{"metadata": {"vulnerability": "CVE-2026-85632", "count": 13, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-04T11:58:37.906Z", "date_only": false, "value": "2026-09-04T11:58:37.906Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85632", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-11T14:15:00Z", "date_only": false, "value": "2026-11-11T14:15:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-85632", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-11T14:24:31.418Z", "date_only": false, "value": "2026-11-11T14:24:31.418Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85632", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-11T14:24:31.418Z", "date_only": false, "value": "2026-11-11T14:24:31.418Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85632", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-11T14:24:31.418Z", "date_only": false, "value": "2026-11-11T14:24:31.418Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-85632", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-11T15:17:25Z", "date_only": false, "value": "2026-11-11T15:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VJ53-8XX8-XCPF", "record": "GHSA-VJ53-8XX8-XCPF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-11T15:17:25.163Z", "date_only": false, "value": "2026-11-11T15:17:25.163", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85632", "record": "FKIE_CVE-2026-85632", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-11T15:17:25.163Z", "date_only": false, "value": "2026-11-11T15:17:25.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85632", "record": "FKIE_CVE-2026-85632", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T15:31:06Z", "date_only": false, "value": "2026-11-11T15:31:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VJ53-8XX8-XCPF", "record": "GHSA-VJ53-8XX8-XCPF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-11T15:31:06Z", "date_only": false, "value": "2026-11-11T15:31:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VJ53-8XX8-XCPF", "record": "GHSA-VJ53-8XX8-XCPF", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-11T16:07:47.563Z", "date_only": false, "value": "2026-11-11T16:07:47.563324Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3n22dmpbx7s2t", "record": "CVE-2026-85632", "field": "creation_timestamp", "uuid": "0c0b1562-50f7-4581-b1b0-87ac277c66e4", "content": "\ud83d\udea8 CVE-2026-85632 \u2014 CVSS 9.1 CRITICAL\n\nMissing authentication for critical function and Improper validation of integrity check value vulnerability...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85632\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3n22dmpbx7s2t"}, {"timestamp": "2026-11-11T16:47:19.608Z", "date_only": false, "value": "2026-11-11T16:47:19.608784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n22fsxyj4o2t", "record": "CVE-2026-85632", "field": "creation_timestamp", "uuid": "86dd3abd-1ded-4688-b702-f88a8332f0ae", "content": "\ud83d\udd34 CVE-2026-85632 - Critical (9.1)\n\nMissing authentication for critical function and Improper validation of integrity check value vul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85632/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n22fsxyj4o2t"}, {"timestamp": "2026-11-11T18:01:18.762Z", "date_only": false, "value": "2026-11-11T18:01:18.762898Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117599114248386063", "record": "CVE-2026-85632", "field": "creation_timestamp", "uuid": "4e64e970-2a6b-46e4-a257-2bcae1b714c7", "content": "CVE-2026-85632 Unauthenticated Payment Status Manipulation in Sipay Electronic Money's WordPress (WooCommerce) Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message Manipulation via Man-in-the-Middle.\nThis issue affects WooCommerce Virtual POS Module: from 26.8.3 before 26.9.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85632https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1520#SipayElectronicMoneyandPaymentServicesInc. #WooCommerceVirtualPOSModule#CVE_2026_85632#bot", "url": "https://infosec.exchange/users/cve/statuses/117599114248386063"}], "metrics": {"as_of": "2026-11-11T21:34:52.142Z", "anchors": {"origin": {"timestamp": "2026-11-11T14:15:00Z", "date_only": false, "value": "2026-11-11T14:15:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-85632", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-11T14:15:00Z", "date_only": false, "value": "2026-11-11T14:15:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-85632", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 26392.142571, "hours": 7.331150714166667, "days": 0.3054646130902778, "min_seconds": 26392.142571, "max_seconds": 26392.142571, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-11T14:15:00Z", "date_only": false, "value": "2026-11-11T14:15:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TR-CERT", "record": "CVE-2026-85632", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T21:34:52.142Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}