{"metadata": {"vulnerability": "CVE-2026-92388", "count": 61, "kinds": {"milestone": 9, "sighting": 1, "kev": 0, "other": 51}}, "data": [{"timestamp": "2025-09-12T05:10:03.815Z", "date_only": false, "value": "2025-09-12T05:10:03.815000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-12T06:01:02.244Z", "date_only": false, "value": "2025-09-12T06:01:02.244669+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-12-31T03:46:56.325Z", "date_only": false, "value": "2025-12-31T03:46:56.325000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-01-08T10:07:05.554Z", "date_only": false, "value": "2026-01-08T10:07:05.554000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-01-08T11:01:16.184Z", "date_only": false, "value": "2026-01-08T11:01:16.184214+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-16T08:12:47.245Z", "date_only": false, "value": "2026-09-16T08:12:47.245Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-92388", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-09T15:04:00.630Z", "date_only": false, "value": "2026-10-09T15:04:00.630000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-10-13T09:59:04.450Z", "date_only": false, "value": "2026-10-13T09:59:04.450000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-13T11:20:33.991Z", "date_only": false, "value": "2026-10-13T11:20:33.991000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-13T11:33:47.116Z", "date_only": false, "value": "2026-10-13T11:33:47.116000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-13T11:50:28.033Z", "date_only": false, "value": "2026-10-13T11:50:28.033000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-13T12:09:28.542Z", "date_only": false, "value": "2026-10-13T12:09:28.542000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-13T14:47:07.941Z", "date_only": false, "value": "2026-10-13T14:47:07.941000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-13T15:12:25.588Z", "date_only": false, "value": "2026-10-13T15:12:25.588000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-13T15:20:35.099Z", "date_only": false, "value": "2026-10-13T15:20:35.099000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-13T15:47:55.242Z", "date_only": false, "value": "2026-10-13T15:47:55.242000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-13T16:03:12.849Z", "date_only": false, "value": "2026-10-13T16:03:12.849000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-13T16:11:12.826Z", "date_only": false, "value": "2026-10-13T16:11:12.826000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-13T16:32:04.789Z", "date_only": false, "value": "2026-10-13T16:32:04.789000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-13T16:46:12.459Z", "date_only": false, "value": "2026-10-13T16:46:12.459000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-13T16:51:39.261Z", "date_only": false, "value": "2026-10-13T16:51:39.261000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-10-13T17:12:36.649Z", "date_only": false, "value": "2026-10-13T17:12:36.649000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-10-13T17:19:58.033Z", "date_only": false, "value": "2026-10-13T17:19:58.033000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-13T17:23:12.272Z", "date_only": false, "value": "2026-10-13T17:23:12.272000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-10-13T17:26:23.360Z", "date_only": false, "value": "2026-10-13T17:26:23.360000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-10-13T17:29:59.229Z", "date_only": false, "value": "2026-10-13T17:29:59.229000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-10-13T17:32:16.890Z", "date_only": false, "value": "2026-10-13T17:32:16.890000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.24.discovery_date"}, {"timestamp": "2026-10-13T17:34:28.489Z", "date_only": false, "value": "2026-10-13T17:34:28.489000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T06:00:00Z", "date_only": false, "value": "2026-10-14T06:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-92388", "record": "UBUNTU-CVE-2026-92388", "field": "published"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-14T12:00:00Z", "date_only": false, "value": "2026-10-14T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-15T06:06:13.308Z", "date_only": false, "value": "2026-10-15T06:06:13.308300Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-92388", "record": "BELL-CVE-2026-92388", "field": "published"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-17T01:09:38Z", "date_only": false, "value": "2026-10-17T01:09:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T06:01:21.512Z", "date_only": false, "value": "2026-10-17T06:01:21.512040Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-92388", "record": "BELL-CVE-2026-92388", "field": "modified"}, {"timestamp": "2026-10-17T09:17:45Z", "date_only": false, "value": "2026-10-17T09:17:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-20T20:20:41.220Z", "date_only": false, "value": "2026-10-20T20:20:41.220Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92388", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T20:20:41.220Z", "date_only": false, "value": "2026-10-20T20:20:41.220Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-92388", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T20:20:41.220Z", "date_only": false, "value": "2026-10-20T20:20:41.220Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / curl", "record": "CVE-2026-92388", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T20:23:52Z", "date_only": false, "value": "2026-10-20T20:23:52Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-92388", "record": "UBUNTU-CVE-2026-92388", "field": "modified"}, {"timestamp": "2026-10-20T20:34:19.873Z", "date_only": false, "value": "2026-10-20T20:34:19.873089Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117475145111364338", "record": "CVE-2026-92388", "field": "creation_timestamp", "uuid": "067733c8-ea4e-47af-ab2e-eb4a33d1393b", "content": "CVE-2026-92388 FTP wildcard write callback mixup When an FTP wildcard `LIST` operation fails, libcurl omits the restorationpath meant for successful listings, leaving the write callback set to theinternal listing parser and the write callback data pointing directly to theeasy handle. Subsequent reuse of this handle triggers an immediate crash, andcloning it via `curl_easy_duphandle()` copies this corrupted state into theduplicate. If the original handle is subsequently freed, executing a transferon the cloned handle causes a heap use-after-free read against the danglinghandle reference; alternatively, reusing the original or cloned handle whilechanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)results in type confusion, forcing the internal parser to interpret incomingserver response bytes into memory at the application-supplied write datapointer.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92388https://curl.se/docs/CVE-2026-92388.jsonhttps://curl.se/docs/CVE-2026-92388.htmlhttps://hackerone.com/reports/4022070#curl#CVE_2026_92388#bot", "url": "https://infosec.exchange/users/cve/statuses/117475145111364338"}, {"timestamp": "2026-10-20T21:17:21Z", "date_only": false, "value": "2026-10-20T21:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R22R-3M6C-QV5R", "record": "GHSA-R22R-3M6C-QV5R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T21:17:21.243Z", "date_only": false, "value": "2026-10-20T21:17:21.243", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92388", "record": "FKIE_CVE-2026-92388", "field": "published"}, {"timestamp": "2026-10-20T21:17:21.243Z", "date_only": false, "value": "2026-10-20T21:17:21.243", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92388", "record": "FKIE_CVE-2026-92388", "field": "lastModified"}, {"timestamp": "2026-10-20T21:31:08Z", "date_only": false, "value": "2026-10-20T21:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R22R-3M6C-QV5R", "record": "GHSA-R22R-3M6C-QV5R", "field": "published"}, {"timestamp": "2026-10-20T21:31:08Z", "date_only": false, "value": "2026-10-20T21:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R22R-3M6C-QV5R", "record": "GHSA-R22R-3M6C-QV5R", "field": "modified"}, {"timestamp": "2026-10-21T11:52:45Z", "date_only": false, "value": "2026-10-21T11:52:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-21T11:52:45Z", "date_only": false, "value": "2026-10-21T11:52:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12150-1", "record": "OPENSUSE-SU-2026:12150-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T00:50:56Z", "date_only": false, "value": "2026-10-22T00:50:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-22T00:50:56Z", "date_only": false, "value": "2026-10-22T00:50:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T00:50:56Z", "date_only": false, "value": "2026-10-22T00:50:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.current_release_date"}]}