{"metadata": {"vulnerability": "CVE-2026-112299", "count": 17, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-112299", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-112299", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-19T02:00:00Z", "date_only": false, "value": "2026-10-19T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-112299", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-19T13:58:55.048Z", "date_only": false, "value": "2026-10-19T13:58:55.048Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-112299", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T16:04:09Z", "date_only": false, "value": "2026-10-19T16:04:09.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-112299", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2026-10-19T20:15:27.596Z", "date_only": false, "value": "2026-10-19T20:15:27.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-112299", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-19T20:15:27.596Z", "date_only": false, "value": "2026-10-19T20:15:27.596Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-112299", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T20:32:25.814Z", "date_only": false, "value": "2026-10-19T20:32:25.814782Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117469475319790723", "record": "CVE-2026-112299", "field": "creation_timestamp", "uuid": "8373eb52-8526-41f0-b626-a11d4c16318e", "content": "CVE-2026-112299 smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side request forgery. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. This patch is called cb402e7f4e70b617b59d8c55dbe926b951ceb4a8. Applying a patch is advised to resolve this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.\nhttps://www.cve.org/CVERecord?id=CVE-2026-112299https://vuldb.com/vuln/422345https://vuldb.com/vuln/422345/ctihttps://vuldb.com/cve/CVE-2026-112299https://vuldb.com/submit/986838https://github.com/smrealms/smr/pull/2579https://github.com/smrealms/smr/commit/cb402e7f4e70b617b59d8c55dbe926b951ceb4a8https://github.com/smrealms/smr/#smrealms #smr#CVE_2026_112299#bot", "url": "https://infosec.exchange/users/cve/statuses/117469475319790723"}, {"timestamp": "2026-10-19T21:17:06Z", "date_only": false, "value": "2026-10-19T21:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RPW4-H7X3-J495", "record": "GHSA-RPW4-H7X3-J495", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-19T21:17:06.500Z", "date_only": false, "value": "2026-10-19T21:17:06.500", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112299", "record": "FKIE_CVE-2026-112299", "field": "published"}, {"timestamp": "2026-10-19T21:36:30Z", "date_only": false, "value": "2026-10-19T21:36:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RPW4-H7X3-J495", "record": "GHSA-RPW4-H7X3-J495", "field": "published"}, {"timestamp": "2026-10-19T21:36:30Z", "date_only": false, "value": "2026-10-19T21:36:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RPW4-H7X3-J495", "record": "GHSA-RPW4-H7X3-J495", "field": "modified"}, {"timestamp": "2026-10-20T15:03:45.971Z", "date_only": false, "value": "2026-10-20T15:03:45.971086Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112299", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T15:03:45.971Z", "date_only": false, "value": "2026-10-20T15:03:45.971086Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112299", "record": "FKIE_CVE-2026-112299", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T15:04:50.594Z", "date_only": false, "value": "2026-10-20T15:04:50.594Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-112299", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T15:04:50.594Z", "date_only": false, "value": "2026-10-20T15:04:50.594Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-112299", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T16:17:02.500Z", "date_only": false, "value": "2026-10-20T16:17:02.500", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-112299", "record": "FKIE_CVE-2026-112299", "field": "lastModified"}]}