{"metadata": {"vulnerability": "CVE-2026-111581", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-14T13:15:47Z", "date_only": false, "value": "2026-10-14T13:15:47.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-111581", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-16T12:59:36.285Z", "date_only": false, "value": "2026-10-16T12:59:36.285Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111581", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T13:00:00Z", "date_only": false, "value": "2026-10-16T13:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-111581", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T13:00:00Z", "date_only": false, "value": "2026-10-16T13:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-111581", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-16T15:42:04.580Z", "date_only": false, "value": "2026-10-16T15:42:04.580Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111581", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T15:42:04.580Z", "date_only": false, "value": "2026-10-16T15:42:04.580Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-111581", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:47:39.821Z", "date_only": false, "value": "2026-10-16T15:47:39.821230Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451368645663773", "record": "CVE-2026-111581", "field": "creation_timestamp", "uuid": "a223f14d-cd4d-40f8-a022-b94d84942544", "content": "CVE-2026-111581 Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label starting with '-' to be interpreted as a command-line flag by the spawned tool, potentially bypassing safety checks or causing unintended operations. This is reachable by unprivileged local users through the udisks2 Filesystem.SetLabel() D-Bus method without administrator authentication.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111581https://access.redhat.com/security/cve/CVE-2026-111581https://bugzilla.redhat.com/show_bug.cgi?id=2554104#RedHat #RedHatEnterpriseLinux10 #RedHatEnterpriseLinux7 #RedHatEnterpriseLinux8 #RedHatEnterpriseLinux9#CVE_2026_111581#bot", "url": "https://infosec.exchange/users/cve/statuses/117451368645663773"}, {"timestamp": "2026-10-16T16:17:04Z", "date_only": false, "value": "2026-10-16T16:17:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FRQ2-Q7F6-4X3M", "record": "GHSA-FRQ2-Q7F6-4X3M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T16:17:04.680Z", "date_only": false, "value": "2026-10-16T16:17:04.680", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111581", "record": "FKIE_CVE-2026-111581", "field": "published"}, {"timestamp": "2026-10-16T16:32:08.637Z", "date_only": false, "value": "2026-10-16T16:32:08.637542Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111581", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:32:08.637Z", "date_only": false, "value": "2026-10-16T16:32:08.637542Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111581", "record": "FKIE_CVE-2026-111581", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T17:06:09.524Z", "date_only": false, "value": "2026-10-16T17:06:09.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111581", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:06:09.524Z", "date_only": false, "value": "2026-10-16T17:06:09.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111581", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:34:39Z", "date_only": false, "value": "2026-10-16T18:34:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FRQ2-Q7F6-4X3M", "record": "GHSA-FRQ2-Q7F6-4X3M", "field": "published"}, {"timestamp": "2026-10-16T18:34:39Z", "date_only": false, "value": "2026-10-16T18:34:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FRQ2-Q7F6-4X3M", "record": "GHSA-FRQ2-Q7F6-4X3M", "field": "modified"}, {"timestamp": "2026-10-16T19:23:18.623Z", "date_only": false, "value": "2026-10-16T19:23:18.623", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111581", "record": "FKIE_CVE-2026-111581", "field": "lastModified"}, {"timestamp": "2026-10-17T12:19:07.321Z", "date_only": false, "value": "2026-10-17T12:19:07.321207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117456210946902479", "record": "CVE-2026-111581", "field": "creation_timestamp", "uuid": "219409a3-eab7-450a-8e62-3da851adf638", "content": "\u26a0\ufe0f There is a new vulnerability with elevated criticality in Red Hat Enterprise Linux (CVE-2026-111581) https://vuldb.com/vuln/421321", "url": "https://infosec.exchange/users/vuldb/statuses/117456210946902479"}]}
