{"metadata": {"vulnerability": "CVE-2026-78403", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-24T14:22:05.425Z", "date_only": false, "value": "2026-08-24T14:22:05.425Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-78403", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-30T19:12:56.080Z", "date_only": false, "value": "2026-10-30T19:12:56.080Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78403", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T19:21:59.908Z", "date_only": false, "value": "2026-10-30T19:21:59.908749Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117531483793786927", "record": "CVE-2026-78403", "field": "creation_timestamp", "uuid": "9bbebdff-dbef-4207-9ade-03f110f75e7a", "content": "CVE-2026-78403 Unauthenticated Stack Buffer Overflow in Sentinel Keys Server Stack-based buffer overflow and missingauthorization vulnerability in Thales Sentinel Keys Server on Windows allowsOverflow Buffers. Sentinel Keys Server does not check the length of the firstfield in the HTTP request. An attacker may craft an HTTP request and send it toSentinel Keys Server. It may lead to remote code execution as NTAUTHORITY\\SYSTEM.\nThis issue affects Sentinel Keys Server:versions lower than 1.3.8.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-78403https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=50fc9f3b3b005f10bba8b41864e45a61&sysparm_article=KB0031216#Thalesgroup #SentinelKeysServer#CVE_2026_78403#bot", "url": "https://infosec.exchange/users/cve/statuses/117531483793786927"}, {"timestamp": "2026-10-30T19:48:32.603Z", "date_only": false, "value": "2026-10-30T19:48:32.603Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / THA-PSIRT", "record": "CVE-2026-78403", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T19:59:29.771Z", "date_only": false, "value": "2026-10-30T19:59:29.771309Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-78403", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-30T19:59:29.771Z", "date_only": false, "value": "2026-10-30T19:59:29.771309Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78403", "record": "FKIE_CVE-2026-78403", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-30T20:02:33.210Z", "date_only": false, "value": "2026-10-30T20:02:33.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-78403", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T20:02:33.210Z", "date_only": false, "value": "2026-10-30T20:02:33.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-78403", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T20:17:17Z", "date_only": false, "value": "2026-10-30T20:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FXCQ-Q77C-FH3W", "record": "GHSA-FXCQ-Q77C-FH3W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-30T20:17:17.843Z", "date_only": false, "value": "2026-10-30T20:17:17.843", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78403", "record": "FKIE_CVE-2026-78403", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T20:17:17.843Z", "date_only": false, "value": "2026-10-30T20:17:17.843", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78403", "record": "FKIE_CVE-2026-78403", "field": "lastModified"}, {"timestamp": "2026-10-30T20:31:35.412Z", "date_only": false, "value": "2026-10-30T20:31:35.412980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mz4mrep7pr2j", "record": "CVE-2026-78403", "field": "creation_timestamp", "uuid": "ffb075f3-8614-4039-ae92-99f7e3ceb480", "content": "\ud83d\udd34 CVE-2026-78403 - Critical (9.8)\n\nStack-based buffer overflow and missing\nauthorization vulnerability in Thales Sentinel Keys Serve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78403/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mz4mrep7pr2j"}, {"timestamp": "2026-10-30T21:32:23Z", "date_only": false, "value": "2026-10-30T21:32:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FXCQ-Q77C-FH3W", "record": "GHSA-FXCQ-Q77C-FH3W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T21:32:23Z", "date_only": false, "value": "2026-10-30T21:32:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FXCQ-Q77C-FH3W", "record": "GHSA-FXCQ-Q77C-FH3W", "field": "modified"}, {"timestamp": "2026-10-30T21:40:05.537Z", "date_only": false, "value": "2026-10-30T21:40:05.537979Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mz4qlud3fs2p", "record": "CVE-2026-78403", "field": "creation_timestamp", "uuid": "89c8e827-62cd-4b53-a11b-0a0cc1d2a221", "content": "CVE-2026-78403 - sentinel keys server\nThe Sentinel Keys Server software for Windows (versions before 1.3.8.0) does not verify the size of data it receives in an HTTP request. An attacker can send a specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#thalesgroup #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mz4qlud3fs2p"}, {"timestamp": "2026-10-30T22:08:34.812Z", "date_only": false, "value": "2026-10-30T22:08:34.812979Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mz4s6smuuf24", "record": "CVE-2026-78403", "field": "creation_timestamp", "uuid": "360f529f-8f90-4d53-a552-a866ea9da8f9", "content": "\ud83d\udea8 CVE-2026-78403 \u2014 CVSS 9.3 CRITICAL\n\nStack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78403\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mz4s6smuuf24"}, {"timestamp": "2026-10-30T23:00:20Z", "date_only": false, "value": "2026-10-30T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IjMWRcVYB33igq26r8ZxDsKgqRymR9Zne2LOzshFRnjzLEM", "record": "CVE-2026-78403", "field": "creation_timestamp", "uuid": "1c38423a-54b3-4d3a-94b2-aa7208b86d1a"}, {"timestamp": "2026-10-31T18:22:52.797Z", "date_only": false, "value": "2026-10-31T18:22:52.797833Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/6j5fdnaggkpl6", "record": "CVE-2026-78403", "field": "creation_timestamp", "uuid": "374d9858-4189-4941-af65-52cf7e5b1f18", "content": "\ud83d\udea8 CVE-2026-78403\nCVSS 9.8 / EPSS 0.58% / KEV: No\nTL;DR: Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not\u2026\nhttps://cvesentinel.com/report/CVE-2026-78403\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/6j5fdnaggkpl6"}], "metrics": {"as_of": "2026-11-02T10:48:59.895Z", "anchors": {"origin": {"timestamp": "2026-10-30T19:12:56.080Z", "date_only": false, "value": "2026-10-30T19:12:56.080Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78403", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-30T19:12:56.080Z", "date_only": false, "value": "2026-10-30T19:12:56.080Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78403", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 228963.81547, "hours": 63.60105985277778, "days": 2.650044160532407, "min_seconds": 228963.81547, "max_seconds": 228963.81547, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-30T19:12:56.080Z", "date_only": false, "value": "2026-10-30T19:12:56.080Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-78403", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T10:48:59.895Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}