{"metadata": {"vulnerability": "CVE-2026-94018", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-23T13:43:04.331Z", "date_only": false, "value": "2026-09-23T13:43:04.331Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-94018", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T15:10:08.098Z", "date_only": false, "value": "2026-10-20T15:10:08.098Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94018", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T15:10:08.098Z", "date_only": false, "value": "2026-10-20T15:10:08.098Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / eclipse", "record": "CVE-2026-94018", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T15:34:04.007Z", "date_only": false, "value": "2026-10-20T15:34:04.007817Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117473964426514602", "record": "CVE-2026-94018", "field": "creation_timestamp", "uuid": "f7bc8872-17f7-41e8-a516-2d3d51860d00", "content": "CVE-2026-94018 NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reachable by an unauthenticated remote client with a single malformed request.\nhttps://www.cve.org/CVERecord?id=CVE-2026-94018https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-wjxf-gjm5-jh5q#EclipseFoundation #EclipseThreadX-NetXDuo#CVE_2026_94018#bot", "url": "https://infosec.exchange/users/cve/statuses/117473964426514602"}, {"timestamp": "2026-10-20T16:17:17.643Z", "date_only": false, "value": "2026-10-20T16:17:17.643", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94018", "record": "FKIE_CVE-2026-94018", "field": "published"}, {"timestamp": "2026-10-20T17:03:12.318Z", "date_only": false, "value": "2026-10-20T17:03:12.318553Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94018", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T17:03:12.318Z", "date_only": false, "value": "2026-10-20T17:03:12.318553Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94018", "record": "FKIE_CVE-2026-94018", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T17:03:21.440Z", "date_only": false, "value": "2026-10-20T17:03:21.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-94018", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T17:03:21.440Z", "date_only": false, "value": "2026-10-20T17:03:21.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94018", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T19:48:50.250Z", "date_only": false, "value": "2026-10-20T19:48:50.250", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94018", "record": "FKIE_CVE-2026-94018", "field": "lastModified"}]}