{"metadata": {"vulnerability": "CVE-2026-73635", "count": 33, "kinds": {"milestone": 14, "sighting": 5, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-08-13T11:52:36.541Z", "date_only": false, "value": "2026-08-13T11:52:36.541Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-73635", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-14T10:24:15.071Z", "date_only": false, "value": "2026-08-14T10:24:15.071849Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mszwwgaw2c23", "record": "CVE-2026-73635", "field": "creation_timestamp", "uuid": "6edac744-3e11-43f3-b8bf-b21dce635263", "content": "Apache Struts\u306e\u8106\u5f31\u6027(Moderate: CVE-2026-73631, CVE-2026-73633, CVE-2026-73634, CVE-2026-73635, Low: CVE-2026-73632)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #apache #struts #dos\n\nsecurity.sios.jp/vulnerabilit...", "url": "https://bsky.app/profile/omo.bsky.social/post/3mszwwgaw2c23"}, {"timestamp": "2026-08-15T10:38:08.227Z", "date_only": false, "value": "2026-08-15T10:38:08.227Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-15T10:38:08.227Z", "date_only": false, "value": "2026-08-15T10:38:08.227Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-73635", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-15T11:16:27Z", "date_only": false, "value": "2026-08-15T11:16:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PRRH-5R25-CH75", "record": "GHSA-PRRH-5R25-CH75", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-15T11:16:27.540Z", "date_only": false, "value": "2026-08-15T11:16:27.540", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73635", "record": "FKIE_CVE-2026-73635", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-15T12:30:20Z", "date_only": false, "value": "2026-08-15T12:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PRRH-5R25-CH75", "record": "GHSA-PRRH-5R25-CH75", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-15T12:50:20.772Z", "date_only": false, "value": "2026-08-15T12:50:20.772946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/746ygwaxgtwpm", "record": "CVE-2026-73635", "field": "creation_timestamp", "uuid": "039fdb0c-603b-4bc8-ae4b-6df81d0271dc", "content": "CVE-2026-73635 - Apache Struts: Unbounded growth of localized-text caches driven by the request locale\nCVE ID : CVE-2026-73635\n \n Published : Aug. 15, 2026, 11:16 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Allocation of resources without limits or throttling vulnerability ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/746ygwaxgtwpm"}, {"timestamp": "2026-08-15T13:36:32.156Z", "date_only": false, "value": "2026-08-15T13:36:32.156425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mt4s57envt2v", "record": "CVE-2026-73635", "field": "creation_timestamp", "uuid": "606dadd6-0f6c-4d8f-bfe6-36d91e49fc41", "content": "Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.\n\n#ApacheStruts #Struts2 #DoS #CVE #JavaWeb #CyberSecurity #InfoSec #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mt4s57envt2v"}, {"timestamp": "2026-08-17T12:43:09.201Z", "date_only": false, "value": "2026-08-17T12:43:09.201224Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73635", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-08-17T12:43:09.201Z", "date_only": false, "value": "2026-08-17T12:43:09.201224Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73635", "record": "FKIE_CVE-2026-73635", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-17T12:43:26.618Z", "date_only": false, "value": "2026-08-17T12:43:26.618Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-73635", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-17T12:43:26.618Z", "date_only": false, "value": "2026-08-17T12:43:26.618Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73635", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-17T15:30:38Z", "date_only": false, "value": "2026-08-17T15:30:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PRRH-5R25-CH75", "record": "GHSA-PRRH-5R25-CH75", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-18T17:45:16.930Z", "date_only": false, "value": "2026-08-18T17:45:16.930", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73635", "record": "FKIE_CVE-2026-73635", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-25T04:45:08.752Z", "date_only": false, "value": "2026-08-25T04:45:08.752780Z", "kind": "sighting", "label": "Seen", "source": "https://jvn.jp/en/jp/JVN08517956", "record": "CVE-2026-73635", "field": "creation_timestamp", "uuid": "a0dfa0f0-c74a-479e-8bd3-b5dda9417324", "url": "https://jvn.jp/en/jp/JVN08517956"}, {"timestamp": "2026-08-25T05:00:00Z", "date_only": false, "value": "2026-08-25T14:00+09:00", "kind": "other", "label": "Dc:date", "source": "jvndb \u00b7 JVNDB-2026-000121", "record": "JVNDB-2026-000121", "field": "dc:date", "linked_record": true}, {"timestamp": "2026-08-25T05:00:00Z", "date_only": false, "value": "2026-08-25T14:00+09:00", "kind": "other", "label": "Dcterms:modified", "source": "jvndb \u00b7 JVNDB-2026-000121", "record": "JVNDB-2026-000121", "field": "dcterms:modified", "linked_record": true}, {"timestamp": "2026-09-24T22:27:43.333Z", "date_only": false, "value": "2026-09-24T22:27:43.333953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcchtsu422t", "record": "CVE-2026-73635", "field": "creation_timestamp", "uuid": "d2c04470-4030-4bca-afc5-63da869900b6", "content": "\u300cApache Struts\u300d\u306bDoS\u8106\u5f31\u6027 - \u30e1\u30e2\u30ea\u67af\u6e07\u306e\u304a\u305d\u308c\n\n\u30a6\u30a7\u30d6\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cApache Struts\u300d\u306b\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3092\u5f15\u304d\u8d77\u3053\u3059\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-73635\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u91cd\u8981\u5ea6\u3092\u300c\u4e2d\uff08Moderate\uff09\u300d\u3068\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u3057\u3066\u3044\u308b\u3002\n\n\u30ed\u30fc\u30ab\u30e9\u30a4\u30ba\u3055\u308c\u305f\u30e1\u30c3\u30bb\u30fc\u30b8\u306e\u51e6\u7406\u306b\u3042\u305f\u308a\u3001\u5185\u90e8\u30ad\u30e3\u30c3\u30b7\u30e5\u3092\u969b\u9650\u306a\u304f\u5229\u7528\u3059\u308b\u3053\u3068\u306b\u8d77\u56e0\u3002\u30ea\u30af\u30a8\u30b9\u30c8\u7531\u6765\u306e\u30ed\u30b1\u30fc\u30eb\u306b\u3088\u3063\u3066\u30d2\u30fc\u30d7\u9818\u57df\u306e\u67af\u6e07\u304c\u5f15\u304d\u8d77\u3053\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcchtsu422t"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": true, "value": "2026-09-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": true, "value": "2026-09-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": true, "value": "2026-09-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.3.published_at", "linked_record": true}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": true, "value": "2026-10-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "vendor_advisories.8.published_at", "linked_record": true}, {"timestamp": "2026-10-25T00:00:00Z", "date_only": true, "value": "2026-10-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": true, "value": "2026-10-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": true, "value": "2026-10-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1433", "record": "CERTFR-2026-AVI-1433", "field": "revisions.0.revision_date", "linked_record": true}], "metrics": {"as_of": "2026-11-04T15:58:36.059Z", "anchors": {"origin": {"timestamp": "2026-08-15T10:38:08.227Z", "date_only": false, "value": "2026-08-15T10:38:08.227Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-15T10:38:08.227Z", "date_only": false, "value": "2026-08-15T10:38:08.227Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 7017627.832824, "hours": 1949.3410646733334, "days": 81.22254436138888, "min_seconds": 7017627.832824, "max_seconds": 7017627.832824, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-15T10:38:08.227Z", "date_only": false, "value": "2026-08-15T10:38:08.227Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T15:58:36.059Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}