{"metadata": {"vulnerability": "CVE-2026-78191", "count": 11, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-08-23T18:38:50.604Z", "date_only": false, "value": "2026-08-23T18:38:50.604Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-78191", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-31T14:34:30.167Z", "date_only": false, "value": "2026-10-31T14:34:30.167Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-31T14:34:30.167Z", "date_only": false, "value": "2026-10-31T14:34:30.167Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-78191", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-31T14:34:30.167Z", "date_only": false, "value": "2026-10-31T14:34:30.167Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-78191", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-31T14:41:29.554Z", "date_only": false, "value": "2026-10-31T14:41:29.554158Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117536043113459806", "record": "CVE-2026-78191", "field": "creation_timestamp", "uuid": "62564135-a06e-45ff-bf17-65c36dc83d7d", "content": "CVE-2026-78191 WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages.\nWebDyne decides whether to run a requested file as a page by matching its name against WEBDYNE_PSP_EXT_RE, which has no end anchor.\nAn application that accepts uploads by checking only the final extension lets a remote attacker upload a file such as report.psp.pdf and run its embedded Perl by requesting it.\nhttps://www.cve.org/CVERecord?id=CVE-2026-78191https://metacpan.org/release/ASPEER/WebDyne-3.022/changes#CVE_2026_78191#bot", "url": "https://infosec.exchange/users/cve/statuses/117536043113459806"}, {"timestamp": "2026-10-31T15:16:54Z", "date_only": false, "value": "2026-10-31T15:16:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XV5F-QCMP-V8W2", "record": "GHSA-XV5F-QCMP-V8W2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-31T15:16:54.247Z", "date_only": false, "value": "2026-10-31T15:16:54.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78191", "record": "FKIE_CVE-2026-78191", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T15:30:23Z", "date_only": false, "value": "2026-10-31T15:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XV5F-QCMP-V8W2", "record": "GHSA-XV5F-QCMP-V8W2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T15:30:24Z", "date_only": false, "value": "2026-10-31T15:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XV5F-QCMP-V8W2", "record": "GHSA-XV5F-QCMP-V8W2", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T09:13:59.103Z", "date_only": false, "value": "2026-11-01T09:13:59.103334Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117540417614805807", "record": "CVE-2026-78191", "field": "creation_timestamp", "uuid": "d01fa44a-4aac-4d5e-ae43-388eedbd5094", "content": "\ud83d\udea8 A lot of offensive activities were identified targeting ASPEER WebDyne (CVE-2026-78191) https://vuldb.com/vuln/429566/cti", "url": "https://infosec.exchange/users/vuldb/statuses/117540417614805807"}, {"timestamp": "2026-11-02T16:15:37.080Z", "date_only": false, "value": "2026-11-02T16:15:37.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78191", "record": "FKIE_CVE-2026-78191", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T06:04:45.712Z", "anchors": {"origin": {"timestamp": "2026-10-31T14:34:30.167Z", "date_only": false, "value": "2026-10-31T14:34:30.167Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-31T14:34:30.167Z", "date_only": false, "value": "2026-10-31T14:34:30.167Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 315015.545459, "hours": 87.50431818305555, "days": 3.6460132576273145, "min_seconds": 315015.545459, "max_seconds": 315015.545459, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-31T14:34:30.167Z", "date_only": false, "value": "2026-10-31T14:34:30.167Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T06:04:45.712Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}