{"metadata": {"vulnerability": "CVE-2026-86124", "count": 21, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-86124", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-05T01:59:23.830Z", "date_only": false, "value": "2026-09-05T01:59:23.830Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-86124", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-05T09:59:12.062Z", "date_only": false, "value": "2026-09-05T09:59:12.062Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86124", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-05T10:16:43Z", "date_only": false, "value": "2026-09-05T10:16:43Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VMH4-QV5G-WC55", "record": "GHSA-VMH4-QV5G-WC55", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-05T10:16:43.900Z", "date_only": false, "value": "2026-09-05T10:16:43.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86124", "record": "FKIE_CVE-2026-86124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-05T10:50:05.883Z", "date_only": false, "value": "2026-09-05T10:50:05.883871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murcmx6plg2b", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "594bef32-9c91-4f61-873c-27eb9d0e4e6a", "content": "CVE-2026-86124 - autoagent\nThe AutoAgent program listens on a network port that is reachable from anywhere and runs any commands it receives with full system privileges. An attacker could connect to this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#autoagent #hkuds #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3murcmx6plg2b"}, {"timestamp": "2026-09-05T10:51:00.876Z", "date_only": false, "value": "2026-09-05T10:51:00.876558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4jj5jf7ba4uoi", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "2d1514f8-54e0-45b3-a7e7-cf7aa0b464c1", "content": "CVE-2026-86124 - AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server\nCVE ID : CVE-2026-86124\n \n Published : Sept. 5, 2026, 10:16 a.m. | 21\u00a0minutes ago\n \n Description : AutoAgent contains an unauthenticated remote code execution vulnerability in t...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4jj5jf7ba4uoi"}, {"timestamp": "2026-09-05T11:01:58.779Z", "date_only": false, "value": "2026-09-05T11:01:58.779759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murdc67rcy2v", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "96440da7-736a-4050-a603-20933f7fb90f", "content": "\ud83d\udd34 CVE-2026-86124 - Critical (9.8)\n\nAutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86124/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murdc67rcy2v"}, {"timestamp": "2026-09-05T12:07:52.983Z", "date_only": false, "value": "2026-09-05T12:07:52.983646Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murgy24z7i2t", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "223a6a12-27ed-43f8-b424-4722d2a57595", "content": "\ud83d\udea8 CVE-2026-86124 \u2014 CVSS 9.3 CRITICAL\n\nAutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86124\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3murgy24z7i2t"}, {"timestamp": "2026-09-05T12:31:27Z", "date_only": false, "value": "2026-09-05T12:31:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VMH4-QV5G-WC55", "record": "GHSA-VMH4-QV5G-WC55", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-05T12:31:27Z", "date_only": false, "value": "2026-09-05T12:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VMH4-QV5G-WC55", "record": "GHSA-VMH4-QV5G-WC55", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-05T17:52:10.436Z", "date_only": false, "value": "2026-09-05T17:52:10.436696Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117219703523234204", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "dd0dc9b1-96fa-4c3e-a06a-f7a87bfcad58", "content": "We have just added an important vulnerability affecting HKUDS AutoAgent (CVE-2026-86124) https://vuldb.com/vuln/399290", "url": "https://infosec.exchange/users/vuldb/statuses/117219703523234204"}, {"timestamp": "2026-09-07T01:07:16.327Z", "date_only": false, "value": "2026-09-07T01:07:16.327026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muvcym3o3527", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "02ebffbe-003a-4f33-a7ae-f7f76b25b700", "content": "CVE-2026-86124 - Critical unauthenticated RCE in AutoAgent. TCP server executes arbitrary commands as root. CVSS 9.8. Restrict network access now. #CVE #RCE #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-86124/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3muvcym3o3527"}, {"timestamp": "2026-09-07T01:07:17.137Z", "date_only": false, "value": "2026-09-07T01:07:17.137820Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117227076711766618", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "eca1fc5b-5a1e-48d0-8a68-d3cef407d9d4", "content": "CVE-2026-86124 - Critical unauthenticated RCE in AutoAgent. TCP server executes arbitrary commands as root. CVSS 9.8. Restrict network access now. #CVE #RCE #infosec\nhttps://www.valtersit.com/cve/CVE-2026-86124/", "url": "https://mastodon.social/users/hugovalters/statuses/117227076711766618"}, {"timestamp": "2026-09-07T02:10:57.628Z", "date_only": false, "value": "2026-09-07T02:10:57.628006Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvgki2paw23", "record": "CVE-2026-86124", "field": "creation_timestamp", "uuid": "878a094a-c63c-4247-bc6a-c919bcee8ac5", "content": "Critical Root RCE, and the Committee Is Still Drafting the Fax Cover Sheet\nPANIC 98% | Lag 0.0h | CVE-2026-86124 is a critical unauthenticated remote code execution flaw in AutoAgent's TCP server. A\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvgki2paw23"}, {"timestamp": "2026-09-18T17:06:32.364Z", "date_only": false, "value": "2026-09-18T17:06:32.364354Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86124", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T17:06:32.364Z", "date_only": false, "value": "2026-09-18T17:06:32.364354Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86124", "record": "FKIE_CVE-2026-86124", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-18T17:23:11.476Z", "date_only": false, "value": "2026-09-18T17:23:11.476Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86124", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T14:21:11.296Z", "date_only": false, "value": "2026-09-24T14:21:11.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-86124", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T14:21:11.296Z", "date_only": false, "value": "2026-09-24T14:21:11.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-86124", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T21:08:55.030Z", "date_only": false, "value": "2026-09-24T21:08:55.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86124", "record": "FKIE_CVE-2026-86124", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T11:16:33.177Z", "anchors": {"origin": {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-86124", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-86124", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 12568593.177045, "hours": 3491.2758825125, "days": 145.46982843802084, "min_seconds": 12482193.177045, "max_seconds": 12568593.177045, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-86124", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T11:16:33.177Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}