{"metadata": {"vulnerability": "CVE-2026-8709", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-15T19:43:47.533Z", "date_only": false, "value": "2026-05-15T19:43:47.533Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-8709", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-05T15:33:47.701Z", "date_only": false, "value": "2026-08-05T15:33:47.701Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8709", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-05T15:33:47.701Z", "date_only": false, "value": "2026-08-05T15:33:47.701Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-8709", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-05T16:17:09Z", "date_only": false, "value": "2026-08-05T16:17:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8PVJ-2HQP-QWFR", "record": "GHSA-8PVJ-2HQP-QWFR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-05T16:17:09.820Z", "date_only": false, "value": "2026-08-05T16:17:09.820", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8709", "record": "FKIE_CVE-2026-8709", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T17:16:04.491Z", "date_only": false, "value": "2026-08-05T17:16:04.491981Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdzqlgrfd2m", "record": "CVE-2026-8709", "field": "creation_timestamp", "uuid": "608ef693-a728-4092-ad1a-794cb985d4af", "content": "CVE-2026-8709\nA vulnerability in Progress MarkLogic Server's REST API document patch operation allows a low-privileged user to gain more access. This could allow an unauthorized user to make changes to sensitive data. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3msdzqlgrfd2m"}, {"timestamp": "2026-08-05T18:31:37Z", "date_only": false, "value": "2026-08-05T18:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8PVJ-2HQP-QWFR", "record": "GHSA-8PVJ-2HQP-QWFR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-05T18:31:37Z", "date_only": false, "value": "2026-08-05T18:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8PVJ-2HQP-QWFR", "record": "GHSA-8PVJ-2HQP-QWFR", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8709", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8709", "record": "FKIE_CVE-2026-8709", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-06T16:15:47.208Z", "date_only": false, "value": "2026-08-06T16:15:47.208400Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781", "record": "CVE-2026-8709", "field": "creation_timestamp", "uuid": "22e7ca72-d598-40c7-8b9a-e8585c84642e", "url": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781"}, {"timestamp": "2026-08-07T03:55:27.427Z", "date_only": false, "value": "2026-08-07T03:55:27.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-8709", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-07T03:55:27.427Z", "date_only": false, "value": "2026-08-07T03:55:27.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8709", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-05T03:16:47.171Z", "date_only": false, "value": "2026-09-05T03:16:47.171183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjcdrh6s2b", "record": "CVE-2026-8709", "field": "creation_timestamp", "uuid": "e396207d-756a-4cc3-b88e-9c28d8277bdf", "content": "Progress\u306eDB\u88fd\u54c1\u300cMarkLogic Server\u300d\u306b\u8106\u5f31\u6027 - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d7\u4ef6\n\nProgress Software\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u88fd\u54c1\u300cMarkLogic Server\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u3002\u91cd\u8981\u5ea6\u304c\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u3082\u8907\u6570\u4fee\u6b63\u3055\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u3053\u306e\u3046\u30617\u4ef6\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.0\u300d\u4ee5\u4e0a\u3068\u8a55\u4fa1\u3055\u308c\u3066\u304a\u308a\u3001\u306a\u304b\u3067\u3082\u300cCVE-2026-7329\u300d\u300cCVE-2026-8709\u300d\u300cCVE-2026-9193\u300d\u306e3\u4ef6\u306b\u3064\u3044\u3066\u306f\u300c9.9\u300d\u3068\u3055\u308c\u308b\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjcdrh6s2b"}, {"timestamp": "2026-10-24T13:10:00.147Z", "date_only": false, "value": "2026-10-24T13:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8709", "record": "FKIE_CVE-2026-8709", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T03:52:29.220Z", "anchors": {"origin": {"timestamp": "2026-08-05T15:33:47.701Z", "date_only": false, "value": "2026-08-05T15:33:47.701Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8709", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-05T15:33:47.701Z", "date_only": false, "value": "2026-08-05T15:33:47.701Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8709", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 8079521.519941, "hours": 2244.3115333169444, "days": 93.51298055487268, "min_seconds": 8079521.519941, "max_seconds": 8079521.519941, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-05T15:33:47.701Z", "date_only": false, "value": "2026-08-05T15:33:47.701Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8709", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T03:52:29.220Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}