{"metadata": {"vulnerability": "cve-2026-52886", "count": 14, "kinds": {"milestone": 3, "sighting": 5, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-08T21:44:27.365Z", "date_only": false, "value": "2026-06-08T21:44:27.365Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-15T02:28:34.291Z", "date_only": false, "value": "2026-07-15T02:28:34.291222Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqnoeb25ov2m", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "9f32425d-87b0-443f-a33c-d6d34444d404", "content": "Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now.\n\n#NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqnoeb25ov2m"}, {"timestamp": "2026-07-16T23:04:31.008Z", "date_only": false, "value": "2026-07-16T23:04:31.008870Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqsdv3qvdc2r", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "82142bb1-329f-492b-b5b9-886422eae2be", "content": "Notepad++\u3001v8.9.7\u30675\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-54758,CVE-2026-52886)\u904e\u53bb\u306e\u4e2d\u56fd\u7cfbAPT\u4e57\u3063\u53d6\u308a\u4e8b\u4ef6\u3092\u8e0f\u307e\u3048\u8981\u6ce8\u610f\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqsdv3qvdc2r"}, {"timestamp": "2026-07-17T16:15:05.429Z", "date_only": false, "value": "2026-07-17T16:15:05.429006Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "ceee62dd-89d8-4432-a90e-225a9f47b7f6", "url": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758"}, {"timestamp": "2026-07-18T01:00:52.249Z", "date_only": false, "value": "2026-07-18T01:00:52.249849Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "a6a594e6-cfdd-41ad-90df-bd8c7af69e74", "content": "DisponibilI Proof of Concept (PoC) per le vulnerabilit\u00e0 identificate dalle CVE-2026-57233, CVE-2026-52886 e CVE-2026-54758 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nel software \"Notepad++\", noto editor di testo avanzato per Windows.", "url": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758"}, {"timestamp": "2026-08-07T10:08:45.051Z", "date_only": false, "value": "2026-08-07T10:08:45.051187Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "30e3697c-f3c7-4435-8007-b3f9e1370bf7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-17T20:09:32.188Z", "date_only": false, "value": "2026-08-17T20:09:32.188Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-17T20:09:32.188Z", "date_only": false, "value": "2026-08-17T20:09:32.188Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-52886", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-17T20:16:44.077Z", "date_only": false, "value": "2026-08-17T20:16:44.077", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-52886", "record": "FKIE_CVE-2026-52886", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-18T15:20:17.703Z", "date_only": false, "value": "2026-08-18T15:20:17.703489Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-52886", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-18T15:20:17.703Z", "date_only": false, "value": "2026-08-18T15:20:17.703489Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-52886", "record": "FKIE_CVE-2026-52886", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-18T15:20:41.005Z", "date_only": false, "value": "2026-08-18T15:20:41.005Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-18T15:20:41.005Z", "date_only": false, "value": "2026-08-18T15:20:41.005Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-52886", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T21:11:25.743Z", "date_only": false, "value": "2026-09-09T21:11:25.743", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-52886", "record": "FKIE_CVE-2026-52886", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T12:44:31.558Z", "anchors": {"origin": {"timestamp": "2026-08-17T20:09:32.188Z", "date_only": false, "value": "2026-08-17T20:09:32.188Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-17T20:09:32.188Z", "date_only": false, "value": "2026-08-17T20:09:32.188Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-07T10:08:45.051Z", "date_only": false, "value": "2026-08-07T10:08:45.051187Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "30e3697c-f3c7-4435-8007-b3f9e1370bf7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -900047.137, "hours": -250.01309361111112, "days": -10.417212233796295, "min_seconds": -900047.137, "max_seconds": -900047.137, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-08-17T20:09:32.188Z", "date_only": false, "value": "2026-08-17T20:09:32.188Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-07T10:08:45.051Z", "date_only": false, "value": "2026-08-07T10:08:45.051187Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "30e3697c-f3c7-4435-8007-b3f9e1370bf7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 6194099.370864, "hours": 1720.5831585733333, "days": 71.69096494055556, "min_seconds": 6194099.370864, "max_seconds": 6194099.370864, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-17T20:09:32.188Z", "date_only": false, "value": "2026-08-17T20:09:32.188Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-52886", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T12:44:31.558Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 7094146.507864, "hours": 1970.5962521844444, "days": 82.10817717435185, "min_seconds": 7094146.507864, "max_seconds": 7094146.507864, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-07T10:08:45.051Z", "date_only": false, "value": "2026-08-07T10:08:45.051187Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE", "record": "CVE-2026-52886", "field": "creation_timestamp", "uuid": "30e3697c-f3c7-4435-8007-b3f9e1370bf7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T12:44:31.558Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}