{"metadata": {"vulnerability": "cve-2026-110864", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-110864", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T22:18:33.239Z", "date_only": false, "value": "2026-10-14T22:18:33.239Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-110864", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T22:52:51.393Z", "date_only": false, "value": "2026-10-14T22:52:51.393Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-110864", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T22:52:51.393Z", "date_only": false, "value": "2026-10-14T22:52:51.393Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-110864", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T23:17:27Z", "date_only": false, "value": "2026-10-14T23:17:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W232-44Q8-H37X", "record": "GHSA-W232-44Q8-H37X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T23:17:27.970Z", "date_only": false, "value": "2026-10-14T23:17:27.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110864", "record": "FKIE_CVE-2026-110864", "field": "published"}, {"timestamp": "2026-10-14T23:50:04.494Z", "date_only": false, "value": "2026-10-14T23:50:04.494743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxuqfktayo2n", "record": "CVE-2026-110864", "field": "creation_timestamp", "uuid": "0d568e4d-d44b-404e-b89e-8c99181baa0c", "content": "CVE-2026-110864 - better-auth\nThe Better Auth software, versions from 1.5.0-beta.12 up to before 1.7.7, has a weakness in its OAuth Proxy feature that could let someone without credentials log in as another\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxuqfktayo2n"}, {"timestamp": "2026-10-15T00:09:01.576Z", "date_only": false, "value": "2026-10-15T00:09:01.576148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxurhhahdt22", "record": "CVE-2026-110864", "field": "creation_timestamp", "uuid": "1aebcfc4-dfea-4f76-b8ee-bb4d0474d065", "content": "\ud83d\udea8 CVE-2026-110864 \u2014 CVSS 9.1 CRITICAL\n\nBetter Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Pr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-110864\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxurhhahdt22"}, {"timestamp": "2026-10-15T00:31:19Z", "date_only": false, "value": "2026-10-15T00:31:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W232-44Q8-H37X", "record": "GHSA-W232-44Q8-H37X", "field": "published"}, {"timestamp": "2026-10-15T00:31:19Z", "date_only": false, "value": "2026-10-15T00:31:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W232-44Q8-H37X", "record": "GHSA-W232-44Q8-H37X", "field": "modified"}, {"timestamp": "2026-10-15T01:19:30.204Z", "date_only": false, "value": "2026-10-15T01:19:30.204911Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442292588961109", "record": "CVE-2026-110864", "field": "creation_timestamp", "uuid": "37a93178-8403-4aca-81b0-be7b3384b0ba", "content": "CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers can obtain encrypted state for a fake profile with a victim's verified email to take over the account via implicit linking.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110864https://github.com/better-auth/better-auth/security/advisories/GHSA-r4xp-prcw-77qfhttps://www.vulncheck.com/advisories/better-auth-1.5.0-beta.12-before-1.7.7-authentication-bypass-via-oauth-proxy#better-auth#CVE_2026_110864#bot", "url": "https://infosec.exchange/users/cve/statuses/117442292588961109"}, {"timestamp": "2026-10-15T15:35:53.604Z", "date_only": false, "value": "2026-10-15T15:35:53.604112Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-110864", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T15:35:53.604Z", "date_only": false, "value": "2026-10-15T15:35:53.604112Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110864", "record": "FKIE_CVE-2026-110864", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T15:36:16.330Z", "date_only": false, "value": "2026-10-15T15:36:16.330Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-110864", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:36:16.330Z", "date_only": false, "value": "2026-10-15T15:36:16.330Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-110864", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:25:45.343Z", "date_only": false, "value": "2026-10-16T18:25:45.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110864", "record": "FKIE_CVE-2026-110864", "field": "lastModified"}]}