{"metadata": {"vulnerability": "CVE-2026-88018", "count": 39, "kinds": {"milestone": 6, "sighting": 22, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-09T19:19:27.407Z", "date_only": false, "value": "2026-09-09T19:19:27.407Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-10T16:03:25.692Z", "date_only": false, "value": "2026-09-10T16:03:25.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-10T16:04:11.619Z", "date_only": false, "value": "2026-09-10T16:04:11.619Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-88018", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-10T16:14:24.917Z", "date_only": false, "value": "2026-09-10T16:14:24.917718Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-88018", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-10T16:14:24.917Z", "date_only": false, "value": "2026-09-10T16:14:24.917718Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-88018", "record": "FKIE_CVE-2026-88018", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-10T16:14:29.874Z", "date_only": false, "value": "2026-09-10T16:14:29.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-10T16:14:29.874Z", "date_only": false, "value": "2026-09-10T16:14:29.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-88018", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-10T16:18:00Z", "date_only": false, "value": "2026-09-10T16:18:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-88018", "record": "UBUNTU-CVE-2026-88018", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-10T16:18:08Z", "date_only": false, "value": "2026-09-10T16:18:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XWWR-4H3P-R22C", "record": "GHSA-XWWR-4H3P-R22C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-10T16:18:08.913Z", "date_only": false, "value": "2026-09-10T16:18:08.913", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-88018", "record": "FKIE_CVE-2026-88018", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-10T17:30:08.090Z", "date_only": false, "value": "2026-09-10T17:30:08.090263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6lcu5vv52j", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "74a33594-eba0-402b-8465-33bc585b5f5a", "content": "CVE-2026-88018 - rclone\nIf you use rclone\u2019s S3 server feature with the auth-proxy option but forget to set an auth-key, an attacker on the network can pretend to be any user and gain access to the storage backend.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rclone #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6lcu5vv52j"}, {"timestamp": "2026-09-10T17:39:48.385Z", "date_only": false, "value": "2026-09-10T17:39:48.385130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6lu5v56m2q", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "eae7a52d-256a-4150-ae27-e9b22971a62b", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mv6lu5v56m2q"}, {"timestamp": "2026-09-10T18:08:36.893Z", "date_only": false, "value": "2026-09-10T18:08:36.893464Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6nhoohgn2n", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "951a1308-b429-4585-b971-794150ce3555", "content": "\ud83d\udea8 CVE-2026-88018 \u2014 CVSS 9.8 CRITICAL\n\nrclone is a command-line program to sync files and directories to and from different cloud storage provider...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88018\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6nhoohgn2n"}, {"timestamp": "2026-09-10T19:44:29.022Z", "date_only": false, "value": "2026-09-10T19:44:29.022192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6st3zh5y2w", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "8b7491fc-c03e-4f17-aa43-25b94ca62453", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mv6st3zh5y2w"}, {"timestamp": "2026-09-10T22:49:07Z", "date_only": false, "value": "2026-09-10T22:49:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XWWR-4H3P-R22C", "record": "GHSA-XWWR-4H3P-R22C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-10T22:49:07Z", "date_only": false, "value": "2026-09-10T22:49:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XWWR-4H3P-R22C", "record": "GHSA-XWWR-4H3P-R22C", "field": "modified"}, {"timestamp": "2026-09-11T00:35:18.890Z", "date_only": false, "value": "2026-09-11T00:35:18.890159Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "70fefdae-35be-46f1-b8cb-db18afa3d116", "url": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-11T04:11:12.846Z", "date_only": false, "value": "2026-09-11T04:11:12.846442Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7p57om4v2p", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "46e6541a-8529-4fe0-8c37-c091f0ff0754", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mv7p57om4v2p"}, {"timestamp": "2026-09-11T06:19:57.562Z", "date_only": false, "value": "2026-09-11T06:19:57.562891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7wdg6ps62t", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "eb586ebf-6a92-402e-a680-cf18b73cb457", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mv7wdg6ps62t"}, {"timestamp": "2026-09-11T09:27:43.146Z", "date_only": false, "value": "2026-09-11T09:27:43.146807Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaat5dll52i", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "48596761-6ab8-4235-a605-9d88c5aba386", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvaat5dll52i"}, {"timestamp": "2026-09-11T10:32:25.326Z", "date_only": false, "value": "2026-09-11T10:32:25.326763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegtg4xj24", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "20a620e6-653a-4792-a41c-856bb2093bd1", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvaegtg4xj24"}, {"timestamp": "2026-09-11T11:36:20.939Z", "date_only": false, "value": "2026-09-11T11:36:20.939779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahz4oxwm2p", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "4ddd6920-1c23-4c54-9377-8d63f669ec40", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvahz4oxwm2p"}, {"timestamp": "2026-09-11T14:44:28.802Z", "date_only": false, "value": "2026-09-11T14:44:28.802569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjldgwl24", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "cc0f9f07-ccb2-4620-b111-2e29d46c1169", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvasjldgwl24"}, {"timestamp": "2026-09-11T16:00:46.674Z", "date_only": false, "value": "2026-09-11T16:00:46.674719Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "38541749-3229-4cd9-9786-90552fa55be5", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "url": