{"metadata": {"vulnerability": "CVE-2026-64610", "count": 12, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-07-20T09:43:18.782Z", "date_only": false, "value": "2026-07-20T09:43:18.782Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-64610", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T04:11:21.516Z", "date_only": false, "value": "2026-10-16T04:11:21.516970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/5bqyzag3hyoc6", "record": "CVE-2026-64610", "field": "creation_timestamp", "uuid": "fb08febd-3c8e-4ea9-b61c-7c2ae7e2ae72", "content": "CVE-2026-64610: Apache Kylin: Redis unsafe Java deserialization", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/5bqyzag3hyoc6"}, {"timestamp": "2026-10-16T12:13:18.802Z", "date_only": false, "value": "2026-10-16T12:13:18.802Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-64610", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T12:13:18.802Z", "date_only": false, "value": "2026-10-16T12:13:18.802Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-64610", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T12:15:16.013Z", "date_only": false, "value": "2026-10-16T12:15:16.013Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-64610", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T12:15:16.013Z", "date_only": false, "value": "2026-10-16T12:15:16.013Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-64610", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T12:38:09.557Z", "date_only": false, "value": "2026-10-16T12:38:09.557176Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117450623488801492", "record": "CVE-2026-64610", "field": "creation_timestamp", "uuid": "8bfc0fc4-90a8-45af-90ea-db5bac3ddd76", "content": "CVE-2026-64610 Apache Kylin: Redis unsafe Java deserialization Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service.\nThis issue affects Apache Kylin: from 4 through 5.0.4.\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-64610https://lists.apache.org/thread.html/5jwj20t50wc6x9pw0zmlj8tzfl37dpry#apache #ApacheSoftwareFoundation #ApacheKylin#CVE_2026_64610#bot", "url": "https://infosec.exchange/users/cve/statuses/117450623488801492"}, {"timestamp": "2026-10-16T13:16:57Z", "date_only": false, "value": "2026-10-16T13:16:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QXQ5-8286-84XG", "record": "GHSA-QXQ5-8286-84XG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T13:16:57.367Z", "date_only": false, "value": "2026-10-16T13:16:57.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-64610", "record": "FKIE_CVE-2026-64610", "field": "published"}, {"timestamp": "2026-10-16T15:20:39.130Z", "date_only": false, "value": "2026-10-16T15:20:39.130", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-64610", "record": "FKIE_CVE-2026-64610", "field": "lastModified"}, {"timestamp": "2026-10-16T15:38:45Z", "date_only": false, "value": "2026-10-16T15:38:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QXQ5-8286-84XG", "record": "GHSA-QXQ5-8286-84XG", "field": "published"}, {"timestamp": "2026-10-16T15:38:45Z", "date_only": false, "value": "2026-10-16T15:38:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QXQ5-8286-84XG", "record": "GHSA-QXQ5-8286-84XG", "field": "modified"}]}