{"metadata": {"vulnerability": "CVE-2026-90999", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-14T15:22:28.291Z", "date_only": false, "value": "2026-09-14T15:22:28.291Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-90999", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-16T15:45:47.463Z", "date_only": false, "value": "2026-09-16T15:45:47.463Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-90999", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-16T15:45:47.463Z", "date_only": false, "value": "2026-09-16T15:45:47.463Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "CVE-2026-90999", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T16:08:56.590Z", "date_only": false, "value": "2026-09-16T16:08:56.590Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-90999", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T16:17:21Z", "date_only": false, "value": "2026-09-16T16:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VH55-Q5M4-8WR6", "record": "GHSA-VH55-Q5M4-8WR6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T16:17:21.817Z", "date_only": false, "value": "2026-09-16T16:17:21.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90999", "record": "FKIE_CVE-2026-90999", "field": "published"}, {"timestamp": "2026-09-16T18:32:03Z", "date_only": false, "value": "2026-09-16T18:32:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VH55-Q5M4-8WR6", "record": "GHSA-VH55-Q5M4-8WR6", "field": "published"}, {"timestamp": "2026-09-17T14:13:11.786Z", "date_only": false, "value": "2026-09-17T14:13:11.786559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mvptl5corp2h", "record": "CVE-2026-90999", "field": "creation_timestamp", "uuid": "28451d94-effe-46ec-9118-b710e8f6339f", "content": "CVE-2026-90999: A fabricated Sentry bug report can make Seer's coding agent run attacker code", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mvptl5corp2h"}, {"timestamp": "2026-09-17T16:39:32.253Z", "date_only": false, "value": "2026-09-17T16:39:32.253458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mvq3qtl4v72r", "record": "CVE-2026-90999", "field": "creation_timestamp", "uuid": "5bc7ee06-69ba-4e12-8f5a-5bf616709038", "content": "CVE-2026-90999: A fabricated Sentry bug report can make Seer's coding agent run attacker code", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3mvq3qtl4v72r"}, {"timestamp": "2026-09-18T13:40:06.015Z", "date_only": false, "value": "2026-09-18T13:40:06.015791Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90999", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-18T13:40:06.015Z", "date_only": false, "value": "2026-09-18T13:40:06.015791Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90999", "record": "FKIE_CVE-2026-90999", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T13:40:22.164Z", "date_only": false, "value": "2026-09-18T13:40:22.164Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-90999", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T13:40:22.164Z", "date_only": false, "value": "2026-09-18T13:40:22.164Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90999", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T14:50:04.284Z", "date_only": false, "value": "2026-09-18T14:50:04.284742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsg3zfn5b2f", "record": "CVE-2026-90999", "field": "creation_timestamp", "uuid": "88046d61-affb-4102-999a-2d131b7aaf66", "content": "CVE-2026-90999 - sentry seer\nSentry Seer may let an outside person send false event data that is treated as code and run by its automation agent with high privileges. This could let a hacker perform\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sentryseer #functional #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsg3zfn5b2f"}, {"timestamp": "2026-09-18T15:31:52Z", "date_only": false, "value": "2026-09-18T15:31:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VH55-Q5M4-8WR6", "record": "GHSA-VH55-Q5M4-8WR6", "field": "modified"}, {"timestamp": "2026-09-18T17:49:08.457Z", "date_only": false, "value": "2026-09-18T17:49:08.457", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90999", "record": "FKIE_CVE-2026-90999", "field": "lastModified"}, {"timestamp": "2026-09-19T16:37:08.778Z", "date_only": false, "value": "2026-09-19T16:37:08.778059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvv4ke2ewu24", "record": "cve-2026-90999", "field": "creation_timestamp", "uuid": "4ef29782-8d3d-48f4-810a-ec9061e10812", "content": "\ud83d\udccc CVE-2026-90999: Fabricated Sentry Bug Report Enables Attacker Code Execution in Seer Coding Agent https://www.cyberhub.blog/article/32295-cve-2026-90999-fabricated-sentry-bug-report-enables-attacker-code-execution-in-seer-coding-agent", "url": "https://bsky.app/profile/cyberhub.blog/post/3mvv4ke2ewu24"}, {"timestamp": "2026-09-21T13:00:04.465Z", "date_only": false, "value": "2026-09-21T13:00:04.465917Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/2997", "record": "CVE-2026-90999", "field": "creation_timestamp", "uuid": "34044832-5c4f-4a57-a30d-e916447c5302", "content": "CVE-2026-90999: A fabricated Sentry bug report can make Seer's coding agent run attacker code.", "url": "https://t.me/CyberDispatch/2997"}]}
