{"metadata": {"vulnerability": "CVE-2026-11960", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-11T07:47:56.552Z", "date_only": false, "value": "2026-06-11T07:47:56.552Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-11960", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T08:10:00Z", "date_only": false, "value": "2026-10-20T08:10:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "CVE-2026-11960", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-20T08:14:27.662Z", "date_only": false, "value": "2026-10-20T08:14:27.662Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-11960", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T08:14:27.662Z", "date_only": false, "value": "2026-10-20T08:14:27.662Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / INCIBE", "record": "CVE-2026-11960", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T08:38:38.778Z", "date_only": false, "value": "2026-10-20T08:38:38.778309Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117472330920222635", "record": "CVE-2026-11960", "field": "creation_timestamp", "uuid": "e67c8862-348f-438d-8498-06a38a5b77c9", "content": "CVE-2026-11960 Multiple vulnerabilities in FacturaScripts Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an invalid one. An unauthenticated attacker could systematically identify valid usernames by examining variations in the application\u2019s responses, such as changes in response time, discrepancies between error messages or differences in HTTP status codes. A successful exploit allows the attacker to compile a list of valid user accounts. This list could be used to carry out targeted brute-force attacks, password spraying, credential stuffing or social engineering campaigns against the confirmed accounts.\nhttps://www.cve.org/CVERecord?id=CVE-2026-11960https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-facturascripts#FacturaScripts#CVE_2026_11960#bot", "url": "https://infosec.exchange/users/cve/statuses/117472330920222635"}, {"timestamp": "2026-10-20T09:17:09Z", "date_only": false, "value": "2026-10-20T09:17:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JFPR-PFQX-2Q8X", "record": "GHSA-JFPR-PFQX-2Q8X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T09:17:09.830Z", "date_only": false, "value": "2026-10-20T09:17:09.830", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11960", "record": "FKIE_CVE-2026-11960", "field": "published"}, {"timestamp": "2026-10-20T09:31:05Z", "date_only": false, "value": "2026-10-20T09:31:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JFPR-PFQX-2Q8X", "record": "GHSA-JFPR-PFQX-2Q8X", "field": "published"}, {"timestamp": "2026-10-20T09:31:05Z", "date_only": false, "value": "2026-10-20T09:31:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JFPR-PFQX-2Q8X", "record": "GHSA-JFPR-PFQX-2Q8X", "field": "modified"}, {"timestamp": "2026-10-20T15:54:27.910Z", "date_only": false, "value": "2026-10-20T15:54:27.910773Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-11960", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T15:54:27.910Z", "date_only": false, "value": "2026-10-20T15:54:27.910773Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11960", "record": "FKIE_CVE-2026-11960", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T15:55:29.977Z", "date_only": false, "value": "2026-10-20T15:55:29.977Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-11960", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T15:55:29.977Z", "date_only": false, "value": "2026-10-20T15:55:29.977Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-11960", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T19:28:52.970Z", "date_only": false, "value": "2026-10-20T19:28:52.970", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11960", "record": "FKIE_CVE-2026-11960", "field": "lastModified"}]}