{"metadata": {"vulnerability": "CVE-2026-90937", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-29T00:00:00Z", "date_only": false, "value": "2026-06-29T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-90937", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-14T11:34:24.686Z", "date_only": false, "value": "2026-09-14T11:34:24.686Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-90937", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-14T12:48:31.435Z", "date_only": false, "value": "2026-09-14T12:48:31.435Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-90937", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-14T12:48:31.435Z", "date_only": false, "value": "2026-09-14T12:48:31.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-90937", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-14T13:19:32Z", "date_only": false, "value": "2026-09-14T13:19:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R2FC-PW6P-X28W", "record": "GHSA-R2FC-PW6P-X28W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-14T13:19:32.277Z", "date_only": false, "value": "2026-09-14T13:19:32.277", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90937", "record": "FKIE_CVE-2026-90937", "field": "published"}, {"timestamp": "2026-09-14T13:30:07.972Z", "date_only": false, "value": "2026-09-14T13:30:07.972130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f", "record": "CVE-2026-90937", "field": "creation_timestamp", "uuid": "67810245-44d5-499d-91d9-bb98808a0ee1", "content": "CVE-2026-90937 - froxlor\nIn versions of Froxlor earlier than 2.2.5, the system does not check for hidden line\u2011break characters in the URLs used for subdomain redirects. This lets an authenticated customer paste\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f"}, {"timestamp": "2026-09-14T14:07:41.389Z", "date_only": false, "value": "2026-09-14T14:07:41.389039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibukmgim2b", "record": "CVE-2026-90937", "field": "creation_timestamp", "uuid": "d78108bd-08b7-42ed-9c59-61d08e752248", "content": "\ud83d\udea8 CVE-2026-90937 \u2014 CVSS 9.4 CRITICAL\n\nfroxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90937\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibukmgim2b"}, {"timestamp": "2026-09-14T15:32:45Z", "date_only": false, "value": "2026-09-14T15:32:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R2FC-PW6P-X28W", "record": "GHSA-R2FC-PW6P-X28W", "field": "published"}, {"timestamp": "2026-09-14T15:32:45Z", "date_only": false, "value": "2026-09-14T15:32:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R2FC-PW6P-X28W", "record": "GHSA-R2FC-PW6P-X28W", "field": "modified"}, {"timestamp": "2026-09-16T15:00:48.474Z", "date_only": false, "value": "2026-09-16T15:00:48.474679Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90937", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-16T15:00:48.474Z", "date_only": false, "value": "2026-09-16T15:00:48.474679Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90937", "record": "FKIE_CVE-2026-90937", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-16T15:01:11.057Z", "date_only": false, "value": "2026-09-16T15:01:11.057Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-90937", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-16T15:01:11.057Z", "date_only": false, "value": "2026-09-16T15:01:11.057Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90937", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-23T17:17:47.610Z", "date_only": false, "value": "2026-09-23T17:17:47.610", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90937", "record": "FKIE_CVE-2026-90937", "field": "lastModified"}]}