{"metadata": {"vulnerability": "CVE-2026-65960", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-23T18:15:14.579Z", "date_only": false, "value": "2026-07-23T18:15:14.579Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-65960", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-06T20:10:27.507Z", "date_only": false, "value": "2026-11-06T20:10:27.507Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65960", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-06T20:10:27.507Z", "date_only": false, "value": "2026-11-06T20:10:27.507Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-65960", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T20:16:59.087Z", "date_only": false, "value": "2026-11-06T20:16:59.087691Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117571336182425213", "record": "CVE-2026-65960", "field": "creation_timestamp", "uuid": "9123cc24-d901-4486-befb-62910b034ba7", "content": "CVE-2026-65960 Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An attacker who can run or compromise same-node hostNetwork pods can reach the listener and invoke privileged methods without authentication. These methods can add, delete, or reconfigure tracing policies and change debug settings, potentially resulting in privilege escalation or container escape. Version 1.7.0 changes the default endpoint to a Unix-domain socket. Deployments that do not expose an unauthenticated TCP listener are not affected.\nhttps://www.cve.org/CVERecord?id=CVE-2026-65960https://github.com/cilium/tetragon/security/advisories/GHSA-6qqg-3qf7-p3v5https://github.com/cilium/tetragon/pull/4882https://github.com/cilium/tetragon/commit/8e89933d3526f37c04f7523013ff32f8b1c6f62ahttps://github.com/cilium/tetragon/commit/fe46101770b960ebbf39fe9749bb20d49cf178b2https://github.com/cilium/tetragon/releases/tag/v1.7.0#cilium #tetragon#CVE_2026_65960#bot", "url": "https://infosec.exchange/users/cve/statuses/117571336182425213"}, {"timestamp": "2026-11-06T20:17:24.397Z", "date_only": false, "value": "2026-11-06T20:17:24.397", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65960", "record": "FKIE_CVE-2026-65960", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T21:25:30.241Z", "date_only": false, "value": "2026-11-06T21:25:30.241408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dusgo75avko6x", "record": "CVE-2026-65960", "field": "creation_timestamp", "uuid": "0d5f0895-ebf5-4661-be69-c3bd75f0733b", "content": "CVE-2026-65960 - Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods\nCVE ID : CVE-2026-65960\n \n Published : 6 novembre 2026 20:17 | 51\u00a0minutes ago\n \n Description : Tetragon is an eBPF-based security observability and runtime enforcement project. ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/dusgo75avko6x"}, {"timestamp": "2026-11-07T03:17:35.879Z", "date_only": false, "value": "2026-11-07T03:17:35.879105Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzowpsizpe26", "record": "CVE-2026-65960", "field": "creation_timestamp", "uuid": "8d598591-1597-4035-9229-460361f52082", "content": "\ud83d\udfe0 CVE-2026-65960 - High (8.8)\n\nTetragon is an eBPF-based security observability and runtime enforcement project. Versions before...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65960/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzowpsizpe26"}, {"timestamp": "2026-11-10T20:07:08.800Z", "date_only": false, "value": "2026-11-10T20:07:08.800655Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-65960", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-10T20:07:08.800Z", "date_only": false, "value": "2026-11-10T20:07:08.800655Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65960", "record": "FKIE_CVE-2026-65960", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-10T20:07:44.595Z", "date_only": false, "value": "2026-11-10T20:07:44.595Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-65960", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T20:07:44.595Z", "date_only": false, "value": "2026-11-10T20:07:44.595Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-65960", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T22:18:35.610Z", "date_only": false, "value": "2026-11-12T22:18:35.610", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-65960", "record": "FKIE_CVE-2026-65960", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T10:25:29.731Z", "anchors": {"origin": {"timestamp": "2026-11-06T20:10:27.507Z", "date_only": false, "value": "2026-11-06T20:10:27.507Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65960", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-06T20:10:27.507Z", "date_only": false, "value": "2026-11-06T20:10:27.507Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65960", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 569702.224686, "hours": 158.25061796833333, "days": 6.593775748680556, "min_seconds": 569702.224686, "max_seconds": 569702.224686, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T20:10:27.507Z", "date_only": false, "value": "2026-11-06T20:10:27.507Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-65960", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T10:25:29.731Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}