{"metadata": {"vulnerability": "cve-2026-108907", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-11T00:00:00Z", "date_only": false, "value": "2026-10-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108907", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-11T02:00:00Z", "date_only": false, "value": "2026-10-11T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108907", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-11T14:55:14.375Z", "date_only": false, "value": "2026-10-11T14:55:14.375Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108907", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T17:00:38Z", "date_only": false, "value": "2026-10-11T17:00:38.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108907", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-12T16:15:10.558Z", "date_only": false, "value": "2026-10-12T16:15:10.558Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108907", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T16:15:10.558Z", "date_only": false, "value": "2026-10-12T16:15:10.558Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-108907", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:26:08.932Z", "date_only": false, "value": "2026-10-12T16:26:08.932528Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428870737999001", "record": "CVE-2026-108907", "field": "creation_timestamp", "uuid": "b666a6d0-bd5d-4989-8cdb-b4d4ab9c8e78", "content": "CVE-2026-108907 Netcore NR268 CGI Execution user_ok improper authentication A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108907https://vuldb.com/vuln/416702https://vuldb.com/vuln/416702/ctihttps://vuldb.com/cve/CVE-2026-108907https://vuldb.com/submit/977173https://github.com/draw-ctf/report/blob/main/NR268/2026.09.14-netcore-nr268-boa-auth-fail-open.md#Netcore #NR268#CVE_2026_108907#bot", "url": "https://infosec.exchange/users/cve/statuses/117428870737999001"}, {"timestamp": "2026-10-12T17:17:13Z", "date_only": false, "value": "2026-10-12T17:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-382F-XR7M-W8HQ", "record": "GHSA-382F-XR7M-W8HQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T17:17:13.373Z", "date_only": false, "value": "2026-10-12T17:17:13.373", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108907", "record": "FKIE_CVE-2026-108907", "field": "published"}, {"timestamp": "2026-10-12T18:03:12.049Z", "date_only": false, "value": "2026-10-12T18:03:12.049030Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/e72qtzdghpwgx", "record": "CVE-2026-108907", "field": "creation_timestamp", "uuid": "93819319-d5d5-482c-b2b5-361b7d442c1b", "content": "CVE-2026-108907 - Netcore NR268 CGI Execution user_ok improper authentication\nCVE ID : CVE-2026-108907\n \n Published : 12 octobre 2026 16:15 | 15\u00a0minutes ago\n \n Description : A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the com...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/e72qtzdghpwgx"}, {"timestamp": "2026-10-12T18:08:44.251Z", "date_only": false, "value": "2026-10-12T18:08:44.251098Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxp4fegf7u2n", "record": "CVE-2026-108907", "field": "creation_timestamp", "uuid": "9d62baa7-be9d-4c84-916f-040db79a4367", "content": "\ud83d\udea8 CVE-2026-108907 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the compone...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108907\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxp4fegf7u2n"}, {"timestamp": "2026-10-12T18:31:37Z", "date_only": false, "value": "2026-10-12T18:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-382F-XR7M-W8HQ", "record": "GHSA-382F-XR7M-W8HQ", "field": "published"}, {"timestamp": "2026-10-12T18:31:37Z", "date_only": false, "value": "2026-10-12T18:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-382F-XR7M-W8HQ", "record": "GHSA-382F-XR7M-W8HQ", "field": "modified"}, {"timestamp": "2026-10-12T19:20:05.626Z", "date_only": false, "value": "2026-10-12T19:20:05.626303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpaewz2xd2l", "record": "CVE-2026-108907", "field": "creation_timestamp", "uuid": "b2f56d69-f89e-4aed-98c7-8634debcce4c", "content": "CVE-2026-108907\nThe Netcore NR268 version 1.7.121109 can be tricked into accepting anyone as a valid user. An attacker can do this from anywhere on the internet, potentially gaining unauthorized access. Apply any available\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpaewz2xd2l"}, {"timestamp": "2026-10-13T16:24:05.375Z", "date_only": false, "value": "2026-10-13T16:24:05.375240Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108907", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T16:24:05.375Z", "date_only": false, "value": "2026-10-13T16:24:05.375240Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108907", "record": "FKIE_CVE-2026-108907", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:24:18.568Z", "date_only": false, "value": "2026-10-13T16:24:18.568Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108907", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:24:18.568Z", "date_only": false, "value": "2026-10-13T16:24:18.568Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108907", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:21.750Z", "date_only": false, "value": "2026-10-13T17:17:21.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108907", "record": "FKIE_CVE-2026-108907", "field": "lastModified"}]}