{"metadata": {"vulnerability": "CVE-2026-94501", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-19T00:00:00Z", "date_only": false, "value": "2026-09-19T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-94501", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-21T17:54:19.950Z", "date_only": false, "value": "2026-09-21T17:54:19.950Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-94501", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-21T18:16:19.637Z", "date_only": false, "value": "2026-09-21T18:16:19.637Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94501", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-21T18:16:19.637Z", "date_only": false, "value": "2026-09-21T18:16:19.637Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-94501", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T18:36:46.586Z", "date_only": false, "value": "2026-09-21T18:36:46.586738Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94501", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-21T18:36:46.586Z", "date_only": false, "value": "2026-09-21T18:36:46.586738Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94501", "record": "FKIE_CVE-2026-94501", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-21T18:37:07.425Z", "date_only": false, "value": "2026-09-21T18:37:07.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-94501", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T18:37:07.425Z", "date_only": false, "value": "2026-09-21T18:37:07.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94501", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T19:17:21Z", "date_only": false, "value": "2026-09-21T19:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PVXX-75WV-6W9M", "record": "GHSA-PVXX-75WV-6W9M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-21T19:17:21.910Z", "date_only": false, "value": "2026-09-21T19:17:21.910", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94501", "record": "FKIE_CVE-2026-94501", "field": "published"}, {"timestamp": "2026-09-21T20:01:31.733Z", "date_only": false, "value": "2026-09-21T20:01:31.733432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2ivod5ko2b", "record": "CVE-2026-94501", "field": "creation_timestamp", "uuid": "79c08078-3122-4a57-99a7-2356a8a728f0", "content": "\ud83d\udfe0 CVE-2026-94501 - High (8.8)\n\njshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2ivod5ko2b"}, {"timestamp": "2026-09-21T21:31:53Z", "date_only": false, "value": "2026-09-21T21:31:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PVXX-75WV-6W9M", "record": "GHSA-PVXX-75WV-6W9M", "field": "published"}, {"timestamp": "2026-09-21T21:31:54Z", "date_only": false, "value": "2026-09-21T21:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PVXX-75WV-6W9M", "record": "GHSA-PVXX-75WV-6W9M", "field": "modified"}, {"timestamp": "2026-09-22T20:43:58.793Z", "date_only": false, "value": "2026-09-22T20:43:58.793", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94501", "record": "FKIE_CVE-2026-94501", "field": "lastModified"}, {"timestamp": "2026-09-23T04:50:05.052Z", "date_only": false, "value": "2026-09-23T04:50:05.052999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5wvr4ske2o", "record": "CVE-2026-94501", "field": "creation_timestamp", "uuid": "11f7151e-e36b-4059-b575-11da51aaa948", "content": "CVE-2026-94501 - jsherp\nIn jshERP versions up to 3.6, a logged\u2011in user can use the system\u2019s create, edit and delete functions to modify the role assignments of any account without proper checks. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsherp #jishenghua #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5wvr4ske2o"}, {"timestamp": "2026-10-15T08:50:05.559Z", "date_only": false, "value": "2026-10-15T08:50:05.559618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mxvol6gi2h2o", "record": "CVE-2026-94501", "field": "creation_timestamp", "uuid": "a7822d77-6478-4609-b02b-2d99df6051c5", "content": "CVE-2026-94501 jshERP auth bypass lets any authenticated user rewrite role mappings and escalate privileges. CVSS 8.8, no patch yet. Restrict access and monitor userBusiness endpoints. https://www.valtersit.com/cve/CVE-2026-94501/ #CVE #infosec #cybersecurity", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mxvol6gi2h2o"}, {"timestamp": "2026-10-15T08:50:08.509Z", "date_only": false, "value": "2026-10-15T08:50:08.509646Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117444064457846758", "record": "CVE-2026-94501", "field": "creation_timestamp", "uuid": "cf327dc5-d1f7-4690-b34d-fbdc89021a5c", "content": "CVE-2026-94501 jshERP auth bypass lets any authenticated user rewrite role mappings and escalate privileges. CVSS 8.8, no patch yet. Restrict access and monitor userBusiness endpoints. https://www.valtersit.com/cve/CVE-2026-94501/ #CVE #infosec #cybersecurity", "url": "https://mastodon.social/users/hugovalters/statuses/117444064457846758"}]}