{"metadata": {"vulnerability": "CVE-2026-85958", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-04T18:43:01.396Z", "date_only": false, "value": "2026-09-04T18:43:01.396Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85958", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T16:02:09.038Z", "date_only": false, "value": "2026-10-12T16:02:09.038Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85958", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T16:02:09.038Z", "date_only": false, "value": "2026-10-12T16:02:09.038Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-85958", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T17:17:36Z", "date_only": false, "value": "2026-10-12T17:17:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-72M4-2FJG-4PQX", "record": "GHSA-72M4-2FJG-4PQX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T17:17:36.120Z", "date_only": false, "value": "2026-10-12T17:17:36.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85958", "record": "FKIE_CVE-2026-85958", "field": "published"}, {"timestamp": "2026-10-12T17:57:39.220Z", "date_only": false, "value": "2026-10-12T17:57:39.220662Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117429230555383328", "record": "CVE-2026-85958", "field": "creation_timestamp", "uuid": "647b0b1f-3458-4564-b567-265c30be6863", "content": "CVE-2026-85958 Improper OAuth token validation in Progress MarkLogic Server Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85958https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026#progress #ProgressSoftwareCorporation #MarkLogicServer#CVE_2026_85958#bot", "url": "https://infosec.exchange/users/cve/statuses/117429230555383328"}, {"timestamp": "2026-10-12T18:31:55Z", "date_only": false, "value": "2026-10-12T18:31:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-72M4-2FJG-4PQX", "record": "GHSA-72M4-2FJG-4PQX", "field": "published"}, {"timestamp": "2026-10-12T18:31:55Z", "date_only": false, "value": "2026-10-12T18:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-72M4-2FJG-4PQX", "record": "GHSA-72M4-2FJG-4PQX", "field": "modified"}, {"timestamp": "2026-10-15T18:00:43.158Z", "date_only": false, "value": "2026-10-15T18:00:43.158275Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85958", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T18:00:43.158Z", "date_only": false, "value": "2026-10-15T18:00:43.158275Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85958", "record": "FKIE_CVE-2026-85958", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T18:06:29.079Z", "date_only": false, "value": "2026-10-15T18:06:29.079Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85958", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:06:29.079Z", "date_only": false, "value": "2026-10-15T18:06:29.079Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85958", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T19:17:44.960Z", "date_only": false, "value": "2026-10-15T19:17:44.960", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85958", "record": "FKIE_CVE-2026-85958", "field": "lastModified"}]}
