{"metadata": {"vulnerability": "CVE-2026-92190", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-15T18:11:48.076Z", "date_only": false, "value": "2026-09-15T18:11:48.076Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-92190", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-15T18:11:48.108Z", "date_only": false, "value": "2026-09-15T18:11:48.108Z", "kind": "other", "label": "Date Assigned", "source": "cvelistv5 / zdi", "record": "CVE-2026-92190", "field": "containers.cna.dateAssigned"}, {"timestamp": "2026-11-03T21:56:16.938Z", "date_only": false, "value": "2026-11-03T21:56:16.938Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-92190", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T23:50:48.578Z", "date_only": false, "value": "2026-11-03T23:50:48.578Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T23:50:48.578Z", "date_only": false, "value": "2026-11-03T23:50:48.578Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / zdi", "record": "CVE-2026-92190", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T00:17:29Z", "date_only": false, "value": "2026-11-04T00:17:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3XXJ-HWX3-JCVQ", "record": "GHSA-3XXJ-HWX3-JCVQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-04T00:17:29.390Z", "date_only": false, "value": "2026-11-04T00:17:29.390", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92190", "record": "FKIE_CVE-2026-92190", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T00:32:22Z", "date_only": false, "value": "2026-11-04T00:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3XXJ-HWX3-JCVQ", "record": "GHSA-3XXJ-HWX3-JCVQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T00:32:22Z", "date_only": false, "value": "2026-11-04T00:32:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3XXJ-HWX3-JCVQ", "record": "GHSA-3XXJ-HWX3-JCVQ", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-04T01:10:05.524Z", "date_only": false, "value": "2026-11-04T01:10:05.524450Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzh672ppyl2p", "record": "CVE-2026-92190", "field": "creation_timestamp", "uuid": "5ed956f2-cb51-4f79-aad8-ed8c5b07c5f9", "content": "CVE-2026-92190 - foglight for databases\nQuest Foglight for Databases can be tricked into running any program an attacker sends, without needing a login. This means a remote hacker could take control of the server where\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#quest #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzh672ppyl2p"}, {"timestamp": "2026-11-04T02:10:12.517Z", "date_only": false, "value": "2026-11-04T02:10:12.517459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzhbkkk7ql22", "record": "CVE-2026-92190", "field": "creation_timestamp", "uuid": "25dda4f6-db77-4030-b02f-8c98a558b563", "content": "\ud83d\udea8 CVE-2026-92190 \u2014 CVSS 9.8 CRITICAL\n\nQuest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92190\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzhbkkk7ql22"}, {"timestamp": "2026-11-05T08:48:36.093Z", "date_only": false, "value": "2026-11-05T08:48:36.093260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mzkibtu2532x", "record": "CVE-2026-92190", "field": "creation_timestamp", "uuid": "2131807a-e567-4ea1-840d-102d8ba9820e", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 2\n\u2022 Foglight for Databases (Quest) (CVE-2026-92190), CVSS 9.8 (CERT-FR)\n\u2022 SonicWall Global Management System (GMS) (CVE-2026-109593), CVSS 9.1 (CERT-FR)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mzkibtu2532x"}, {"timestamp": "2026-11-06T01:28:44.888Z", "date_only": false, "value": "2026-11-06T01:28:44.888929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mzma6b3eno2d", "record": "CVE-2026-92190", "field": "creation_timestamp", "uuid": "9a8662ef-83d0-4aed-8f44-fc2df9dc71dd", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-92190: Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability\nCVSS 9.8 \u00b7 EPSS 0.6% \u00b7 0day\nhttps://vulnsea.com/cve/CVE-2026-92190\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mzma6b3eno2d"}, {"timestamp": "2026-11-06T18:57:47.834Z", "date_only": false, "value": "2026-11-06T18:57:47.834597Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92190", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-06T18:57:47.834Z", "date_only": false, "value": "2026-11-06T18:57:47.834597Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92190", "record": "FKIE_CVE-2026-92190", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-06T18:57:58.462Z", "date_only": false, "value": "2026-11-06T18:57:58.462Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-92190", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-06T18:57:58.462Z", "date_only": false, "value": "2026-11-06T18:57:58.462Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92190", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T19:17:59.867Z", "date_only": false, "value": "2026-11-06T19:17:59.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92190", "record": "FKIE_CVE-2026-92190", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T18:09:26.740Z", "date_only": false, "value": "2026-11-07T18:09:26.740305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3vla3b67fvlvc", "record": "CVE-2026-92190", "field": "creation_timestamp", "uuid": "200491d1-8ab0-492f-b5eb-cabb5b03eaaa", "content": "\ud83d\udea8 CVE-2026-92190\nCVSS 9.8 / EPSS 0.62% / KEV: No\nTL;DR: Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers\u2026\nhttps://cvesentinel.com/report/CVE-2026-92190\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3vla3b67fvlvc"}], "metrics": {"as_of": "2026-11-11T22:29:00.201Z", "anchors": {"origin": {"timestamp": "2026-11-03T21:56:16.938Z", "date_only": false, "value": "2026-11-03T21:56:16.938Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-92190", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T21:56:16.938Z", "date_only": false, "value": "2026-11-03T21:56:16.938Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-92190", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 693163.263739, "hours": 192.5453510386111, "days": 8.02272295994213, "min_seconds": 693163.263739, "max_seconds": 693163.263739, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T21:56:16.938Z", "date_only": false, "value": "2026-11-03T21:56:16.938Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "CVE-2026-92190", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T22:29:00.201Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
