{"metadata": {"vulnerability": "CVE-2026-59081", "count": 11, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-02T08:57:58.309Z", "date_only": false, "value": "2026-07-02T08:57:58.309Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-59081", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-12T10:01:00Z", "date_only": false, "value": "2026-11-12T10:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-59081", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T03:55:00Z", "date_only": false, "value": "2026-11-13T03:55:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/11/CVE-2026-59074", "record": "CVE-2026-59081", "field": "creation_timestamp", "uuid": "52dbffd2-0f14-4d52-8c6f-896f7d6e303d", "url": "https://cert.pl/en/posts/2026/11/CVE-2026-59074"}, {"timestamp": "2026-11-13T07:29:04.031Z", "date_only": false, "value": "2026-11-13T07:29:04.031Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-59081", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T07:29:04.031Z", "date_only": false, "value": "2026-11-13T07:29:04.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-59081", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-13T07:29:04.031Z", "date_only": false, "value": "2026-11-13T07:29:04.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-59081", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T07:41:05.250Z", "date_only": false, "value": "2026-11-13T07:41:05.250338Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117608000041613094", "record": "CVE-2026-59081", "field": "creation_timestamp", "uuid": "76c20205-2ef6-46df-b430-f1bca7ceab95", "content": "CVE-2026-59080 JWT Exposure via GET Request in Edito CMS Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid JWT token and perform action on behalf of the victim. The token is valid for only short period of time; after that time, it expires and can no longer be used.\nThe vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.\nhttps://www.cve.org/CVERecord?id=CVE-2026-59080https://cert.pl/posts/2026/11/CVE-2026-59081https://www.edito.pl/#edito #Edito #EditoCMS#CVE_2026_59080#bot", "url": "https://infosec.exchange/users/cve/statuses/117608000041613094"}, {"timestamp": "2026-11-13T07:41:45.482Z", "date_only": false, "value": "2026-11-13T07:41:45.482961Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117608002683654458", "record": "CVE-2026-59081", "field": "creation_timestamp", "uuid": "e98a1d9c-6e21-47e6-8668-0177e2f13b47", "content": "CVE-2026-59081 Deserialization of untrusted data in Edito CMS Edito CMS deserializes JSON data without further validation. A user (even an administrator) cannot exploit this vulnerability through the application's normal functionality. An attacker who could modify cache entries or inject them could execute code on the server.\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.\nhttps://www.cve.org/CVERecord?id=CVE-2026-59081https://cert.pl/posts/2026/07/CVE-2026-59081https://www.edito.pl/#edito #Edito #EditoCMS#CVE_2026_59081#bot", "url": "https://infosec.exchange/users/cve/statuses/117608002683654458"}, {"timestamp": "2026-11-13T08:17:18Z", "date_only": false, "value": "2026-11-13T08:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-576W-QCWC-9HGF", "record": "GHSA-576W-QCWC-9HGF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-13T09:31:45Z", "date_only": false, "value": "2026-11-13T09:31:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-576W-QCWC-9HGF", "record": "GHSA-576W-QCWC-9HGF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T09:31:45Z", "date_only": false, "value": "2026-11-13T09:31:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-576W-QCWC-9HGF", "record": "GHSA-576W-QCWC-9HGF", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T18:56:33.232Z", "anchors": {"origin": {"timestamp": "2026-11-12T10:01:00Z", "date_only": false, "value": "2026-11-12T10:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-59081", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-12T10:01:00Z", "date_only": false, "value": "2026-11-12T10:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-59081", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 118533.232611, "hours": 32.9258979475, "days": 1.3719124144791666, "min_seconds": 118533.232611, "max_seconds": 118533.232611, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-12T10:01:00Z", "date_only": false, "value": "2026-11-12T10:01:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-59081", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T18:56:33.232Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}