{"metadata": {"vulnerability": "cve-2026-102599", "count": 12, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-09-29T14:18:02.920Z", "date_only": false, "value": "2026-09-29T14:18:02.920Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-102599", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-29T23:44:33Z", "date_only": false, "value": "2026-09-29T23:44:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2GC4-CQFQ-P2GV", "record": "GHSA-2GC4-CQFQ-P2GV", "field": "published"}, {"timestamp": "2026-09-29T23:44:33Z", "date_only": false, "value": "2026-09-29T23:44:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2GC4-CQFQ-P2GV", "record": "GHSA-2GC4-CQFQ-P2GV", "field": "modified"}, {"timestamp": "2026-10-13T19:05:10.870Z", "date_only": false, "value": "2026-10-13T19:05:10.870Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-102599", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:05:10.870Z", "date_only": false, "value": "2026-10-13T19:05:10.870Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-102599", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T19:17:49.037Z", "date_only": false, "value": "2026-10-13T19:17:49.037", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102599", "record": "FKIE_CVE-2026-102599", "field": "published"}, {"timestamp": "2026-10-13T20:07:30.314Z", "date_only": false, "value": "2026-10-13T20:07:30.314699Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117435403460654632", "record": "CVE-2026-102599", "field": "creation_timestamp", "uuid": "c75ab740-f9d4-424a-8486-4c2c1a316a74", "content": "CVE-2026-102599 Socket.IO: Engine.IO Protocol Revision Mismatch DoS Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious client can establish a valid session and send an upgrade request with a different or omitted EIO query parameter, attaching a transport with incompatible parser and heartbeat behavior. A crafted heartbeat packet can then trigger an uncaught exception and terminate the Node.js process, including when Engine.IO v3 compatibility is disabled because an omitted EIO value is interpreted as revision 3 on the affected path. This issue is fixed in Engine.IO 6.6.10.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102599https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gvhttps://github.com/socketio/socket.io/commit/86db1fc3db2cd315a065d64c4e48918ccf9b4729https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.10#socketio #socket.io#CVE_2026_102599#bot", "url": "https://infosec.exchange/users/cve/statuses/117435403460654632"}, {"timestamp": "2026-10-17T00:39:37.132Z", "date_only": false, "value": "2026-10-17T00:39:37.132946Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-102599", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-17T00:39:37.132Z", "date_only": false, "value": "2026-10-17T00:39:37.132946Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102599", "record": "FKIE_CVE-2026-102599", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-17T00:39:46.378Z", "date_only": false, "value": "2026-10-17T00:39:46.378Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-102599", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-17T00:39:46.378Z", "date_only": false, "value": "2026-10-17T00:39:46.378Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-102599", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-17T02:17:08.197Z", "date_only": false, "value": "2026-10-17T02:17:08.197", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102599", "record": "FKIE_CVE-2026-102599", "field": "lastModified"}]}