{"metadata": {"vulnerability": "CVE-2026-76954", "count": 27, "kinds": {"milestone": 6, "sighting": 9, "kev": 0, "other": 12}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-20T03:00:38.206Z", "date_only": false, "value": "2026-08-20T03:00:38.206Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-76954", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "vulnerabilities.15.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1493", "record": "CERTFR-2026-AVI-1493", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": true, "value": "2026-11-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1493", "record": "CERTFR-2026-AVI-1493", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1493", "record": "CERTFR-2026-AVI-1493", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-10T17:02:10.837Z", "date_only": false, "value": "2026-11-10T17:02:10.837659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzxw6zaisb2k", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "2cbb4c18-5b9c-4306-9c33-1670fa47074f", "content": "Update Synology DiskStation Manager now to patch CVE-2026-76954, CVE-2026-85101, and 25 other flaws allowing arbitrary file writes and crashes.\n\n#Synology #SynologyDSM #NASSecurity #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzxw6zaisb2k"}, {"timestamp": "2026-11-10T20:00:00Z", "date_only": false, "value": "2026-11-10T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/synology-products-multiple-vulnerabilities_20261111", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "92308874-9ada-44a2-8cc1-c9a758c64fa0", "url": "https://www.hkcert.org/security-bulletin/synology-products-multiple-vulnerabilities_20261111"}, {"timestamp": "2026-11-11T15:20:59.643Z", "date_only": false, "value": "2026-11-11T15:20:59.643180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3n22ayvn6ny2r", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "f16c54d6-0939-44b0-87b2-a78d1f8e62db", "content": "Synology has patched CVE-2026-76954, a critical DSM flaw scored 9.8 that can let a remote attacker read or write files without a login.\nThere is no workaround.\n\nthecircuitry.to/article/synology-patches-a-98-dsm-flaw-that-can-read-and-write-files-mwc9kswe", "url": "https://bsky.app/profile/thecircuitry.to/post/3n22ayvn6ny2r"}, {"timestamp": "2026-11-11T21:05:53.210Z", "date_only": false, "value": "2026-11-11T21:05:53.210206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3n22ubnxrf22u", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "45766736-c632-434c-b6d2-0f1f53e906de", "content": "Synology\u300cDSM\u300d\u306b27\u4ef6\u306e\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306fCVSS 9.8\u3000NAS\u7ba1\u7406\u8005\u306b\u66f4\u65b0\u547c\u3073\u304b\u3051-CVE-2026-76954 \u4ed6 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3n22ubnxrf22u"}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-12T03:41:52.523Z", "date_only": false, "value": "2026-11-12T03:41:52.523Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-76954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-12T03:41:52.523Z", "date_only": false, "value": "2026-11-12T03:41:52.523Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-76954", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-12T03:41:52.523Z", "date_only": false, "value": "2026-11-12T03:41:52.523Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / synology", "record": "CVE-2026-76954", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T03:57:01.940Z", "date_only": false, "value": "2026-11-12T03:57:01.940817Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117601456709575414", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "8a47eff8-78cd-4085-bbd5-6a3862e920ba", "content": "CVE-2026-76954  An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks.\nhttps://www.cve.org/CVERecord?id=CVE-2026-76954https://www.synology.com/en-global/security/advisory/Synology_SA_26_19#synology #Synology #DiskStationManager(DSM)#CVE_2026_76954#bot", "url": "https://infosec.exchange/users/cve/statuses/117601456709575414"}, {"timestamp": "2026-11-12T04:17:20Z", "date_only": false, "value": "2026-11-12T04:17:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J4CJ-7F89-84J2", "record": "GHSA-J4CJ-7F89-84J2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-12T04:17:20.407Z", "date_only": false, "value": "2026-11-12T04:17:20.407", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76954", "record": "FKIE_CVE-2026-76954", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T04:17:20.407Z", "date_only": false, "value": "2026-11-12T04:17:20.407", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76954", "record": "FKIE_CVE-2026-76954", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-12T04:20:04.106Z", "date_only": false, "value": "2026-11-12T04:20:04.106393Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n23mk3jqdt2t", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "fd2ebdf3-a7cf-44bf-a42b-a0bd24fa61a8", "content": "CVE-2026-76954 - diskstation manager (dsm)\nThe authentication API in Synology DiskStation Manager versions before the latest updates can be tricked into running unintended commands. This lets an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#diskstationmanager #synology #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n23mk3jqdt2t"}, {"timestamp": "2026-11-12T06:01:35.639Z", "date_only": false, "value": "2026-11-12T06:01:35.639234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3n23s7kncbgb5", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "2949cb00-7412-434a-969d-40bcfc9c53a8", "content": "Apache, Synology, N-central all CVSS 9.8+\u2014patch now\n\n\u2022 Apache HTTP/2 RCE CVE-2026-119618 unauthenticated\n\u2022 Synology DSM SQL injection CVE-2026-76954 CVSS 9.8\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #CVE2026119618 #CVE202676954", "url": "https://bsky.app/profile/raven-sec.bsky.social/post/3n23s7kncbgb5"}, {"timestamp": "2026-11-12T06:07:10.593Z", "date_only": false, "value": "2026-11-12T06:07:10.593866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3n23sjnf6yk2t", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "ce7d614d-c9f8-4c96-96fe-d2c8ab51ddea", "content": "\ud83d\udea8 CVE-2026-76954 \u2014 CVSS 9.8 CRITICAL\n\nAn improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Syno...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76954\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3n23sjnf6yk2t"}, {"timestamp": "2026-11-12T06:30:22Z", "date_only": false, "value": "2026-11-12T06:30:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J4CJ-7F89-84J2", "record": "GHSA-J4CJ-7F89-84J2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T06:30:22Z", "date_only": false, "value": "2026-11-12T06:30:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J4CJ-7F89-84J2", "record": "GHSA-J4CJ-7F89-84J2", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-12T08:33:06.926Z", "date_only": false, "value": "2026-11-12T08:33:06.926374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n242oltm2r2u", "record": "CVE-2026-76954", "field": "creation_timestamp", "uuid": "bc5fb3dd-ab8e-4fe9-868b-0f25e516f5ea", "content": "\ud83d\udd34 CVE-2026-76954 - Critical (9.8)\n\nAn improper neutralization of special elements used in an SQL command vulnerability in the Auth A...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76954/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n242oltm2r2u"}, {"timestamp": "2026-11-12T09:20:01.360Z", "date_only": false, "value": "2026-11-12T09:20:01.360+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-12T12:14:57.506Z", "anchors": {"origin": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 220497.506915, "hours": 61.24930747638889, "days": 2.5520544781828702, "min_seconds": 220497.506915, "max_seconds": 220497.506915, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4430", "record": "WID-SEC-W-2026-4430", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-12T12:14:57.506Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}