{"metadata": {"vulnerability": "certfr-2026-ale-010", "count": 18, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-08-06T00:00:00Z", "date_only": false, "value": "2026-08-06T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2026-72898 / cisa-cg", "record": "CVE-2026-72898", "field": "containers.cna.datePublic"}, {"timestamp": "2026-08-06T00:00:00Z", "date_only": true, "value": "2026-08-06", "kind": "milestone", "label": "Published", "source": "certfr_alerte", "record": "certfr-2026-ale-010", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-10T17:14:52.872Z", "date_only": false, "value": "2026-08-10T17:14:52.872411Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2026-72898 / cisa-cg", "record": "CVE-2026-72898", "field": "containers.cna.metrics.2.other.content.timestamp"}, {"timestamp": "2026-08-10T17:20:39.650Z", "date_only": false, "value": "2026-08-10T17:20:39.650Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2026-72898", "record": "CVE-2026-72898", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-10T17:55:54.841Z", "date_only": false, "value": "2026-08-10T17:55:54.841Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2026-72898", "record": "CVE-2026-72898", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-10T17:55:54.841Z", "date_only": false, "value": "2026-08-10T17:55:54.841Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-72898 / cisa-cg", "record": "CVE-2026-72898", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-11T00:00:00Z", "date_only": true, "value": "2026-08-11", "kind": "other", "label": "Catalog added", "source": "cvelistv5 \u00b7 CVE-2026-72898 / CISA-ADP", "record": "CVE-2026-72898", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-08-12T03:59:47.802Z", "date_only": false, "value": "2026-08-12T03:59:47.802633Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2026-72898 / CISA-ADP", "record": "CVE-2026-72898", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-12T14:50:08.735Z", "date_only": false, "value": "2026-08-12T14:50:08.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-72898", "record": "CVE-2026-72898", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T14:50:08.735Z", "date_only": false, "value": "2026-08-12T14:50:08.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2026-72898 / CISA-ADP", "record": "CVE-2026-72898", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "milestone", "label": "Published", "source": "certfr_alerte", "record": "certfr-2026-ale-010", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte", "record": "certfr-2026-ale-010", "field": "initial_release_date"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte", "record": "certfr-2026-ale-010", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-10T16:04:28.313Z", "date_only": false, "value": "2026-09-10T16:04:28.313974Z", "kind": "sighting", "label": "Seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/117247591357513667", "record": "CERTFR-2026-ALE-010", "field": "creation_timestamp", "uuid": "27852dbd-85b0-4c47-b122-1e5151f2dbc5", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLe CERT-FR a connaissance de nombreuses compromissions de Metabase vuln\u00e9rables \u00e0 l'injection SQL CVE-2026-72898.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "url": "https://social.numerique.gouv.fr/users/cert_fr/statuses/117247591357513667"}, {"timestamp": "2026-09-11T05:56:55.357Z", "date_only": false, "value": "2026-09-11T05:56:55.357357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p", "record": "CERTFR-2026-ALE-010", "field": "creation_timestamp", "uuid": "cec99e8b-d286-44e2-87a8-6580ad7b9ff3", "content": "\ud83d\udee1\ufe0f Revue cyber du 11/09/2026 :\n\ud83d\udea8 Alerte CERT-FR : injection SQL critique non authentifi\u00e9e dans Metabase, prise de contr\u00f4le admin possible.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p"}, {"timestamp": "2026-09-12T05:59:52.084Z", "date_only": false, "value": "2026-09-12T05:59:52.084562Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mvcfog3rzx2g", "record": "CERTFR-2026-ALE-010", "field": "creation_timestamp", "uuid": "9435a2f0-f0bb-41e1-909a-eeb8842d10fb", "content": "\ud83d\udee1\ufe0f Revue cyber du 12 septembre :\n\n\u26a0\ufe0f Alerte CERT-FR : SQLi critique non authentifi\u00e9e dans Metabase \u2192 prise de contr\u00f4le admin. Patchez.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mvcfog3rzx2g"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte", "record": "certfr-2026-ale-010", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte", "record": "certfr-2026-ale-010", "field": "revisions.1.revision_date"}]}