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017"}, {"timestamp": "2026-09-11T18:52:14.321Z", "date_only": false, "value": "2026-09-11T18:52:14.321181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbaem7saz2u", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "2e49dffc-3e9f-4ea2-b964-1e7736faa475", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvbaem7saz2u"}, {"timestamp": "2026-09-12T02:12:13.116Z", "date_only": false, "value": "2026-09-12T02:12:13.116188Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbyx4w3bp2w", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "d4f6e64f-baa5-488f-b4ab-cdad6b580431", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvbyx4w3bp2w"}, {"timestamp": "2026-09-12T05:16:16.257Z", "date_only": false, "value": "2026-09-12T05:16:16.257154Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcdahgke52u", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "7332ab66-4bb7-411c-8f22-6b1b95b86b2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvcdahgke52u"}, {"timestamp": "2026-09-12T08:29:44.358Z", "date_only": false, "value": "2026-09-12T08:29:44.358920Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvco2frk742t", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "7f884830-ec0f-4091-b442-abc5a803ab92", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvco2frk742t"}, {"timestamp": "2026-09-12T12:40:55.252Z", "date_only": false, "value": "2026-09-12T12:40:55.252203Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvd43k2jpm2z", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "dfa647a2-5c9a-4768-aa2e-88d2e182d7b4", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvd43k2jpm2z"}, {"timestamp": "2026-09-12T17:55:06.632Z", "date_only": false, "value": "2026-09-12T17:55:06.632863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdnneqqgg2u", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "81f3f793-7fa2-4ab6-a4e1-600df088ee92", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvdnneqqgg2u"}, {"timestamp": "2026-09-13T05:34:13.161Z", "date_only": false, "value": "2026-09-13T05:34:13.161997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mveupi343u2q", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "2c4ab5a3-63a6-4e3f-9a7a-adb294750b4f", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mveupi343u2q"}, {"timestamp": "2026-09-14T03:40:34.191Z", "date_only": false, "value": "2026-09-14T03:40:34.191196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvh6t67fz52p", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "dbb62e1f-2da3-4776-ab0a-93df2036766d", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvh6t67fz52p"}, {"timestamp": "2026-09-14T15:37:17.556Z", "date_only": false, "value": "2026-09-14T15:37:17.556779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvigurqgsj2p", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "850e26fe-3631-4fcc-a5d4-4010129580b6", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvigurqgsj2p"}, {"timestamp": "2026-09-14T20:01:05.627Z", "date_only": false, "value": "2026-09-14T20:01:05.627", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-88018", "record": "FKIE_CVE-2026-88018", "field": "lastModified"}, {"timestamp": "2026-09-15T04:07:07.798Z", "date_only": false, "value": "2026-09-15T04:07:07.798424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvjqrkw3ue25", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "dc6c69a6-21e6-4c4b-b739-ca2609e2706e", "content": "\ud83d\udccc CVE-2026-88018 - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configu... https://www.cyberhub.blog/cves/CVE-2026-88018", "url": "https://bsky.app/profile/cyberhub.blog/post/3mvjqrkw3ue25"}, {"timestamp": "2026-09-15T08:49:34.908Z", "date_only": false, "value": "2026-09-15T08:49:34.908Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-RCLONE-2026-88018", "record": "BIT-RCLONE-2026-88018", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-15T09:01:14.338Z", "date_only": false, "value": "2026-09-15T09:01:14.338Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-RCLONE-2026-88018", "record": "BIT-RCLONE-2026-88018", "field": "modified"}, {"timestamp": "2026-09-16T11:43:12Z", "date_only": false, "value": "2026-09-16T11:43:12Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-88018", "record": "UBUNTU-CVE-2026-88018", "field": "modified"}, {"timestamp": "2026-09-24T10:39:27Z", "date_only": false, "value": "2026-09-24T10:39:27Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-88018", "record": "UBUNTU-CVE-2026-88018", "field": "withdrawn"}], "metrics": {"as_of": "2026-11-02T08:44:24.752Z", "anchors": {"origin": {"timestamp": "2026-09-10T16:03:25.692Z", "date_only": false, "value": "2026-09-10T16:03:25.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-10T16:03:25.692Z", "date_only": false, "value": "2026-09-10T16:03:25.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-11T00:35:18.890Z", "date_only": false, "value": "2026-09-11T00:35:18.890159Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "70fefdae-35be-46f1-b8cb-db18afa3d116", "url": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 30713.198, "hours": 8.531443888888889, "days": 0.35547682870370373, "min_seconds": 30713.198, "max_seconds": 30713.198, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-10T16:03:25.692Z", "date_only": false, "value": "2026-09-10T16:03:25.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-11T00:35:18.890Z", "date_only": false, "value": "2026-09-11T00:35:18.890159Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "70fefdae-35be-46f1-b8cb-db18afa3d116", "url": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 4552859.060192, "hours": 1264.6830722755556, "days": 52.695128011481486, "min_seconds": 4552859.060192, "max_seconds": 4552859.060192, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-10T16:03:25.692Z", "date_only": false, "value": "2026-09-10T16:03:25.692Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-88018", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T08:44:24.752Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 4522145.862192, "hours": 1256.1516283866667, "days": 52.33965118277778, "min_seconds": 4522145.862192, "max_seconds": 4522145.862192, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-11T00:35:18.890Z", "date_only": false, "value": "2026-09-11T00:35:18.890159Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "record": "CVE-2026-88018", "field": "creation_timestamp", "uuid": "70fefdae-35be-46f1-b8cb-db18afa3d116", "url": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-02T08:44:24.752Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}