{"metadata": {"vulnerability": "CVE-2026-91141", "count": 13, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-14T20:30:18.834Z", "date_only": false, "value": "2026-09-14T20:30:18.834Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-91141", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T08:51:55.457Z", "date_only": false, "value": "2026-10-27T08:51:55.457700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mytubirao62j", "record": "CVE-2026-91141", "field": "creation_timestamp", "uuid": "10e861bc-d281-4fc4-9da2-28e731008f22", "content": "vsomeip flaw lets one 16-byte message crash car middleware\n\nCERT/CC's note on CVE-2026-91141 covers vsomeip 3.7.3 and below.\n\n#infosec #cybersecurity #Automotive #SoftwareDefinedVehicles\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mytubirao62j"}, {"timestamp": "2026-10-27T20:38:31.623Z", "date_only": false, "value": "2026-10-27T20:38:31.623467Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3myv3qz6gjp2f", "record": "CVE-2026-91141", "field": "creation_timestamp", "uuid": "334e9957-e949-4f5e-89c5-3a091feead08", "content": "Security advisories 13/36\nvsomeip flaw lets one 16-byte message crash car middleware\n\nCERT/CC's note on CVE-2026-91141 covers vsomeip 3.7.3 and below.\n\n#infosec #cybersecurity\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3myv3qz6gjp2f"}, {"timestamp": "2026-11-12T21:13:23.814Z", "date_only": false, "value": "2026-11-12T21:13:23.814Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-91141", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-12T21:13:23.814Z", "date_only": false, "value": "2026-11-12T21:13:23.814Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "CVE-2026-91141", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T21:20:01.072Z", "date_only": false, "value": "2026-11-12T21:20:01.072069Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117605557807900412", "record": "cve-2026-91141", "field": "creation_timestamp", "uuid": "3d4d5950-c79a-40be-aff5-14af7021ce80", "content": "CVE-2026-91141 CVE-2026-91141 A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated attacker to trigger massive memory allocations by sending a small TCP packet with a large, attacker-declared SOME/IP length field. This can lead to immediate service termination via OOM-kill on memory-constrained systems or total host memory exhaustion through repeated connections.\nhttps://www.cve.org/CVERecord?id=CVE-2026-91141https://kb.cert.org/vuls/id/128947https://biackr0se.github.io/posts/cve-2026-91141-vsomeip/#COVESA #vSomeIp#CVE_2026_91141#bot", "url": "https://infosec.exchange/users/cve/statuses/117605557807900412"}, {"timestamp": "2026-11-12T22:10:19.636Z", "date_only": false, "value": "2026-11-12T22:10:19.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-91141", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-12T22:10:19.636Z", "date_only": false, "value": "2026-11-12T22:10:19.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-91141", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T22:19:29Z", "date_only": false, "value": "2026-11-12T22:19:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VVXX-JJ9C-53W8", "record": "GHSA-VVXX-JJ9C-53W8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-12T22:19:29.583Z", "date_only": false, "value": "2026-11-12T22:19:29.583", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91141", "record": "FKIE_CVE-2026-91141", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T22:19:29.583Z", "date_only": false, "value": "2026-11-12T22:19:29.583", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91141", "record": "FKIE_CVE-2026-91141", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-13T00:31:56Z", "date_only": false, "value": "2026-11-13T00:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VVXX-JJ9C-53W8", "record": "GHSA-VVXX-JJ9C-53W8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T00:31:56Z", "date_only": false, "value": "2026-11-13T00:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VVXX-JJ9C-53W8", "record": "GHSA-VVXX-JJ9C-53W8", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T04:43:28.304Z", "anchors": {"origin": {"timestamp": "2026-11-12T21:13:23.814Z", "date_only": false, "value": "2026-11-12T21:13:23.814Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-91141", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-12T21:13:23.814Z", "date_only": false, "value": "2026-11-12T21:13:23.814Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-91141", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 27004.490578, "hours": 7.501247382777778, "days": 0.31255197428240744, "min_seconds": 27004.490578, "max_seconds": 27004.490578, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-12T21:13:23.814Z", "date_only": false, "value": "2026-11-12T21:13:23.814Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-91141", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T04:43:28.304Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}