778b462b2eb0", "content": "CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code\n\nsecurityaffairs.com/202414/mobil...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mzieth5c7c2g"}, {"timestamp": "2026-11-04T13:19:32.154Z", "date_only": false, "value": "2026-11-04T13:19:32.154289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mzigxerzzr27", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "9bcfad68-3d1b-4ed6-bad0-fdd8e1de8b36", "content": "CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code\n\nThis article heavily emphasizes the \"zero-click\" potential of CVE-2026-58868, but it minimizes the real-world risk by treating reported exploitation as a theoretical concern rather t\u2026\n\nvia Security Affairs (Pierluigi Paganini)", "url": "https://bsky.app/profile/arc-codex.com/post/3mzigxerzzr27"}, {"timestamp": "2026-11-04T13:24:10.538Z", "date_only": false, "value": "2026-11-04T13:24:10.538594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mzih7ohbd42z", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "e64a706e-1e14-4e6d-b2e3-91fd85570be1", "content": "Google's November Android bulletin includes CVE-2026-58868, a critical flaw affecting Android 14\u201317. Patch level 2026-11-01 or later addresses it; Google reported no known exploitation as of November 4.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mzih7ohbd42z"}, {"timestamp": "2026-11-04T15:14:11.199Z", "date_only": false, "value": "2026-11-04T15:14:11.199651Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mzinefehps2d", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "f9191a60-5b0f-4a52-aa6f-618b78ec393a", "content": "Google Fixes Critical Zero-Click Android Vulnerability CVE-2026-58868 \u2014 216 Security Flaws Patched in November Update +\u00a0Video\n\nA Critical Android Vulnerability Opens the Door to Remote Code Execution Google has addressed a critical Android security vulnerability, tracked as CVE-2026-58868, that\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mzinefehps2d"}, {"timestamp": "2026-11-04T19:02:37.027Z", "date_only": false, "value": "2026-11-04T19:02:37.027436Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alvantages.bsky.social/post/3mzj24u5ggc2h", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "0699ef37-b29a-4389-bd8d-472991881b53", "content": "Google patched a critical Android flaw (CVE-2026-58868) that could let an attacker run code on a phone remotely, without any user action.  you can pretty much just hope your phone ships an update since there is no workaround.", "url": "https://bsky.app/profile/alvantages.bsky.social/post/3mzj24u5ggc2h"}, {"timestamp": "2026-11-04T19:15:12.102Z", "date_only": false, "value": "2026-11-04T19:15:12.102934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzj2tdqat22o", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "4d710972-eb5e-4077-b4d6-d308c1d7adf4", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-119977 \u00b7 39 people \ud83d\udd25\n2. CVE-2026-98432 \u00b7 25 people\n3. CVE-2026-58868 \u00b7 18 people\n4. CVE-2026-58115 \u00b7 13 people\n5. CVE-2026-109518 \u00b7 9 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzj2tdqat22o"}, {"timestamp": "2026-11-04T19:15:13.536Z", "date_only": false, "value": "2026-11-04T19:15:13.536308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzj2tdzgrc2o", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "d4f8a6b7-a9c9-4a68-8fff-c7e8721c236d", "content": "3. CVE-2026-58868 \u00b7 18 people\nGoogle Android\n\nIn onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mzj2tdzgrc2o"}, {"timestamp": "2026-11-04T23:25:04.472Z", "date_only": false, "value": "2026-11-04T23:25:04.472352Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/densuke.bsky.social/post/3mzjis6gjs72v", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "c12ae1fb-8830-4614-b91a-692adbc7f3cb", "content": "\u66f4\u65b0\u3055\u308c\u305f\u3088\u3001\u898b\u306b\u6765\u3066\u306d!\u2192 \n\nWordPress \u30b3\u30a2\u306e CVE-2026-119977 \u306f KEV \u5165\u308a\u3067\u9023\u90a6\u6a5f\u95a2\u306e\u671f\u9650\u306f11\u67086\u65e5\u3001openSUSE Leap 16.1 \u306f Immutable Mode \u3092\u7d71\u5408\u3001GIMP 3.2.8 \u306f\u753b\u50cf\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u3092\u4fee\u6b63\u3001KDE Linux \u306e NTSYNC \u306f\u30ab\u30fc\u30cd\u30eb 6.14 \u3068 Wine 11.0 \u3067\u4f7f\u3048\u308b\u3001Android \u306e CVE-2026-58868 \u306f Critical\uff082026/11/05 Linux... https://blog.fuga.jp/posts/2026-11-05-linux-oss-trend/", "url": "https://bsky.app/profile/densuke.bsky.social/post/3mzjis6gjs72v"}, {"timestamp": "2026-11-05T01:53:22.755Z", "date_only": false, "value": "2026-11-05T01:53:22.755325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mzjr3e5cd323", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "5fafb552-ed2a-4fdc-8587-f2583d02ab66", "content": "CVE-2026-58868: Android\u306e\u91cd\u5927\u306a\u30d0\u30b0\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b #securityaffairs (Nov 4)\nsecurityaffairs.com/202414/mobil...