{"metadata": {"vulnerability": "CVE-2026-79957", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-10T00:45:43.207Z", "date_only": false, "value": "2026-09-10T00:45:43.207Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-79957", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T18:01:51.493Z", "date_only": false, "value": "2026-10-14T18:01:51.493Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-79957", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T18:01:51.493Z", "date_only": false, "value": "2026-10-14T18:01:51.493Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / BLSOPS", "record": "CVE-2026-79957", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:18:19Z", "date_only": false, "value": "2026-10-14T18:18:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5323-VMXX-HX7X", "record": "GHSA-5323-VMXX-HX7X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T18:18:19.133Z", "date_only": false, "value": "2026-10-14T18:18:19.133", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79957", "record": "FKIE_CVE-2026-79957", "field": "published"}, {"timestamp": "2026-10-14T18:32:29Z", "date_only": false, "value": "2026-10-14T18:32:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5323-VMXX-HX7X", "record": "GHSA-5323-VMXX-HX7X", "field": "published"}, {"timestamp": "2026-10-14T18:32:29Z", "date_only": false, "value": "2026-10-14T18:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5323-VMXX-HX7X", "record": "GHSA-5323-VMXX-HX7X", "field": "modified"}, {"timestamp": "2026-10-14T23:34:30.772Z", "date_only": false, "value": "2026-10-14T23:34:30.772188Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441879455493723", "record": "cve-2026-79957", "field": "creation_timestamp", "uuid": "e9ea1225-5a47-497a-9f3d-d2306aaed15c", "content": "CVE-2026-79957 ServiceNext Insecure Direct Object Reference via GetUsarios ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.\nhttps://www.cve.org/CVERecord?id=CVE-2026-79957https://blog.blacklanternsecurity.com/p/cve-2026-79957-insecure-direct-object#ServiceNext #SerTec#CVE_2026_79957#bot", "url": "https://infosec.exchange/users/cve/statuses/117441879455493723"}, {"timestamp": "2026-10-16T20:15:16.490Z", "date_only": false, "value": "2026-10-16T20:15:16.490546Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-79957", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T20:15:16.490Z", "date_only": false, "value": "2026-10-16T20:15:16.490546Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79957", "record": "FKIE_CVE-2026-79957", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T20:15:51.180Z", "date_only": false, "value": "2026-10-16T20:15:51.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-79957", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:15:51.180Z", "date_only": false, "value": "2026-10-16T20:15:51.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-79957", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:19:53.860Z", "date_only": false, "value": "2026-10-16T21:19:53.860", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79957", "record": "FKIE_CVE-2026-79957", "field": "lastModified"}]}