{"metadata": {"vulnerability": "CVE-2026-70188", "count": 50, "kinds": {"milestone": 10, "sighting": 22, "kev": 0, "other": 18}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-03T23:48:30.860Z", "date_only": false, "value": "2026-08-03T23:48:30.860Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-70188", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-70188", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-70188", "record": "FKIE_CVE-2026-70188", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:49:46Z", "date_only": false, "value": "2026-10-13T11:49:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "74c32f8a-1385-40d2-9d93-eb03bead4ae5", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423"}, {"timestamp": "2026-10-13T11:56:15Z", "date_only": false, "value": "2026-10-13T11:56:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "bb2cfb66-c5ad-4ad6-93d2-a5d4384d2847", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-70188", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:56:15.788Z", "date_only": false, "value": "2026-10-13T18:56:15.788419Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0426", "record": "NCSC-2026-0426", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T19:00:26.806Z", "date_only": false, "value": "2026-10-13T19:00:26.806Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-70188", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:07:49.568Z", "date_only": false, "value": "2026-10-13T19:07:49.568953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "561cd230-20de-404b-83da-02328a221e0d", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m"}, {"timestamp": "2026-10-13T19:07:52.452Z", "date_only": false, "value": "2026-10-13T19:07:52.452726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "dcd3e211-e923-4c3d-8575-f3c663664d78", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m"}, {"timestamp": "2026-10-13T19:07:55.160Z", "date_only": false, "value": "2026-10-13T19:07:55.160799Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "2a16b90f-b8e6-4bda-a438-3a6dfc3d0d44", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m"}, {"timestamp": "2026-10-13T19:07:57.827Z", "date_only": false, "value": "2026-10-13T19:07:57.827715Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "33bb63d4-6eeb-4a8f-84a5-c01c1ddc4197", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m"}, {"timestamp": "2026-10-13T19:08:00.410Z", "date_only": false, "value": "2026-10-13T19:08:00.410296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "08cc6daf-e0e5-4b2a-b184-3e03e6fe6353", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m"}, {"timestamp": "2026-10-13T19:08:03.395Z", "date_only": false, "value": "2026-10-13T19:08:03.395301Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "5f9265ba-c3e8-4b74-9ab2-9d0232e8da8d", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m"}, {"timestamp": "2026-10-13T19:08:06.745Z", "date_only": false, "value": "2026-10-13T19:08:06.745894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "5e987724-a4bb-48ae-b1d3-a3f4f5d1a244", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m"}, {"timestamp": "2026-10-13T19:08:09.387Z", "date_only": false, "value": "2026-10-13T19:08:09.387775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "fe2a8796-dd52-49a4-988e-3cbd63fb003b", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m"}, {"timestamp": "2026-10-13T19:08:12.686Z", "date_only": false, "value": "2026-10-13T19:08:12.686483Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "b0673202-8370-4303-8095-d49522d363cb", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m"}, {"timestamp": "2026-10-13T19:08:15.366Z", "date_only": false, "value": "2026-10-13T19:08:15.366680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "278a94dc-93d0-4060-a17b-37dfc89c2c93", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m"}, {"timestamp": "2026-10-13T19:08:18.035Z", "date_only": false, "value": "2026-10-13T19:08:18.035130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "6be46c78-befd-4915-ba54-95904b328435", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m"}, {"timestamp": "2026-10-13T19:08:20.809Z", "date_only": false, "value": "2026-10-13T19:08:20.809494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "a6f3eb8b-b468-4247-88b2-cf09d23ea55c", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m"}, {"timestamp": "2026-10-13T19:08:23.405Z", "date_only": false, "value": "2026-10-13T19:08:23.405016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "8d71ab42-fc98-44c2-92de-070c289db887", "content": "CVE-2026-70188 | ASP.NET Core Security Feature Bypass 9.1\n\nMore request smuggling, risk profile as the previous post.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m"}, {"timestamp": "2026-10-13T19:19:33.130Z", "date_only": false, "value": "2026-10-13T19:19:33.