{"metadata": {"vulnerability": "cve-2026-109567", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109567", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T19:27:53.730Z", "date_only": false, "value": "2026-10-12T19:27:53.730Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109567", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T20:55:20.456Z", "date_only": false, "value": "2026-10-12T20:55:20.456Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109567", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T20:55:20.456Z", "date_only": false, "value": "2026-10-12T20:55:20.456Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109567", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T21:17:13Z", "date_only": false, "value": "2026-10-12T21:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-892P-42H6-PGGX", "record": "GHSA-892P-42H6-PGGX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T21:17:13.347Z", "date_only": false, "value": "2026-10-12T21:17:13.347", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109567", "record": "FKIE_CVE-2026-109567", "field": "published"}, {"timestamp": "2026-10-12T21:32:00Z", "date_only": false, "value": "2026-10-12T21:32:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-892P-42H6-PGGX", "record": "GHSA-892P-42H6-PGGX", "field": "published"}, {"timestamp": "2026-10-12T21:32:00Z", "date_only": false, "value": "2026-10-12T21:32:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-892P-42H6-PGGX", "record": "GHSA-892P-42H6-PGGX", "field": "modified"}, {"timestamp": "2026-10-12T21:44:29.515Z", "date_only": false, "value": "2026-10-12T21:44:29.515605Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430122518867129", "record": "CVE-2026-109567", "field": "creation_timestamp", "uuid": "409ddccc-4ddc-4102-be29-a526abc025de", "content": "CVE-2026-109567 Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to assign themselves the admin role. Attackers holding roles such as the shipped operator role can submit the admin role ID for their own account, lifting tenant scoping, bypassing per-record authorization, and enabling impersonation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109567https://github.com/zofe/rapyd-admin/commit/acd6ee85f9e5ccec67199673b039c605d161406ahttps://github.com/zofe/rapyd-admin/releases/tag/v9.20.0https://github.com/zofe/rapyd-admin/blob/v9.19.0/app/Modules/Auth/Livewire/UsersEdit.php#L119-L121https://github.com/zofe/rapyd-adminhttps://www.vulncheck.com/advisories/rapyd-admin-from-9.0.0-before-9.20.0-privilege-escalation-via-usersedit-component#zofe #rapyd-admin#CVE_2026_109567#bot", "url": "https://infosec.exchange/users/cve/statuses/117430122518867129"}, {"timestamp": "2026-10-14T03:30:04.495Z", "date_only": false, "value": "2026-10-14T03:30:04.495546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsm7zpny22l", "record": "CVE-2026-109567", "field": "creation_timestamp", "uuid": "643a6a1b-8207-401b-b91a-57b41ca43d17", "content": "CVE-2026-109567 - rapyd-admin\nThe Rapyd Admin tool (versions 9.0.0 through 9.19.x) has a flaw in its user\u2011editing feature that lets someone with basic edit permissions assign the admin role to their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rapydadmin #zofe #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsm7zpny22l"}, {"timestamp": "2026-10-15T13:55:13.638Z", "date_only": false, "value": "2026-10-15T13:55:13.638428Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109567", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T13:55:13.638Z", "date_only": false, "value": "2026-10-15T13:55:13.638428Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109567", "record": "FKIE_CVE-2026-109567", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T13:55:31.753Z", "date_only": false, "value": "2026-10-15T13:55:31.753Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109567", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T13:55:31.753Z", "date_only": false, "value": "2026-10-15T13:55:31.753Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109567", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T14:17:18.503Z", "date_only": false, "value": "2026-10-15T14:17:18.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109567", "record": "FKIE_CVE-2026-109567", "field": "lastModified"}]}