{"metadata": {"vulnerability": "CVE-2026-62867", "count": 24, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-07-14T21:10:50.032Z", "date_only": false, "value": "2026-07-14T21:10:50.032Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-62867", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-21T14:45:35.859Z", "date_only": false, "value": "2026-08-21T14:45:35.859Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-62867", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-21T14:45:35.859Z", "date_only": false, "value": "2026-08-21T14:45:35.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-62867", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T15:16:00Z", "date_only": false, "value": "2026-08-21T15:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-62867", "record": "UBUNTU-CVE-2026-62867", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-21T15:16:46.003Z", "date_only": false, "value": "2026-08-21T15:16:46.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-62867", "record": "FKIE_CVE-2026-62867", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-21T16:08:48.284Z", "date_only": false, "value": "2026-08-21T16:08:48.284145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5gztobb2f", "record": "CVE-2026-62867", "field": "creation_timestamp", "uuid": "8f7a3869-afeb-439e-b5bc-22d6b8d8611d", "content": "\ud83d\udea8 CVE-2026-62867 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62867\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5gztobb2f"}, {"timestamp": "2026-08-21T19:20:04.890Z", "date_only": false, "value": "2026-08-21T19:20:04.890301Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmi52tp4f2p", "record": "CVE-2026-62867", "field": "creation_timestamp", "uuid": "3bbfdd32-0151-438c-9c58-b9e0068d8e17", "content": "CVE-2026-62867 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmi52tp4f2p"}, {"timestamp": "2026-08-21T21:00:17.358Z", "date_only": false, "value": "2026-08-21T21:00:17.358453Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-62867", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-21T21:00:17.358Z", "date_only": false, "value": "2026-08-21T21:00:17.358453Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-62867", "record": "FKIE_CVE-2026-62867", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-21T21:44:10.367Z", "date_only": false, "value": "2026-08-21T21:44:10.367Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-62867", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-21T21:44:10.367Z", "date_only": false, "value": "2026-08-21T21:44:10.367Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-62867", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T22:20:03.953Z", "date_only": false, "value": "2026-08-21T22:20:03.953636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtms6vg4yu25", "record": "CVE-2026-62867", "field": "creation_timestamp", "uuid": "45680077-bdd7-4fc4-a8ad-97b115a766f5", "content": "CVE-2026-62867 - incus\nIf you use Incus version earlier than 7.3.0, a user with project-level permissions can add special settings to a storage volume that cause the system to run extra commands with full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtms6vg4yu25"}, {"timestamp": "2026-08-22T10:01:00.369Z", "date_only": false, "value": "2026-08-22T10:01:00.369384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzeaus7427", "record": "CVE-2026-62867", "field": "creation_timestamp", "uuid": "39caba50-ecdd-4833-960e-1b0510832893", "content": "\ud83d\udd34 CVE-2026-62867 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62867/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzeaus7427"}, {"timestamp": "2026-08-22T13:30:03.875Z", "date_only": false, "value": "2026-08-22T13:30:03.875516Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtof23rn7q25", "record": "CVE-2026-62867", "field": "creation_timestamp", "uuid": "054ab8c1-fbd2-4cd6-9717-ca769c7ed7a7", "content": "CVE-2026-62867\nIncus versions before 7.3.0 let a regular user add special settings to a storage volume that are not checked properly. This can cause the system to run extra commands with full administrator rights, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtof23rn7q25"}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T20:26:29Z", "date_only": false, "value": "2026-09-16T20:26:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-16T21:28:38Z", "date_only": false, "value": "2026-09-16T21:28:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-09-17T17:22:13Z", "date_only": false, "value": "2026-09-17T17:22:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-09-17T17:22:13Z", "date_only": false, "value": "2026-09-17T17:22:13Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11651-1", "record": "OPENSUSE-SU-2026:11651-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-15T19:10:00.173Z", "date_only": false, "value": "2026-10-15T19:10:00.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-62867", "record": "FKIE_CVE-2026-62867", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-17T09:46:02Z", "date_only": false, "value": "2026-10-17T09:46:02Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-62867", "record": "UBUNTU-CVE-2026-62867", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T18:18:30.615Z", "anchors": {"origin": {"timestamp": "2026-08-21T14:45:35.859Z", "date_only": false, "value": "2026-08-21T14:45:35.859Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-62867", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-21T14:45:35.859Z", "date_only": false, "value": "2026-08-21T14:45:35.859Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-62867", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 6492774.756285, "hours": 1803.5485434124998, "days": 75.14785597552083, "min_seconds": 6492774.756285, "max_seconds": 6492774.756285, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-21T14:45:35.859Z", "date_only": false, "value": "2026-08-21T14:45:35.859Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-62867", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T18:18:30.615Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}