{"metadata": {"vulnerability": "CVE-2026-86473", "count": 23, "kinds": {"milestone": 7, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-07T15:02:47.876Z", "date_only": false, "value": "2026-09-07T15:02:47.876Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-86473", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-21T14:33:26.110Z", "date_only": false, "value": "2026-09-21T14:33:26.110Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86473", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-21T14:33:42.328Z", "date_only": false, "value": "2026-09-21T14:33:42.328Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-86473", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T15:17:32Z", "date_only": false, "value": "2026-09-21T15:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9CMM-29P3-73GR", "record": "GHSA-9CMM-29P3-73GR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-21T15:17:32.997Z", "date_only": false, "value": "2026-09-21T15:17:32.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86473", "record": "FKIE_CVE-2026-86473", "field": "published"}, {"timestamp": "2026-09-21T15:17:32.997Z", "date_only": false, "value": "2026-09-21T15:17:32.997Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3990", "record": "PYSEC-2026-3990", "field": "published"}, {"timestamp": "2026-09-21T15:32:05Z", "date_only": false, "value": "2026-09-21T15:32:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9CMM-29P3-73GR", "record": "GHSA-9CMM-29P3-73GR", "field": "published"}, {"timestamp": "2026-09-21T18:09:33.454Z", "date_only": false, "value": "2026-09-21T18:09:33.454Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-86473", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T18:41:03.098Z", "date_only": false, "value": "2026-09-21T18:41:03.098800Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86473", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-21T18:41:03.098Z", "date_only": false, "value": "2026-09-21T18:41:03.098800Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86473", "record": "FKIE_CVE-2026-86473", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-21T18:41:13.406Z", "date_only": false, "value": "2026-09-21T18:41:13.406Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-86473", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T18:41:13.406Z", "date_only": false, "value": "2026-09-21T18:41:13.406Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86473", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T19:20:05.701Z", "date_only": false, "value": "2026-09-21T19:20:05.701711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2glmqmmz2g", "record": "CVE-2026-86473", "field": "creation_timestamp", "uuid": "67ff1f90-5455-4af9-8853-fb73de8a7461", "content": "CVE-2026-86473 - apache airflow\nWhen users sign out of Apache Airflow using a bearer token in the Authorization header, the system only clears the browser cookie and leaves the token active\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheairflow #apachefoundation #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2glmqmmz2g"}, {"timestamp": "2026-09-21T20:07:05.989Z", "date_only": false, "value": "2026-09-21T20:07:05.989695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2j7obtdm25", "record": "CVE-2026-86473", "field": "creation_timestamp", "uuid": "e9308016-dab5-4e10-b510-afef1aa27726", "content": "\ud83d\udea8 CVE-2026-86473 \u2014 CVSS 9.1 CRITICAL\n\nApache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. W...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86473\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2j7obtdm25"}, {"timestamp": "2026-09-21T21:31:50Z", "date_only": false, "value": "2026-09-21T21:31:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9CMM-29P3-73GR", "record": "GHSA-9CMM-29P3-73GR", "field": "modified"}, {"timestamp": "2026-09-25T13:53:06.273Z", "date_only": false, "value": "2026-09-25T13:53:06.273", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86473", "record": "FKIE_CVE-2026-86473", "field": "lastModified"}, {"timestamp": "2026-09-26T07:37:07.922Z", "date_only": false, "value": "2026-09-26T07:37:07.922923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwfrn7e6zu2i", "record": "CVE-2026-86473", "field": "creation_timestamp", "uuid": "2795e5dd-f156-4cbd-9bed-b0cbec3b1225", "content": "\ud83d\udccc CVE-2026-86473 - Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its creden... https://www.cyberhub.blog/cves/CVE-2026-86473", "url": "https://bsky.app/profile/cyberhub.blog/post/3mwfrn7e6zu2i"}, {"timestamp": "2026-09-26T08:32:00.590Z", "date_only": false, "value": "2026-09-26T08:32:00.590695Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3990", "record": "PYSEC-2026-3990", "field": "modified"}, {"timestamp": "2026-09-26T08:41:43.057Z", "date_only": false, "value": "2026-09-26T08:41:43.057Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2026-86473", "record": "BIT-AIRFLOW-2026-86473", "field": "published"}, {"timestamp": "2026-09-29T09:14:51.928Z", "date_only": false, "value": "2026-09-29T09:14:51.928Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2026-86473", "record": "BIT-AIRFLOW-2026-86473", "field": "modified"}, {"timestamp": "2026-10-09T07:45:14Z", "date_only": false, "value": "2026-10-09T07:45:14Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-QJ23828", "record": "CLEANSTART-2026-QJ23828", "field": "modified"}, {"timestamp": "2026-10-10T00:41:46.437Z", "date_only": false, "value": "2026-10-10T00:41:46.437166Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-QJ23828", "record": "CLEANSTART-2026-QJ23828", "field": "published"}, {"timestamp": "2026-10-13T16:10:12.879Z", "date_only": false, "value": "2026-10-13T16:10:12.879109Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117434469852175480", "record": "CVE-2026-86473", "field": "creation_timestamp", "uuid": "8ab9c5d4-24df-4619-ab2d-9dd2a18fa45f", "content": "CVE-2026-86473 Apache Airflow: bearer tokens survive logout, staying valid up to 24h. CVSS 9.1. Patch under review. Track it https://www.valtersit.com/cve/CVE-2026-86473/ #CVE #infosec #ApacheAirflow", "url": "https://mastodon.social/users/hugovalters/statuses/117434469852175480"}]}