{"metadata": {"vulnerability": "CVE-2026-65145", "count": 16, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-07-21T17:28:38.792Z", "date_only": false, "value": "2026-07-21T17:28:38.792Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-65145", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T12:16:45.287Z", "date_only": false, "value": "2026-10-27T12:16:45.287Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65145", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T12:16:45.287Z", "date_only": false, "value": "2026-10-27T12:16:45.287Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-65145", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-27T12:16:45.287Z", "date_only": false, "value": "2026-10-27T12:16:45.287Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / nvidia", "record": "CVE-2026-65145", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T12:36:54.722Z", "date_only": false, "value": "2026-10-27T12:36:54.722196Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117512903996870163", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "6154cd1c-8a12-4d99-94a5-e8c5bf2d1252", "content": "CVE-2026-65145  NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.\nhttps://www.cve.org/CVERecord?id=CVE-2026-65145https://nvd.nist.gov/vuln/detail/CVE-2026-65145https://www.cve.org/CVERecord?id=CVE-2026-65145https://github.com/NVIDIA/product-security/tree/main/2026/5912#NVIDIA #NeMoAgentToolkit#CVE_2026_65145#bot", "url": "https://infosec.exchange/users/cve/statuses/117512903996870163"}, {"timestamp": "2026-10-27T13:16:59Z", "date_only": false, "value": "2026-10-27T13:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8MJC-3V3W-78R7", "record": "GHSA-8MJC-3V3W-78R7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-27T13:16:59.860Z", "date_only": false, "value": "2026-10-27T13:16:59.860", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65145", "record": "FKIE_CVE-2026-65145", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T13:30:04.766Z", "date_only": false, "value": "2026-10-27T13:30:04.766694Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myudsuzikx2b", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "6989452d-96d5-40c3-8305-ca72f75ce592", "content": "CVE-2026-65145\nThe NVIDIA NeMo Agent Toolkit does not properly verify a user's identity, so an attacker could access it without logging in. This could let the attacker run their own code, steal or change data, and disrupt the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myudsuzikx2b"}, {"timestamp": "2026-10-27T13:31:35.839Z", "date_only": false, "value": "2026-10-27T13:31:35.839536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3myudvkghcpwh", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "3e4f2713-42e5-4796-a661-c35d6360ccad", "content": "CVE Radar | CVE-2026-65145 | CVSS 10.0\n\nNVIDIA NeMo Agent Toolkit Authentication Vulnerability\n\nCVE-2026-65145 affects the NVIDIA NeMo Agent Toolkit and is rated Critical with a CVSS 3.1 score of 10.0.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1333", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3myudvkghcpwh"}, {"timestamp": "2026-10-27T14:09:02.107Z", "date_only": false, "value": "2026-10-27T14:09:02.107819Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myufykiemu2n", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "81f0d5fc-f8c5-45d6-bb9e-fc3ea9a30cd4", "content": "\ud83d\udea8 CVE-2026-65145 \u2014 CVSS 10 CRITICAL\n\nNVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication is...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-65145\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myufykiemu2n"}, {"timestamp": "2026-10-27T15:03:41.023Z", "date_only": false, "value": "2026-10-27T15:03:41.023", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65145", "record": "FKIE_CVE-2026-65145", "field": "lastModified"}, {"timestamp": "2026-10-27T15:32:43Z", "date_only": false, "value": "2026-10-27T15:32:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8MJC-3V3W-78R7", "record": "GHSA-8MJC-3V3W-78R7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T15:32:43Z", "date_only": false, "value": "2026-10-27T15:32:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8MJC-3V3W-78R7", "record": "GHSA-8MJC-3V3W-78R7", "field": "modified"}, {"timestamp": "2026-10-27T16:22:31.257Z", "date_only": false, "value": "2026-10-27T16:22:31.257710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/veduis.bsky.social/post/3myunhaj4of27", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "790c8f9c-aab4-4d75-9640-0b6270f01d64", "content": "NVIDIA NeMo Agent Toolkit contains CVE-2026-65145, rated critical. An attacker could cause the vulnerability.", "url": "https://bsky.app/profile/veduis.bsky.social/post/3myunhaj4of27"}, {"timestamp": "2026-10-27T18:00:08.963Z", "date_only": false, "value": "2026-10-27T18:00:08.963113Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3myusvrrc3v2f", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "072ad21e-5670-4cd5-b3fb-694066b87406", "content": "Today we highlight this critical CVE.\n\nCVE-2026-65145 published 2026-10-27 \u2014 CVSS 10.0 v3.1.\n\nNVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-65145/\n\n#fcvulns #Nvidia", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3myusvrrc3v2f"}, {"timestamp": "2026-10-28T00:05:48.381Z", "date_only": false, "value": "2026-10-28T00:05:48.381235Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3myvhdnauct2y", "record": "CVE-2026-65145", "field": "creation_timestamp", "uuid": "9aa0cb77-5a89-4288-ba3a-05dd98220224", "content": "NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.\n\n#NVIDIA #NeMoAgentToolkit #TensorRTLLM #PhysX #CVE202665145 #AISecurity #SecurityUpdate #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3myvhdnauct2y"}], "metrics": {"as_of": "2026-10-31T01:39:19.735Z", "anchors": {"origin": {"timestamp": "2026-10-27T12:16:45.287Z", "date_only": false, "value": "2026-10-27T12:16:45.287Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65145", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T12:16:45.287Z", "date_only": false, "value": "2026-10-27T12:16:45.287Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65145", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 307354.448496, "hours": 85.37623569333334, "days": 3.557343153888889, "min_seconds": 307354.448496, "max_seconds": 307354.448496, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T12:16:45.287Z", "date_only": false, "value": "2026-10-27T12:16:45.287Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65145", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T01:39:19.735Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}