{"metadata": {"vulnerability": "CVE-2026-6668", "count": 39, "kinds": {"milestone": 8, "sighting": 3, "kev": 0, "other": 28}}, "data": [{"timestamp": "2026-04-20T12:25:46.351Z", "date_only": false, "value": "2026-04-20T12:25:46.351Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-6668", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T16:04:47.158Z", "date_only": false, "value": "2026-09-23T16:04:47.158Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-6668", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T16:04:47.158Z", "date_only": false, "value": "2026-09-23T16:04:47.158000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T16:04:47.158Z", "date_only": false, "value": "2026-09-23T16:04:47.158Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / PostgreSQL", "record": "CVE-2026-6668", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T16:04:47.824Z", "date_only": false, "value": "2026-09-23T16:04:47.824000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-23T16:04:48.392Z", "date_only": false, "value": "2026-09-23T16:04:48.392000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-09-23T16:33:22.320Z", "date_only": false, "value": "2026-09-23T16:33:22.320321Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-6668", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-23T16:33:22.320Z", "date_only": false, "value": "2026-09-23T16:33:22.320321Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6668", "record": "FKIE_CVE-2026-6668", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-23T16:46:13.834Z", "date_only": false, "value": "2026-09-23T16:46:13.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-6668", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-23T16:46:13.834Z", "date_only": false, "value": "2026-09-23T16:46:13.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-6668", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T17:02:29.870Z", "date_only": false, "value": "2026-09-23T17:02:29.870201+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-09-23T17:02:45.621Z", "date_only": false, "value": "2026-09-23T17:02:45.621832+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-23T17:03:01.869Z", "date_only": false, "value": "2026-09-23T17:03:01.869988+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T17:17:00Z", "date_only": false, "value": "2026-09-23T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-6668", "record": "UBUNTU-CVE-2026-6668", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T17:17:16Z", "date_only": false, "value": "2026-09-23T17:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R96C-7W9V-WRC8", "record": "GHSA-R96C-7W9V-WRC8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-23T17:17:16.073Z", "date_only": false, "value": "2026-09-23T17:17:16.073", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6668", "record": "FKIE_CVE-2026-6668", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T18:31:56Z", "date_only": false, "value": "2026-09-23T18:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R96C-7W9V-WRC8", "record": "GHSA-R96C-7W9V-WRC8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-23T18:31:56Z", "date_only": false, "value": "2026-09-23T18:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R96C-7W9V-WRC8", "record": "GHSA-R96C-7W9V-WRC8", "field": "modified"}, {"timestamp": "2026-09-23T19:40:10Z", "date_only": false, "value": "2026-09-23T19:40:10.000", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6668", "record": "FKIE_CVE-2026-6668", "field": "lastModified"}, {"timestamp": "2026-09-23T21:38:51.771Z", "date_only": false, "value": "2026-09-23T21:38:51.771523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw7pblxdbi2t", "record": "CVE-2026-6668", "field": "creation_timestamp", "uuid": "ad6b8c14-559a-4261-8b04-e967a6af8c29", "content": "PgBouncer 1.25.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3092\u5f15\u304d\u8d77\u3053\u3057\u3001CPU\u3092\u98fd\u548c\u3055\u305b\u3001\u5168\u63a5\u7d9a\u3092\u505c\u6b62\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-6668 CVSS 7.5 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mw7pblxdbi2t"}, {"timestamp": "2026-09-24T14:09:18Z", "date_only": false, "value": "2026-09-24T14:09:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-25T01:01:50Z", "date_only": false, "value": "2026-09-25T01:01:50.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-25T01:01:50Z", "date_only": false, "value": "2026-09-25T01:01:50.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T01:01:50Z", "date_only": false, "value": "2026-09-25T01:01:50.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-29T17:07:04.712Z", "date_only": false, "value": "2026-09-29T17:07:04.712421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mwocv56v3m2v", "record": "CVE-2026-6668", "field": "creation_timestamp", "uuid": "26652de3-2b84-41f0-9c3b-3093c7b515d2", "content": "PgBouncer 1.26.0 fixes three CVEs. Two are triggerable by unauthenticated clients: a crash from a SCRAM client-final-message with no nonce (CVE-2026-19888) and an integer-overflow infinite loop in packet buffer growth (CVE-2026-6668).\n\nwww.postgresql.org/about/news/p...\n\npgexperts.com", "url": "https://bsky.app/profile/pgexperts.bsky.social/post/3mwocv56v3m2v"}, {"timestamp": "2026-10-01T09:31:03.502Z", "date_only": false, "value": "2026-10-01T09:31:03.502Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGBOUNCER-2026-6668", "record": "BIT-PGBOUNCER-2026-6668", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-01T09:55:18.588Z", "date_only": false, "value": "2026-10-01T09:55:18.588Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PGBOUNCER-2026-6668", "record": "BIT-PGBOUNCER-2026-6668", "field": "modified"}, {"timestamp": "2026-10-03T14:27:18.839Z", "date_only": false, "value": "2026-10-03T14:27:18.839557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/levelbrook.bsky.social/post/3mwy3t577yd2t", "record": "CVE-2026-6668", "field": "creation_timestamp", "uuid": "7a1db7f9-9114-4ee8-a566-c8b1a83f00a3", "content": "Christophe Pettus on PgBouncer 1.26.0: CVE-2026-6668 is a pre-auth hang, not a crash. systemd restarts a crash; a hung pooler just sits there with every pool behind it.\n\nA health check that skips the pooler won't notice.\n\nhttps://thebuild.com/blog/nobody-patches-the-pooler/ #postgres", "url": "https://bsky.app/profile/levelbrook.bsky.social/post/3mwy3t577yd2t"}, {"timestamp": "2026-10-05T14:51:38Z", "date_only": false, "value": "2026-10-05T14:51:38.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-07T01:54:11Z", "date_only": false, "value": "2026-10-07T01:54:11.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-07T01:54:11Z", "date_only": false, "value": "2026-10-07T01:54:11.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-07T07:01:57.916Z", "date_only": false, "value": "2026-10-07T07:01:57.916Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-6668", "record": "MSRC_CVE-2026-6668", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T09:37:53Z", "date_only": false, "value": "2026-10-17T09:37:53Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-6668", "record": "UBUNTU-CVE-2026-6668", "field": "modified"}, {"timestamp": "2026-10-31T08:10:14Z", "date_only": false, "value": "2026-10-31T08:10:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-31T08:10:14Z", "date_only": false, "value": "2026-10-31T08:10:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-31T08:10:14Z", "date_only": false, "value": "2026-10-31T08:10:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-01T06:17:37.687Z", "anchors": {"origin": {"timestamp": "2026-09-23T17:03:01.869Z", "date_only": false, "value": "2026-09-23T17:03:01.869988+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-09-23T17:03:01.869Z", "date_only": false, "value": "2026-09-23T17:03:01.869988+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": -21930.869, "hours": -6.091908055555555, "days": -0.2538295023148148, "min_seconds": -21930.869, "max_seconds": -21930.869, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-09-23T17:03:01.869Z", "date_only": false, "value": "2026-09-23T17:03:01.869988+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-09-23T17:03:01.869Z", "date_only": false, "value": "2026-09-23T17:03:01.869988+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-23T10:57:31Z", "date_only": false, "value": "2026-09-23T10:57:31+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:70698", "record": "RHSA-2026:70698", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}