{"metadata": {"vulnerability": "CVE-2026-96748", "count": 45, "kinds": {"milestone": 13, "sighting": 3, "kev": 0, "other": 29}}, "data": [{"timestamp": "2026-09-23T15:45:50.867Z", "date_only": false, "value": "2026-09-23T15:45:50.867Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-96748", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1234", "record": "CERTFR-2026-AVI-1234", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T18:18:12.032Z", "date_only": false, "value": "2026-09-24T18:18:12.032Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-96748", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-24T18:36:30.450Z", "date_only": false, "value": "2026-09-24T18:36:30.450714Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96748", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T18:36:30.450Z", "date_only": false, "value": "2026-09-24T18:36:30.450714Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96748", "record": "FKIE_CVE-2026-96748", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-24T18:36:36.142Z", "date_only": false, "value": "2026-09-24T18:36:36.142Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96748", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T19:12:05.362Z", "date_only": false, "value": "2026-09-24T19:12:05.362Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-96748", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T19:12:05.362Z", "date_only": false, "value": "2026-09-24T19:12:05.362Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mongodb", "record": "CVE-2026-96748", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T19:17:00Z", "date_only": false, "value": "2026-09-24T19:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-96748", "record": "UBUNTU-CVE-2026-96748", "field": "published"}, {"timestamp": "2026-09-24T19:17:20Z", "date_only": false, "value": "2026-09-24T19:17:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VP6J-J7W5-5XJJ", "record": "GHSA-VP6J-J7W5-5XJJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-24T19:17:20.813Z", "date_only": false, "value": "2026-09-24T19:17:20.813", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96748", "record": "FKIE_CVE-2026-96748", "field": "published"}, {"timestamp": "2026-09-24T21:00:46.893Z", "date_only": false, "value": "2026-09-24T21:00:46.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96748", "record": "FKIE_CVE-2026-96748", "field": "lastModified"}, {"timestamp": "2026-09-25T02:09:18Z", "date_only": false, "value": "2026-09-25T02:09:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-6", "record": "CVE-2026-96748", "field": "creation_timestamp", "uuid": "0e3c8845-b460-4edd-ae4a-cd45fba9884d", "url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-6"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1234", "record": "CERTFR-2026-AVI-1234", "field": "last_revision_date"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1234", "record": "CERTFR-2026-AVI-1234", "field": "initial_release_date"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1234", "record": "CERTFR-2026-AVI-1234", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-28T08:45:12.346Z", "date_only": false, "value": "2026-09-28T08:45:12.346660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwkweseq6t2f", "record": "CVE-2026-96748", "field": "creation_timestamp", "uuid": "5334a3ee-5023-4d5a-8516-66718151e933", "content": "\ud83d\udd17 CVE : CVE-2026-96745, CVE-2026-96746, CVE-2026-96747, CVE-2026-96748, CVE-2026-96749", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwkweseq6t2f"}, {"timestamp": "2026-09-29T16:18:54Z", "date_only": false, "value": "2026-09-29T16:18:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4398-1", "record": "SUSE-SU-2026:4398-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-29T16:18:54Z", "date_only": false, "value": "2026-09-29T16:18:54Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:4398-1", "record": "SUSE-SU-2026:4398-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-29T16:18:54Z", "date_only": false, "value": "2026-09-29T16:18:54Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:4398-1", "record": "SUSE-SU-2026:4398-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:18:54Z", "date_only": false, "value": "2026-09-29T16:18:54Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:4398-1", "record": "SUSE-SU-2026:4398-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-29T16:36:21Z", "date_only": false, "value": "2026-09-29T16:36:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22003-1", "record": "OPENSUSE-SU-2026:22003-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-29T16:36:21Z", "date_only": false, "value": "2026-09-29T16:36:21Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22003-1", "record": "OPENSUSE-SU-2026:22003-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-29T16:36:21Z", "date_only": false, "value": "2026-09-29T16:36:21Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22003-1", "record": "OPENSUSE-SU-2026:22003-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:36:21Z", "date_only": false, "value": "2026-09-29T16:36:21Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22003-1", "record": "OPENSUSE-SU-2026:22003-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11935-1", "record": "OPENSUSE-SU-2026:11935-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11935-1", "record": "OPENSUSE-SU-2026:11935-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11935-1", "record": "OPENSUSE-SU-2026:11935-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11935-1", "record": "OPENSUSE-SU-2026:11935-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-30T11:16:55Z", "date_only": false, "value": "2026-09-30T11:16:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:4398-1", "record": "SUSE-SU-2026:4398-