{"metadata": {"vulnerability": "cve-2026-108976", "count": 26, "kinds": {"milestone": 6, "sighting": 7, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-10-11T20:11:10.046Z", "date_only": false, "value": "2026-10-11T20:11:10.046Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108976", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T20:11:10.826Z", "date_only": false, "value": "2026-10-11T20:11:10.826Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108976", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T20:11:10.826Z", "date_only": false, "value": "2026-10-11T20:11:10.826Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2026-108976", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T20:20:16.162Z", "date_only": false, "value": "2026-10-11T20:20:16.162164Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117424129025361042", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "2fff31fb-94ca-4cf4-bc4e-63b7e8fea481", "content": "CVE-2026-108976  GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108976https://ftp.gnu.org/gnu/tramp/tramp-2.8.2.tar.gzhttps://www.openwall.com/lists/oss-security/2026/10/11/1https://www.openwall.com/lists/oss-security/2026/08/21/1#gnu #GNU #Emacs#CVE_2026_108976#bot", "url": "https://infosec.exchange/users/cve/statuses/117424129025361042"}, {"timestamp": "2026-10-11T21:16:00Z", "date_only": false, "value": "2026-10-11T21:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-108976", "record": "UBUNTU-CVE-2026-108976", "field": "published"}, {"timestamp": "2026-10-11T21:16:43Z", "date_only": false, "value": "2026-10-11T21:16:43Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F2F9-WP9V-23MF", "record": "GHSA-F2F9-WP9V-23MF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T21:16:43.580Z", "date_only": false, "value": "2026-10-11T21:16:43.580", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108976", "record": "FKIE_CVE-2026-108976", "field": "published"}, {"timestamp": "2026-10-11T21:30:49Z", "date_only": false, "value": "2026-10-11T21:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F2F9-WP9V-23MF", "record": "GHSA-F2F9-WP9V-23MF", "field": "published"}, {"timestamp": "2026-10-11T21:30:49Z", "date_only": false, "value": "2026-10-11T21:30:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F2F9-WP9V-23MF", "record": "GHSA-F2F9-WP9V-23MF", "field": "modified"}, {"timestamp": "2026-10-11T21:30:57.772Z", "date_only": false, "value": "2026-10-11T21:30:57.772144Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxmx7zkihf2s", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "3dcbf53a-df2f-474d-a977-705bda820210", "content": "\ud83d\udfe0 CVE-2026-108976 - High (7.8)\n\nGNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename becaus...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108976/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxmx7zkihf2s"}, {"timestamp": "2026-10-12T00:26:26.721Z", "date_only": false, "value": "2026-10-12T00:26:26.721606Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxnazsxwye2x", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "eb63054b-2dca-42cf-8286-d2fef648f398", "content": "GNU Emacs\uff0831.2\u672a\u5bfe\u5fdc\uff09\u3068TRAMP\uff082.8.2\u307e\u3067\uff09\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u540d\u7d4c\u7531\u3067OS\u30b3\u30de\u30f3\u30c9\u3092\u6ce8\u5165\u3055\u308c\u308b\u53ef\u80fd\u6027\u3002\nCVE-2026-108976 CVSS 7.8 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxnazsxwye2x"}, {"timestamp": "2026-10-12T21:37:19.015Z", "date_only": false, "value": "2026-10-12T21:37:19.015081Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxpi2cvntb2s", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "06cfa3e6-7869-40fa-a6d2-3b8f9b95034d", "content": "emacs: patch CVE-2026-108976\n\nhttps://github.com/NixOS/nixpkgs/pull/573262\n\n#security", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxpi2cvntb2s"}, {"timestamp": "2026-10-13T01:14:00Z", "date_only": false, "value": "2026-10-13T01:14:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-108976", "record": "MSRC_CVE-2026-108976", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T01:14:00Z", "date_only": false, "value": "2026-10-13T01:14:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-108976", "record": "MSRC_CVE-2026-108976", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-13T01:14:00Z", "date_only": false, "value": "2026-10-13T01:14:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-108976", "record": "MSRC_CVE-2026-108976", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T01:14:00Z", "date_only": false, "value": "2026-10-13T01:14:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-108976", "record": "MSRC_CVE-2026-108976", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T07:00:36.249Z", "date_only": false, "value": "2026-10-13T07:00:36.249Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-108976", "record": "MSRC_CVE-2026-108976", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-13T16:41:14.284Z", "date_only": false, "value": "2026-10-13T16:41:14.284220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxrhxslhn62b", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "5ee64b71-9968-4d90-9cd7-d7cb9cc787bd", "content": "[26.05] emacs: patch CVE-2026-108976\n\nhttps://github.com/NixOS/nixpkgs/pull/573455\n\n#security", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxrhxslhn62b"}, {"timestamp": "2026-10-14T14:07:50.182Z", "date_only": false, "value": "2026-10-14T14:07:50.182791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxtpugr7to2n", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "92312a27-e4a4-4447-84c7-8a70e13c5915", "content": "[Backport release-26.05] emacs30-macport: patch CVE-2026-108976\n\nhttps://github.com/NixOS/nixpkgs/pull/574014\n\n#security", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxtpugr7to2n"}, {"timestamp": "2026-10-14T14:07:51.253Z", "date_only": false, "value": "2026-10-14T14:07:51.253793Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxtpuhvuxe2k", "record": "CVE-2026-108976", "field": "creation_timestamp", "uuid": "6f1355a8-6fed-4aab-85db-b3f635e7fb06", "content": "emacs30-macport: patch CVE-2026-108976\n\nhttps://github.com/NixOS/nixpkgs/pull/573469\n\n#security", "url": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxtpuhvuxe2k"}, {"timestamp": "2026-10-15T16:18:38.501Z", "date_only": false, "value": "2026-10-15T16:18:38.501389Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108976", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T16:18:38.501Z", "date_only": false, "value": "2026-10-15T16:18:38.501389Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108976", "record": "FKIE_CVE-2026-108976", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T18:08:59.704Z", "date_only": false, "value": "2026-10-15T18:08:59.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108976", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:08:59.704Z", "date_only": false, "value": "2026-10-15T18:08:59.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108976", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:25:57.940Z", "date_only": false, "value": "2026-10-16T17:25:57.940", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108976", "record": "FKIE_CVE-2026-108976", "field": "lastModified"}, {"timestamp": "2026-10-17T10:01:22Z", "date_only": false, "value": "2026-10-17T10:01:22Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-108976", "record": "UBUNTU-CVE-2026-108976", "field": "modified"}]}