{"metadata": {"vulnerability": "CVE-2026-13117", "count": 41, "kinds": {"milestone": 11, "sighting": 3, "kev": 0, "other": 27}}, "data": [{"timestamp": "2026-06-23T21:02:48.228Z", "date_only": false, "value": "2026-06-23T21:02:48.228Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-13117", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-13117", "record": "UBUNTU-CVE-2026-13117", "field": "published"}, {"timestamp": "2026-07-05T14:18:06.277Z", "date_only": false, "value": "2026-07-05T14:18:06.277650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpvrdsda5l2b", "record": "CVE-2026-13117", "field": "creation_timestamp", "uuid": "52206c1b-22bf-4ddc-84d7-3e0e866445c7", "content": "CVE-2026-13117: OpenVPN\u2019s tls-crypt-v2 Heap Use-After-Free \u2014 How a Single Blind Spot in a Safety Check Opens the Door to RCE +\u00a0Video\n\nIntroduction OpenVPN's tls-crypt-v2 mechanism is designed to secure control channel communication using pre-shared keys, making it a go-to for modern, high-security\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mpvrdsda5l2b"}, {"timestamp": "2026-07-05T22:00:00Z", "date_only": false, "value": "2026-07-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2197", "record": "WID-SEC-W-2026-2197", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-05T22:00:00Z", "date_only": false, "value": "2026-07-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2197", "record": "WID-SEC-W-2026-2197", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-05T22:00:00Z", "date_only": false, "value": "2026-07-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2197", "record": "WID-SEC-W-2026-2197", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2197", "record": "WID-SEC-W-2026-2197", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2197", "record": "WID-SEC-W-2026-2197", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-07T07:46:44.085Z", "date_only": false, "value": "2026-07-07T07:46:44.085+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2197", "record": "WID-SEC-W-2026-2197", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-09T11:11:49Z", "date_only": false, "value": "2026-07-09T11:11:49Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2917", "record": "OESA-2026-2917", "field": "published"}, {"timestamp": "2026-07-09T11:11:49Z", "date_only": false, "value": "2026-07-09T11:11:49Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2918", "record": "OESA-2026-2918", "field": "published"}, {"timestamp": "2026-07-14T01:00:04.613Z", "date_only": false, "value": "2026-07-14T01:00:04.613584Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3291", "record": "CVE-2026-13117", "field": "creation_timestamp", "uuid": "9c3d760c-668c-423b-b8c0-661277f84096", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 check_session_buf_not_used() \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 tls-crypt-v2 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f OpenVPN \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09237\nCVE-2026-13117\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f OpenVPN:\nhttps://community.openvpn.net/Downloads\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-13117\n\n\u0414\u043b\u044f Amazon Linux:\nhttps://explore.alas.aws.amazon.com/CVE-2026-13117.html", "url": "https://t.me/bdufstecru/3291"}, {"timestamp": "2026-07-19T11:11:54Z", "date_only": false, "value": "2026-07-19T11:11:54Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-3001", "record": "OESA-2026-3001", "field": "published"}, {"timestamp": "2026-07-30T16:32:42.271Z", "date_only": false, "value": "2026-07-30T16:32:42.271Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13117", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-30T16:32:42.271Z", "date_only": false, "value": "2026-07-30T16:32:42.271Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / OpenVPN", "record": "CVE-2026-13117", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-30T17:16:28Z", "date_only": false, "value": "2026-07-30T17:16:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6QJM-GJ5V-HP7G", "record": "GHSA-6QJM-GJ5V-HP7G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-30T17:16:28.580Z", "date_only": false, "value": "2026-07-30T17:16:28.580", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13117", "record": "FKIE_CVE-2026-13117", "field": "published"}, {"timestamp": "2026-07-30T18:08:14.034Z", "date_only": false, "value": "2026-07-30T18:08:14.034841Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13117", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-30T18:08:14.034Z", "date_only": false, "value": "2026-07-30T18:08:14.034841Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13117", "record": "FKIE_CVE-2026-13117", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-30T18:31:40Z", "date_only": false, "value": "2