{"metadata": {"vulnerability": "CVE-2026-73996", "count": 33, "kinds": {"milestone": 4, "sighting": 15, "kev": 5, "other": 9}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-14T10:15:59.205Z", "date_only": false, "value": "2026-08-14T10:15:59.205Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-73996", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-18T12:48:01Z", "date_only": false, "value": "2026-08-18T12:48:01.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-18T14:00:41.020Z", "date_only": false, "value": "2026-08-18T14:00:41.020Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-73996", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-18T15:10:06.495Z", "date_only": false, "value": "2026-08-18T15:10:06.495904Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73996", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-18T15:10:06.495Z", "date_only": false, "value": "2026-08-18T15:10:06.495904Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73996", "record": "FKIE_CVE-2026-73996", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-18T15:10:57.008Z", "date_only": false, "value": "2026-08-18T15:10:57.008Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-73996", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-18T15:17:08Z", "date_only": false, "value": "2026-08-18T15:17:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FX45-FHX5-JF9P", "record": "GHSA-FX45-FHX5-JF9P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-18T15:17:08.600Z", "date_only": false, "value": "2026-08-18T15:17:08.600", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73996", "record": "FKIE_CVE-2026-73996", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-18T15:31:49Z", "date_only": false, "value": "2026-08-18T15:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FX45-FHX5-JF9P", "record": "GHSA-FX45-FHX5-JF9P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-18T15:31:49Z", "date_only": false, "value": "2026-08-18T15:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FX45-FHX5-JF9P", "record": "GHSA-FX45-FHX5-JF9P", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-18T16:11:00.517Z", "date_only": false, "value": "2026-08-18T16:11:00.517669Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtem67kodu2m", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "8c65e5e4-c967-4efe-b6dd-c877b400f7e5", "content": "\ud83d\udea8 CVE-2026-73996 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73996\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtem67kodu2m"}, {"timestamp": "2026-08-18T17:20:04.516Z", "date_only": false, "value": "2026-08-18T17:20:04.516467Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtepzot2fe2p", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "96b1cd41-94b9-43ee-97d2-a52318e46016", "content": "CVE-2026-73996 - masteriyo - lms\nAn outdated version of the Masteriyo Learning Management System (LMS) plugin for WordPress can be exploited by attackers to upload any file they want. This could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#masteriyolms #masteriyo #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtepzot2fe2p"}, {"timestamp": "2026-08-21T04:00:03.740Z", "date_only": false, "value": "2026-08-21T04:00:03.740592Z", "kind": "sighting", "label": "Seen", "source": "Telegram/b4WBtRo620bcBWWOg8X_RfJcTN35itwU9g11mGhdE2NlcRcc", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "60305334-0268-484e-beb5-1a5339b0885d"}, {"timestamp": "2026-08-21T04:00:03.887Z", "date_only": false, "value": "2026-08-21T04:00:03.887204Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1ThaDno_W3Ka2b0qcRhQY27-XNg8SeWiGEBhbywH0dvG480h", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "e2c43f03-1f21-4dc9-b7b5-ad2ea9eadb97"}, {"timestamp": "2026-08-22T07:00:02.959Z", "date_only": false, "value": "2026-08-22T07:00:02.959675Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-SvGncDmyD8mCinZhEuoCdd-YFQP5dpOrLuNh1m61f7bY1jo", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "120ebfdc-ffc0-41e6-a3d2-6144493b7f2f"}, {"timestamp": "2026-08-24T17:00:03.617Z", "date_only": false, "value": "2026-08-24T17:00:03.617309Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1_b90yBOy2SfvjuZ69uWqxo4lLXWTFoL87sqOYfdotwyiTZa", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "bc4817b5-a05f-4cbd-a3b0-c463b5069f9e"}, {"timestamp": "2026-08-24T17:00:03.846Z", "date_only": false, "value": "2026-08-24T17:00:03.846596Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Wkw5Q93mgEWIMhhwt6CYg1p81IUQmroPxiysbO9zWQOWvyeP", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "ecf05f49-67c4-4416-8b77-777208c92533"}, {"timestamp": "2026-08-24T17:00:04.069Z", "date_only": false, "value": "2026-08-24T17:00:04.069670Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mCB2grCGFyDPyP46h0RoSTt2nzVg4a1r-qTUhzVOT_Pb_Nr6", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "c66128c3-4680-40b0-9059-1c6071849b8f"}, {"timestamp": "2026-08-24T17:00:04.288Z", "date_only": false