{"metadata": {"vulnerability": "CVE-2026-95614", "count": 12, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 7}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-22T09:56:14.237Z", "date_only": false, "value": "2026-09-22T09:56:14.237Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-95614", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T15:46:00Z", "date_only": false, "value": "2026-11-13T15:46:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zenitel", "record": "CVE-2026-95614", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T15:46:37.152Z", "date_only": false, "value": "2026-11-13T15:46:37.152Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-95614", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T15:46:37.152Z", "date_only": false, "value": "2026-11-13T15:46:37.152Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zenitel", "record": "CVE-2026-95614", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T16:01:33.306Z", "date_only": false, "value": "2026-11-13T16:01:33.306813Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117609967959517595", "record": "CVE-2026-95614", "field": "creation_timestamp", "uuid": "9faf724e-38e2-4c77-bf91-cfa2489f6d3a", "content": "CVE-2026-95614 Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus container The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file.\nhttps://www.cve.org/CVERecord?id=CVE-2026-95614https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf#zenitel #Zenitel #ZenitelConnect#CVE_2026_95614#bot", "url": "https://infosec.exchange/users/cve/statuses/117609967959517595"}, {"timestamp": "2026-11-13T16:19:38Z", "date_only": false, "value": "2026-11-13T16:19:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-78HC-4G8W-PPR6", "record": "GHSA-78HC-4G8W-PPR6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-13T16:40:06.733Z", "date_only": false, "value": "2026-11-13T16:40:06.733060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n27ged6neo2o", "record": "CVE-2026-95614", "field": "creation_timestamp", "uuid": "748fd6b8-e2ed-467f-886c-ce64ec0dd137", "content": "CVE-2026-95614 - zenitel connect\nVersions of Zenitel Connect before 1.11.0 share a data folder between the main host and the Hiatus container. If an attacker can write files inside the Hiatus\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zenitelconnect #zenitel #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n27ged6neo2o"}, {"timestamp": "2026-11-13T18:32:29Z", "date_only": false, "value": "2026-11-13T18:32:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-78HC-4G8W-PPR6", "record": "GHSA-78HC-4G8W-PPR6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T18:32:29Z", "date_only": false, "value": "2026-11-13T18:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-78HC-4G8W-PPR6", "record": "GHSA-78HC-4G8W-PPR6", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-13T19:51:38.523Z", "date_only": false, "value": "2026-11-13T19:51:38.523906Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-95614", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-13T20:03:25.624Z", "date_only": false, "value": "2026-11-13T20:03:25.624Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-95614", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-13T20:03:25.624Z", "date_only": false, "value": "2026-11-13T20:03:25.624Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-95614", "field": "containers.adp.0.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-11-13T21:16:26.295Z", "anchors": {"origin": {"timestamp": "2026-11-13T15:46:00Z", "date_only": false, "value": "2026-11-13T15:46:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zenitel", "record": "CVE-2026-95614", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-13T15:46:00Z", "date_only": false, "value": "2026-11-13T15:46:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zenitel", "record": "CVE-2026-95614", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 19826.295114, "hours": 5.507304198333333, "days": 0.2294710082638889, "min_seconds": 19826.295114, "max_seconds": 19826.295114, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-13T15:46:00Z", "date_only": false, "value": "2026-11-13T15:46:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zenitel", "record": "CVE-2026-95614", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T21:16:26.295Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}