{"metadata": {"vulnerability": "CVE-2026-93857", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-18T19:09:36.067Z", "date_only": false, "value": "2026-09-18T19:09:36.067Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-27T15:52:27.970Z", "date_only": false, "value": "2026-10-27T15:52:27.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T15:52:27.970Z", "date_only": false, "value": "2026-10-27T15:52:27.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WatchGuard", "record": "CVE-2026-93857", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T16:17:32Z", "date_only": false, "value": "2026-10-27T16:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CJV7-RV7C-H7C2", "record": "GHSA-CJV7-RV7C-H7C2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-27T16:17:32.463Z", "date_only": false, "value": "2026-10-27T16:17:32.463", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93857", "record": "FKIE_CVE-2026-93857", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T16:30:29.187Z", "date_only": false, "value": "2026-10-27T16:30:29.187292Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117513822414365045", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "8ea3a7f5-9d29-4cf2-85ae-d022845439f0", "content": "CVE-2026-93857 Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93857https://psirt.watchguard.com/CVE-2026-93857#WatchGuard #FirewareOS#CVE_2026_93857#bot", "url": "https://infosec.exchange/users/cve/statuses/117513822414365045"}, {"timestamp": "2026-10-27T16:50:04.923Z", "date_only": false, "value": "2026-10-27T16:50:04.923921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myuoyjiqe52w", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "53717953-a28d-4a9a-82dc-6826a83bfab4", "content": "CVE-2026-93857 - fireware os\nThe SIP (voice over IP) component of WatchGuard Fireware OS can be fooled by a specially crafted network request, letting an unauthenticated attacker run their own programs\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firewareos #watchguard #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myuoyjiqe52w"}, {"timestamp": "2026-10-27T18:08:22.381Z", "date_only": false, "value": "2026-10-27T18:08:22.381923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myutejj2d42n", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "928c96e0-3c87-41bb-a8eb-eebed84997e9", "content": "\ud83d\udea8 CVE-2026-93857 \u2014 CVSS 9.2 CRITICAL\n\nA stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93857\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myutejj2d42n"}, {"timestamp": "2026-10-27T18:31:36Z", "date_only": false, "value": "2026-10-27T18:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CJV7-RV7C-H7C2", "record": "GHSA-CJV7-RV7C-H7C2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T18:31:36Z", "date_only": false, "value": "2026-10-27T18:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CJV7-RV7C-H7C2", "record": "GHSA-CJV7-RV7C-H7C2", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "e3be0396-a8be-4fb9-bec8-4eb30a5d4f3d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "8de5fa01-0017-4bdf-bb9b-a9fd962dc663"}, {"timestamp": "2026-10-28T01:14:28Z", "date_only": false, "value": "2026-10-28T01:14:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/watchguard-risolte-vulnerabilita-in-fireware-os", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "ca1872c8-e351-468b-9854-035865449c6a", "url": "https://www.acn.gov.it/portale/w/watchguard-risolte-vulnerabilita-in-fireware-os"}, {"timestamp": "2026-10-29T03:56:44.782Z", "date_only": false, "value": "2026-10-29T03:56:44.782585Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93857", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-29T03:56:44.782Z", "date_only": false, "value": "2026-10-29T03:56:44.782585Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93857", "record": "FKIE_CVE-2026-93857", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-29T10:45:46.751Z", "date_only": false, "value": "2026-10-29T10:45:46.751Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T10:45:46.751Z", "date_only": false, "value": "2026-10-29T10:45:46.751Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-93857", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T11:17:38.233Z", "date_only": false, "value": "2026-10-29T11:17:38.233", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93857", "record": "FKIE_CVE-2026-93857", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T01:43:08.509Z", "anchors": {"origin": {"timestamp": "2026-10-27T15:52:27.970Z", "date_only": false, "value": "2026-10-27T15:52:27.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T15:52:27.970Z", "date_only": false, "value": "2026-10-27T15:52:27.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "e3be0396-a8be-4fb9-bec8-4eb30a5d4f3d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 25670.03, "hours": 7.130563888888888, "days": 0.2971068287037037, "min_seconds": 25670.03, "max_seconds": 25670.03, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T15:52:27.970Z", "date_only": false, "value": "2026-10-27T15:52:27.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "e3be0396-a8be-4fb9-bec8-4eb30a5d4f3d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1417840.53907, "hours": 393.84459418611107, "days": 16.410191424421296, "min_seconds": 1417840.53907, "max_seconds": 1417840.53907, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T15:52:27.970Z", "date_only": false, "value": "2026-10-27T15:52:27.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93857", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T01:43:08.509Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 1392170.50907, "hours": 386.7140302972222, "days": 16.11308459571759, "min_seconds": 1392170.50907, "max_seconds": 1392170.50907, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-93857", "field": "creation_timestamp", "uuid": "e3be0396-a8be-4fb9-bec8-4eb30a5d4f3d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T01:43:08.509Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}