, "value": "2026-08-24T17:00:04.288745Z", "kind": "sighting", "label": "Seen", "source": "Telegram/94zsc3RGfL-cYo-R392AxLlVEM1n1YwHAA5wklhiAnO4RRX-", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "a14d189d-c83b-44e5-9680-36f0e6ed3782"}, {"timestamp": "2026-08-24T17:00:04.785Z", "date_only": false, "value": "2026-08-24T17:00:04.785943Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mVHbj7a1DYNF9kaBsr_OFLsg6Xhcx7FdBO2-7gQR_Jq3tWAA", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "bb66ad0a-0d3b-4494-aa18-b31b4c4e31ed"}, {"timestamp": "2026-09-03T08:00:04.797Z", "date_only": false, "value": "2026-09-03T08:00:04.797103Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dEu8f3Utvvz3CENWStBoW1q9DUH9bR4YUoyKQUPDbdvpHG7DHA", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "164997fa-c15d-4233-a691-b5603856d116"}, {"timestamp": "2026-09-03T08:00:04.937Z", "date_only": false, "value": "2026-09-03T08:00:04.937063Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ll1AzPD7QTzjWba10UNv1-Omd-fgpywQHDyh7DMj-s8cU8TfcA", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "5abaca6c-1346-4355-8e2b-1259b9c80d58"}, {"timestamp": "2026-09-03T08:00:05.103Z", "date_only": false, "value": "2026-09-03T08:00:05.103785Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Wq1RQ9DZ7N2QDdyjbZp2O4a0WnlHH9sKKPWozfdrK71FdlohDQ", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "c9ded6b7-d590-4f6a-9035-bcfdaf0759c6"}, {"timestamp": "2026-09-04T08:00:04.583Z", "date_only": false, "value": "2026-09-04T08:00:04.583912Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8yRqTs6iNIaG1p-0fIet7GRVNa1yJ-tacVkFZ69SKDvKdXX0xA", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "321471c0-0daa-4f96-96bb-64366c856736"}, {"timestamp": "2026-11-05T08:13:58.378Z", "date_only": false, "value": "2026-11-05T08:13:58.378Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-73996", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-05T08:13:58.378Z", "date_only": false, "value": "2026-11-05T08:13:58.378Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-73996", "field": "status.status_updated_at", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T08:30:25.730Z", "date_only": false, "value": "2026-11-05T08:30:25.730Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-73996", "field": "evidence.0.details.added_date", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T09:17:05.323Z", "date_only": false, "value": "2026-11-05T09:17:05.323", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-73996", "record": "FKIE_CVE-2026-73996", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-06T09:00:01Z", "date_only": false, "value": "2026-11-06T09:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T09:00:36.232Z", "date_only": false, "value": "2026-11-06T09:00:36.232500Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a91e046-afd9-42be-a544-df9c5f8f8749", "record": "CVE-2026-73996", "field": "creation_timestamp", "uuid": "8a51a98f-19fb-4322-8b88-1a242d82ffb0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a91e046-afd9-42be-a544-df9c5f8f8749", "metric_role": "exploitation", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T08:49:11.055Z", "anchors": {"origin": {"timestamp": "2026-08-18T12:48:01Z", "date_only": false, "value": "2026-08-18T12:48:01.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-18T12:48:01Z", "date_only": false, "value": "2026-08-18T12:48:01.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 6810144.0, "hours": 1891.7066666666667, "days": 78.82111111111111, "min_seconds": 6810144.0, "max_seconds": 6810144.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-18T12:48:01Z", "date_only": false, "value": "2026-08-18T12:48:01.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 6810144.0, "hours": 1891.7066666666667, "days": 78.82111111111111, "min_seconds": 6810144.0, "max_seconds": 6810144.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-18T12:48:01Z", "date_only": false, "value": "2026-08-18T12:48:01.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 7675270.05511, "hours": 2132.019459752778, "days": 88.83414415636574, "min_seconds": 7675270.05511, "max_seconds": 7675270.05511, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-18T12:48:01Z", "date_only": false, "value": "2026-08-18T12:48:01.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-73996", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T08:49:11.055Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 865126.05511, "hours": 240.3127930861111, "days": 10.013033045254629, "min_seconds": 865126.05511, "max_seconds": 865126.05511, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-05T08:30:25Z", "date_only": false, "value": "2026-11-05T08:30:25+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-73996", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4a91e046-afd9-42be-a544-df9c5f8f8749", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T08:49:11.055Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}