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-30T11:16:55Z", "date_only": false, "value": "2026-09-30T11:16:55Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:4398-1", "record": "SUSE-SU-2026:4398-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-01T10:22:59Z", "date_only": false, "value": "2026-10-01T10:22:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11935-1", "record": "OPENSUSE-SU-2026:11935-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-01T10:22:59Z", "date_only": false, "value": "2026-10-01T10:22:59Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11935-1", "record": "OPENSUSE-SU-2026:11935-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-01T16:39:46Z", "date_only": false, "value": "2026-10-01T16:39:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22003-1", "record": "OPENSUSE-SU-2026:22003-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-01T16:39:46Z", "date_only": false, "value": "2026-10-01T16:39:46Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22003-1", "record": "OPENSUSE-SU-2026:22003-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-05T23:47:07Z", "date_only": false, "value": "2026-10-05T23:47:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VP6J-J7W5-5XJJ", "record": "GHSA-VP6J-J7W5-5XJJ", "field": "published"}, {"timestamp": "2026-10-05T23:47:07Z", "date_only": false, "value": "2026-10-05T23:47:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VP6J-J7W5-5XJJ", "record": "GHSA-VP6J-J7W5-5XJJ", "field": "modified"}, {"timestamp": "2026-10-06T05:01:25Z", "date_only": false, "value": "2026-10-06T05:01:25Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MONGO-ORCHESTRATION-CVE-2026-96748", "record": "BREW-MONGO-ORCHESTRATION-CVE-2026-96748", "field": "published"}, {"timestamp": "2026-10-06T09:30:32Z", "date_only": false, "value": "2026-10-06T09:30:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/cf65fdaeab3dabc070aad5d3262b79fd", "record": "CVE-2026-96748", "field": "creation_timestamp", "uuid": "2606904e-eca0-4126-9ed0-0b7f85438e91", "content": "# CVE-2026-96748: CVE-2026-96748: Host Injection Vulnerability in PyMongo Connection String Parsing\n\n> **CVSS Score:** 8.3\n> **Published:** 2026-10-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-96748\n\n## Summary\nA critical host injection vulnerability exists in PyMongo's connection string parser prior to version 4.18.2. The parser globally decodes percent-encoded characters in the host portion before splitting on delimiters, allowing attackers to inject arbitrary servers into the database client's connection pool.\n\n## TL;DR\nPyMongo's parser decoded percent-encoded characters before splitting hostnames, allowing attackers to inject rogue servers into connection strings.\n\n## Technical Details\n\n- **CWE ID**: CWE-177\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 8.3\n- **EPSS Score**: 0.00257 (15.78th percentile)\n- **Impact**: Host Injection / Adversary-in-the-Middle\n- **Exploit Status**: None (No public PoC)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- PyMongo (Python Driver for MongoDB)\n- **PyMongo**: >= 0, < 4.18.2 (Fixed in: `4.18.2`)\n\n## Mitigation\n\n- Upgrade PyMongo to version 4.18.2 or later.\n- Implement rigorous regular expression validation on host input to reject any characters other than alphanumeric characters, hyphens, and periods.\n- Configure strict network egress rules to prevent connections to unknown or unauthorized external databases.\n\n**Remediation Steps:**\n1. Locate all installations of PyMongo in application dependencies (e.g., requirements.txt, Pipfile, poetry.lock).\n2. Update PyMongo version specification to >=4.18.2.\n3. Run pip install -r requirements.txt --upgrade or equivalent package manager commands to apply the update.\n4. Incorporate input sanitization routines for dynamic database connection host parameters.\n\n## References\n\n- [GitHub Security Advisory GHSA-vp6j-j7w5-5xjj](https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-vp6j-j7w5-5xjj)\n- [Fix Commit: Refactoring of host split and decode order](https://github.com/mongodb/mongo-python-driver/commit/1e7a56db4649b14c4c9a6ac20aa4a8d0d1bb238a)\n- [CVE Record for CVE-2026-96748](https://www.cve.org/CVERecord?id=CVE-2026-96748)\n- [Official PyMongo Changelog](https://github.com/mongodb/mongo-python-driver/blob/4.18.2/doc/changelog.rst)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-96748) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/cf65fdaeab3dabc070aad5d3262b79fd"}, {"timestamp": "2026-10-06T19:06:28Z", "date_only": false, "value": "2026-10-06T19:06:28Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-96748", "record": "BREW-PROWLER-CVE-2026-96748", "field": "published"}, {"timestamp": "2026-10-15T10:22:46.035Z", "date_only": false, "value": "2026-10-15T10:22:46.035003Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-4297", "record": "PYSEC-2026-4297", "field": "published"}, {"timestamp": "2026-10-15T14:38:08.842Z", "date_only": false, "value": "2026-10-15T14:38:08.842297Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-4297", "record": "PYSEC-2026-4297", "field": "modified"}, {"timestamp": "2026-10-16T09:29:28Z", "date_only": false, "value": "2026-10-16T09:29:28Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MONGO-ORCHESTRATION-CVE-2026-96748", "record": "BREW-MONGO-ORCHESTRATION-CVE-2026-96748", "field": "modified"}, {"timestamp": "2026-10-16T09:56:39Z", "date_only": false, "value": "2026-10-16T09:56:39Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PROWLER-CVE-2026-96748", "record": "BREW-PROWLER-CVE-2026-96748", "field": "modified"}, {"timestamp": "2026-10-17T09:58:14Z", "date_only": false, "value": "2026-10-17T09:58:14Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-96748", "record": "UBUNTU-CVE-2026-96748", "field": "modified"}]}