{"metadata": {"vulnerability": "CVE-2026-85114", "count": 17, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-03T07:46:11.019Z", "date_only": false, "value": "2026-09-03T07:46:11.019Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85114", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-390352", "record": "SSA-390352", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-390352", "record": "SSA-390352", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-390352", "record": "SSA-390352", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:18:57.499Z", "date_only": false, "value": "2026-10-13T09:18:57.499Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85114", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T09:18:57.499Z", "date_only": false, "value": "2026-10-13T09:18:57.499Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85114", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:18:57.499Z", "date_only": false, "value": "2026-10-13T09:18:57.499Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-85114", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:47:42.459Z", "date_only": false, "value": "2026-10-13T09:47:42.459958Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432966316300656", "record": "CVE-2026-85114", "field": "creation_timestamp", "uuid": "f8e3c3da-833f-4e30-82ad-5d9d62ff2a07", "content": "CVE-2026-85114  A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads.\nThis could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85114https://cert-portal.siemens.com/productcert/html/ssa-390352.html#Siemens #.NETClientLibraryforSIMATICS7WebserverAPI#CVE_2026_85114#bot", "url": "https://infosec.exchange/users/cve/statuses/117432966316300656"}, {"timestamp": "2026-10-13T10:17:20.640Z", "date_only": false, "value": "2026-10-13T10:17:20.640", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85114", "record": "FKIE_CVE-2026-85114", "field": "published"}, {"timestamp": "2026-10-13T10:17:20.640Z", "date_only": false, "value": "2026-10-13T10:17:20.640", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85114", "record": "FKIE_CVE-2026-85114", "field": "lastModified"}]}