{"metadata": {"vulnerability": "CVE-2026-96119", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-22T18:24:39.039Z", "date_only": false, "value": "2026-09-22T18:24:39.039Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-96119", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T23:22:11.872Z", "date_only": false, "value": "2026-10-12T23:22:11.872Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-96119", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T23:22:11.872Z", "date_only": false, "value": "2026-10-12T23:22:11.872Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ibm", "record": "CVE-2026-96119", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96119", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96119", "record": "FKIE_CVE-2026-96119", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:05.165Z", "date_only": false, "value": "2026-10-13T00:00:05.165875Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxppzmiqui22", "record": "CVE-2026-96119", "field": "creation_timestamp", "uuid": "9862f6e4-ec26-49ff-8fb7-77edc3c84bcb", "content": "CVE-2026-96119 - i\nVersions 7.3 through 7.6 of IBM i\u2019s web\u2011based administration console do not properly clean the data it receives. A person who can log in to the console could see private information or cause the system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxppzmiqui22"}, {"timestamp": "2026-10-13T00:00:36.524Z", "date_only": false, "value": "2026-10-13T00:00:36.524443Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117430657734479397", "record": "cve-2026-96119", "field": "creation_timestamp", "uuid": "2a9b5e79-996b-41e6-a60e-e8d6f6480c28", "content": "IBM i 7.3 \u2013 7.6 HTTP Server Admin is vulnerable (CVE-2026-96119, CRITICAL, CVSS 9.9). Remote authenticated code execution possible via code injection. Patch urgently. https://radar.offseq.com/threat/cve-2026-96119-cwe-94-improper-control-of-generation-of-code-code-injection-f55b8a017b9f656e #OffSeq #IBM #CVE202696119 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/117430657734479397"}, {"timestamp": "2026-10-13T00:00:39.395Z", "date_only": false, "value": "2026-10-13T00:00:39.395109Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxpq2mensz2r", "record": "cve-2026-96119", "field": "creation_timestamp", "uuid": "590d0cf2-3141-4a93-967d-6f0a3d1a9ad1", "content": "CRITICAL: IBM i 7.3 \u2013 7.6 HTTP Server Admin code injection flaw (CVE-2026-96119, CVSS 9.9). Remote authenticated attackers can execute code. Patch now. https://radar.offseq.com/threat/cve-2026-96119-cwe-94-improper-control-of-generation-of-code-code-injection-f55b8a017b9f656e #OffSeq #IBM #CVE202...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxpq2mensz2r"}, {"timestamp": "2026-10-13T00:04:13.088Z", "date_only": false, "value": "2026-10-13T00:04:13.088292Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430671942801135", "record": "CVE-2026-96119", "field": "creation_timestamp", "uuid": "0fa94b57-a917-4b19-844b-c8d71f1b7ffa", "content": "CVE-2026-96119 IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.\nhttps://www.cve.org/CVERecord?id=CVE-2026-96119https://www.ibm.com/support/pages/node/7292159#ibm #IBM #i#CVE_2026_96119#bot", "url": "https://infosec.exchange/users/cve/statuses/117430671942801135"}, {"timestamp": "2026-10-13T00:17:02Z", "date_only": false, "value": "2026-10-13T00:17:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3WW8-VHFP-XWX7", "record": "GHSA-3WW8-VHFP-XWX7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T00:17:02.053Z", "date_only": false, "value": "2026-10-13T00:17:02.053", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96119", "record": "FKIE_CVE-2026-96119", "field": "published"}, {"timestamp": "2026-10-13T00:31:40Z", "date_only": false, "value": "2026-10-13T00:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3WW8-VHFP-XWX7", "record": "GHSA-3WW8-VHFP-XWX7", "field": "published"}, {"timestamp": "2026-10-13T00:31:41Z", "date_only": false, "value": "2026-10-13T00:31:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3WW8-VHFP-XWX7", "record": "GHSA-3WW8-VHFP-XWX7", "field": "modified"}, {"timestamp": "2026-10-13T02:08:13.899Z", "date_only": false, "value": "2026-10-13T02:08:13.899361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpx6r5inh2z", "record": "CVE-2026-96119", "field": "creation_timestamp", "uuid": "7f4d94a4-77eb-4525-8e0c-93aa4aa71494", "content": "\ud83d\udea8 CVE-2026-96119 \u2014 CVSS 9.9 CRITICAL\n\nIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96119\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpx6r5inh2z"}, {"timestamp": "2026-10-14T03:58:59.583Z", "date_only": false, "value": "2026-10-14T03:58:59.583Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-96119", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:58:59.583Z", "date_only": false, "value": "2026-10-14T03:58:59.583Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96119", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T23:48:20.053Z", "date_only": false, "value": "2026-10-14T23:48:20.053", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96119", "record": "FKIE_CVE-2026-96119", "field": "lastModified"}, {"timestamp": "2026-10-15T03:07:07.394Z", "date_only": false, "value": "2026-10-15T03:07:07.394995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxv3fv5flm2u", "record": "CVE-2026-96119", "field": "creation_timestamp", "uuid": "af4f395b-e5e2-43d2-9ad7-7bfe2a0a1afd", "content": "\ud83d\udccc CVE-2026-96119 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due t... https://www.cyberhub.blog/cves/CVE-2026-96119", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxv3fv5flm2u"}, {"timestamp": "2026-10-15T03:07:08.217Z", "date_only": false, "value": "2026-10-15T03:07:08.217868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mxv3fvsdtn2n", "record": "CVE-2026-96119", "field": "creation_timestamp", "uuid": "c178e5f8-8b60-414d-8116-27dbbf8e4468", "content": "\ud83d\udccc CVE-2026-96119 - IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due t... https://www.potatohub.blog/cves/CVE-2026-96119", "url": "https://bsky.app/profile/potato.software/post/3mxv3fvsdtn2n"}]}