{"metadata": {"vulnerability": "CVE-2026-61702", "count": 49, "kinds": {"milestone": 12, "sighting": 1, "kev": 0, "other": 36}}, "data": [{"timestamp": "2026-07-10T18:51:13.919Z", "date_only": false, "value": "2026-07-10T18:51:13.919Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-61702", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-07T06:07:05.997Z", "date_only": false, "value": "2026-10-07T06:07:05.99799Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-61702", "record": "BELL-CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T17:08:24.374Z", "date_only": false, "value": "2026-10-15T17:08:24.374000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2026-10-15T17:09:33.878Z", "date_only": false, "value": "2026-10-15T17:09:33.878000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2026-10-15T17:11:21.208Z", "date_only": false, "value": "2026-10-15T17:11:21.208000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2026-10-15T17:12:10.695Z", "date_only": false, "value": "2026-10-15T17:12:10.695Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61702", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-15T17:12:10.695Z", "date_only": false, "value": "2026-10-15T17:12:10.695000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T17:12:10.695Z", "date_only": false, "value": "2026-10-15T17:12:10.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-61702", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:21:43.137Z", "date_only": false, "value": "2026-10-15T17:21:43.137236+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T17:23:01.062Z", "date_only": false, "value": "2026-10-15T17:23:01.062177+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T17:24:29.648Z", "date_only": false, "value": "2026-10-15T17:24:29.648030+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T17:25:01.463Z", "date_only": false, "value": "2026-10-15T17:25:01.463652+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2026-10-15T17:27:51.521Z", "date_only": false, "value": "2026-10-15T17:27:51.521936Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117446100326438499", "record": "CVE-2026-61702", "field": "creation_timestamp", "uuid": "7334fdf1-2ba6-4100-abf5-fece63de4866", "content": "CVE-2026-61702 OpenPrinting CUPS: root-side banner file disclosure OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets banner. The job-sheets value must first match a registered banner basename, and the traversed path must contain a matching reachable basename; selecting an arbitrary target as demonstrated additionally requires pre-positioned path state such as a symlink with that basename. Subject to the scheduler's filesystem and sandbox access, path separators in the language value can escape the intended banner directory, make the root scheduler open the reachable file, and copy its bytes into a job-sheet spool object that a configured backend can deliver to an attacker-observable endpoint. This issue is fixed in version 2.4.20.\nhttps://www.cve.org/CVERecord?id=CVE-2026-61702https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5ghttps://github.com/OpenPrinting/cups/commit/08a8a277ce2a8948a1af33552247a1ac53b72df3https://github.com/OpenPrinting/cups/commit/6650428234616a97d3298e0e2d4419c62c1339d2https://github.com/OpenPrinting/cups/releases/tag/v2.4.20#OpenPrinting #cups#CVE_2026_61702#bot", "url": "https://infosec.exchange/users/cve/statuses/117446100326438499"}, {"timestamp": "2026-10-15T18:17:00Z", "date_only": false, "value": "2026-10-15T18:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-61702", "record": "UBUNTU-CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T18:17:28.580Z", "date_only": false, "value": "2026-10-15T18:17:28.580", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61702", "record": "FKIE_CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-16T00:01:42.449Z", "date_only": false, "value": "2026-10-16T00:01:42.449546Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-61702", "record": "BELL-CVE-2026-61702", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-17T01:01:36Z", "date_only": false, "value": "2026-10-17T01:01:36.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-61702", "record": "MSRC_CVE-2026-61702", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-17T01:01:36Z", "date_only": false, "value": "2026-10-17T01:01:36.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-61702", "record": "MSRC_CVE-2026-61702", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-17T01:01:36Z", "date_only": false, "value": "2026-10-17T01:01:36.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-61702", "record": "MSRC_CVE-2026-61702", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-17T17:51:08Z", "date_only": false, "value": "2026-10-17T17:51:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12192-1", "record": "OPENSUSE-SU-2026:12192-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12192-1", "record": "OPENSUSE-SU-2026:12192-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12192-1", "record": "OPENSUSE-SU-2026:12192-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12192-1", "record": "OPENSUSE-SU-2026:12192-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-21T11:52:51Z", "date_only": false, "value": "2026-10-21T11:52:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12192-1", "record": "OPENSUSE-SU-2026:12192-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-21T11:52:51Z", "date_only": false, "value": "2026-10-21T11:52:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12192-1", "record": "OPENSUSE-SU-2026:12192-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-22T14:36:05Z", "date_only": false, "value": "2026-10