{"metadata": {"vulnerability": "cve-2026-109559", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109559", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T19:27:51.341Z", "date_only": false, "value": "2026-10-12T19:27:51.341Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109559", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T20:55:14.269Z", "date_only": false, "value": "2026-10-12T20:55:14.269Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109559", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T20:55:14.269Z", "date_only": false, "value": "2026-10-12T20:55:14.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109559", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T21:14:06.281Z", "date_only": false, "value": "2026-10-12T21:14:06.281675Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430003023693336", "record": "CVE-2026-109559", "field": "creation_timestamp", "uuid": "16f9ada4-2e0a-4a92-9eaf-17d62edd319b", "content": "CVE-2026-109559 EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-navigate EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to obtain the edgeeverDesktop bridge including session token, sidecar RPC, and ACP channels.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109559https://github.com/tianma-if/edgeever/issues/536https://github.com/tianma-if/edgeever/issues/546https://github.com/tianma-if/edgeever/commit/6b5027e8b4becbee0c0de7cd1a3d04af78ca87cahttps://github.com/tianma-if/edgeever/blob/f6ade70423ba366077653dbb8ac43a677933c776/apps/desktop/src/main/index.mjs#L1560-L1564https://github.com/tianma-if/edgeeverhttps://www.vulncheck.com/advisories/edgeever-desktop-1.6.26-through-1.112.0-navigation-allowlist-bypass-via-will-navigate#tianma-if #EdgeEver#CVE_2026_109559#bot", "url": "https://infosec.exchange/users/cve/statuses/117430003023693336"}, {"timestamp": "2026-10-12T21:17:12Z", "date_only": false, "value": "2026-10-12T21:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P9QX-79PG-CV5G", "record": "GHSA-P9QX-79PG-CV5G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T21:17:12.090Z", "date_only": false, "value": "2026-10-12T21:17:12.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109559", "record": "FKIE_CVE-2026-109559", "field": "published"}, {"timestamp": "2026-10-12T21:31:59Z", "date_only": false, "value": "2026-10-12T21:31:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P9QX-79PG-CV5G", "record": "GHSA-P9QX-79PG-CV5G", "field": "published"}, {"timestamp": "2026-10-12T21:31:59Z", "date_only": false, "value": "2026-10-12T21:31:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P9QX-79PG-CV5G", "record": "GHSA-P9QX-79PG-CV5G", "field": "modified"}, {"timestamp": "2026-10-13T15:48:42.127Z", "date_only": false, "value": "2026-10-13T15:48:42.127249Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109559", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T15:48:42.127Z", "date_only": false, "value": "2026-10-13T15:48:42.127249Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109559", "record": "FKIE_CVE-2026-109559", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:52:15.376Z", "date_only": false, "value": "2026-10-13T16:52:15.376Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109559", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:52:15.376Z", "date_only": false, "value": "2026-10-13T16:52:15.376Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109559", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:28.510Z", "date_only": false, "value": "2026-10-13T17:17:28.510", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109559", "record": "FKIE_CVE-2026-109559", "field": "lastModified"}]}