{"metadata": {"vulnerability": "CVE-2026-76506", "count": 34, "kinds": {"milestone": 8, "sighting": 8, "kev": 0, "other": 18}}, "data": [{"timestamp": "2026-08-19T12:02:03.641Z", "date_only": false, "value": "2026-08-19T12:02:03.641Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-76506", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1467", "record": "CERTFR-2026-AVI-1467", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76506", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76506", "record": "FKIE_CVE-2026-76506", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-04T15:52:58Z", "date_only": false, "value": "2026-11-04T15:52:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T15:53:01Z", "date_only": false, "value": "2026-11-04T15:53:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-04T16:00:00Z", "date_only": false, "value": "2026-11-04T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T16:00:00Z", "date_only": false, "value": "2026-11-04T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T16:00:00Z", "date_only": false, "value": "2026-11-04T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-04T16:27:03.469Z", "date_only": false, "value": "2026-11-04T16:27:03.469Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-76506", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-04T16:27:03.469Z", "date_only": false, "value": "2026-11-04T16:27:03.469Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-76506", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T16:36:19.191Z", "date_only": false, "value": "2026-11-04T16:36:19.191122Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117559143871735798", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "4a952d1e-6d81-4b61-aa4b-ce4c5e0e12c9", "content": "CVE-2026-76506 Cisco Unified Computing System Central Remote Code Execution Vulnerability A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.\nThis vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-76506https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ#cisco #Cisco #CiscoUnifiedComputingSystemCentralSoftware#CVE_2026_76506#bot", "url": "https://infosec.exchange/users/cve/statuses/117559143871735798"}, {"timestamp": "2026-11-04T16:44:40.528Z", "date_only": false, "value": "2026-11-04T16:44:40.528478Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117559176728165326", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "dab03c0b-7ad9-4c9d-928e-292a390ff998", "content": "Cisco has three advisories today.\nNew, medium-severity: CVE-2026-76506: Cisco UCS Central Software Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ\nHere are the others: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #infosec #Cisco #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117559176728165326"}, {"timestamp": "2026-11-04T17:17:37Z", "date_only": false, "value": "2026-11-04T17:17:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QXQ7-4VCW-5677", "record": "GHSA-QXQ7-4VCW-5677", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-04T17:17:37.030Z", "date_only": false, "value": "2026-11-04T17:17:37.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76506", "record": "FKIE_CVE-2026-76506", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T17:50:12.669Z", "date_only": false, "value": "2026-11-04T17:50:12.669744Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mziw3eq2dk2j", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "0c4b6fb7-6365-4d84-afc0-ade3b4ee1098", "content": "\ud83d\udfe0 CVE-2026-76506 - High (7.6)\n\nA vulnerability in the web-based management interface of Cisco UCS Central Software could allow a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76506/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mziw3eq2dk2j"}, {"timestamp": "2026-11-04T18:30:55Z", "date_only": false, "value": "2026-11-04T18:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QXQ7-4VCW-5677", "record": "GHSA-QXQ7-4VCW-5677", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T18:30:55Z", "date_only": false, "value": "2026-11-04T18:30:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QXQ7-4VCW-5677", "record": "GHSA-QXQ7-4VCW-5677", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-04T21:00:00Z", "date_only": false, "value": "2026-11-04T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2162", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "06f6c918-2cb4-4d41-9ae3-50124cd54ac4", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2162"}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4351", "record": "WID-SEC-W-2026-4351", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4351", "record": "WID-SEC-W-2026-4351", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4351", "record": "WID-SEC-W-2026-4351", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4351", "record": "WID-SEC-W-2026-4351", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1467", "record": "CERTFR-2026-AVI-1467", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": true, "value": "2026-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1467", "record": "CERTFR-2026-AVI-1467", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1467", "record": "CERTFR-2026-AVI-1467", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-05T03:58:22.070Z", "date_only": false, "value": "2026-11-05T03:58:22.070406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzjy2uiuzs2f", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "aebe629f-d8d2-4978-9cf2-ecf31f39bb17", "content": "Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.\n\n#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzjy2uiuzs2f"}, {"timestamp": "2026-11-05T04:56:47.292Z", "date_only": false, "value": "2026-11-05T04:56:47.292Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-76506", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-05T04:56:47.292Z", "date_only": false, "value": "2026-11-05T04:56:47.292Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76506", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T11:29:58.089Z", "date_only": false, "value": "2026-11-05T11:29:58.089+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4351", "record": "WID-SEC-W-2026-4351", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-05T21:42:59.691Z", "date_only": false, "value": "2026-11-05T21:42:59.691570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mzltkjilsc2u", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "a4512487-c0e8-421d-988d-d6e7133f2b61", "content": "Cisco\u3001UCS Central\u306eRCE \u8106\u5f31\u6027\u300cCVE-2026-76506\u300d\u3092\u4fee\u6b63\u3000ISE\u30fbUnified CM\u306b\u3082\u5f71\u97ff \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mzltkjilsc2u"}, {"timestamp": "2026-11-06T09:32:44.230Z", "date_only": false, "value": "2026-11-06T09:32:44.230873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mzn37oznnb26", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "8ce16093-d98e-459a-842a-51bf6e3d8e14", "content": "Vuln\u00e9rabilit\u00e9s \u00e9lev\u00e9es (7 \u2264 CVSS < 9) (suite)\n\u2022 Cisco UCS Central Software (CVE-2026-76506), CVSS 7.6 (Cyberveille ESant\u00e9)\n\u2022 Traefik (CVE-2026-121966), CVSS 7.0 (Cyberveille ESant\u00e9)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mzn37oznnb26"}, {"timestamp": "2026-11-06T09:35:38.605Z", "date_only": false, "value": "2026-11-06T09:35:38.605019Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mzn3eutp2v2w", "record": "CVE-2026-76506", "field": "creation_timestamp", "uuid": "2adced2a-1605-428d-8bad-5a878e44f61c", "content": "Security advisories 7/34\nCisco fixes UCS Central flaw that lets a logged-in user run commands\n\nCVE-2026-76506 (CVSS 7.6) lets any user with valid credentials run commands, write files and read data through the web interface.\n\n#infosec #cybersecurity\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mzn3eutp2v2w"}, {"timestamp": "2026-11-06T21:40:43.450Z", "date_only": false, "value": "2026-11-06T21:40:43.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76506", "record": "FKIE_CVE-2026-76506", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T12:15:18.021Z", "anchors": {"origin": {"timestamp": "2026-11-04T16:00:00Z", "date_only": false, "value": "2026-11-04T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-04T16:00:00Z", "date_only": false, "value": "2026-11-04T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 332118.021287, "hours": 92.25500591305556, "days": 3.843958579710648, "min_seconds": 332118.021287, "max_seconds": 332118.021287, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-04T16:00:00Z", "date_only": false, "value": "2026-11-04T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-CUCS-RCE-LZHSFRDQ", "record": "CISCO-SA-CUCS-RCE-LZHSFRDQ", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-08T12:15:18.021Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}