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mzjr3e5cd323"}, {"timestamp": "2026-11-05T08:04:37.404Z", "date_only": false, "value": "2026-11-05T08:04:37.404719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mzkft7lmb22r", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "0d86b110-b5fb-4ce9-bfbe-abfa61ffebdc", "content": "Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction\n\nA critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its\u00a0November security bulletin.\n\nThe flaw, CVE-2026-58868, affects\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mzkft7lmb22r"}, {"timestamp": "2026-11-05T11:00:11Z", "date_only": false, "value": "2026-11-05T11:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8JnrzKIpZ9iOYdIBr-50dm7yDGnULEW2PWSb3_oGVb3oKf8", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "48739b8d-41c2-4af0-ae56-fe96d23d7213", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-05T11:00:11Z", "date_only": false, "value": "2026-11-05T11:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8JnrzKIpZ9iOYdIBr-50dm7yDGnULEW2PWSb3_oGVb3oKf8", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "6a789836-a849-4dfd-9cf5-efba27bde2a2"}, {"timestamp": "2026-11-05T12:26:42.414Z", "date_only": false, "value": "2026-11-05T12:26:42.414881Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0467", "record": "NCSC-2026-0467", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-05T12:26:42.414Z", "date_only": false, "value": "2026-11-05T12:26:42.414881Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0467", "record": "NCSC-2026-0467", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T12:26:42.414Z", "date_only": false, "value": "2026-11-05T12:26:42.414881Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0467", "record": "NCSC-2026-0467", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T13:32:53.444Z", "date_only": false, "value": "2026-11-05T13:32:53.444523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mzky67cwds2r", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "3081a39c-7b2d-4b67-ab57-02e131752a71", "content": "CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code\n\nCritical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulnerability aff\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mzky67cwds2r"}, {"timestamp": "2026-11-05T19:00:41.570Z", "date_only": false, "value": "2026-11-05T19:00:41.570269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mzlkidorni2s", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "d56e2735-8ce7-48f6-983a-c221ae529e43", "content": "Google corregge una vulnerabilit\u00e0 critica di Android sfruttabile senza interazione dell'utente. Analizziamo i dettagli tecnici della CVE-2026-58868, gli altri problemi di novembre e come verificare le patch installate.", "url": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mzlkidorni2s"}, {"timestamp": "2026-11-05T19:15:32.162Z", "date_only": false, "value": "2026-11-05T19:15:32.162Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-05T19:15:32.162Z", "date_only": false, "value": "2026-11-05T19:15:32.162Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-58868", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T19:50:02.971Z", "date_only": false, "value": "2026-11-05T19:50:02.971292Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzlnamh5ip25", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "3bee1485-a96e-447c-bc12-d453449566b3", "content": "CVE-2026-58868 - platform/frameworks/av\nA part of Android can write data outside its intended area, which could let a remote attacker execute their own code on the device without needing any special\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#google #Android #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzlnamh5ip25"}, {"timestamp": "2026-11-05T20:17:59.150Z", "date_only": false, "value": "2026-11-05T20:17:59.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-58868", "record": "FKIE_CVE-2026-58868", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-05T21:16:16.616Z", "date_only": false, "value": "2026-11-05T21:16:16.616670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzoovtoeqvtx", "record": "cve-2026-58868", "field": "creation_timestamp", "uuid": "33cfd3d9-77d0-46ea-8e60-ad9a0ff8d93d", "content": "Developing: Critical OnOutputReceived Vulnerability (CVE-2026-58868)\nhttps://cyber.eventmonitor.net/incident/EM-20261104-W30D/critical-onoutputreceived-vulnerability-cve-2026-58868/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzoovtoeqvtx"}, {"timestamp": "2026-11-05T21:34:43Z", "date_only": false, "value": "2026-11-05T21:34:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HH8P-WXGV-XQ3R", "record": "GHSA-HH8P-WXGV-XQ3R", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T22:00:08Z", "date_only": false, "value": "2026-11-05T22:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109228", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "3c52c795-b47f-47d6-9a03-31019b959b83", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58868-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a