{"metadata": {"vulnerability": "CVE-2026-90531", "count": 22, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-09-12T11:07:13.698Z", "date_only": false, "value": "2026-09-12T11:07:13.698Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-90531", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90531", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90531", "record": "FKIE_CVE-2026-90531", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T19:39:00.550Z", "date_only": false, "value": "2026-10-13T19:39:00.550Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-90531", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:39:00.550Z", "date_only": false, "value": "2026-10-13T19:39:00.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2026-90531", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:19:10Z", "date_only": false, "value": "2026-10-13T20:19:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R3PM-6X5C-8WC2", "record": "GHSA-R3PM-6X5C-8WC2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T20:19:10.030Z", "date_only": false, "value": "2026-10-13T20:19:10.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90531", "record": "FKIE_CVE-2026-90531", "field": "published"}, {"timestamp": "2026-10-13T21:37:26Z", "date_only": false, "value": "2026-10-13T21:37:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R3PM-6X5C-8WC2", "record": "GHSA-R3PM-6X5C-8WC2", "field": "published"}, {"timestamp": "2026-10-13T21:37:26Z", "date_only": false, "value": "2026-10-13T21:37:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R3PM-6X5C-8WC2", "record": "GHSA-R3PM-6X5C-8WC2", "field": "modified"}, {"timestamp": "2026-10-13T22:00:00Z", "date_only": false, "value": "2026-10-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3926", "record": "WID-SEC-W-2026-3926", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T22:00:00Z", "date_only": false, "value": "2026-10-13T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3926", "record": "WID-SEC-W-2026-3926", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T22:00:00Z", "date_only": false, "value": "2026-10-13T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3926", "record": "WID-SEC-W-2026-3926", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-14T00:14:23.230Z", "date_only": false, "value": "2026-10-14T00:14:23.230250Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsbc4avnl2l", "record": "CVE-2026-90531", "field": "creation_timestamp", "uuid": "d57b8ad9-c707-4b20-883c-364530152d72", "content": "\ud83d\udea8 CVE-2026-90531 \u2014 CVSS 9.6 CRITICAL\n\nAdobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90531\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxsbc4avnl2l"}, {"timestamp": "2026-10-14T02:20:40.177Z", "date_only": false, "value": "2026-10-14T02:20:40.177177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mxsidvqkkt2x", "record": "CVE-2026-90531", "field": "creation_timestamp", "uuid": "6e0e4aba-3b1b-4411-8ba5-43a507cb7f50", "content": "CVE-2026-90531 (CRITICAL) CVSS 9.6: https://experiencedigest.org/2026/10/13/cve-critical-cvss.html", "url": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mxsidvqkkt2x"}, {"timestamp": "2026-10-14T04:00:07.366Z", "date_only": false, "value": "2026-10-14T04:00:07.366Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-90531", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T04:00:07.366Z", "date_only": false, "value": "2026-10-14T04:00:07.366Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90531", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T05:20:05.598Z", "date_only": false, "value": "2026-10-14T05:20:05.598300Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsser6pom2n", "record": "CVE-2026-90531", "field": "creation_timestamp", "uuid": "d9bed5f6-dc84-4f99-b17c-d9cf8d131d36", "content": "CVE-2026-90531 - adobe experience manager as a cloud service\nThe cloud service and on\u2011premise versions 6.5 of Adobe Experience Manager can be tricked into processing crafted XML data, allowing a low\u2011privilege user to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsser6pom2n"}, {"timestamp": "2026-10-14T13:15:55.753Z", "date_only": false, "value": "2026-10-14T13:15:55.753886Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117439447379426070", "record": "CVE-2026-90531", "field": "creation_timestamp", "uuid": "238b9bef-273c-411b-afb9-f0bc0693291a", "content": "CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-90531https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html#adobe #Adobe #AdobeExperienceManagerasaCloudService #AdobeExperienceManager6.5LTS #AdobeExperienceManager6.5#CVE_2026_90531#bot", "url": "https://infosec.exchange/users/cve/statuses/117439447379426070"}, {"timestamp": "2026-10-14T15:50:50.180Z", "date_only": false, "value": "2026-10-14T15:50:50.180", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90531", "record": "FKIE_CVE-2026-90531", "field": "lastModified"}, {"timestamp": "2026-10-15T22:00:00Z", "date_only": false, "value": "2026-10-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3926", "record": "WID-SEC-W-2026-3926", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-15T22:00:00Z", "date_only": false, "value": "2026-10-15T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3926", "record": "WID-SEC-W-2026-3926", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T05:55:52.111Z", "date_only": false, "value": "2026-10-16T05:55:52.111+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3926", "record": "WID-SEC-W-2026-3926", "field": "document.tracking.generator.date"}]}