{"metadata": {"vulnerability": "CVE-2026-77926", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-21T17:52:36.079Z", "date_only": false, "value": "2026-08-21T17:52:36.079Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-77926", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-77926", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-20T00:46:09.952Z", "date_only": false, "value": "2026-10-20T00:46:09.952Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77926", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T00:46:09.952Z", "date_only": false, "value": "2026-10-20T00:46:09.952Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-77926", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T01:16:21.815Z", "date_only": false, "value": "2026-10-20T01:16:21.815426Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117470591787317519", "record": "cve-2026-77926", "field": "creation_timestamp", "uuid": "9f68a131-aaec-40dd-9ba8-f593c74d4669", "content": "CVE-2026-77926 Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious text to run host commands, exposing datasource credentials and model API keys.\nhttps://www.cve.org/CVERecord?id=CVE-2026-77926https://www.lasso.security/vulnerability-database/cve-2026-77926https://github.com/apconw/Aix-DB/blob/5d370adf3e695fc8b11137e5beeb01973cb46810/agent/common/enhanced_common_agent.py#L237https://www.vulncheck.com/advisories/aix-db-1.2.4-authenticated-rce-via-chatbi-common-agent-execute-tool#apconw #Aix-DB#CVE_2026_77926#bot", "url": "https://infosec.exchange/users/cve/statuses/117470591787317519"}, {"timestamp": "2026-10-20T01:17:19Z", "date_only": false, "value": "2026-10-20T01:17:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M2VR-P43P-P3H6", "record": "GHSA-M2VR-P43P-P3H6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T01:17:19.213Z", "date_only": false, "value": "2026-10-20T01:17:19.213", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77926", "record": "FKIE_CVE-2026-77926", "field": "published"}, {"timestamp": "2026-10-20T03:32:45Z", "date_only": false, "value": "2026-10-20T03:32:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M2VR-P43P-P3H6", "record": "GHSA-M2VR-P43P-P3H6", "field": "published"}, {"timestamp": "2026-10-20T03:32:45Z", "date_only": false, "value": "2026-10-20T03:32:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M2VR-P43P-P3H6", "record": "GHSA-M2VR-P43P-P3H6", "field": "modified"}, {"timestamp": "2026-10-20T14:32:45.394Z", "date_only": false, "value": "2026-10-20T14:32:45.394605Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77926", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T14:32:45.394Z", "date_only": false, "value": "2026-10-20T14:32:45.394605Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77926", "record": "FKIE_CVE-2026-77926", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T14:33:10.813Z", "date_only": false, "value": "2026-10-20T14:33:10.813Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-77926", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T14:33:10.813Z", "date_only": false, "value": "2026-10-20T14:33:10.813Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77926", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T20:11:29.833Z", "date_only": false, "value": "2026-10-20T20:11:29.833", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77926", "record": "FKIE_CVE-2026-77926", "field": "lastModified"}]}