{"metadata": {"vulnerability": "cve-2026-4813", "count": 20, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-03-25T13:08:57.318Z", "date_only": false, "value": "2026-03-25T13:08:57.318Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-4813", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-01T10:50:00Z", "date_only": false, "value": "2026-09-01T10:50:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "cve-2026-4813", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T10:54:03.566Z", "date_only": false, "value": "2026-09-01T10:54:03.566Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-4813", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T10:54:03.566Z", "date_only": false, "value": "2026-09-01T10:54:03.566Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / INCIBE", "record": "cve-2026-4813", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-01T11:16:44Z", "date_only": false, "value": "2026-09-01T11:16:44Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WVVP-V69C-RJ86", "record": "GHSA-WVVP-V69C-RJ86", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-01T11:16:44.443Z", "date_only": false, "value": "2026-09-01T11:16:44.443", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4813", "record": "FKIE_CVE-2026-4813", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T11:37:21.132Z", "date_only": false, "value": "2026-09-01T11:37:21.132112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gtv6hwbaehxjs", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "1b4bf746-12a6-49ae-9e47-4edebe370522", "content": "CVE-2026-4813 - Code injection in the Lutece Core\nCVE ID : CVE-2026-4813\n \n Published : Sept. 1, 2026, 10:54 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/gtv6hwbaehxjs"}, {"timestamp": "2026-09-01T12:07:10.341Z", "date_only": false, "value": "2026-09-01T12:07:10.341370Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhf33hjcg2p", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "98448a98-f6ea-4064-b56e-a83319828ecc", "content": "\ud83d\udea8 CVE-2026-4813 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authentic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-4813\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3muhf33hjcg2p"}, {"timestamp": "2026-09-01T12:16:59.369Z", "date_only": false, "value": "2026-09-01T12:16:59.369747Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-4813", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-01T12:16:59.369Z", "date_only": false, "value": "2026-09-01T12:16:59.369747Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4813", "record": "FKIE_CVE-2026-4813", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-01T12:17:12.913Z", "date_only": false, "value": "2026-09-01T12:17:12.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-4813", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-01T12:17:12.913Z", "date_only": false, "value": "2026-09-01T12:17:12.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-4813", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-01T12:31:48Z", "date_only": false, "value": "2026-09-01T12:31:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WVVP-V69C-RJ86", "record": "GHSA-WVVP-V69C-RJ86", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-01T12:31:48Z", "date_only": false, "value": "2026-09-01T12:31:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WVVP-V69C-RJ86", "record": "GHSA-WVVP-V69C-RJ86", "field": "modified"}, {"timestamp": "2026-09-01T12:40:04.131Z", "date_only": false, "value": "2026-09-01T12:40:04.131317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhgvvjok42l", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "a06d89cc-8089-40c6-9088-ede2f4e40643", "content": "CVE-2026-4813 - lutece core\nThe export tool in Lutece Core allows administrators to upload special transformation files. Because the system does not enforce a safe processing mode, a crafted file can cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lutececore #lutece #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3muhgvvjok42l"}, {"timestamp": "2026-09-01T20:50:58.753Z", "date_only": false, "value": "2026-09-01T20:50:58.753", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4813", "record": "FKIE_CVE-2026-4813", "field": "lastModified"}, {"timestamp": "2026-09-03T19:00:05.308Z", "date_only": false, "value": "2026-09-03T19:00:05.308833Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100973", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "b41e3b6c-9c1e-4c3d-b2f1-7f8ca32264bc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 17:35:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-4813\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100973", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T22:00:06.719Z", "date_only": false, "value": "2026-09-03T22:00:06.719347Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xBvdd7uz0eWJ5QO9fuDu907OI0A8Y3biRuUVstlqdx1J_ao", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "48b50274-90e2-476f-96cd-173eb4bb69c1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-04T05:00:05.027Z", "date_only": false, "value": "2026-09-04T05:00:05.027907Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "e7dcc695-a04a-4fbc-b57f-f92b321958ac"}, {"timestamp": "2026-09-05T01:00:38.318Z", "date_only": false, "value": "2026-09-05T01:00:38.318686Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "f1a2ce3a-17e0-42c2-aa44-2f952c2dadb5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-30T00:43:50.848Z", "anchors": {"origin": {"timestamp": "2026-09-01T10:50:00Z", "date_only": false, "value": "2026-09-01T10:50:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "cve-2026-4813", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-01T10:50:00Z", "date_only": false, "value": "2026-09-01T10:50:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "cve-2026-4813", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-03T19:00:05.308Z", "date_only": false, "value": "2026-09-03T19:00:05.308833Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100973", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "b41e3b6c-9c1e-4c3d-b2f1-7f8ca32264bc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 17:35:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-4813\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100973", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 202205.308, "hours": 56.16814111111111, "days": 2.340339212962963, "min_seconds": 202205.308, "max_seconds": 202205.308, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-01T10:50:00Z", "date_only": false, "value": "2026-09-01T10:50:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "cve-2026-4813", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-03T19:00:05.308Z", "date_only": false, "value": "2026-09-03T19:00:05.308833Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100973", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "b41e3b6c-9c1e-4c3d-b2f1-7f8ca32264bc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 17:35:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-4813\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100973", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5061230.848531, "hours": 1405.8974579252779, "days": 58.579060746886576, "min_seconds": 5061230.848531, "max_seconds": 5061230.848531, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-01T10:50:00Z", "date_only": false, "value": "2026-09-01T10:50:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "cve-2026-4813", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T00:43:50.848Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 4859025.540531, "hours": 1349.7293168141666, "days": 56.23872153392361, "min_seconds": 4859025.540531, "max_seconds": 4859025.540531, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-03T19:00:05.308Z", "date_only": false, "value": "2026-09-03T19:00:05.308833Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100973", "record": "CVE-2026-4813", "field": "creation_timestamp", "uuid": "b41e3b6c-9c1e-4c3d-b2f1-7f8ca32264bc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-4813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 17:35:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-4813\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100973", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-30T00:43:50.848Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}