026-07-30T18:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6QJM-GJ5V-HP7G", "record": "GHSA-6QJM-GJ5V-HP7G", "field": "published"}, {"timestamp": "2026-08-05T19:37:47.617Z", "date_only": false, "value": "2026-08-05T19:37:47.617", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13117", "record": "FKIE_CVE-2026-13117", "field": "lastModified"}, {"timestamp": "2026-08-05T21:31:32Z", "date_only": false, "value": "2026-08-05T21:31:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6QJM-GJ5V-HP7G", "record": "GHSA-6QJM-GJ5V-HP7G", "field": "modified"}, {"timestamp": "2026-08-06T11:11:49Z", "date_only": false, "value": "2026-08-06T11:11:49Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2917", "record": "OESA-2026-2917", "field": "modified"}, {"timestamp": "2026-08-06T11:11:49Z", "date_only": false, "value": "2026-08-06T11:11:49Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2918", "record": "OESA-2026-2918", "field": "modified"}, {"timestamp": "2026-08-06T11:11:54Z", "date_only": false, "value": "2026-08-06T11:11:54Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-3001", "record": "OESA-2026-3001", "field": "modified"}, {"timestamp": "2026-08-06T12:03:24.839Z", "date_only": false, "value": "2026-08-06T12:03:24.839202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3msfyqgbesq2g", "record": "CVE-2026-13117", "field": "creation_timestamp", "uuid": "bf6b52cc-2512-4102-85a6-b482ebab95e1", "content": "HIGH severity CVE just published in OpenVPN:\n\nCVE-2026-13117. An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially l\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-13117", "url": "https://bsky.app/profile/bootintel.bsky.social/post/3msfyqgbesq2g"}, {"timestamp": "2026-08-06T19:53:27Z", "date_only": false, "value": "2026-08-06T19:53:27Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-13117", "record": "UBUNTU-CVE-2026-13117", "field": "modified"}, {"timestamp": "2026-09-17T18:36:22.675Z", "date_only": false, "value": "2026-09-17T18:36:22.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-13117", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-17T18:36:22.675Z", "date_only": false, "value": "2026-09-17T18:36:22.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13117", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T12:13:13Z", "date_only": false, "value": "2026-10-09T12:13:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:24220-1", "record": "SUSE-SU-2026:24220-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-09T12:13:13Z", "date_only": false, "value": "2026-10-09T12:13:13Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:24220-1", "record": "SUSE-SU-2026:24220-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-09T12:13:13Z", "date_only": false, "value": "2026-10-09T12:13:13Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:24220-1", "record": "SUSE-SU-2026:24220-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T12:13:13Z", "date_only": false, "value": "2026-10-09T12:13:13Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:24220-1", "record": "SUSE-SU-2026:24220-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-09T12:16:22Z", "date_only": false, "value": "2026-10-09T12:16:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22072-1", "record": "OPENSUSE-SU-2026:22072-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-09T12:16:22Z", "date_only": false, "value": "2026-10-09T12:16:22Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22072-1", "record": "OPENSUSE-SU-2026:22072-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-09T12:16:22Z", "date_only": false, "value": "2026-10-09T12:16:22Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22072-1", "record": "OPENSUSE-SU-2026:22072-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T12:16:22Z", "date_only": false, "value": "2026-10-09T12:16:22Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22072-1", "record": "OPENSUSE-SU-2026:22072-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-19T17:24:58Z", "date_only": false, "value": "2026-10-19T17:24:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22072-1", "record": "OPENSUSE-SU-2026:22072-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-19T17:24:58Z", "date_only": false, "value": "2026-10-19T17:24:58Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22072-1", "record": "OPENSUSE-SU-2026:22072-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-21T11:49:58Z", "date_only": false, "value": "2026-10-21T11:49:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:24220-1", "record": "SUSE-SU-2026:24220-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:49:58Z", "date_only": false, "value": "2026-10-21T11:49:58Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:24220-1", "record": "SUSE-SU-2026:24220-1", "field": "document.tracking.current_release_date"}]}