-22T14:36:05Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4517", "record": "OESA-2026-4517", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T14:36:05Z", "date_only": false, "value": "2026-10-22T14:36:05Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4517", "record": "OESA-2026-4517", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-22T14:36:06Z", "date_only": false, "value": "2026-10-22T14:36:06Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4518", "record": "OESA-2026-4518", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T14:36:06Z", "date_only": false, "value": "2026-10-22T14:36:06Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4519", "record": "OESA-2026-4519", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T14:36:06Z", "date_only": false, "value": "2026-10-22T14:36:06Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4518", "record": "OESA-2026-4518", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-22T14:36:06Z", "date_only": false, "value": "2026-10-22T14:36:06Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4519", "record": "OESA-2026-4519", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-22T14:36:07Z", "date_only": false, "value": "2026-10-22T14:36:07Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4520", "record": "OESA-2026-4520", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-22T14:36:07Z", "date_only": false, "value": "2026-10-22T14:36:07Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4520", "record": "OESA-2026-4520", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T17:38:17Z", "date_only": false, "value": "2026-10-28T17:38:17Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-61702", "record": "UBUNTU-CVE-2026-61702", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T20:11:59.915Z", "date_only": false, "value": "2026-10-28T20:11:59.915480Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61702", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-28T20:11:59.915Z", "date_only": false, "value": "2026-10-28T20:11:59.915480Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61702", "record": "FKIE_CVE-2026-61702", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-28T20:12:06.853Z", "date_only": false, "value": "2026-10-28T20:12:06.853Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-61702", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T20:12:06.853Z", "date_only": false, "value": "2026-10-28T20:12:06.853Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61702", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T21:17:00.100Z", "date_only": false, "value": "2026-10-28T21:17:00.100", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61702", "record": "FKIE_CVE-2026-61702", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:52:43Z", "date_only": false, "value": "2026-10-30T15:52:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-30T15:52:43Z", "date_only": false, "value": "2026-10-30T15:52:43+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-30T15:52:43Z", "date_only": false, "value": "2026-10-30T15:52:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-01T14:48:31Z", "date_only": false, "value": "2026-11-01T14:48:31.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-61702", "record": "MSRC_CVE-2026-61702", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T14:48:31Z", "date_only": false, "value": "2026-11-01T14:48:31.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-61702", "record": "MSRC_CVE-2026-61702", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.123Z", "date_only": false, "value": "2026-11-02T08:02:48.123Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-61702", "record": "MSRC_CVE-2026-61702", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-04T20:39:20.890Z", "anchors": {"origin": {"timestamp": "2026-10-07T06:07:05.997Z", "date_only": false, "value": "2026-10-07T06:07:05.99799Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-61702", "record": "BELL-CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2026-10-15T17:21:43.137Z", "date_only": false, "value": "2026-10-15T17:21:43.137236+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-07T06:07:05.997Z", "date_only": false, "value": "2026-10-07T06:07:05.99799Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-61702", "record": "BELL-CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 174397.863, "hours": 48.443850833333336, "days": 2.018493784722222, "min_seconds": 174397.863, "max_seconds": 174397.863, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-15T17:21:43.137Z", "date_only": false, "value": "2026-10-15T17:21:43.137236+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 906075.003, "hours": 251.68750083333333, "days": 10.48697920138889, "min_seconds": 906075.003, "max_seconds": 906075.003, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-07T06:07:05.997Z", "date_only": false, "value": "2026-10-07T06:07:05.99799Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-61702", "record": "BELL-CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 906075.003, "hours": 251.68750083333333, "days": 10.48697920138889, "min_seconds": 906075.003, "max_seconds": 906075.003, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-07T06:07:05.997Z", "date_only": false, "value": "2026-10-07T06:07:05.99799Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-61702", "record": "BELL-CVE-2026-61702", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-17T17:48:21Z", "date_only": false, "value": "2026-10-17T17:48:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:84421", "record": "RHSA-2026:84421", "field": "vulnerabilities.3.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}