{"metadata": {"vulnerability": "CVE-2026-9833", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-28T12:39:27.707Z", "date_only": false, "value": "2026-05-28T12:39:27.707Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-20T06:00:05.477Z", "date_only": false, "value": "2026-07-20T06:00:05.477Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-20T06:00:05.477Z", "date_only": false, "value": "2026-07-20T06:00:05.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-9833", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-20T07:16:42Z", "date_only": false, "value": "2026-07-20T07:16:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MCX6-9QF4-CX6P", "record": "GHSA-MCX6-9QF4-CX6P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-07-20T07:16:42.657Z", "date_only": false, "value": "2026-07-20T07:16:42.657", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9833", "record": "FKIE_CVE-2026-9833", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-20T08:25:45.320Z", "date_only": false, "value": "2026-07-20T08:25:45.320360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2unl7wiq2b", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "f75dfa1d-739e-4587-91a4-77df2058c372", "content": "CVE-2026-9833 - Tag Groups\nCVE ID : CVE-2026-9833\n \n Published : July 20, 2026, 7:16 a.m. | 27\u00a0minutes ago\n \n Description : The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters befor...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2unl7wiq2b"}, {"timestamp": "2026-07-20T09:31:08Z", "date_only": false, "value": "2026-07-20T09:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MCX6-9QF4-CX6P", "record": "GHSA-MCX6-9QF4-CX6P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-20T13:07:07.393Z", "date_only": false, "value": "2026-07-20T13:07:07.393503Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9833", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-07-20T13:07:07.393Z", "date_only": false, "value": "2026-07-20T13:07:07.393503Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9833", "record": "FKIE_CVE-2026-9833", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-20T13:07:10.885Z", "date_only": false, "value": "2026-07-20T13:07:10.885Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-20T13:07:10.885Z", "date_only": false, "value": "2026-07-20T13:07:10.885Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9833", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-20T15:32:03Z", "date_only": false, "value": "2026-07-20T15:32:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MCX6-9QF4-CX6P", "record": "GHSA-MCX6-9QF4-CX6P", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-20T20:39:31.217Z", "date_only": false, "value": "2026-07-20T20:39:31.217", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9833", "record": "FKIE_CVE-2026-9833", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-02T00:00:07.434Z", "date_only": false, "value": "2026-08-02T00:00:07.434121Z", "kind": "sighting", "label": "Seen", "source": "Telegram/n43DQvJfEpQ2CCDqB7-wy_N5Ry32gFxLKP6_x3peum_WwNg", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "76802aea-4f0e-4636-b29c-92a3a980bde2"}, {"timestamp": "2026-08-02T21:12:25.318Z", "date_only": false, "value": "2026-08-02T21:12:25.318524Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ncUkpmNjyaxjYFq0-F54DNJ-9N7RodS8O6uEB089ysWkp84", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "741b612a-068a-43f2-8d48-851c134ccb72", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T03:00:08.817Z", "date_only": false, "value": "2026-09-14T03:00:08.817691Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "26f92e64-0c61-4f96-9c71-5dc536d7c7c2"}, {"timestamp": "2026-09-15T00:00:25.186Z", "date_only": false, "value": "2026-09-15T00:00:25.186580Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "ced74e0f-5889-4342-a413-97aee7a76c3d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-09T14:14:29Z", "date_only": false, "value": "2026-10-09T14:14:29.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-9833.yaml", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "5f71830e-be01-46b4-8a26-e20c392ce30b", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-9833.yaml"}], "metrics": {"as_of": "2026-11-03T09:14:39.195Z", "anchors": {"origin": {"timestamp": "2026-07-20T06:00:05.477Z", "date_only": false, "value": "2026-07-20T06:00:05.477Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-20T06:00:05.477Z", "date_only": false, "value": "2026-07-20T06:00:05.477Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-02T21:12:25.318Z", "date_only": false, "value": "2026-08-02T21:12:25.318524Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ncUkpmNjyaxjYFq0-F54DNJ-9N7RodS8O6uEB089ysWkp84", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "741b612a-068a-43f2-8d48-851c134ccb72", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1177939.841, "hours": 327.2055113888889, "days": 13.633562974537037, "min_seconds": 1177939.841, "max_seconds": 1177939.841, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-20T06:00:05.477Z", "date_only": false, "value": "2026-07-20T06:00:05.477Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-02T21:12:25.318Z", "date_only": false, "value": "2026-08-02T21:12:25.318524Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ncUkpmNjyaxjYFq0-F54DNJ-9N7RodS8O6uEB089ysWkp84", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "741b612a-068a-43f2-8d48-851c134ccb72", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9170073.718652, "hours": 2547.242699625556, "days": 106.13511248439815, "min_seconds": 9170073.718652, "max_seconds": 9170073.718652, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-20T06:00:05.477Z", "date_only": false, "value": "2026-07-20T06:00:05.477Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T09:14:39.195Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 7992133.877652, "hours": 2220.0371882366667, "days": 92.5015495098611, "min_seconds": 7992133.877652, "max_seconds": 7992133.877652, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-02T21:12:25.318Z", "date_only": false, "value": "2026-08-02T21:12:25.318524Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ncUkpmNjyaxjYFq0-F54DNJ-9N7RodS8O6uEB089ysWkp84", "record": "CVE-2026-9833", "field": "creation_timestamp", "uuid": "741b612a-068a-43f2-8d48-851c134ccb72", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T09:14:39.195Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}