{"metadata": {"vulnerability": "CVE-2026-82504", "count": 12, "kinds": {"milestone": 3, "sighting": 4, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-29T17:20:57.079Z", "date_only": false, "value": "2026-08-29T17:20:57.079Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-82504", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-82504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T20:45:22.836Z", "date_only": false, "value": "2026-11-13T20:45:22.836Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82504", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T20:45:22.836Z", "date_only": false, "value": "2026-11-13T20:45:22.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-82504", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-13T20:45:22.836Z", "date_only": false, "value": "2026-11-13T20:45:22.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-82504", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T21:05:42.396Z", "date_only": false, "value": "2026-11-13T21:05:42.396582Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117611163916334947", "record": "CVE-2026-82504", "field": "creation_timestamp", "uuid": "78d24479-9190-44eb-b1cb-bee5b5855cc3", "content": "CVE-2026-82504 VITEC EZ TV Platform Server Unauthenticated File Upload via UploadHandler.ashx VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in the upload handler that allows unauthenticated remote attackers to upload arbitrary files by supplying a target filename in the X-FILENAME request header with no authentication or file type validation required. Attackers can upload a malicious ASPX file directly to the web-accessible uploads directory, where it is immediately executable by the web server, achieving remote code execution in the context of the web server process. Patches are available for versions 8.3.0, 8.3.1, 8.4.0, and 8.4.1. Users running releases prior to 8.3.0 should upgrade to 8.5.0+.\nhttps://www.cve.org/CVERecord?id=CVE-2026-82504https://www.vitec.com/dl/vitec-ez-tv-platform-datasheethttps://www.vulncheck.com/advisories/vitec-ez-tv-platform-server-unauthenticated-file-upload-via-uploadhandler-ashx#vitec #VITEC #EZTVPlatformServer#CVE_2026_82504#bot", "url": "https://infosec.exchange/users/cve/statuses/117611163916334947"}, {"timestamp": "2026-11-13T21:17:48Z", "date_only": false, "value": "2026-11-13T21:17:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F97P-H5RH-VP5P", "record": "GHSA-F97P-H5RH-VP5P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-13T21:32:01Z", "date_only": false, "value": "2026-11-13T21:32:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F97P-H5RH-VP5P", "record": "GHSA-F97P-H5RH-VP5P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T21:32:01Z", "date_only": false, "value": "2026-11-13T21:32:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F97P-H5RH-VP5P", "record": "GHSA-F97P-H5RH-VP5P", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-13T22:10:03.236Z", "date_only": false, "value": "2026-11-13T22:10:03.236010Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n27ysd3bzi2v", "record": "CVE-2026-82504", "field": "creation_timestamp", "uuid": "67df3e56-3a80-4da3-8395-f13b146e67b8", "content": "CVE-2026-82504 - ez tv platform server\nThe VITEC EZ TV Platform Server (versions before 8.5.0) lets a remote user upload any file without logging in or checks. An attacker could place a malicious web page that runs on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vitec #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n27ysd3bzi2v"}, {"timestamp": "2026-11-14T02:07:17.497Z", "date_only": false, "value": "2026-11-14T02:07:17.497313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3n2ag2k6ivt2b", "record": "CVE-2026-82504", "field": "creation_timestamp", "uuid": "35d78de8-f817-40b3-ab6f-f239bcb0bf69", "content": "\ud83d\udea8 CVE-2026-82504 \u2014 CVSS 9.3 CRITICAL\n\nVITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in the upload h...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82504\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3n2ag2k6ivt2b"}, {"timestamp": "2026-11-14T02:35:56.446Z", "date_only": false, "value": "2026-11-14T02:35:56.446792Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3rqpaiznifr6k", "record": "CVE-2026-82504", "field": "creation_timestamp", "uuid": "f52f38e6-2f9a-48db-83ba-09be4c351477", "content": "CVE-2026-82504 - VITEC EZ TV Platform Server Unauthenticated File Upload via UploadHandler.ashx\nCVE ID : CVE-2026-82504\n \n Published : 13 novembre 2026 21:17 | 4\u00a0heures, 57\u00a0minutes ago\n \n Description : VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file uplo...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3rqpaiznifr6k"}], "metrics": {"as_of": "2026-11-14T02:49:42.449Z", "anchors": {"origin": {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-82504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-82504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 96582.44902, "hours": 26.82845806111111, "days": 1.1178524192129629, "min_seconds": 10182.44902, "max_seconds": 96582.44902, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-82504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T02:49:42.449Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}