{"metadata": {"vulnerability": "CVE-2026-73100", "count": 16, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-08-10T20:28:10.565Z", "date_only": false, "value": "2026-08-10T20:28:10.565Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-73100", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-05T11:50:50.797Z", "date_only": false, "value": "2026-11-05T11:50:50.797Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T11:50:50.797Z", "date_only": false, "value": "2026-11-05T11:50:50.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-73100", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-05T11:50:50.797Z", "date_only": false, "value": "2026-11-05T11:50:50.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-73100", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T11:58:13.158Z", "date_only": false, "value": "2026-11-05T11:58:13.158797Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117563712640432697", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "28b20b05-d586-465d-a9f4-eb2a6a3f6c4c", "content": "CVE-2026-73100 Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors Insertion of Sensitive Information into Log File vulnerability in Apache Juneau.\nThe default REST server call logger records request headers for requests that end in a server error, without redacting them. Any client able to cause a server error gets headers such as Authorization, Cookie, Proxy-Authorization and X-API-Key written in cleartext to the application log, exposing them to anyone who can read the logs.\nThis issue affects Apache Juneau: through 9.2.0.\nUsers are recommended to upgrade to version 9.2.1, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-73100https://lists.apache.org/thread.html/j05q7vw08j48o96tdlzcsd4sozx1lyl6#apache #ApacheSoftwareFoundation #ApacheJuneau#CVE_2026_73100#bot", "url": "https://infosec.exchange/users/cve/statuses/117563712640432697"}, {"timestamp": "2026-11-05T12:02:29.407Z", "date_only": false, "value": "2026-11-05T12:02:29.407638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mzkt4kf2wj2p", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "0e0df88b-cdb3-4163-a948-4cc3f0be067c", "content": "CVE-2026-73100: Apache Juneau through 9.2.0 writes request headers such as Authorization, Cookie and X-API-Key to the application log in cleartext when a request ends in a server error. No exploitation confirmed. The fix is in version 9.2.1.", "url": "https://bsky.app/profile/suriq.io/post/3mzkt4kf2wj2p"}, {"timestamp": "2026-11-05T12:17:51Z", "date_only": false, "value": "2026-11-05T12:17:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H63V-GJ7G-MX8J", "record": "GHSA-H63V-GJ7G-MX8J", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-05T12:17:51.060Z", "date_only": false, "value": "2026-11-05T12:17:51.060", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73100", "record": "FKIE_CVE-2026-73100", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T12:32:14Z", "date_only": false, "value": "2026-11-05T12:32:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H63V-GJ7G-MX8J", "record": "GHSA-H63V-GJ7G-MX8J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T12:32:14Z", "date_only": false, "value": "2026-11-05T12:32:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H63V-GJ7G-MX8J", "record": "GHSA-H63V-GJ7G-MX8J", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T12:34:28.705Z", "date_only": false, "value": "2026-11-05T12:34:28.705653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzkuvow6w4ny", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "0daff828-eb5c-4112-ad8c-f58b9614c5eb", "content": "CVE Radar | CVE-2026-73100 | CVSS 10.0\n\nApache Juneau Logs Sensitive Headers\n\nCVE-2026-73100 is a critical Apache Juneau vulnerability involving sensitive information written to application logs.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1380", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzkuvow6w4ny"}, {"timestamp": "2026-11-05T12:40:03.606Z", "date_only": false, "value": "2026-11-05T12:40:03.606226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzkv7pgr5x2f", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "417fdede-470c-4a7d-b120-78ef05dc46e2", "content": "CVE-2026-73100 - apache juneau\nWhen Apache Juneau encounters a server error, it writes the full request headers\u2014including passwords, cookies and API keys\u2014to its log files without hiding them.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachejuneau #apachefoundation #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzkv7pgr5x2f"}, {"timestamp": "2026-11-05T13:55:27.542Z", "date_only": false, "value": "2026-11-05T13:55:27.542623Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ch6v7f55hbyw", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "457cef1f-e705-44c1-8b0d-dae2b82da83c", "content": "CVE-2026-73100 - Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors\nCVE ID : CVE-2026-73100\n \n Published : Nov. 5, 2026, 12:17 p.m. | 50\u00a0minutes ago\n \n Description : Insertion of Sensitive Information into Log File vulne...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/6ch6v7f55hbyw"}, {"timestamp": "2026-11-05T14:07:38.626Z", "date_only": false, "value": "2026-11-05T14:07:38.626888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzl24dvuc724", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "e09489f2-c810-4d7a-a631-87fba5c29fac", "content": "\ud83d\udea8 CVE-2026-73100 \u2014 CVSS 10 CRITICAL\n\nInsertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server ca...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73100\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzl24dvuc724"}, {"timestamp": "2026-11-05T15:01:29.553Z", "date_only": false, "value": "2026-11-05T15:01:29.553", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73100", "record": "FKIE_CVE-2026-73100", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-06T23:15:36.973Z", "date_only": false, "value": "2026-11-06T23:15:36.973923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mzoj735kce2q", "record": "CVE-2026-73100", "field": "creation_timestamp", "uuid": "de9e0f16-80ad-498c-b2e1-412151d0b126", "content": "CVE-2026-73100 is trending. Hype score 7, currently #10 on cvemon.\n\nInsertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records request headers for requests that end in a server error,\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-73100", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mzoj735kce2q"}], "metrics": {"as_of": "2026-11-07T23:12:25.206Z", "anchors": {"origin": {"timestamp": "2026-11-05T11:50:50.797Z", "date_only": false, "value": "2026-11-05T11:50:50.797Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-05T11:50:50.797Z", "date_only": false, "value": "2026-11-05T11:50:50.797Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 213694.409414, "hours": 59.35955817055555, "days": 2.473314923773148, "min_seconds": 213694.409414, "max_seconds": 213694.409414, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-05T11:50:50.797Z", "date_only": false, "value": "2026-11-05T11:50:50.797Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T23:12:25.206Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}