{"metadata": {"vulnerability": "CVE-2026-23926", "count": 26, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 16}}, "data": [{"timestamp": "2026-01-19T14:02:54.327Z", "date_only": false, "value": "2026-01-19T14:02:54.327Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-23926", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-05T22:00:00Z", "date_only": false, "value": "2026-05-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1375", "record": "WID-SEC-W-2026-1375", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-05T22:00:00Z", "date_only": false, "value": "2026-05-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1375", "record": "WID-SEC-W-2026-1375", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-05T22:00:00Z", "date_only": false, "value": "2026-05-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1375", "record": "WID-SEC-W-2026-1375", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0541", "record": "CERTFR-2026-AVI-0541", "field": "last_revision_date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": true, "value": "2026-05-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0541", "record": "CERTFR-2026-AVI-0541", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-23926", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-23926", "record": "FKIE_CVE-2026-23926", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0541", "record": "CERTFR-2026-AVI-0541", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-06T06:58:51.362Z", "date_only": false, "value": "2026-05-06T06:58:51.362Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-23926", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-06T06:58:51.362Z", "date_only": false, "value": "2026-05-06T06:58:51.362Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zabbix", "record": "CVE-2026-23926", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-06T08:16:00Z", "date_only": false, "value": "2026-05-06T08:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-23926", "record": "UBUNTU-CVE-2026-23926", "field": "published"}, {"timestamp": "2026-05-06T08:16:01Z", "date_only": false, "value": "2026-05-06T08:16:01Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V7C2-5WFC-RFFF", "record": "GHSA-V7C2-5WFC-RFFF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-06T08:16:01.837Z", "date_only": false, "value": "2026-05-06T08:16:01.837", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-23926", "record": "FKIE_CVE-2026-23926", "field": "published"}, {"timestamp": "2026-05-06T09:31:35Z", "date_only": false, "value": "2026-05-06T09:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V7C2-5WFC-RFFF", "record": "GHSA-V7C2-5WFC-RFFF", "field": "published"}, {"timestamp": "2026-05-06T09:54:38.180Z", "date_only": false, "value": "2026-05-06T09:54:38.180130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml6gnh5gim2i", "record": "CVE-2026-23926", "field": "creation_timestamp", "uuid": "f1fa7190-e0d5-4428-b652-43fc02e6c3a5", "content": "CVE-2026-23926 - Stored XSS vulnerability in Host navigator widget maintenance tooltip\nCVE ID : CVE-2026-23926\n \n Published : May 6, 2026, 6:58 a.m. | 1\u00a0hour, 40\u00a0minutes ago\n \n Description : An authenticated (non-super) administrator can create a maintenance period with a Java...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml6gnh5gim2i"}, {"timestamp": "2026-05-06T14:30:15.168Z", "date_only": false, "value": "2026-05-06T14:30:15.168692Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q", "record": "CVE-2026-23926", "field": "creation_timestamp", "uuid": "04231ee2-0ec3-4cdb-8d0f-a1373bb73b1d", "content": "\ud83d\udd17 CVE : CVE-2026-23926, CVE-2026-23927, CVE-2026-23928", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1375", "record": "WID-SEC-W-2026-1375", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1375", "record": "WID-SEC-W-2026-1375", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-07T03:55:32.552Z", "date_only": false, "value": "2026-05-07T03:55:32.552Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-23926", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-07T03:55:32.552Z", "date_only": false, "value": "2026-05-07T03:55:32.552Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-23926", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T08:55:56.918Z", "date_only": false, "value": "2026-05-07T08:55:56.918+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1375", "record": "WID-SEC-W-2026-1375", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-08T04:00:39Z", "date_only": false, "value": "2026-05-08T04:00:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/132149d58c5ff9f9c5a0edbb57b66395", "record": "cve-2026-23926", "field": "creation_timestamp", "uuid": "1b921c7d-d425-436f-8dd2-4811f823e462", "content": "**1. Multiple Critical Vulnerabilities Patched in Next.js and React Server Components**  \nVercel issued advisories covering over a dozen CVEs in Next.js, including DoS, middleware bypass, and SSRF. The notes also address issues in React Server Components. Read more:  (May\u202f08\u202f2026).  \n\n**2. Critical 9.9 CVSS Rancher Fleet Flaw Grants Full Cluster\u2011Admin Access**  \nA pair of high\u2011severity bugs (CVSS\u202f9.9) in Rancher Fleet\u2019s GitOps engine let attackers gain unrestricted cluster\u2011admin rights. Reported by the SUSE Rancher Security team. Details:\u202f (May\u202f08\u202f2026).  \n\n**3. Zabbix Flaws Allow Monitored Hosts to Hijack Admin Dashboards**  \nThree critical flaws\u2014including XSS and an Oracle injection\u2014can allow compromised monitored hosts to take over Zabbix admin dashboards. Patch released May\u202f08\u202f2026; CVE\u20112026\u201123926 among them. More: .  \n\n**4. Canvas Breach Disrupts Schools & Colleges Nationwide**  \nAn extortion campaign defaced Canvas ESL login pages, demanding ransom and threatening data release. Roughly 275\u202fmillion students and faculty across 9,000 U.S. institutions are affected, causing widespread academic disruption.  \n\n**5. Palo Alto Networks Firewall Flaw Exploited for Weeks**  \nA critical zero\u2011day (CVE\u20112026\u20110300) in PAN\u2011OS\u2019s Captive Portal allows root\u2011level code execution without authentication. Already abused by state\u2011sponsored actors; >5,400 internet\u2011exposed firewalls at risk. Interim advice: restrict or disable the portal.  \n\n**6. Become a Millionaire by Bug Hunting on Android**  \nGoogle\u2019s bug bounty now rewards up to $1.5\u202fmillion for critical Android vulnerabilities (Pixel\u202fTitan\u202fM2) and $250,000 for Chrome. Total payouts to date exceed $81.6\u202fmillion.  \n\n**7. 13 New Critical Holes in JavaScript Sandbox (vm2) Allow Arbitrary Code Execution**  \nSuspected sandbox escapes in vm2 (CVE\u20112026\u201126956, 44007, etc.) enabling OS\u2011level command execution under specific conditions. Immediate upgrade to v3.11.2 (or at least v3.11.1) is required; otherwise use containment or hardened containers.", "url": "https://gist.github.com/ichintu/132149d58c5ff9f9c5a0edbb57b66395"}, {"timestamp": "2026-09-18T15:35:11.087Z", "date_only": false, "value": "2026-09-18T15:35:11.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-23926", "record": "FKIE_CVE-2026-23926", "field": "lastModified"}, {"timestamp": "2026-09-18T18:31:14Z", "date_only": false, "value": "2026-09-18T18:31:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V7C2-5WFC-RFFF", "record": "GHSA-V7C2-5WFC-RFFF", "field": "modified"}, {"timestamp": "2026-10-17T09:39:29Z", "date_only": false, "value": "2026-10-17T09:39:29Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-23926", "record": "UBUNTU-CVE-2026-23926", "field": "modified"}]}