{"metadata": {"vulnerability": "cve-2026-46442", "count": 35, "kinds": {"milestone": 5, "sighting": 11, "kev": 5, "other": 14}}, "data": [{"timestamp": "2026-05-13T22:18:22.831Z", "date_only": false, "value": "2026-05-13T22:18:22.831Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-46442", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-14T14:13:39Z", "date_only": false, "value": "2026-05-14T14:13:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9rvc-vf7m-pgm2", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "fcba2e12-316f-4a43-b5ec-a0fd4e2125c8", "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9rvc-vf7m-pgm2"}, {"timestamp": "2026-05-14T14:57:53Z", "date_only": false, "value": "2026-05-14T14:57:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9RVC-VF7M-PGM2", "record": "GHSA-9RVC-VF7M-PGM2", "field": "published"}, {"timestamp": "2026-05-14T22:00:00Z", "date_only": false, "value": "2026-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-14T22:00:00Z", "date_only": false, "value": "2026-05-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-14T22:00:00Z", "date_only": false, "value": "2026-05-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-18T22:00:00Z", "date_only": false, "value": "2026-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-08T15:30:48.999Z", "date_only": false, "value": "2026-06-08T15:30:48.999Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-46442", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-08T15:30:48.999Z", "date_only": false, "value": "2026-06-08T15:30:48.999Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-46442", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-08T16:16:41Z", "date_only": false, "value": "2026-06-08T16:16:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9RVC-VF7M-PGM2", "record": "GHSA-9RVC-VF7M-PGM2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-08T16:16:41.347Z", "date_only": false, "value": "2026-06-08T16:16:41.347", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-46442", "record": "FKIE_CVE-2026-46442", "field": "published"}, {"timestamp": "2026-06-08T16:47:48.390Z", "date_only": false, "value": "2026-06-08T16:47:48.390211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns54nhn6s2o", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "13011486-44ae-4098-a34c-f38106be953f", "content": "CVE-2026-46442 - Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape\nCVE ID : CVE-2026-46442\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Flowise is a drag & drop user interface to build a customized l...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns54nhn6s2o"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-09T08:41:04.042Z", "date_only": false, "value": "2026-06-09T08:41:04.042+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1554", "record": "WID-SEC-W-2026-1554", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-09T13:10:17Z", "date_only": false, "value": "2026-06-09T13:10:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9RVC-VF7M-PGM2", "record": "GHSA-9RVC-VF7M-PGM2", "field": "modified"}, {"timestamp": "2026-06-09T14:27:38.343Z", "date_only": false, "value": "2026-06-09T14:27:38.343394Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-46442", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-09T14:27:38.343Z", "date_only": false, "value": "2026-06-09T14:27:38.343394Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-46442", "record": "FKIE_CVE-2026-46442", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-09T14:35:49.756Z", "date_only": false, "value": "2026-06-09T14:35:49.756Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-46442", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-09T14:35:49.756Z", "date_only": false, "value": "2026-06-09T14:35:49.756Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-46442", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-22T00:39:12.174Z", "date_only": false, "value": "2026-06-22T00:39:12.174512Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnjfbops2n", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "5f5d71de-6dfa-4301-a725-55515abc73bf", "content": "\ud83d\udea8  ALERT: CVE-2026-46442\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nFlowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary Java", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnjfbops2n"}, {"timestamp": "2026-06-30T16:19:02.321Z", "date_only": false, "value": "2026-06-30T16:19:02.321176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mpjfrha3zr2c", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "497e58d2-6fbc-44a4-ac2e-80c4eddb61f8", "content": "A critical-severity fix just shipped for Flowiseai Flowise. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-46442", "url": "https://bsky.app/profile/vulny-app.bsky.social/post/3mpjfrha3zr2c"}, {"timestamp": "2026-07-17T07:51:05Z", "date_only": false, "value": "2026-07-17T07:51:05+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-46442", "field": "timestamps.asserted_at", "uuid": "91a28016-23d4-45f5-b951-0a883f6f08ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T07:51:05Z", "date_only": false, "value": "2026-07-17T07:51:05+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-46442", "field": "timestamps.first_seen_at", "uuid": "91a28016-23d4-45f5-b951-0a883f6f08ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T07:51:05Z", "date_only": false, "value": "2026-07-17T07:51:05+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-46442", "field": "status.status_updated_at", "uuid": "91a28016-23d4-45f5-b951-0a883f6f08ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T07:51:05.707Z", "date_only": false, "value": "2026-07-17T07:51:05.707Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-46442", "field": "evidence.0.details.added_date", "uuid": "91a28016-23d4-45f5-b951-0a883f6f08ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T08:00:01Z", "date_only": false, "value": "2026-07-17T08:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-46442", "field": "timestamps.recorded_at", "uuid": "91a28016-23d4-45f5-b951-0a883f6f08ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T08:00:38.909Z", "date_only": false, "value": "2026-07-17T08:00:38.909235Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91a28016-23d4-45f5-b951-0a883f6f08ac", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "f8c4bb71-0989-4e45-b7b8-58ff95546455", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91a28016-23d4-45f5-b951-0a883f6f08ac"}, {"timestamp": "2026-07-17T22:00:05.191Z", "date_only": false, "value": "2026-07-17T22:00:05.191203Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93892", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "d8821b57-3b2d-4f23-b6d8-bb24faabaed3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chinaxploiter\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93892"}, {"timestamp": "2026-07-17T23:00:03.017Z", "date_only": false, "value": "2026-07-17T23:00:03.017937Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93900", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "9a1b6198-d420-4fa5-a0d9-fb7b37f51e4a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93900"}, {"timestamp": "2026-07-18T00:00:08.845Z", "date_only": false, "value": "2026-07-18T00:00:08.845729Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93900", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "5e2ac13d-888b-491f-b13b-282f1018295a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46442-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 20:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcademic proof-of-concept demonstrating CVE-2026-46442 for authorized security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93900"}, {"timestamp": "2026-07-20T18:00:06.094Z", "date_only": false, "value": "2026-07-20T18:00:06.094177Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "9654c938-9469-43c3-b06e-d304462df072"}, {"timestamp": "2026-07-21T06:00:06.661Z", "date_only": false, "value": "2026-07-21T06:00:06.661145Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46442.yaml", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "79dfbd62-c22e-4657-94fe-dfdf15d86837", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46442.yaml"}, {"timestamp": "2026-07-22T00:00:07.304Z", "date_only": false, "value": "2026-07-22T00:00:07.304209Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "record": "CVE-2026-46442", "field": "creation_timestamp", "uuid": "a4a60b38-f8e3-45e6-8cf7-c96d9ee10b30"}, {"timestamp": "2026-07-23T07:10:00.113Z", "date_only": false, "value": "2026-07-23T07:10:00.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-46442", "record": "FKIE_CVE-2026-46442", "field": "lastModified"}]}