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-70188", "record": "FKIE_CVE-2026-70188", "field": "published"}, {"timestamp": "2026-10-13T20:12:09.017Z", "date_only": false, "value": "2026-10-13T20:12:09.017609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtqxnlid24", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "00ade3ab-84bc-4506-a492-53b1f9efbed7", "content": "\ud83d\udea8 CVE-2026-70188 \u2014 CVSS 9.1 CRITICAL\n\nInconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-70188\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtqxnlid24"}, {"timestamp": "2026-10-13T20:37:27Z", "date_only": false, "value": "2026-10-13T20:37:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FPQ8-4VHR-RCXX", "record": "GHSA-FPQ8-4VHR-RCXX", "field": "published"}, {"timestamp": "2026-10-13T20:37:28Z", "date_only": false, "value": "2026-10-13T20:37:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FPQ8-4VHR-RCXX", "record": "GHSA-FPQ8-4VHR-RCXX", "field": "modified"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T00:01:15.802Z", "date_only": false, "value": "2026-10-14T00:01:15.802788Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117436322633420939", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "22bbe3ed-e0ef-4c86-a040-59534cdd704e", "content": "CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-70188https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188#Microsoft #ASP.NETCore10.0 #ASP.NETCore11.0 #ASP.NETCore8.0 #ASP.NETCore9.0 #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10#CVE_2026_70188#bot", "url": "https://infosec.exchange/users/cve/statuses/117436322633420939"}, {"timestamp": "2026-10-14T01:16:35.812Z", "date_only": false, "value": "2026-10-14T01:16:35.812790Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mxsere4kny2o", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "f1ce94bc-6d05-4065-86ac-43169503f992", "content": "CVE-2026-88092 and CVE-2026-70188: Microsoft patched two critical HTTP request smuggling flaws in ASP.NET Core Kestrel. No exploitation is confirmed. Fixed in 8.0.32, 9.0.21, 10.0.13, and 11.0.0-rc.2.", "url": "https://bsky.app/profile/suriq.io/post/3mxsere4kny2o"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "c7d141d9-95f2-44a8-b3dc-a51c40c3313b", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T03:56:54.567Z", "date_only": false, "value": "2026-10-14T03:56:54.567Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-70188", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T04:18:33.003Z", "date_only": false, "value": "2026-10-14T04:18:33.003", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-70188", "record": "FKIE_CVE-2026-70188", "field": "lastModified"}, {"timestamp": "2026-10-14T04:40:05.661Z", "date_only": false, "value": "2026-10-14T04:40:05.661761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsq5agm4h2o", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "e5b487c1-b845-4680-a618-41e8333da944", "content": "CVE-2026-70188 - microsoft.aspnetcore.app.runtime.linux-arm\nThe Kestrel web server used by ASP.NET Core can accept specially crafted HTTP/2 requests that contain newline characters, which should be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #dotnet #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsq5agm4h2o"}, {"timestamp": "2026-10-14T12:01:08.600Z", "date_only": false, "value": "2026-10-14T12:01:08.600469Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mxtirut4lj2m", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "9a1fa056-bb0c-4fa9-bb61-7515be7395ce", "content": "\n\ud83d\udea8 New CRITICAL CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-70188 impacts Microsoft.AspNetCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/758\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mxtirut4lj2m"}, {"timestamp": "2026-10-15T12:01:03.725Z", "date_only": false, "value": "2026-10-15T12:01:03.725337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mxvzao3e5i2j", "record": "CVE-2026-70188", "field": "creation_timestamp", "uuid": "80f0cbf5-e349-45b5-b6c0-c7f0fb77c0f5", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-70188 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/758 #AWS #Lambda #Security #CVE #DevOps #SecOps", "url": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mxvzao3e5i2j"}, {"timestamp": "2026-10-15T22:25:21.488Z", "date_only": false, "value": "2026-10-15T22:25:21.488Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-70188", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:25:21.488Z", "date_only": false, "value": "2026-10-15T22:25:21.488Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-70188", "field": "containers.cna.providerMetadata.dateUpdated"}]}