{"metadata": {"vulnerability": "cve-2026-106464", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-06T16:53:12.796Z", "date_only": false, "value": "2026-10-06T16:53:12.796Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-106464", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T17:41:43.585Z", "date_only": false, "value": "2026-10-14T17:41:43.585Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-106464", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T17:41:43.585Z", "date_only": false, "value": "2026-10-14T17:41:43.585Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / eclipse", "record": "cve-2026-106464", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:17:24.960Z", "date_only": false, "value": "2026-10-14T18:17:24.960", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106464", "record": "FKIE_CVE-2026-106464", "field": "published"}, {"timestamp": "2026-10-14T23:12:13.116Z", "date_only": false, "value": "2026-10-14T23:12:13.116877Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441792082824157", "record": "CVE-2026-106464", "field": "creation_timestamp", "uuid": "acb7a142-06ce-4caf-860f-f33a85ea2acd", "content": "CVE-2026-106464  `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature length of `0xFFFFFFFF` and a signature pointer one byte past the end of the buffer. Certificates are parsed from the peer during the TLS handshake, so the input is remote and unauthenticated.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106464https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-ww3q-3444-q488https://gitlab.eclipse.org/security/cve-assignment/-/work_items/368#EclipseFoundation #NetXDuo#CVE_2026_106464#bot", "url": "https://infosec.exchange/users/cve/statuses/117441792082824157"}, {"timestamp": "2026-10-16T20:13:31.363Z", "date_only": false, "value": "2026-10-16T20:13:31.363666Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-106464", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T20:13:31.363Z", "date_only": false, "value": "2026-10-16T20:13:31.363666Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106464", "record": "FKIE_CVE-2026-106464", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T20:13:45.214Z", "date_only": false, "value": "2026-10-16T20:13:45.214Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-106464", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:13:45.214Z", "date_only": false, "value": "2026-10-16T20:13:45.214Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-106464", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:17:18.010Z", "date_only": false, "value": "2026-10-16T21:17:18.010", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-106464", "record": "FKIE_CVE-2026-106464", "field": "lastModified"}]}