redfishrouge\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-05 21:25:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109228", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-05T22:00:08Z", "date_only": false, "value": "2026-11-05T22:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/109228", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "0cb4624f-5e78-444e-b628-d2b55cca2e0c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58868-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a redfishrouge\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-05 21:25:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109228"}, {"timestamp": "2026-11-06T02:00:13.713Z", "date_only": false, "value": "2026-11-06T02:00:13.713333Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/profsimononline.bsky.social/post/3mzmbwk7hqh2l", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "cc5de650-4751-499a-ab5c-50ef9d9d465b", "content": "A new critical vulnerability in Android (CVE-2026-58868) allows code execution without user interaction. It's essential to update your devices immediately to safeguard against potential attacks. Stay proactive with your security!", "url": "https://bsky.app/profile/profsimononline.bsky.social/post/3mzmbwk7hqh2l"}, {"timestamp": "2026-11-06T07:29:57.754Z", "date_only": false, "value": "2026-11-06T07:29:57.754198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mzmue5qi4t2v", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "858b4717-3b60-426e-835c-5f8adaa345a3", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-58868: In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow\nCVSS 9.8 \u00b7 EPSS 0.2%\nhttps://vulnsea.com/cve/CVE-2026-58868\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mzmue5qi4t2v"}, {"timestamp": "2026-11-06T15:33:03.686Z", "date_only": false, "value": "2026-11-06T15:33:03.686717Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/skimwirehq.bsky.social/post/3mznpdywcrq2r", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "ac23890e-7f8b-4cae-9d1e-644f98a627a3", "content": "Google's November Android update fixes a critical no-click Framework bug (CVE-2026-58868) plus 200+ other flaws, per SecurityWeek. Here's how to check your patch level and update.\n\nwww.skimwire.com/android-nove...", "url": "https://bsky.app/profile/skimwirehq.bsky.social/post/3mznpdywcrq2r"}], "metrics": {"as_of": "2026-11-08T00:51:13.775Z", "anchors": {"origin": {"timestamp": "2026-11-02T19:53:55.761Z", "date_only": false, "value": "2026-11-02T19:53:55.761Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-02T19:53:55.761Z", "date_only": false, "value": "2026-11-02T19:53:55.761Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-11-05T11:00:11Z", "date_only": false, "value": "2026-11-05T11:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8JnrzKIpZ9iOYdIBr-50dm7yDGnULEW2PWSb3_oGVb3oKf8", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "48739b8d-41c2-4af0-ae56-fe96d23d7213", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 227175.239, "hours": 63.104233055555554, "days": 2.6293430439814816, "min_seconds": 227175.239, "max_seconds": 227175.239, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-02T19:53:55.761Z", "date_only": false, "value": "2026-11-02T19:53:55.761Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T11:00:11Z", "date_only": false, "value": "2026-11-05T11:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8JnrzKIpZ9iOYdIBr-50dm7yDGnULEW2PWSb3_oGVb3oKf8", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "48739b8d-41c2-4af0-ae56-fe96d23d7213", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 449838.014672, "hours": 124.95500407555556, "days": 5.2064585031481485, "min_seconds": 449838.014672, "max_seconds": 449838.014672, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-02T19:53:55.761Z", "date_only": false, "value": "2026-11-02T19:53:55.761Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-58868", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T00:51:13.775Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 222662.775672, "hours": 61.850771019999996, "days": 2.5771154591666665, "min_seconds": 222662.775672, "max_seconds": 222662.775672, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-05T11:00:11Z", "date_only": false, "value": "2026-11-05T11:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8JnrzKIpZ9iOYdIBr-50dm7yDGnULEW2PWSb3_oGVb3oKf8", "record": "CVE-2026-58868", "field": "creation_timestamp", "uuid": "48739b8d-41c2-4af0-ae56-fe96d23d7213", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T00:51:13.775Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}