{"metadata": {"vulnerability": "CVE-2026-94197", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-30T21:56:14.620Z", "date_only": false, "value": "2026-09-30T21:56:14.620Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-94197", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:00:00Z", "date_only": false, "value": "2026-10-14T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / f5", "record": "CVE-2026-94197", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T14:40:28.582Z", "date_only": false, "value": "2026-10-14T14:40:28.582Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94197", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:40:28.582Z", "date_only": false, "value": "2026-10-14T14:40:28.582Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2026-94197", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:26Z", "date_only": false, "value": "2026-10-14T15:17:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5M5M-935W-8WJ6", "record": "GHSA-5M5M-935W-8WJ6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:17:26.963Z", "date_only": false, "value": "2026-10-14T15:17:26.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94197", "record": "FKIE_CVE-2026-94197", "field": "published"}, {"timestamp": "2026-10-14T15:32:30Z", "date_only": false, "value": "2026-10-14T15:32:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5M5M-935W-8WJ6", "record": "GHSA-5M5M-935W-8WJ6", "field": "published"}, {"timestamp": "2026-10-14T15:32:30Z", "date_only": false, "value": "2026-10-14T15:32:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5M5M-935W-8WJ6", "record": "GHSA-5M5M-935W-8WJ6", "field": "modified"}, {"timestamp": "2026-10-14T20:18:31.220Z", "date_only": false, "value": "2026-10-14T20:18:31.220832Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441109084025261", "record": "CVE-2026-94197", "field": "creation_timestamp", "uuid": "f7cc00e2-9f84-4bf0-aba9-d27d84cb197f", "content": "CVE-2026-94197 NGINX Ingress Controller vulnerability An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX auth_request directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. \nImpact:This vulnerability may allow remote attackers \nunauthenticated\n access to protected \npaths. There is no control plane exposure; this is a data plane issue only.\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\nhttps://www.cve.org/CVERecord?id=CVE-2026-94197https://my.f5.com/manage/s/article/K000162611#f5 #F5 #NGINXIngressController#CVE_2026_94197#bot", "url": "https://infosec.exchange/users/cve/statuses/117441109084025261"}, {"timestamp": "2026-10-15T15:53:41.365Z", "date_only": false, "value": "2026-10-15T15:53:41.365707Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94197", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T15:53:41.365Z", "date_only": false, "value": "2026-10-15T15:53:41.365707Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94197", "record": "FKIE_CVE-2026-94197", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T16:43:46.770Z", "date_only": false, "value": "2026-10-15T16:43:46.770Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-94197", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:43:46.770Z", "date_only": false, "value": "2026-10-15T16:43:46.770Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94197", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:17:32.343Z", "date_only": false, "value": "2026-10-15T17:17:32.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94197", "record": "FKIE_CVE-2026-94197", "field": "lastModified"}]}