{"metadata": {"vulnerability": "CVE-2026-18108", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-28T17:55:20.903Z", "date_only": false, "value": "2026-07-28T17:55:20.903Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18108", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-03T13:00:23.347Z", "date_only": false, "value": "2026-08-03T13:00:23.347Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18108", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-03T13:00:23.347Z", "date_only": false, "value": "2026-08-03T13:00:23.347Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-18108", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-03T14:16:25Z", "date_only": false, "value": "2026-08-03T14:16:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G48M-J5M7-625H", "record": "GHSA-G48M-J5M7-625H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-03T14:16:25.157Z", "date_only": false, "value": "2026-08-03T14:16:25.157", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18108", "record": "FKIE_CVE-2026-18108", "field": "published"}, {"timestamp": "2026-08-03T15:32:47Z", "date_only": false, "value": "2026-08-03T15:32:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G48M-J5M7-625H", "record": "GHSA-G48M-J5M7-625H", "field": "published"}, {"timestamp": "2026-08-03T19:57:16.653Z", "date_only": false, "value": "2026-08-03T19:57:16.653167Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18108", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-08-03T19:57:16.653Z", "date_only": false, "value": "2026-08-03T19:57:16.653167Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18108", "record": "FKIE_CVE-2026-18108", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-03T19:57:38.266Z", "date_only": false, "value": "2026-08-03T19:57:38.266Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18108", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-03T19:57:38.266Z", "date_only": false, "value": "2026-08-03T19:57:38.266Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18108", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-03T21:00:05.605Z", "date_only": false, "value": "2026-08-03T21:00:05.605069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22", "record": "CVE-2026-18108", "field": "creation_timestamp", "uuid": "03c99992-9afa-4354-a996-bddb3ae71d6b", "content": "CVE-2026-18108 - net::saml2\nOlder versions of the Net::SAML2 library for Perl can be tricked into accepting fake login credentials from anyone, not just the intended user. This can happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netsaml2 #timlegge #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22"}, {"timestamp": "2026-08-03T21:31:35Z", "date_only": false, "value": "2026-08-03T21:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G48M-J5M7-625H", "record": "GHSA-G48M-J5M7-625H", "field": "modified"}, {"timestamp": "2026-08-03T23:11:10.609Z", "date_only": false, "value": "2026-08-03T23:11:10.609885Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117034101614868174", "record": "cve-2026-18108", "field": "creation_timestamp", "uuid": "ab1750e8-3809-4bbf-8e10-7abcd6d3d991", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to >=0.86 now. #CVE #Perl #infosec\nhttps://www.valtersit.com/cve/cve-2026-18108/", "url": "https://mastodon.social/users/hugovalters/statuses/117034101614868174"}, {"timestamp": "2026-08-03T23:11:16.571Z", "date_only": false, "value": "2026-08-03T23:11:16.571596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms7mnp5hpg2m", "record": "cve-2026-18108", "field": "creation_timestamp", "uuid": "b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to >=0.86 now. #CVE #Perl #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18108/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms7mnp5hpg2m"}, {"timestamp": "2026-08-06T18:37:01.630Z", "date_only": false, "value": "2026-08-06T18:37:01.630", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18108", "record": "FKIE_CVE-2026-18108", "field": "lastModified"}, {"timestamp": "2026-08-07T06:37:07.086Z", "date_only": false, "value": "2026-08-07T06:37:07.086341Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshwxui4542r", "record": "CVE-2026-18108", "field": "creation_timestamp", "uuid": "9857f839-9194-4329-8c84-400e49803260", "content": "\ud83d\udccc CVE-2026-18108 - Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted... https://www.cyberhub.blog/cves/CVE-2026-18108", "url": "https://bsky.app/profile/cyberhub.blog/post/3mshwxui4542r"}]}