{"metadata": {"vulnerability": "CVE-2026-10789", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-03T19:23:28.312Z", "date_only": false, "value": "2026-06-03T19:23:28.312Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-10789", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10789", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10789", "record": "FKIE_CVE-2026-10789", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-22T17:15:25.546Z", "date_only": false, "value": "2026-06-22T17:15:25.546Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-10789", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-22T17:15:25.546Z", "date_only": false, "value": "2026-06-22T17:15:25.546Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / autodesk", "record": "CVE-2026-10789", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-22T18:00:15.103Z", "date_only": false, "value": "2026-06-22T18:00:15.103758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movhp2dlvr2j", "record": "cve-2026-10789", "field": "creation_timestamp", "uuid": "dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2", "content": "Autodesk Fusion MCP extension (v2703.1.11) hit by CRITICAL code injection (CVE-2026-10789). Visiting a malicious site can allow code execution. Limit risky browsing, monitor for updates. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #A...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3movhp2dlvr2j"}, {"timestamp": "2026-06-22T18:00:22.563Z", "date_only": false, "value": "2026-06-22T18:00:22.563103Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116795061835699125", "record": "cve-2026-10789", "field": "creation_timestamp", "uuid": "6995a3ee-1480-47c3-8996-cc83c5157c86", "content": "CVE-2026-10789: CRITICAL code injection in Autodesk Fusion MCP ext (v2703.1.11). Visiting a crafted page can lead to arbitrary code execution with user rights. Update guidance pending. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #Vulnerability #Autodesk #CVE2026_10789", "url": "https://infosec.exchange/users/offseq/statuses/116795061835699125"}, {"timestamp": "2026-06-22T18:16:30Z", "date_only": false, "value": "2026-06-22T18:16:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FP83-VJXR-X824", "record": "GHSA-FP83-VJXR-X824", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-22T18:16:30.620Z", "date_only": false, "value": "2026-06-22T18:16:30.620", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10789", "record": "FKIE_CVE-2026-10789", "field": "published"}, {"timestamp": "2026-06-22T18:34:16Z", "date_only": false, "value": "2026-06-22T18:34:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FP83-VJXR-X824", "record": "GHSA-FP83-VJXR-X824", "field": "published"}, {"timestamp": "2026-06-22T18:34:16Z", "date_only": false, "value": "2026-06-22T18:34:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FP83-VJXR-X824", "record": "GHSA-FP83-VJXR-X824", "field": "modified"}, {"timestamp": "2026-06-22T19:41:51.963Z", "date_only": false, "value": "2026-06-22T19:41:51.963015Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movner5taf2q", "record": "CVE-2026-10789", "field": "creation_timestamp", "uuid": "2ca64326-7481-4c44-ae67-055e8b55095e", "content": "CVE-2026-10789 - MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop\nCVE ID : CVE-2026-10789\n \n Published : June 22, 2026, 5:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop r...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3movner5taf2q"}, {"timestamp": "2026-06-23T03:56:02.324Z", "date_only": false, "value": "2026-06-23T03:56:02.324Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-10789", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-23T03:56:02.324Z", "date_only": false, "value": "2026-06-23T03:56:02.324Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-10789", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-24T15:30:29.023Z", "date_only": false, "value": "2026-06-24T15:30:29.023", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10789", "record": "FKIE_CVE-2026-10789", "field": "lastModified"}, {"timestamp": "2026-06-26T19:37:07.111Z", "date_only": false, "value": "2026-06-26T19:37:07.111372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mp7oxxrmr32k", "record": "CVE-2026-10789", "field": "creation_timestamp", "uuid": "fb16cd1a-1454-4e0f-b54f-c2d19ead8b5b", "content": "\ud83d\udccc CVE-2026-10789 - A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability ... https://www.cyberhub.blog/cves/CVE-2026-10789", "url": "https://bsky.app/profile/cyberhub.blog/post/3mp7oxxrmr32k"}, {"timestamp": "2026-07-18T00:33:57.338Z", "date_only": false, "value": "2026-07-18T00:33:57.338226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mquzdzsiq22s", "record": "CVE-2026-10789", "field": "creation_timestamp", "uuid": "1fc3bb92-f0a4-4ffa-9456-bcb5b6f5dc39", "content": "\u300cAutodesk Fusion\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u610f\u3042\u308b\u30da\u30fc\u30b8\u95b2\u89a7\u3067RCE\u306e\u304a\u305d\u308c\n\nAutodesk\u306e3D\u8a2d\u8a08\u30c4\u30fc\u30eb\u300cAutodesk Fusion Desktop\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670822\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001MCP\u62e1\u5f35\u6a5f\u80fd\u306b\u304a\u3044\u3066\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u8106\u5f31\u6027\u300cCVE-2026-10789\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3002MCP\u62e1\u5f35\u6a5f\u80fd\u3092\u6709\u52b9\u5316\u3057\u3001\u540c\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3092\u8d77\u52d5\u3057\u3066\u3044\u308b\u74b0\u5883\u306b\u304a\u3044\u3066\u3001\u7d30\u5de5\u3055\u308c\u305f\u30a6\u30a7\u30d6\u30da\u30fc\u30b8\u306b\u30e6\u30fc\u30b6\u30fc\u304c\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mquzdzsiq22s"}]}
