{"metadata": {"vulnerability": "CVE-2026-89126", "count": 15, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-09-10T22:26:03.939Z", "date_only": false, "value": "2026-09-10T22:26:03.939Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-89126", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-10T00:34:43.805Z", "date_only": false, "value": "2026-11-10T00:34:43.805Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89126", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T00:34:43.805Z", "date_only": false, "value": "2026-11-10T00:34:43.805Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-89126", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T00:34:43.805Z", "date_only": false, "value": "2026-11-10T00:34:43.805Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "CVE-2026-89126", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T01:08:28.850Z", "date_only": false, "value": "2026-11-10T01:08:28.850936Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117589468954833122", "record": "CVE-2026-89126", "field": "creation_timestamp", "uuid": "30e86c5f-d04d-4f7b-8e8d-9ca44f2aa80f", "content": "CVE-2026-89126 Memory Corruption vulnerability in SAP Web Dispatcher SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89126https://me.sap.com/notes/3778556https://url.sap/sapsecuritypatchday#sap #SAP_SE #SAPWebDispatcher#CVE_2026_89126#bot", "url": "https://infosec.exchange/users/cve/statuses/117589468954833122"}, {"timestamp": "2026-11-10T01:17:22Z", "date_only": false, "value": "2026-11-10T01:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CC52-VH2M-F9WQ", "record": "GHSA-CC52-VH2M-F9WQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-10T01:17:22.420Z", "date_only": false, "value": "2026-11-10T01:17:22.420", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89126", "record": "FKIE_CVE-2026-89126", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T01:17:22.420Z", "date_only": false, "value": "2026-11-10T01:17:22.420", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89126", "record": "FKIE_CVE-2026-89126", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-10T01:28:55.294Z", "date_only": false, "value": "2026-11-10T01:28:55.294850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mzwc2a5xe72f", "record": "CVE-2026-89126", "field": "creation_timestamp", "uuid": "7fc3bfe4-e734-44c8-aff0-8880a8caa04e", "content": "NVD published unauthenticated SAP flaws, including CVE-2026-89126 and CVE-2026-89103.\nSAP SE assigned the vectors.\nNVD has not published base scores, and the entries do not list a fix.\n\nthecircuitry.to/article/nvd-publishes-unauthenticated-sap-flaws-with-no-base-scores-yet-mwa0cs9l", "url": "https://bsky.app/profile/thecircuitry.to/post/3mzwc2a5xe72f"}, {"timestamp": "2026-11-10T01:32:17.394Z", "date_only": false, "value": "2026-11-10T01:32:17.394760Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzwca3ubc72o", "record": "CVE-2026-89126", "field": "creation_timestamp", "uuid": "889a6333-1b1d-4c32-97e9-e31803ad05db", "content": "\ud83d\udd34 CVE-2026-89126 - Critical (10)\n\nSAP Web Dispatcher does not sufficiently validate certain network input processed by an internal ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89126/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzwca3ubc72o"}, {"timestamp": "2026-11-10T01:40:04.682Z", "date_only": false, "value": "2026-11-10T01:40:04.682347Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzwco5rkgy2p", "record": "CVE-2026-89126", "field": "creation_timestamp", "uuid": "f4c9e81a-4bf6-409e-89fd-8f03238bb62d", "content": "CVE-2026-89126 - sap web dispatcher\nThe SAP Web Dispatcher component can be tricked by specially crafted network data into corrupting its memory. An attacker who does not need any login could then run their own code on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapse #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzwco5rkgy2p"}, {"timestamp": "2026-11-10T02:01:03.982Z", "date_only": false, "value": "2026-11-10T02:01:03.982194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzwdtknwqmvr", "record": "CVE-2026-89126", "field": "creation_timestamp", "uuid": "61726bb4-cf4d-4152-90fd-3ac9a1411671", "content": "CVE Radar | CVE-2026-89126 | CVSS 10.0\n\nSAP Web Dispatcher Memory Corruption\n\nNVD describes a critical vulnerability in SAP Web Dispatcher involving insufficient validation of certain network input processed by an internal component.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1407", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mzwdtknwqmvr"}, {"timestamp": "2026-11-10T02:09:24.019Z", "date_only": false, "value": "2026-11-10T02:09:24.019728Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzwecmtr2q26", "record": "CVE-2026-89126", "field": "creation_timestamp", "uuid": "bdf72aed-8be0-4496-b849-b69720ee231c", "content": "\ud83d\udea8 CVE-2026-89126 \u2014 CVSS 10 CRITICAL\n\nSAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89126\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzwecmtr2q26"}, {"timestamp": "2026-11-10T03:30:34Z", "date_only": false, "value": "2026-11-10T03:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CC52-VH2M-F9WQ", "record": "GHSA-CC52-VH2M-F9WQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T03:30:34Z", "date_only": false, "value": "2026-11-10T03:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CC52-VH2M-F9WQ", "record": "GHSA-CC52-VH2M-F9WQ", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T05:36:58.616Z", "anchors": {"origin": {"timestamp": "2026-11-10T00:34:43.805Z", "date_only": false, "value": "2026-11-10T00:34:43.805Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89126", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-10T00:34:43.805Z", "date_only": false, "value": "2026-11-10T00:34:43.805Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89126", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18134.811365, "hours": 5.037447601388889, "days": 0.2098936500578704, "min_seconds": 18134.811365, "max_seconds": 18134.811365, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-10T00:34:43.805Z", "date_only": false, "value": "2026-11-10T00:34:43.805Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89126", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T05:36:58.616Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}