{"metadata": {"vulnerability": "cve-2026-16753", "count": 12, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-07-23T13:00:05.196Z", "date_only": false, "value": "2026-07-23T13:00:05.196Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-16753", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T19:21:10.107Z", "date_only": false, "value": "2026-10-13T19:21:10.107Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-16753", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:21:10.107Z", "date_only": false, "value": "2026-10-13T19:21:10.107Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "cve-2026-16753", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:08:25.573Z", "date_only": false, "value": "2026-10-13T20:08:25.573Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-16753", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:08:25.573Z", "date_only": false, "value": "2026-10-13T20:08:25.573Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2026-16753", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:17:28Z", "date_only": false, "value": "2026-10-13T20:17:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QHM6-5M7C-9H8G", "record": "GHSA-QHM6-5M7C-9H8G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T20:17:28.630Z", "date_only": false, "value": "2026-10-13T20:17:28.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16753", "record": "FKIE_CVE-2026-16753", "field": "published"}, {"timestamp": "2026-10-13T21:17:37.847Z", "date_only": false, "value": "2026-10-13T21:17:37.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16753", "record": "FKIE_CVE-2026-16753", "field": "lastModified"}, {"timestamp": "2026-10-13T21:37:23Z", "date_only": false, "value": "2026-10-13T21:37:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QHM6-5M7C-9H8G", "record": "GHSA-QHM6-5M7C-9H8G", "field": "published"}, {"timestamp": "2026-10-13T21:37:23Z", "date_only": false, "value": "2026-10-13T21:37:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QHM6-5M7C-9H8G", "record": "GHSA-QHM6-5M7C-9H8G", "field": "modified"}, {"timestamp": "2026-10-14T08:18:47.819Z", "date_only": false, "value": "2026-10-14T08:18:47.819544Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxt4echvrc2u", "record": "CVE-2026-16753", "field": "creation_timestamp", "uuid": "bac5c713-0a38-498c-92bb-e8db124d21cf", "content": "Three platforms, one flaw: authenticated non-admin users escalating to full admin. Ignition CVE-2026-92817 to 8.1.55/8.3.9, Lowcoder CVE-2026-16753, MarkLogic to 11.3.7/12.1.0. Patch all three. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxt4echvrc2u"}, {"timestamp": "2026-10-14T12:46:59.793Z", "date_only": false, "value": "2026-10-14T12:46:59.793483Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117439333611875256", "record": "CVE-2026-16753", "field": "creation_timestamp", "uuid": "268cc2c5-9b8f-4323-b3c4-6cc3904189c6", "content": "CVE-2026-16753 CVE-2026-16753 Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.\nhttps://www.cve.org/CVERecord?id=CVE-2026-16753https://github.com/lowcoder-org/lowcoder#Lowcoder#CVE_2026_16753#bot", "url": "https://infosec.exchange/users/cve/statuses/117439333611875256"}]}