{"metadata": {"vulnerability": "CVE-2026-90990", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-14T14:17:32.990Z", "date_only": false, "value": "2026-09-14T14:17:32.990Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-90990", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-22T10:43:28.959Z", "date_only": false, "value": "2026-09-22T10:43:28.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-90990", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-22T10:43:28.959Z", "date_only": false, "value": "2026-09-22T10:43:28.959Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Checkmk", "record": "CVE-2026-90990", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T11:17:25Z", "date_only": false, "value": "2026-09-22T11:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V742-5HJW-GQCP", "record": "GHSA-V742-5HJW-GQCP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-22T11:17:25.960Z", "date_only": false, "value": "2026-09-22T11:17:25.960", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90990", "record": "FKIE_CVE-2026-90990", "field": "published"}, {"timestamp": "2026-09-22T11:55:46.787Z", "date_only": false, "value": "2026-09-22T11:55:46.787592Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/65v4t3qm3nya2", "record": "CVE-2026-90990", "field": "creation_timestamp", "uuid": "fd3cbbbe-0129-4796-9cfc-e07d6cab0902", "content": "CVE-2026-90990 - Livestatus injection via monitoring filter values\nCVE ID : CVE-2026-90990\n \n Published : Sept. 22, 2026, 10:43 a.m. | 36\u00a0minutes ago\n \n Description : Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk &...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/65v4t3qm3nya2"}, {"timestamp": "2026-09-22T12:30:25Z", "date_only": false, "value": "2026-09-22T12:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V742-5HJW-GQCP", "record": "GHSA-V742-5HJW-GQCP", "field": "published"}, {"timestamp": "2026-09-22T12:30:25Z", "date_only": false, "value": "2026-09-22T12:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V742-5HJW-GQCP", "record": "GHSA-V742-5HJW-GQCP", "field": "modified"}, {"timestamp": "2026-09-22T13:04:36.772Z", "date_only": false, "value": "2026-09-22T13:04:36.772264Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90990", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T13:04:36.772Z", "date_only": false, "value": "2026-09-22T13:04:36.772264Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90990", "record": "FKIE_CVE-2026-90990", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T13:04:48.692Z", "date_only": false, "value": "2026-09-22T13:04:48.692Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-90990", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-22T13:04:48.692Z", "date_only": false, "value": "2026-09-22T13:04:48.692Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90990", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T14:17:17.830Z", "date_only": false, "value": "2026-09-22T14:17:17.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90990", "record": "FKIE_CVE-2026-90990", "field": "lastModified"}, {"timestamp": "2026-10-03T03:10:02.098Z", "date_only": false, "value": "2026-10-03T03:10:02.098144Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117374779453571635", "record": "CVE-2026-90990", "field": "creation_timestamp", "uuid": "b3f8226f-a4d9-41cf-9994-3c261a2a1a73", "content": "CVE-2026-90990 Checkmk <2.5.0p14 CVSS 7.1. Authenticated users can inject Livestatus headers to bypass visibility and leak host/service info. No patch yet. Restrict access and monitor. https://www.valtersit.com/cve/CVE-2026-90990/ #CVE #infosec #Checkmk", "url": "https://mastodon.social/users/hugovalters/statuses/117374779453571635"}, {"timestamp": "2026-10-03T03:30:04.090Z", "date_only": false, "value": "2026-10-03T03:30:04.090636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwwx3u7qwe2b", "record": "CVE-2026-90990", "field": "creation_timestamp", "uuid": "c39841b0-d0e1-41a4-b556-19eb773214ac", "content": "CVE-2026-90990 Checkmk <2.5.0p14 CVSS 7.1. Authenticated users can inject Livestatus headers to bypass visibility and leak host/service info. No patch yet. Restrict access and monitor. https://www.valtersit.com/cve/CVE-2026-90990/ #CVE #infosec #Checkmk", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwwx3u7qwe2b"}]}