{"metadata": {"vulnerability": "CVE-2026-68524", "count": 24, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 13}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-30T16:38:58.984Z", "date_only": false, "value": "2026-07-30T16:38:58.984Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-68524", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "vulnerabilities.16.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T14:11:35.683Z", "date_only": false, "value": "2026-11-05T14:11:35.683Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-68524", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T14:11:35.683Z", "date_only": false, "value": "2026-11-05T14:11:35.683Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-68524", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T14:36:16.481Z", "date_only": false, "value": "2026-11-05T14:36:16.481065Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117564334138884905", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "f6148d83-2c37-4245-a70d-6b6779de3f7d", "content": "CVE-2026-68524 Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a \"file:\" URI to cause OFBiz to load an attacker-controlled Screen definition.\nThis issue affects Apache OFBiz: before 24.09.08.\nUsers are recommended to upgrade to version 24.09.08, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-68524https://lists.apache.org/thread.html/7b2syzksp7klt9fvhdg0olldvs2g83lz#apache #ApacheSoftwareFoundation #ApacheOFBiz#CVE_2026_68524#bot", "url": "https://infosec.exchange/users/cve/statuses/117564334138884905"}, {"timestamp": "2026-11-05T14:40:09.897Z", "date_only": false, "value": "2026-11-05T14:40:09.897015Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzl3witn6f22", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "88b7fb43-1c9d-4eb7-a845-cf5640917aa0", "content": "CVE-2026-68524 HIGH (CVSS n/a)\nAn unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a \nFix: https://patchthecve.com/cve/CVE-2026-68524.html", "url": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzl3witn6f22"}, {"timestamp": "2026-11-05T15:17:22Z", "date_only": false, "value": "2026-11-05T15:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JCX6-8PCQ-FRPQ", "record": "GHSA-JCX6-8PCQ-FRPQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-05T15:17:22.090Z", "date_only": false, "value": "2026-11-05T15:17:22.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-68524", "record": "FKIE_CVE-2026-68524", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T15:32:38Z", "date_only": false, "value": "2026-11-05T15:32:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JCX6-8PCQ-FRPQ", "record": "GHSA-JCX6-8PCQ-FRPQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T00:06:05.635Z", "date_only": false, "value": "2026-11-06T00:06:05.635026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzm3kgnuwt2y", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "8003be70-90e8-4cce-9c0b-29d9a176ba28", "content": "46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.\n\n#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzm3kgnuwt2y"}, {"timestamp": "2026-11-06T00:33:13.261Z", "date_only": false, "value": "2026-11-06T00:33:13.261877Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117566681415943336", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "3ccef4d8-4aa0-4cd8-920d-5f1fb1746a5e", "content": "\ud83d\udea8 Apache OFBiz fixes dozens of vulnerabilities, including critical flaws allowing unauthenticated remote code execution\nThe Apache Software Foundation has released OFBiz 24.09.08 to address dozens of security vulnerabilities, including critical flaws that could allow attackers to execute malicious code, bypass authentication, and access sensitive business information.\nAmong the most serious is CVE-2026-68524, which allows remote code execution without authentication. Other vulnerabilities expose internal employee records, product information, and business data, while additional flaws could allow attackers to compromise application security controls.\nAll Apache OFBiz versions prior to 24.09.08 are affected. Administrators should upgrade immediately, particularly if their deployments are accessible from the internet.\nSource: https://ofbiz.apache.org/security.html", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117566681415943336"}, {"timestamp": "2026-11-06T10:29:58.448Z", "date_only": false, "value": "2026-11-06T10:29:58.448+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-10T15:02:58Z", "date_only": false, "value": "2026-11-10T15:02:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109981", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "24ac196c-44d6-40e7-9c72-dc8a202c4302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68524-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fixedbyreboot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-10 14:38:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-10T15:02:58Z", "date_only": false, "value": "2026-11-10T15:02:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/109981", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "ab2c702d-dd3d-4e52-8a89-23afcf3a8dc3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68524-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fixedbyreboot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-10 14:38:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109981"}, {"timestamp": "2026-11-10T17:01:12.782Z", "date_only": false, "value": "2026-11-10T17:01:12.782549Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-68524", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-10T17:01:12.782Z", "date_only": false, "value": "2026-11-10T17:01:12.782549Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-68524", "record": "FKIE_CVE-2026-68524", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-10T17:01:18.681Z", "date_only": false, "value": "2026-11-10T17:01:18.681Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-68524", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T17:01:18.681Z", "date_only": false, "value": "2026-11-10T17:01:18.681Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-68524", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T17:17:46.987Z", "date_only": false, "value": "2026-11-10T17:17:46.987", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-68524", "record": "FKIE_CVE-2026-68524", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-10T18:31:15Z", "date_only": false, "value": "2026-11-10T18:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JCX6-8PCQ-FRPQ", "record": "GHSA-JCX6-8PCQ-FRPQ", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T04:09:02.250Z", "anchors": {"origin": {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-11-10T15:02:58Z", "date_only": false, "value": "2026-11-10T15:02:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109981", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "24ac196c-44d6-40e7-9c72-dc8a202c4302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68524-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fixedbyreboot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-10 14:38:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 489778.0, "hours": 136.04944444444445, "days": 5.668726851851852, "min_seconds": 489778.0, "max_seconds": 489778.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-10T15:02:58Z", "date_only": false, "value": "2026-11-10T15:02:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109981", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "24ac196c-44d6-40e7-9c72-dc8a202c4302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68524-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fixedbyreboot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-10 14:38:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 623342.250398, "hours": 173.15062511055555, "days": 7.214609379606482, "min_seconds": 623342.250398, "max_seconds": 623342.250398, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4357", "record": "WID-SEC-W-2026-4357", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-12T04:09:02.250Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 133564.250398, "hours": 37.10118066611111, "days": 1.5458825277546298, "min_seconds": 133564.250398, "max_seconds": 133564.250398, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-10T15:02:58Z", "date_only": false, "value": "2026-11-10T15:02:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/109981", "record": "CVE-2026-68524", "field": "creation_timestamp", "uuid": "24ac196c-44d6-40e7-9c72-dc8a202c4302", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-68524-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fixedbyreboot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-10 14:38:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC exploit for CVE-2026-68524 - preauth RCE in Apache OFBiz via request body shadowing the decorator location and file URI screen loading. Verified on 24.09.07, control on 24.09.08.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/109981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T04:09:02.250Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}