{"metadata": {"vulnerability": "CVE-2026-99100", "count": 21, "kinds": {"milestone": 7, "sighting": 2, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-25T10:25:14.391Z", "date_only": false, "value": "2026-09-25T10:25:14.391Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99100", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T03:55:38.898Z", "date_only": false, "value": "2026-10-28T03:55:38.898Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T03:58:54.554Z", "date_only": false, "value": "2026-10-28T03:58:54.554119Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117516529441832464", "record": "CVE-2026-99100", "field": "creation_timestamp", "uuid": "8931bb7c-d3be-4133-83eb-fb9571627641", "content": "CVE-2026-99100 wifi: p54: validate firmware record lengths In the Linux kernel, the following vulnerability has been resolved:\nwifi: p54: validate firmware record lengths\nThe p54 firmware parser accesses component ID and component versionrecords without checking that their lengths cover the fields being read.A malformed record can therefore make the parser read past the record.\nValidate the component ID and component version record lengths beforeaccessing their data. The descriptor record is also checked against theshortest descriptor length found in the supported firmware images.\nReject descriptor values that underflow the RX offset or produce an emptyRX range before updating the driver state.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99100https://git.kernel.org/stable/c/f641066b0ddcd1b0cf007c0d04f9c966f6e888aehttps://git.kernel.org/stable/c/8c4f962f368d5e17481f3c2c5a43028953e137a5https://git.kernel.org/stable/c/db7b86bd97b380ece8fa39cfdd7502a9fd35e56f#kernel #Linux#CVE_2026_99100#bot", "url": "https://infosec.exchange/users/cve/statuses/117516529441832464"}, {"timestamp": "2026-10-28T04:18:00Z", "date_only": false, "value": "2026-10-28T04:18:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99100", "record": "UBUNTU-CVE-2026-99100", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T04:18:07Z", "date_only": false, "value": "2026-10-28T04:18:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M5MP-Q9HJ-5Q22", "record": "GHSA-M5MP-Q9HJ-5Q22", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T04:18:07.417Z", "date_only": false, "value": "2026-10-28T04:18:07.417", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99100", "record": "FKIE_CVE-2026-99100", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T05:56:59.044Z", "date_only": false, "value": "2026-10-28T05:56:59.044284Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/irnye25srtjwk", "record": "CVE-2026-99100", "field": "creation_timestamp", "uuid": "d0334816-caa7-46e4-9d49-04ab37d35bdf", "content": "CVE-2026-99100 - wifi: p54: validate firmware record lengths\nCVE ID : CVE-2026-99100\n \n Published : Oct. 28, 2026, 4:18 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: p54: validate firmware record length...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/irnye25srtjwk"}, {"timestamp": "2026-10-28T06:30:25Z", "date_only": false, "value": "2026-10-28T06:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M5MP-Q9HJ-5Q22", "record": "GHSA-M5MP-Q9HJ-5Q22", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T01:01:41Z", "date_only": false, "value": "2026-10-29T01:01:41.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99100", "record": "MSRC_CVE-2026-99100", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:01:41Z", "date_only": false, "value": "2026-10-29T01:01:41.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99100", "record": "MSRC_CVE-2026-99100", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:01:41Z", "date_only": false, "value": "2026-10-29T01:01:41.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99100", "record": "MSRC_CVE-2026-99100", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:06:42.194Z", "date_only": false, "value": "2026-10-30T06:06:42.194887Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99100", "record": "BELL-CVE-2026-99100", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T15:34:19Z", "date_only": false, "value": "2026-10-30T15:34:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M5MP-Q9HJ-5Q22", "record": "GHSA-M5MP-Q9HJ-5Q22", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T19:03:49Z", "date_only": false, "value": "2026-10-30T19:03:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99100", "record": "UBUNTU-CVE-2026-99100", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T12:42:04.550Z", "date_only": false, "value": "2026-11-01T12:42:04.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99100", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-01T12:42:04.550Z", "date_only": false, "value": "2026-11-01T12:42:04.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99100", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-01T13:18:01.873Z", "date_only": false, "value": "2026-11-01T13:18:01.873", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99100", "record": "FKIE_CVE-2026-99100", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-01T14:46:39Z", "date_only": false, "value": "2026-11-01T14:46:39.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99100", "record": "MSRC_CVE-2026-99100", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T14:46:39Z", "date_only": false, "value": "2026-11-01T14:46:39.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99100", "record": "MSRC_CVE-2026-99100", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.150Z", "date_only": false, "value": "2026-11-02T08:02:48.150Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99100", "record": "MSRC_CVE-2026-99100", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T20:04:11.728Z", "date_only": false, "value": "2026-11-03T20:04:11.728378Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99100", "record": "BELL-CVE-2026-99100", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T04:56:57.479Z", "anchors": {"origin": {"timestamp": "2026-10-28T03:55:38.898Z", "date_only": false, "value": "2026-10-28T03:55:38.898Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T03:55:38.898Z", "date_only": false, "value": "2026-10-28T03:55:38.898Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 694878.58133, "hours": 193.0218281472222, "days": 8.042576172800926, "min_seconds": 694878.58133, "max_seconds": 694878.58133, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T03:55:38.898Z", "date_only": false, "value": "2026-10-28T03:55:38.898Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99100", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T04:56:57.479Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}