{"metadata": {"vulnerability": "CVE-2026-94609", "count": 18, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-09-21T21:32:23.741Z", "date_only": false, "value": "2026-09-21T21:32:23.741Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T16:20:45.703Z", "date_only": false, "value": "2026-09-24T16:20:45.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T16:20:45.703Z", "date_only": false, "value": "2026-09-24T16:20:45.703Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-94609", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T17:17:17.230Z", "date_only": false, "value": "2026-09-24T17:17:17.230", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94609", "record": "FKIE_CVE-2026-94609", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T18:00:08Z", "date_only": false, "value": "2026-09-24T18:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103265", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "ffd0ee0d-a5e0-4b65-b5e4-01376ed5ddc4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94609\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anthonyk2923\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94609: Writeup and POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103265", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-24T18:00:08Z", "date_only": false, "value": "2026-09-24T18:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103265", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "29de3a5d-ce5d-4277-966f-8f53416d64d4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94609\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anthonyk2923\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94609: Writeup and POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103265"}, {"timestamp": "2026-09-24T19:00:17Z", "date_only": false, "value": "2026-09-24T19:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "9ef8c091-7f69-472a-9989-8baa0d201302", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-24T19:00:17Z", "date_only": false, "value": "2026-09-24T19:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "5f272340-d6fe-440e-8b67-87c8022eb164"}, {"timestamp": "2026-09-24T19:04:57.838Z", "date_only": false, "value": "2026-09-24T19:04:57.838048Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7rqhop7y2km5o", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "7e2fd867-5cfd-4e38-adbb-d8a7e7d67616", "content": "CVE-2026-94609 - authentik: Privilege Escalation to Superuser via Group Hierarchy\nCVE ID : CVE-2026-94609\n \n Published : 24 septembre 2026 17:17 | 21\u00a0minutes ago\n \n Description : authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an accou...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7rqhop7y2km5o"}, {"timestamp": "2026-09-25T03:00:05Z", "date_only": false, "value": "2026-09-25T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "7652a3c1-84b6-4dfb-a14a-ac0ba8547f6b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T03:00:05Z", "date_only": false, "value": "2026-09-25T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "f55613c1-b0e0-4fda-83ab-038473b2cf00"}, {"timestamp": "2026-09-28T15:41:43.925Z", "date_only": false, "value": "2026-09-28T15:41:43.925095Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94609", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-28T15:41:43.925Z", "date_only": false, "value": "2026-09-28T15:41:43.925095Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94609", "record": "FKIE_CVE-2026-94609", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-28T15:41:52.662Z", "date_only": false, "value": "2026-09-28T15:41:52.662Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-28T15:41:52.662Z", "date_only": false, "value": "2026-09-28T15:41:52.662Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94609", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T16:17:18.200Z", "date_only": false, "value": "2026-09-28T16:17:18.200", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94609", "record": "FKIE_CVE-2026-94609", "field": "lastModified"}, {"timestamp": "2026-10-01T09:23:06.897Z", "date_only": false, "value": "2026-10-01T09:23:06.897Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AUTHENTIK-2026-94609", "record": "BIT-AUTHENTIK-2026-94609", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-01T09:55:18.588Z", "date_only": false, "value": "2026-10-01T09:55:18.588Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AUTHENTIK-2026-94609", "record": "BIT-AUTHENTIK-2026-94609", "field": "modified"}], "metrics": {"as_of": "2026-10-28T12:53:37.289Z", "anchors": {"origin": {"timestamp": "2026-09-24T16:20:45.703Z", "date_only": false, "value": "2026-09-24T16:20:45.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-24T16:20:45.703Z", "date_only": false, "value": "2026-09-24T16:20:45.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-24T18:00:08Z", "date_only": false, "value": "2026-09-24T18:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103265", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "ffd0ee0d-a5e0-4b65-b5e4-01376ed5ddc4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94609\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anthonyk2923\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94609: Writeup and POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103265", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 5962.297, "hours": 1.656193611111111, "days": 0.06900806712962962, "min_seconds": 5962.297, "max_seconds": 5962.297, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T16:20:45.703Z", "date_only": false, "value": "2026-09-24T16:20:45.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-24T18:00:08Z", "date_only": false, "value": "2026-09-24T18:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103265", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "ffd0ee0d-a5e0-4b65-b5e4-01376ed5ddc4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94609\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anthonyk2923\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94609: Writeup and POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103265", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 2925171.58613, "hours": 812.5476628138889, "days": 33.85615261724537, "min_seconds": 2925171.58613, "max_seconds": 2925171.58613, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T16:20:45.703Z", "date_only": false, "value": "2026-09-24T16:20:45.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94609", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T12:53:37.289Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 2919209.28913, "hours": 810.8914692027778, "days": 33.78714455011574, "min_seconds": 2919209.28913, "max_seconds": 2919209.28913, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T18:00:08Z", "date_only": false, "value": "2026-09-24T18:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103265", "record": "CVE-2026-94609", "field": "creation_timestamp", "uuid": "ffd0ee0d-a5e0-4b65-b5e4-01376ed5ddc4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94609\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anthonyk2923\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94609: Writeup and POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103265", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T12:53:37.289Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}