{"metadata": {"vulnerability": "cve-2026-78239", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-25T15:37:54.548Z", "date_only": false, "value": "2026-08-25T15:37:54.548Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-78239", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-27T16:15:12.587Z", "date_only": false, "value": "2026-08-27T16:15:12.587479Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "75cf9379-39f7-49f7-b050-3004d1a14871", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01"}, {"timestamp": "2026-08-27T21:48:30.879Z", "date_only": false, "value": "2026-08-27T21:48:30.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-78239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-27T21:48:30.879Z", "date_only": false, "value": "2026-08-27T21:48:30.879Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "cve-2026-78239", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-28T00:18:16Z", "date_only": false, "value": "2026-08-28T00:18:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-38F6-3GV7-32XR", "record": "GHSA-38F6-3GV7-32XR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-28T00:18:16.197Z", "date_only": false, "value": "2026-08-28T00:18:16.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78239", "record": "FKIE_CVE-2026-78239", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-28T00:32:04Z", "date_only": false, "value": "2026-08-28T00:32:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-38F6-3GV7-32XR", "record": "GHSA-38F6-3GV7-32XR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-28T00:32:04Z", "date_only": false, "value": "2026-08-28T00:32:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-38F6-3GV7-32XR", "record": "GHSA-38F6-3GV7-32XR", "field": "modified"}, {"timestamp": "2026-08-28T00:58:19.904Z", "date_only": false, "value": "2026-08-28T00:58:19.904049Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fkri2bux5ijjh", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "c666cfcf-7b79-4d91-ad7a-d8ddabd7f3ca", "content": "CVE-2026-78239 - Xiiaozet LK100W Missing Authentication for Critical Function\nCVE ID : CVE-2026-78239\n \n Published : Aug. 28, 2026, 12:18 a.m. | 17\u00a0minutes ago\n \n Description : Xiiaozet LK100W exposes a critical management function that can be \ninvoked without authentication, ...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/fkri2bux5ijjh"}, {"timestamp": "2026-08-28T02:00:54.467Z", "date_only": false, "value": "2026-08-28T02:00:54.467089Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdc6u7d2m", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "5213b2d1-21ad-427f-8b5f-0ac848436ec8", "content": "\ud83d\udd34 CVE-2026-78239 - Critical (9.8)\n\nXiiaozet LK100W exposes a critical management function that can be \ninvoked without authenticatio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78239/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdc6u7d2m"}, {"timestamp": "2026-08-28T02:05:08.112Z", "date_only": false, "value": "2026-08-28T02:05:08.112153Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4bku5rio2u", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "13c57b2b-3cef-4ecc-810e-36b6a53f78e6", "content": "CISA warns that Xiiaozet LK100W vulnerabilities, including CVE-2026-78239, allow attackers to take full control of affected devices. Update now.\n\n#Xiiaozet #LK100W #CISA #Vulnerability #Cybersecurity #CVE202678239", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4bku5rio2u"}, {"timestamp": "2026-08-28T02:08:46.026Z", "date_only": false, "value": "2026-08-28T02:08:46.026315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4brepx542m", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "712a0c60-aa24-4eeb-a758-7feb0f7bbe10", "content": "\ud83d\udea8 CVE-2026-78239 \u2014 CVSS 9.3 CRITICAL\n\nXiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78239\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4brepx542m"}, {"timestamp": "2026-08-28T13:48:39.336Z", "date_only": false, "value": "2026-08-28T13:48:39.336614Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-78239", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-28T13:48:39.336Z", "date_only": false, "value": "2026-08-28T13:48:39.336614Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78239", "record": "FKIE_CVE-2026-78239", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-28T14:13:51.112Z", "date_only": false, "value": "2026-08-28T14:13:51.112Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-78239", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-28T14:13:51.112Z", "date_only": false, "value": "2026-08-28T14:13:51.112Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-78239", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-29T13:15:39.928Z", "date_only": false, "value": "2026-08-29T13:15:39.928592Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xirxzad2v", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "faddd1ac-44f8-43b4-8fb1-da4f868560d5", "content": "~Cisa~\nThree flaws enable unauthenticated access, authentication bypass, and command execution; update to 2.1.240.\n-\nIOCs: CVE-2026-78239, CVE-2026-76943, CVE-2026-78037\n-\n#CVE #ICS #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mu7xirxzad2v"}, {"timestamp": "2026-08-29T13:50:04.670Z", "date_only": false, "value": "2026-08-29T13:50:04.670015Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7zgddh2m23", "record": "CVE-2026-78239", "field": "creation_timestamp", "uuid": "0c580b3d-7c83-4d3e-b646-9af5a6512539", "content": "CVE-2026-78239\nThe Xiiaozet LK100W device includes a management feature that can be triggered without any login, letting a remote user enable control functions that should be locked down. This could allow an attacker to gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7zgddh2m23"}, {"timestamp": "2026-08-31T19:18:40.503Z", "date_only": false, "value": "2026-08-31T19:18:40.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-78239", "record": "FKIE_CVE-2026-78239", "field": "lastModified"}], "metrics": {"as_of": "2026-11-02T19:51:39.904Z", "anchors": {"origin": {"timestamp": "2026-08-27T21:48:30.879Z", "date_only": false, "value": "2026-08-27T21:48:30.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-78239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-27T21:48:30.879Z", "date_only": false, "value": "2026-08-27T21:48:30.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-78239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5781789.025639, "hours": 1606.0525071219445, "days": 66.91885446341436, "min_seconds": 5781789.025639, "max_seconds": 5781789.025639, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-27T21:48:30.879Z", "date_only": false, "value": "2026-08-27T21:48:30.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-78239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T19:51:39.904Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}