{"metadata": {"vulnerability": "CVE-2026-90920", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-14T11:05:19.026Z", "date_only": false, "value": "2026-09-14T11:05:19.026Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-90920", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T21:43:33.003Z", "date_only": false, "value": "2026-10-12T21:43:33.003Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-90920", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T21:43:33.003Z", "date_only": false, "value": "2026-10-12T21:43:33.003Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-90920", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T22:09:24.954Z", "date_only": false, "value": "2026-10-12T22:09:24.954090Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430220519861555", "record": "CVE-2026-90920", "field": "creation_timestamp", "uuid": "39f7f064-a928-4277-a303-1a6ad76111af", "content": "CVE-2026-90920 Maximo AI Service Code Injection IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-90920https://www.ibm.com/support/pages/node/7290833#ibm #IBM #MaximoAIService#CVE_2026_90920#bot", "url": "https://infosec.exchange/users/cve/statuses/117430220519861555"}, {"timestamp": "2026-10-12T22:17:05Z", "date_only": false, "value": "2026-10-12T22:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9M3P-9MHG-HF3C", "record": "GHSA-9M3P-9MHG-HF3C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T22:17:05.683Z", "date_only": false, "value": "2026-10-12T22:17:05.683", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90920", "record": "FKIE_CVE-2026-90920", "field": "published"}, {"timestamp": "2026-10-12T22:40:04.923Z", "date_only": false, "value": "2026-10-12T22:40:04.923493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxplkkfoyc2h", "record": "CVE-2026-90920", "field": "creation_timestamp", "uuid": "9152439c-7028-46c2-b3a6-3ada8f261f16", "content": "CVE-2026-90920 - maximo ai service\nThe IBM Maximo AI Service versions 9.1.0 and 9.2.0 may let someone on the network cause the system to run their own code. This could let an attacker take control of the service or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxplkkfoyc2h"}, {"timestamp": "2026-10-12T22:46:40.603Z", "date_only": false, "value": "2026-10-12T22:46:40.603080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxplwdhggm2a", "record": "CVE-2026-90920", "field": "creation_timestamp", "uuid": "edd0a1d4-6fe5-4079-9bcb-5c265da69d16", "content": "\ud83d\udd34 CVE-2026-90920 - Critical (9.8)\n\nIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code du...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90920/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxplwdhggm2a"}, {"timestamp": "2026-10-13T00:08:22.760Z", "date_only": false, "value": "2026-10-13T00:08:22.760789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpqih6u2l2n", "record": "CVE-2026-90920", "field": "creation_timestamp", "uuid": "9c8e576d-3e42-4d59-b4c2-ed5ec8512667", "content": "\ud83d\udea8 CVE-2026-90920 \u2014 CVSS 9.8 CRITICAL\n\nIBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to impro...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90920\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpqih6u2l2n"}, {"timestamp": "2026-10-13T00:31:17Z", "date_only": false, "value": "2026-10-13T00:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9M3P-9MHG-HF3C", "record": "GHSA-9M3P-9MHG-HF3C", "field": "published"}, {"timestamp": "2026-10-13T00:31:17Z", "date_only": false, "value": "2026-10-13T00:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9M3P-9MHG-HF3C", "record": "GHSA-9M3P-9MHG-HF3C", "field": "modified"}, {"timestamp": "2026-10-13T14:00:59.137Z", "date_only": false, "value": "2026-10-13T14:00:59.137669Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90920", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T14:00:59.137Z", "date_only": false, "value": "2026-10-13T14:00:59.137669Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90920", "record": "FKIE_CVE-2026-90920", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T14:39:09.252Z", "date_only": false, "value": "2026-10-13T14:39:09.252Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-90920", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:39:09.252Z", "date_only": false, "value": "2026-10-13T14:39:09.252Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90920", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:17:14.080Z", "date_only": false, "value": "2026-10-13T16:17:14.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90920", "record": "FKIE_CVE-2026-90920", "field": "lastModified"}]}